last executing test programs: 1m7.908661908s ago: executing program 3 (id=274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="12000000190001002dbd7000f8dbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x40c0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb4, 0x6a, 0x2c, 0x10, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x0, 0x2b, 0x57, 0x33}}]}}]}}, 0x0) 1m4.621116504s ago: executing program 3 (id=286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x5, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000004c40)=[{{&(0x7f0000000080)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1, &(0x7f0000000200)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000001200)=@un=@abs, 0x80, &(0x7f0000002400)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/96, 0x60}, {&(0x7f0000002300)=""/18, 0x12}, {&(0x7f0000002340)=""/170, 0xaa}], 0x4, &(0x7f0000002440)=""/211, 0xd3}, 0x7fffffff}, {{&(0x7f0000002540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000025c0)=""/36, 0x24}, {&(0x7f0000002600)=""/212, 0xd4}, {&(0x7f0000002700)=""/20, 0x14}, {&(0x7f0000002740)=""/132, 0x84}, {&(0x7f0000005040)=""/54, 0x36}, {&(0x7f0000002840)=""/228, 0xe4}, {&(0x7f0000002940)=""/62, 0x3e}, {&(0x7f0000002980)=""/169, 0xa9}, {&(0x7f0000002a40)=""/44, 0x2c}, {&(0x7f0000002a80)=""/119, 0x77}], 0xa}, 0x3}, {{&(0x7f0000002bc0)=@rc, 0x80, &(0x7f0000003000)=[{&(0x7f0000002c40)=""/59, 0x3b}, {&(0x7f0000002c80)=""/69, 0x45}, {&(0x7f0000002d00)=""/177, 0xb1}, {&(0x7f0000002dc0)=""/139, 0x8b}, {&(0x7f0000002e80)=""/152, 0x98}, {&(0x7f0000002f40)=""/173, 0xad}], 0x6, &(0x7f0000003080)=""/112, 0x70}, 0x9}, {{0x0, 0x0, 0x0}, 0x200}], 0x5, 0x0, &(0x7f0000004e80)) 1m3.380965095s ago: executing program 3 (id=289): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0xee, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x48}, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket(0xa, 0x3, 0x87) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) 1m1.321277776s ago: executing program 3 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x20, 0x0, &(0x7f00000008c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x3}, 0x1c) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x3) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x44008) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getstats={0x1c, 0x5e, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002e00090027bd7000"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 56.1992913s ago: executing program 3 (id=310): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970008, 0x120ce}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) r5 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0x0, 0xfffffff7, 0x0, 0x5, 0x0, 0x20000], [0x10000], [0x7, 0x20b, 0x0, 0x6ac, 0x0, 0x0, 0x8]], '\x00', [{0xffffffff}, {0x3, 0x10}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x5f1b, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {0x9, 0xf5f}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x1}, {0x100}], '\x00', 0x1000}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x2, 0x7}, 0xc) sendto$inet6(r0, &(0x7f0000000180)="8611c15ec12a3f", 0x7, 0x20000100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 52.500896198s ago: executing program 3 (id=330): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x30c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r5, 0x0, 0x46) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') 18.858353211s ago: executing program 1 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x4880) 14.115124471s ago: executing program 1 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000506"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 10.293022555s ago: executing program 4 (id=482): syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x4, 0x0, [0x7, 0x9, 0x2, 0xfffffffffffffffa, 0xdce], [0x6, 0xc2d, 0x4, 0x10, 0x4, 0x8, 0x105, 0x5, 0x0, 0x1d0, 0x0, 0x7, 0xffffffffffffff3f, 0x1ff, 0x5, 0xcf70, 0x4, 0x8000000000000001, 0x3ff, 0x6, 0xb, 0x6, 0x0, 0xfffffffffffffff8, 0x3e5, 0x7, 0xffe, 0x4, 0x400, 0x1, 0x1, 0x2, 0x7, 0x3, 0x5, 0xa4, 0xe, 0x700, 0x2, 0x4, 0x3, 0x1, 0xffffffffffffc6c8, 0x2, 0x80000000, 0x1, 0x4, 0x1000, 0x7, 0x1, 0x8, 0x7, 0xe000, 0x0, 0x5d, 0x3, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0xbf, 0xdb71, 0x800, 0x10000000000000, 0x800, 0x7fffffffffffffff, 0x3, 0xffffffffffffffff, 0x2, 0x4, 0x8000000000000000, 0x7ff, 0x6e6, 0x3, 0xff, 0x8, 0xffffffffffffffff, 0x311d, 0xff, 0x1, 0x2, 0x5, 0x0, 0x8, 0x3, 0xe9, 0x4, 0x1, 0xfffffffffffffffe, 0x2dd9, 0x72d, 0x714, 0x24b, 0x4, 0x3, 0x0, 0x7b6, 0x9, 0x9ec, 0x100, 0xffffffff, 0x2, 0xe00000000000000, 0x9, 0x3, 0x8, 0x0, 0x80, 0x5, 0x7, 0x2, 0x8, 0x9, 0xf, 0x5, 0x81, 0xd, 0x3, 0x37a, 0x3, 0xd4, 0xc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000013c0)={{r0}, r1, 0x10, @unused=[0x6, 0x4, 0x3e, 0x5], @devid=r2}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xc000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118", 0x1d}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000001001"], 0x20}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 10.277712676s ago: executing program 1 (id=483): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000280)={0x4, &(0x7f0000000cc0)=[{0x756, 0xde0, &(0x7f0000001480)="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", 0x1, 0x1}, {0x7, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x0, 0x0, 0x0, 0x1}, {0x81, 0x0, 0x0, 0x1, 0x1}]}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000e80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000d0a010200000000000000000a00000a0900020073797a30000000001c0003800400008004000080100000800c00054000000000000000030900010073797a30000000000800044000000003466275d4b89df3d33245869339c4e58874d0a3dd4ad4da5d0499816951450004a1423f1d4a614c9ad340f13d82990c4ab83bcaf0b8d5a21277f21c19b78e4a3bdde0e7d729a29491a7ca1668a641268d05f1b514673ff4d87c0972d0c1d7352d57078272ec7c605aa2b1a9502b865a70d3b52aa53af6239fef34d1d9674a6edc52f77523e95d3a18056159e5"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) 9.282788395s ago: executing program 4 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb", 0x1}, {0x0}], 0x2}}], 0x1, 0x20004810) 8.158820593s ago: executing program 4 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0x293}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) syz_io_uring_setup(0x7584, &(0x7f0000000500)={0x0, 0x626b, 0x8, 0x3, 0x2a7}, &(0x7f0000000380), &(0x7f0000000580)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000005c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/19, 0x13) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mount(&(0x7f00000004c0)=@rnullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='dax\x00', 0x20, &(0x7f0000000300)='overlay\x00') 7.094446993s ago: executing program 1 (id=493): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1a1842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="401302000000e3d1557f245c485d8361e5a0eab64cce584d71f6268ee105bdfb2a2a3e4fff68d806e4353f6871299037da5529e06db07546d676d8a6bd8daea9a793052d2172"], 0x0, 0x0, 0x0, 0x0}) 6.950300987s ago: executing program 4 (id=494): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r4, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x5, 0x10000, 0x6, 0x80141, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x1401, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) fallocate(r8, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) 5.165684143s ago: executing program 4 (id=501): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x30c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8008, 0x5, 0x200, &(0x7f0000003c40)="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"}) socket$inet_sctp(0x2, 0x5, 0x84) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r8, 0x0, 0x46) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 4.912954226s ago: executing program 0 (id=502): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "f285d141f176c237000c700e"}, 0x17) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r4, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0xf7c}, {&(0x7f00000191c0)}, {&(0x7f000001a500)="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", 0x124}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000840)=0x8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000280)={0x9, 0x0, 0x2, 0x7, 0x6, 0x4a, 0x2, 0x7, r8}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000880)={0x0, 0x1785}, &(0x7f00000008c0)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000a80)={&(0x7f00000001c0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c3396cb88cf3fecc0b3e388d51b85f23aa263106a6aba17c7eec74c0902fe9dd83ac63f42a3144b7475d322a1aa1164a316810272a7e67ad409b6c51c4d00f887f0b2d89b326e3b5efbdc3a8de86b4f54acfceec48788d51333f6f6937c69b9973ed5e5c4cf3700988be14b48bd866386c41b80aa6af4c7cf656cacc5c0102547b558366bea6431747f7d406d92ba9c3c1df6db8dced80e3d45b2b9e777dcd1021715cfbac02899883fe097763a737f7c78f198784b4177acc739a99587d4f097466d82c1b1d4fd614b18884d3babe", 0xcf}, {&(0x7f00000003c0)="e96a70b68b2068fc88f3852c2a740359f76e7e325f41a4abbf746af47c2a5d47ca14d3b15b2e5faf74491008c51fea956c21cf4940c84ea33d3c616a7698382a5cacbe157a318da581dd6b462f8f325777814161e1d543deca70a2b790de81a110018f670d10d70b53d9cb191144c08c591bfd1910937dae0c3c0ee2860c52357fe98074ae2276e2f75908b85f767d91ceff2029b194b3d9b4fcfa14a9524756964dfd13875d4bc1328b8bbbc15f98e15473b5948bfb5b1735f915acf2611db718503b5820019cc6b8393ecfc165ad3e1e356c0179869b7c23e5e7627b74e92aa5e7c13c8ffe67e44ca9", 0xea}, {&(0x7f00000004c0)="894d2dd2fb5275fafdb2755ae2f95eb395c0f78b28f2f1275b7ac5e6e1cf0438f3dd67adb804a6e8b3993569bbd6aefcab0f06354d97974ded7554900d9058ebbea10fbe5ea7a87dc7d95fab4d99e45241c82a37b84cd47ad11e11695ef4ca01567b8bbeb793a5fe1dcac420293543e244851eb1f9826ad11a186895e7bef91ffbce11d363596d987142e357daaff7b09c8b97f628506981711862ebfab6c3b24a45bfee0cdd7e41b960af70491268dc099dae9774aac1a52f802799442ce3f22cffaa4ac07f41cbcfbb7deb4c2ca105f3c8a8097ef21d42cb96c768fac92534726d4b41cc771f0d10bf606f97bff3c40b", 0xf1}, {&(0x7f0000000200)="66aef952adc60ae65bac83fbee614886f2db314518bd7b99d882fc6e5dca053878ab9ff2f1537d42b7e3fb", 0x2b}, {&(0x7f00000005c0)="445e4acf35086f524ecbc00c79c7fad34b208aa68589bd0fc4d4e138a4be1e1c6c01e1502130d1ec7ecbf3b4c84fb24dba974213be22493a73f804cbe9edc6a7a05753d59bab8e82a6953c19b2fbda4164f62e6d1fc6671a53b8a6565fb8e59d7d8d2f2ce2ab75c5d7ddffdb3a247d429825a615b59bf721b62d67e275169a31f8b9c5719131d015559f4d642c5cea74a26cad2157b0ce5fe28cdb8f41f70f601430d8d68c96e90e4b973cfbbcc273ce0fabd9288d52a2da0f56b7663ee6c57f21c4079803b1bf79a20477dd4f3287a7ed35c140254184f2b6ba77501e69429d037a4b905f8d06867a07e1", 0xeb}, {&(0x7f00000006c0)="4344f7968405628f91daef072493445b063f1f79ee0c369a4d0889765863d65dd0e504949aa2ef36a5360b870a8fcede7538f2818c8c200b243a32aabc43b318a849c254c21ee01f98b63928612aa6519de020b6e9b80ebcd5bf9555f1627e7eaebe33c94944fdf625536887654151a6d941ee1dfbd456d35f9c840e8f54530bc8ecd2cb25c779cf21ca55e56e58c7f9c58d01f7cc4e927c7557cc04c64c34b6dec469b00599ec624fe17fb494176683d776335900521f757b92800cc11f71867d2e120eb343a7a6ae52a33256351bb89185a2730547", 0xd6}], 0x6, &(0x7f0000000900)=[@init={0x18, 0x84, 0x0, {0x7, 0xfffb, 0x6c8}}, @sndrcv={0x30, 0x84, 0x1, {0xc1cd, 0xfffb, 0xc, 0x1, 0x3, 0x2, 0xffff, 0x0, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x6dd}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x6, 0x8000, 0x6d, 0x10000, 0x5, 0x3, 0x6, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x8205, 0x1, 0xfffffffc, 0x6, 0x0, 0x1ff}}, @init={0x18, 0x84, 0x0, {0x4, 0xd, 0xb, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x8, 0x8a9, 0x3, 0x4, 0x5, 0x8, r9}}], 0x148, 0x2000008d}, 0x44) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x20, &(0x7f0000019080)={0x1, 0x1, 0x1}) syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') 3.280120426s ago: executing program 4 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9, 0x9}}]}}}]}}]}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xf8, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x240048d4}, 0x800) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) r5 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) mknod$loop(&(0x7f0000000140)='./file1\x00', 0x6000, 0x0) write$P9_RXATTRCREATE(r6, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x10000, 0x7, 0x2, 0x7e73, 0x7fffffffffffffff, 0x6, 0x95}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1407, 0x1, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, 0x0, 0x20004080) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x519fd189, 0x4) listen(r7, 0x8) r8 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r8, 0x4004480d, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000a40)=0xb4105) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x60, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x3}}}, {{@nsim={{0x1e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x7}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) 3.079573149s ago: executing program 1 (id=507): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x5cfa, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) sendfile(r5, r4, &(0x7f0000000080)=0x7fffffff, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendfile(r6, r5, 0x0, 0x8d5e) 3.070980748s ago: executing program 0 (id=508): syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={0x0, 0x4, 0x0, [0x7, 0x9, 0x2, 0xfffffffffffffffa, 0xdce], [0x6, 0xc2d, 0x4, 0x10, 0x4, 0x8, 0x105, 0x5, 0x0, 0x1d0, 0x0, 0x7, 0xffffffffffffff3f, 0x1ff, 0x5, 0xcf70, 0x4, 0x8000000000000001, 0x3ff, 0x6, 0xb, 0x6, 0x0, 0xfffffffffffffff8, 0x3e5, 0x7, 0xffe, 0x4, 0x400, 0x1, 0x1, 0x2, 0x7, 0x3, 0x5, 0xa4, 0xe, 0x700, 0x2, 0x4, 0x3, 0x1, 0xffffffffffffc6c8, 0x2, 0x80000000, 0x1, 0x4, 0x1000, 0x7, 0x1, 0x8, 0x7, 0xe000, 0x0, 0x5d, 0x3, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x6, 0xbf, 0xdb71, 0x800, 0x10000000000000, 0x800, 0x7fffffffffffffff, 0x3, 0xffffffffffffffff, 0x2, 0x4, 0x8000000000000000, 0x7ff, 0x6e6, 0x3, 0xff, 0x8, 0xffffffffffffffff, 0x311d, 0xff, 0x1, 0x2, 0x5, 0x0, 0x8, 0x3, 0xe9, 0x4, 0x1, 0xfffffffffffffffe, 0x2dd9, 0x72d, 0x714, 0x24b, 0x4, 0x3, 0x0, 0x7b6, 0x9, 0x9ec, 0x100, 0xffffffff, 0x2, 0xe00000000000000, 0x9, 0x3, 0x8, 0x0, 0x80, 0x5, 0x7, 0x2, 0x8, 0x9, 0xf, 0x5, 0x81, 0xd, 0x3, 0x37a, 0x3, 0xd4, 0xc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000013c0)={{r0}, r1, 0x10, @unused=[0x6, 0x4, 0x3e, 0x5], @devid=r2}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0xc000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118", 0x1d}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000001001"], 0x20}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) 2.383152071s ago: executing program 1 (id=513): openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) chdir(0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000003740)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000000c0)=@mmap={0x100, 0x9, 0x4, 0x0, 0x3, {}, {0x3, 0x8, 0x58, 0x80, 0x0, 0x2, "3ef00dbb"}, 0x9, 0x1, {}, 0xa}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b3"], 0x48) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) 1.965845871s ago: executing program 0 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/19, 0x13) mount(&(0x7f00000004c0)=@rnullb, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='dax\x00', 0x20, &(0x7f0000000300)='overlay\x00') 1.759096219s ago: executing program 0 (id=518): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001", @ANYRESHEX=r1], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r3, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x4, 0xb, 0x0, 0x8, 0xffff, 0x8, 0x9, 0x1, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x3e37, 0x8, 0x200, 0x400, r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.263701197s ago: executing program 2 (id=520): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x18, 0x8001, 0x0, 0xd, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.112594303s ago: executing program 2 (id=521): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000002d0001102dbd140400005f2500000000", @ANYRES32], 0x3c}}, 0x0) r6 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x7a, 0x0, @fd=r6, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) r10 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) mq_getsetattr(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000080000000000000060000004c0000000000000095"], &(0x7f00000017c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40009}, 0x94) syz_init_net_socket$rose(0xb, 0x5, 0x0) 957.278714ms ago: executing program 2 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x1, 0x6, 0x9, 0x0, 0x4, 0x200]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 576.335937ms ago: executing program 2 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa1, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x407f}]}, 0x28}}, 0x0) 437.030771ms ago: executing program 0 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x21, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 331.210765ms ago: executing program 2 (id=525): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000280)={0x4, &(0x7f0000000cc0)=[{0x756, 0xde0, &(0x7f0000001480)="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", 0x1, 0x1}, {0x7, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x0, 0x0, 0x0, 0x1}, {0x81, 0x0, 0x0, 0x1, 0x1}]}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000e80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000000d0a010200000000000000000a00000a0900020073797a30000000001c0003800400008004000080100000800c00054000000000000000030900010073797a30000000000800044000000003466275d4b89df3d33245869339c4e58874d0a3dd4ad4da5d0499816951450004a1423f1d4a614c9ad340f13d82990c4ab83bcaf0b8d5a21277f21c19b78e4a3bdde0e7d729a29491a7ca1668a641268d05f1b514673ff4d87c0972d0c1d7352d57078272ec7c605aa2b1a9502b865a70d3b52aa53af6239fef34d1d9674a6edc52f77523e95d3a18056159e5"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) 92.078288ms ago: executing program 2 (id=526): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000000a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c6f6164001400028008000340000000b908000240000000040900010073797a30000000000900020073"], 0xb0}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x3, 0xdd, {0xdd, 0x11, "8ab1e0625e700016b16a54e565a0f5a64e281ccffd3a76f141e79e6376f77f3cfbbb8d79edfaafa0e53ab4736e5e2f0c60a6fba696130a59f87cbefb95174a0dcfe9a315f4bdcaeaf1a0dd82c271925f45e4e5c933ec7f08193ad19d39826fc2d973ef2a9b4641d4a210541be07847acf4c20c047320978b58a0193b7d3c2f708be25b42c67065f37dc0d01baba5c752dd6a7efa40a399534f07c002a20e4fd0d55d1b98725e5018645aefa382b190a249c4e41622bf5c88346e7715796fc7b3c1216150eeb6ba2d6713bb221cd6f7e811f3ee2f3a3f96bef7c046"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="00929400000004032904"]}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017660000007203202a69752de734bd71de036ea0f39fca6fda5b496575d7f77aba10480991e133c1cef7f576c14a3a8533bfc42868d1782487aecea9de681d5745279c70cb2a3d9ab2ff2e494295a048560fe34ff7653e669de922525e755117a5dde4d9331e0eee632c7f"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000002c0)={0x20, 0x0, 0xd3, {0xd1, "714ee3eddec571c35f3f2b24d65d3c4bc269167acc4d4059e567796c5e1c365f33dcc86d17beb11b328af60ac61d66918895f49adb76d1b3d561cb5369d848aed297376175cf5af69a9617a764ad664bfbc76352fe7cb8fdee7539dad852a3d48bf294b46d403e80643891f41849975abd1986d2f2e555dabfecc78bfef3de37a6f5cb8313e8cdac381e300eb1f1eab1a29c41247103276f68a0aff2796aaed9dfed67f510d6bdda92172f16cd5d4b94502e94b4df44b5ee3813908e1a1052f1c88757f55b5a76d87bb07ce27f2a384f2f"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x7}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000000a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c6f6164001400028008000340000000b908000240000000040900010073797a30000000000900020073"], 0xb0}}, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x3, 0xdd, {0xdd, 0x11, "8ab1e0625e700016b16a54e565a0f5a64e281ccffd3a76f141e79e6376f77f3cfbbb8d79edfaafa0e53ab4736e5e2f0c60a6fba696130a59f87cbefb95174a0dcfe9a315f4bdcaeaf1a0dd82c271925f45e4e5c933ec7f08193ad19d39826fc2d973ef2a9b4641d4a210541be07847acf4c20c047320978b58a0193b7d3c2f708be25b42c67065f37dc0d01baba5c752dd6a7efa40a399534f07c002a20e4fd0d55d1b98725e5018645aefa382b190a249c4e41622bf5c88346e7715796fc7b3c1216150eeb6ba2d6713bb221cd6f7e811f3ee2f3a3f96bef7c046"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="00929400000004032904"]}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017660000007203202a69752de734bd71de036ea0f39fca6fda5b496575d7f77aba10480991e133c1cef7f576c14a3a8533bfc42868d1782487aecea9de681d5745279c70cb2a3d9ab2ff2e494295a048560fe34ff7653e669de922525e755117a5dde4d9331e0eee632c7f"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000002c0)={0x20, 0x0, 0xd3, {0xd1, "714ee3eddec571c35f3f2b24d65d3c4bc269167acc4d4059e567796c5e1c365f33dcc86d17beb11b328af60ac61d66918895f49adb76d1b3d561cb5369d848aed297376175cf5af69a9617a764ad664bfbc76352fe7cb8fdee7539dad852a3d48bf294b46d403e80643891f41849975abd1986d2f2e555dabfecc78bfef3de37a6f5cb8313e8cdac381e300eb1f1eab1a29c41247103276f68a0aff2796aaed9dfed67f510d6bdda92172f16cd5d4b94502e94b4df44b5ee3813908e1a1052f1c88757f55b5a76d87bb07ce27f2a384f2f"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x7}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r0) (async) 0s ago: executing program 0 (id=527): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x30c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8008, 0x5, 0x200, &(0x7f0000003c40)="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"}) socket$inet_sctp(0x2, 0x5, 0x84) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r7, 0x0, 0x46) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): tate [ 82.627367][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.669495][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.685016][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.685634][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.717284][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.717379][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.785768][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.805006][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.823150][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.823270][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.865784][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.865862][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.927608][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.984615][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.986391][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.990666][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.034447][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.040723][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.118314][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.179296][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.179992][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.204687][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.204811][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.366980][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.513204][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.682334][ T5809] Bluetooth: hci0: command tx timeout [ 83.737417][ T5798] veth0_vlan: entered promiscuous mode [ 83.750045][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.760552][ T5809] Bluetooth: hci2: command tx timeout [ 83.760582][ T5809] Bluetooth: hci1: command tx timeout [ 83.805030][ T5798] veth1_vlan: entered promiscuous mode [ 83.841567][ T5802] Bluetooth: hci4: command tx timeout [ 83.841597][ T5802] Bluetooth: hci3: command tx timeout [ 83.867372][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.985423][ T5810] veth0_vlan: entered promiscuous mode [ 84.013467][ T5798] veth0_macvtap: entered promiscuous mode [ 84.027830][ T5810] veth1_vlan: entered promiscuous mode [ 84.047262][ T5798] veth1_macvtap: entered promiscuous mode [ 84.108405][ T5799] veth0_vlan: entered promiscuous mode [ 84.122350][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.126443][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.159360][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.168896][ T5799] veth1_vlan: entered promiscuous mode [ 84.204416][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.206719][ T5810] veth0_macvtap: entered promiscuous mode [ 84.210244][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.235323][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.253907][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.255169][ T5810] veth1_macvtap: entered promiscuous mode [ 84.278137][ T5804] veth0_vlan: entered promiscuous mode [ 84.408397][ T5804] veth1_vlan: entered promiscuous mode [ 84.472920][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.498813][ T5799] veth0_macvtap: entered promiscuous mode [ 84.526653][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.543431][ T5811] veth0_vlan: entered promiscuous mode [ 84.547591][ T5799] veth1_macvtap: entered promiscuous mode [ 84.577752][ T1540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.593935][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.593970][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.605797][ T1540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.627100][ T1540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647921][ T5811] veth1_vlan: entered promiscuous mode [ 84.649226][ T1540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.738586][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.755560][ T5022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.755579][ T5022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.807351][ T5804] veth0_macvtap: entered promiscuous mode [ 84.825118][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.919514][ T5804] veth1_macvtap: entered promiscuous mode [ 84.946510][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.959028][ T5022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.975024][ T5022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.999020][ T5022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.076341][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.076363][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.181511][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.194792][ T5811] veth0_macvtap: entered promiscuous mode [ 85.224177][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.268043][ T5811] veth1_macvtap: entered promiscuous mode [ 85.328473][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.346279][ T1540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.346299][ T1540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.347026][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.382928][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.388073][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.404396][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.404415][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.483785][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.569318][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.604876][ T5022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.604896][ T5022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.677212][ T1233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680198][ T1233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.691214][ T1233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.695120][ T1233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.760707][ T5809] Bluetooth: hci0: command tx timeout [ 85.825571][ T5022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.825592][ T5022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.830829][ T806] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.841890][ T5809] Bluetooth: hci1: command tx timeout [ 85.841922][ T5809] Bluetooth: hci2: command tx timeout [ 85.866713][ T5922] tmpfs: Unknown parameter 'puota' [ 85.920600][ T5802] Bluetooth: hci3: command tx timeout [ 85.920630][ T5802] Bluetooth: hci4: command tx timeout [ 86.040431][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 86.048122][ T806] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 86.048159][ T806] usb 1-1: can't read configurations, error -61 [ 86.064201][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.064220][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.210537][ T806] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.229508][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.229527][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.319561][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.319578][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.360548][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 86.378156][ T806] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 86.378193][ T806] usb 1-1: can't read configurations, error -61 [ 86.379366][ T806] usb usb1-port1: attempt power cycle [ 86.750634][ T806] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.784623][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 86.789485][ T806] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 86.789520][ T806] usb 1-1: can't read configurations, error -61 [ 86.920950][ T806] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.949858][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 86.964058][ T806] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 86.964093][ T806] usb 1-1: can't read configurations, error -61 [ 86.964506][ T806] usb usb1-port1: unable to enumerate USB device [ 87.139857][ T5943] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 87.202275][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.212671][ T5943] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 87.251117][ T5934] could not allocate digest TFM handle nhpoly1305-sse2 [ 87.386535][ T55] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.386566][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.386585][ T55] usb 2-1: Product: syz [ 87.386610][ T55] usb 2-1: Manufacturer: syz [ 87.386623][ T55] usb 2-1: SerialNumber: syz [ 87.530984][ T55] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 87.733341][ T1799] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.903046][ T1799] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 88.907735][ T1799] ath9k_htc: Failed to initialize the device [ 89.177825][ T1799] usb 2-1: ath9k_htc: USB layer deinitialized [ 89.941805][ T5935] usb 2-1: USB disconnect, device number 2 [ 90.130345][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.280355][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 90.282163][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 90.282191][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.282212][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.282234][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 90.282271][ T5883] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 90.282294][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.306953][ T5883] usb 5-1: config 0 descriptor?? [ 90.310742][ T5962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 90.419795][ T5974] ======================================================= [ 90.419795][ T5974] WARNING: The mand mount option has been deprecated and [ 90.419795][ T5974] and is ignored by this kernel. Remove the mand [ 90.419795][ T5974] option from the mount to silence this warning. [ 90.419795][ T5974] ======================================================= [ 90.446297][ T5861] kernel read not supported for file /sg0 (pid: 5861 comm: kworker/0:4) [ 90.480345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.482221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.490335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.500326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.510311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.520303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.524304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.530295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.540297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.550299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.224113][ T5861] usb 5-1: USB disconnect, device number 2 [ 93.901497][ T6003] syzkaller0: entered promiscuous mode [ 93.901525][ T6003] syzkaller0: entered allmulticast mode [ 93.910425][ T931] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.060485][ T931] usb 5-1: Using ep0 maxpacket: 32 [ 94.063392][ T931] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 94.063417][ T931] usb 5-1: config 0 has no interface number 0 [ 94.063538][ T931] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.067304][ T931] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 94.067330][ T931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.067350][ T931] usb 5-1: Product: syz [ 94.067363][ T931] usb 5-1: Manufacturer: syz [ 94.067375][ T931] usb 5-1: SerialNumber: syz [ 94.152702][ T931] usb 5-1: config 0 descriptor?? [ 94.167126][ T931] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 94.167161][ T931] em28xx 5-1:0.132: Video interface 132 found: [ 94.593952][ T931] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 94.748232][ T6008] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.28'. [ 94.851048][ T6012] capability: warning: `syz.3.21' uses 32-bit capabilities (legacy support in use) [ 95.010386][ T931] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 95.010421][ T931] em28xx 5-1:0.132: board has no eeprom [ 95.106678][ T931] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 95.106722][ T931] em28xx 5-1:0.132: analog set to bulk mode. [ 95.136093][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 95.223485][ T931] usb 5-1: USB disconnect, device number 3 [ 95.225836][ T931] em28xx 5-1:0.132: Disconnecting em28xx [ 95.565922][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 95.565951][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 95.565964][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 95.609313][ T10] usb 5-1: Decoder not found [ 95.609334][ T10] em28xx 5-1:0.132: failed to create media graph [ 95.609385][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 95.647762][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 95.647942][ T931] em28xx 5-1:0.132: Closing input extension [ 95.701918][ T6030] FAULT_INJECTION: forcing a failure. [ 95.701918][ T6030] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.701970][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.701991][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.702008][ T6030] Call Trace: [ 95.702018][ T6030] [ 95.702027][ T6030] dump_stack_lvl+0xe8/0x150 [ 95.702063][ T6030] should_fail_ex+0x46b/0x600 [ 95.702089][ T6030] _copy_from_user+0x2d/0xb0 [ 95.702112][ T6030] bpf_test_init+0xd8/0x150 [ 95.702136][ T6030] bpf_prog_test_run_skb+0x375/0x1d50 [ 95.702163][ T6030] ? __fget_files+0x2a/0x420 [ 95.702189][ T6030] ? __fget_files+0x2a/0x420 [ 95.702209][ T6030] ? __fget_files+0x3a6/0x420 [ 95.702228][ T6030] ? __fget_files+0x2a/0x420 [ 95.702254][ T6030] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 95.702275][ T6030] bpf_prog_test_run+0x2cd/0x340 [ 95.702297][ T6030] __sys_bpf+0x643/0x950 [ 95.702322][ T6030] ? __pfx___sys_bpf+0x10/0x10 [ 95.702342][ T6030] ? rt_mutex_slowunlock+0x1cb/0x300 [ 95.702377][ T6030] ? ksys_write+0x248/0x270 [ 95.702397][ T6030] ? __pfx_ksys_write+0x10/0x10 [ 95.702421][ T6030] __x64_sys_bpf+0x7c/0x90 [ 95.702444][ T6030] do_syscall_64+0x14d/0xf80 [ 95.702464][ T6030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.702480][ T6030] ? trace_irq_disable+0x37/0x100 [ 95.702495][ T6030] ? clear_bhb_loop+0x40/0x90 [ 95.702516][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.702533][ T6030] RIP: 0033:0x7f770facc629 [ 95.702553][ T6030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.702568][ T6030] RSP: 002b:00007f770dd1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.702587][ T6030] RAX: ffffffffffffffda RBX: 00007f770fd45fa0 RCX: 00007f770facc629 [ 95.702600][ T6030] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 95.702612][ T6030] RBP: 00007f770dd1e090 R08: 0000000000000000 R09: 0000000000000000 [ 95.702623][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.702633][ T6030] R13: 00007f770fd46038 R14: 00007f770fd45fa0 R15: 00007ffd672f7608 [ 95.702663][ T6030] [ 95.880315][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029376000: rx timeout, send abort [ 95.945372][ T931] em28xx 5-1:0.132: Freeing device [ 96.198003][ T6039] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.494284][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029376000: abort rx timeout. Force session deactivation [ 96.495585][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029375c00: rx timeout, send abort [ 96.873155][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029374000: rx timeout, send abort [ 96.883142][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029374000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 96.995706][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029375c00: abort rx timeout. Force session deactivation [ 97.184536][ T36] audit: type=1326 audit(1771414676.394:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6016 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94eca6c629 code=0x7fc00000 [ 97.490452][ T1799] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.674916][ T6056] FAULT_INJECTION: forcing a failure. [ 97.674916][ T6056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.674980][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.4.42 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 97.675001][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.675012][ T6056] Call Trace: [ 97.675019][ T6056] [ 97.675027][ T6056] dump_stack_lvl+0xe8/0x150 [ 97.675055][ T6056] should_fail_ex+0x46b/0x600 [ 97.675087][ T6056] _copy_from_iter+0x1d3/0x1670 [ 97.675112][ T6056] ? rcu_is_watching+0x15/0xb0 [ 97.675141][ T6056] ? __pfx__copy_from_iter+0x10/0x10 [ 97.675162][ T6056] ? __build_skb_around+0x22d/0x3c0 [ 97.675188][ T6056] ? __alloc_skb+0x193/0x390 [ 97.675210][ T6056] ? netlink_sendmsg+0x650/0xb40 [ 97.675230][ T6056] ? skb_put+0x11b/0x210 [ 97.675256][ T6056] netlink_sendmsg+0x6c0/0xb40 [ 97.675277][ T6056] ? irqentry_exit+0x59e/0x620 [ 97.675305][ T6056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.675338][ T6056] ____sys_sendmsg+0xa4e/0xac0 [ 97.675365][ T6056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.675391][ T6056] ? import_iovec+0x73/0xa0 [ 97.675417][ T6056] ___sys_sendmsg+0x2a5/0x360 [ 97.675433][ T6056] ? __lock_acquire+0x6b5/0x2cf0 [ 97.675458][ T6056] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.675480][ T6056] ? __schedule+0x14f4/0x5210 [ 97.675526][ T6056] ? __fget_files+0x2a/0x420 [ 97.675547][ T6056] ? __fget_files+0x3a6/0x420 [ 97.675577][ T6056] __x64_sys_sendmsg+0x1c3/0x2a0 [ 97.675598][ T6056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.675638][ T6056] do_syscall_64+0x14d/0xf80 [ 97.675658][ T6056] ? rcu_is_watching+0x15/0xb0 [ 97.675679][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.675696][ T6056] ? clear_bhb_loop+0x40/0x90 [ 97.675717][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.675734][ T6056] RIP: 0033:0x7f3e49dfc629 [ 97.675750][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.675765][ T6056] RSP: 002b:00007f3e4800c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.675784][ T6056] RAX: ffffffffffffffda RBX: 00007f3e4a076180 RCX: 00007f3e49dfc629 [ 97.675797][ T6056] RDX: 0000000020004080 RSI: 00002000000006c0 RDI: 0000000000000005 [ 97.675809][ T6056] RBP: 00007f3e4800c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.675821][ T6056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.675831][ T6056] R13: 00007f3e4a076218 R14: 00007f3e4a076180 R15: 00007ffe31bda008 [ 97.675861][ T6056] [ 98.929940][ T6066] Bluetooth: MGMT ver 1.23 [ 98.940416][ T1799] usb 3-1: Using ep0 maxpacket: 16 [ 98.964765][ T1799] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 98.964800][ T1799] usb 3-1: can't read configurations, error -61 [ 99.121127][ T1799] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.220417][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.280476][ T1799] usb 3-1: Using ep0 maxpacket: 16 [ 99.286436][ T1799] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 99.286474][ T1799] usb 3-1: can't read configurations, error -61 [ 99.329184][ T1799] usb usb3-port1: attempt power cycle [ 99.380470][ T5952] usb 4-1: device descriptor read/64, error -71 [ 99.512016][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 99.517815][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 99.530293][ T6075] Zero length message leads to an empty skb [ 99.800432][ T5952] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.950695][ T5952] usb 4-1: device descriptor read/64, error -71 [ 100.061974][ T5952] usb usb4-port1: attempt power cycle [ 100.082405][ T1799] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 100.230459][ T1799] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 100.268263][ T1799] usb 3-1: device descriptor read/8, error -71 [ 100.370767][ T1799] usb usb3-port1: unable to enumerate USB device [ 100.410491][ T5952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.433285][ T5952] usb 4-1: device descriptor read/8, error -71 [ 100.670395][ T5952] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.693807][ T5952] usb 4-1: device descriptor read/8, error -71 [ 100.800808][ T5952] usb usb4-port1: unable to enumerate USB device [ 103.433489][ T6128] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 103.434525][ T6128] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 104.136084][ T6133] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 104.244889][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.322448][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.486382][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 104.486466][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.486488][ T10] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 104.486514][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.486544][ T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 104.486564][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.090669][ T6133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 105.090698][ T6133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.091191][ T6133] vhci_hcd vhci_hcd.0: Device attached [ 105.284883][ T10] usb 5-1: config 0 descriptor?? [ 105.295394][ T6145] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 105.320770][ T57] vhci_hcd vhci_hcd.1: stop threads [ 105.320788][ T57] vhci_hcd vhci_hcd.1: release socket [ 105.320871][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 105.701971][ T1800] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 105.725165][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 105.725282][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 105.768102][ T10] usb 5-1: USB disconnect, device number 4 [ 105.850374][ T1800] usb 3-1: Using ep0 maxpacket: 32 [ 105.852710][ T1800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 19840, setting to 1024 [ 105.852741][ T1800] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 105.855117][ T1800] usb 3-1: New USB device found, idVendor=12d8, idProduct=0256, bcdDevice=de.79 [ 105.855145][ T1800] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.855164][ T1800] usb 3-1: Product: syz [ 105.855177][ T1800] usb 3-1: Manufacturer: syz [ 105.855190][ T1800] usb 3-1: SerialNumber: syz [ 105.866893][ T1800] usb 3-1: config 0 descriptor?? [ 105.890401][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.937131][ T6150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.965914][ T1800] hub 3-1:0.0: bad descriptor, ignoring hub [ 105.965951][ T1800] hub 3-1:0.0: probe with driver hub failed with error -5 [ 106.050412][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 106.052620][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.052650][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.057923][ T5935] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.057950][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.057969][ T5935] usb 1-1: Product: syz [ 106.057982][ T5935] usb 1-1: Manufacturer: syz [ 106.057996][ T5935] usb 1-1: SerialNumber: syz [ 106.168067][ T5935] usb 1-1: config 0 descriptor?? [ 106.209600][ T5935] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.209636][ T5935] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 106.293574][ T5952] usb 3-1: USB disconnect, device number 6 [ 106.335808][ T6157] FAULT_INJECTION: forcing a failure. [ 106.335808][ T6157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.335865][ T6157] CPU: 1 UID: 0 PID: 6157 Comm: syz.4.74 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.335878][ T6157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.335884][ T6157] Call Trace: [ 106.335888][ T6157] [ 106.335893][ T6157] dump_stack_lvl+0xe8/0x150 [ 106.335912][ T6157] should_fail_ex+0x46b/0x600 [ 106.335928][ T6157] _copy_from_user+0x2d/0xb0 [ 106.335943][ T6157] tiocswinsz+0x8e/0x160 [ 106.335955][ T6157] ? __pfx_tiocswinsz+0x10/0x10 [ 106.335968][ T6157] ? ksys_write+0x202/0x270 [ 106.335984][ T6157] tty_ioctl+0x228/0xde0 [ 106.335996][ T6157] ? __pfx_tty_ioctl+0x10/0x10 [ 106.336007][ T6157] __se_sys_ioctl+0xff/0x170 [ 106.336018][ T6157] do_syscall_64+0x14d/0xf80 [ 106.336032][ T6157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.336041][ T6157] ? trace_irq_disable+0x37/0x100 [ 106.336050][ T6157] ? clear_bhb_loop+0x40/0x90 [ 106.336062][ T6157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.336071][ T6157] RIP: 0033:0x7f3e49dfc629 [ 106.336081][ T6157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.336089][ T6157] RSP: 002b:00007f3e4804e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.336101][ T6157] RAX: ffffffffffffffda RBX: 00007f3e4a075fa0 RCX: 00007f3e49dfc629 [ 106.336108][ T6157] RDX: 0000000000000000 RSI: 0000000000005414 RDI: 0000000000000003 [ 106.336114][ T6157] RBP: 00007f3e4804e090 R08: 0000000000000000 R09: 0000000000000000 [ 106.336120][ T6157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.336126][ T6157] R13: 00007f3e4a076038 R14: 00007f3e4a075fa0 R15: 00007ffe31bda008 [ 106.336141][ T6157] [ 106.976298][ T5935] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.060692][ T5952] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.064283][ T5935] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 107.214269][ T5952] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 107.214286][ T5952] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 107.214297][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.214306][ T5952] usb 2-1: config 0 has no interfaces? [ 107.224110][ T5952] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 107.224346][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.224365][ T5952] usb 2-1: Product: syz [ 107.224379][ T5952] usb 2-1: Manufacturer: syz [ 107.224392][ T5952] usb 2-1: SerialNumber: syz [ 107.353781][ T5935] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 107.353796][ T5935] em28xx 1-1:0.0: No AC97 audio processor [ 107.358586][ T5952] usb 2-1: config 0 descriptor?? [ 107.501962][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 107.511360][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 107.511382][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 107.511829][ T6171] netlink: 108 bytes leftover after parsing attributes in process `syz.4.79'. [ 107.511846][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'. [ 107.663955][ T10] usb 2-1: USB disconnect, device number 3 [ 107.878357][ T5935] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.992837][ T5883] usb 1-1: USB disconnect, device number 6 [ 109.013435][ T5883] em28xx 1-1:0.0: Disconnecting em28xx [ 109.045116][ T5883] em28xx 1-1:0.0: Freeing device [ 109.153577][ T6187] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 109.289825][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 109.289922][ T5935] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.289946][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.333285][ T5935] usb 3-1: config 0 descriptor?? [ 109.374452][ T5935] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 109.568245][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.568915][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.570504][ T5935] usb 3-1: USB disconnect, device number 7 [ 109.925175][ T6204] process 'syz.4.87' launched './file1' with NULL argv: empty string added [ 110.150851][ T5935] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.304333][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 110.306523][ T5935] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.306569][ T5935] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 110.306592][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.375361][ T5935] usb 3-1: config 0 descriptor?? [ 111.374322][ T5935] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.0001/input/input5 [ 111.442292][ T6219] capability: warning: `syz.4.91' uses deprecated v2 capabilities in a way that may be insecure [ 111.666888][ T5935] creative-sb0540 0003:041E:3100.0001: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 111.710712][ T5935] usb 3-1: USB disconnect, device number 8 [ 112.766983][ T6229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.817658][ T6228] fido_id[6228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 112.925100][ T6236] FAULT_INJECTION: forcing a failure. [ 112.925100][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.925133][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.925154][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.925164][ T6236] Call Trace: [ 112.925171][ T6236] [ 112.925179][ T6236] dump_stack_lvl+0xe8/0x150 [ 112.925208][ T6236] should_fail_ex+0x46b/0x600 [ 112.925234][ T6236] _copy_to_user+0x31/0xb0 [ 112.925259][ T6236] simple_read_from_buffer+0xe1/0x170 [ 112.925286][ T6236] proc_fail_nth_read+0x1be/0x230 [ 112.925309][ T6236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.925329][ T6236] ? rw_verify_area+0x2ac/0x4e0 [ 112.925352][ T6236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.925371][ T6236] vfs_read+0x212/0xa70 [ 112.925396][ T6236] ? __pfx_vfs_read+0x10/0x10 [ 112.925416][ T6236] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.925439][ T6236] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.925460][ T6236] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 112.925481][ T6236] ? mutex_lock_nested+0x152/0x1d0 [ 112.925497][ T6236] ? fdget_pos+0x252/0x320 [ 112.925527][ T6236] ksys_read+0x156/0x270 [ 112.925546][ T6236] ? __pfx_ksys_read+0x10/0x10 [ 112.925561][ T6236] ? __pfx_tty_ioctl+0x10/0x10 [ 112.925588][ T6236] do_syscall_64+0x14d/0xf80 [ 112.925608][ T6236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.925625][ T6236] ? trace_irq_disable+0x37/0x100 [ 112.925640][ T6236] ? clear_bhb_loop+0x40/0x90 [ 112.925661][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.925677][ T6236] RIP: 0033:0x7f94eca2cece [ 112.925693][ T6236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.925708][ T6236] RSP: 002b:00007f94eacbdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.925728][ T6236] RAX: ffffffffffffffda RBX: 00007f94eacbe6c0 RCX: 00007f94eca2cece [ 112.925740][ T6236] RDX: 000000000000000f RSI: 00007f94eacbe0a0 RDI: 0000000000000004 [ 112.925751][ T6236] RBP: 00007f94eacbe090 R08: 0000000000000000 R09: 0000000000000000 [ 112.925762][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.925773][ T6236] R13: 00007f94ecce6038 R14: 00007f94ecce5fa0 R15: 00007ffeeb962b38 [ 112.925803][ T6236] [ 115.260450][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.410381][ T5860] usb 2-1: device descriptor read/64, error -71 [ 115.619283][ T6285] FAULT_INJECTION: forcing a failure. [ 115.619283][ T6285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.619317][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.2.118 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.619338][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.619348][ T6285] Call Trace: [ 115.619355][ T6285] [ 115.619364][ T6285] dump_stack_lvl+0xe8/0x150 [ 115.619392][ T6285] should_fail_ex+0x46b/0x600 [ 115.619419][ T6285] _copy_to_user+0x31/0xb0 [ 115.619444][ T6285] simple_read_from_buffer+0xe1/0x170 [ 115.619473][ T6285] proc_fail_nth_read+0x1be/0x230 [ 115.619495][ T6285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.619517][ T6285] ? rw_verify_area+0x2ac/0x4e0 [ 115.619542][ T6285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.619562][ T6285] vfs_read+0x212/0xa70 [ 115.619588][ T6285] ? __pfx_vfs_read+0x10/0x10 [ 115.619607][ T6285] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.619629][ T6285] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.619650][ T6285] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 115.619671][ T6285] ? mutex_lock_nested+0x152/0x1d0 [ 115.619687][ T6285] ? fdget_pos+0x252/0x320 [ 115.619716][ T6285] ksys_read+0x156/0x270 [ 115.619736][ T6285] ? __pfx_ksys_read+0x10/0x10 [ 115.619764][ T6285] do_syscall_64+0x14d/0xf80 [ 115.619785][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.619802][ T6285] ? trace_irq_disable+0x37/0x100 [ 115.619817][ T6285] ? clear_bhb_loop+0x40/0x90 [ 115.619837][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.619853][ T6285] RIP: 0033:0x7f7ae237cece [ 115.619870][ T6285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.619885][ T6285] RSP: 002b:00007f7ae05d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.619904][ T6285] RAX: ffffffffffffffda RBX: 00007f7ae05d46c0 RCX: 00007f7ae237cece [ 115.619917][ T6285] RDX: 000000000000000f RSI: 00007f7ae05d40a0 RDI: 0000000000000005 [ 115.619928][ T6285] RBP: 00007f7ae05d4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.619939][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.619950][ T6285] R13: 00007f7ae2636218 R14: 00007f7ae2636180 R15: 00007fffb1a43518 [ 115.619981][ T6285] [ 115.690729][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.081937][ T5860] usb 2-1: device descriptor read/64, error -71 [ 116.238324][ T5860] usb usb2-port1: attempt power cycle [ 116.740498][ T5860] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 116.762303][ T5860] usb 2-1: device descriptor read/8, error -71 [ 117.501763][ T5860] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.524486][ T5860] usb 2-1: device descriptor read/8, error -71 [ 118.632360][ T5860] usb usb2-port1: unable to enumerate USB device [ 119.190370][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.350524][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 119.407577][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.407640][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 119.407663][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.488652][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 119.488683][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.488703][ T10] usb 5-1: Product: syz [ 119.488716][ T10] usb 5-1: Manufacturer: syz [ 119.488729][ T10] usb 5-1: SerialNumber: syz [ 119.563548][ T10] usb 5-1: config 0 descriptor?? [ 119.712256][ T10] mcba_usb 5-1:0.0: Can't find endpoints [ 122.040641][ T5883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.220387][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 122.222813][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.222829][ T5883] usb 1-1: config 0 has no interfaces? [ 122.222845][ T5883] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 122.222857][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.225626][ T5883] usb 1-1: config 0 descriptor?? [ 122.460439][ T31] usb 1-1: USB disconnect, device number 7 [ 127.366608][ T5809] block nbd3: Receive control failed (result -32) [ 127.399951][ T6413] kAFS: unable to lookup cell '' [ 127.439470][ T6406] block nbd3: shutting down sockets [ 128.760453][ T6427] FAULT_INJECTION: forcing a failure. [ 128.760453][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.760506][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.2.165 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.760525][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.760535][ T6427] Call Trace: [ 128.760542][ T6427] [ 128.760550][ T6427] dump_stack_lvl+0xe8/0x150 [ 128.760585][ T6427] should_fail_ex+0x46b/0x600 [ 128.760609][ T6427] strncpy_from_user+0x36/0x2b0 [ 128.760631][ T6427] __se_sys_add_key+0xdb/0x420 [ 128.760656][ T6427] ? __pfx___se_sys_add_key+0x10/0x10 [ 128.760687][ T6427] ? __x64_sys_add_key+0x20/0xc0 [ 128.760710][ T6427] do_syscall_64+0x14d/0xf80 [ 128.760739][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.760755][ T6427] ? trace_irq_disable+0x37/0x100 [ 128.760771][ T6427] ? clear_bhb_loop+0x40/0x90 [ 128.760791][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.760807][ T6427] RIP: 0033:0x7f7ae23bc629 [ 128.760827][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.760841][ T6427] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 128.760863][ T6427] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 128.760877][ T6427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 128.760887][ T6427] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 128.760897][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.760907][ T6427] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 128.760936][ T6427] [ 128.940463][ T5935] usb 5-1: USB disconnect, device number 5 [ 130.657371][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.167'. [ 130.657414][ T6434] netlink: 260 bytes leftover after parsing attributes in process `syz.0.167'. [ 130.981427][ T6449] fuse: Unknown parameter 'grofp_id' [ 131.091732][ T6453] IPv6: addrconf: prefix option has invalid lifetime [ 132.571338][ T6451] IPv6: addrconf: prefix option has invalid lifetime [ 132.888384][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888475][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.958483][ T1800] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.071050][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 134.071075][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 134.071101][ T6483] netlink: 'syz.0.184': attribute type 6 has an invalid length. [ 134.107882][ T1800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 134.107915][ T1800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.107937][ T1800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 134.107969][ T1800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 134.110549][ T1800] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 134.110573][ T1800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.110592][ T1800] usb 4-1: Product: syz [ 134.110604][ T1800] usb 4-1: Manufacturer: syz [ 134.110618][ T1800] usb 4-1: SerialNumber: syz [ 134.162481][ T1800] usb 4-1: config 0 descriptor?? [ 138.395485][ T6520] trusted_key: syz.1.196 sent an empty control message without MSG_MORE. [ 139.062964][ T1800] adutux 4-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 139.086981][ T1800] usb 4-1: USB disconnect, device number 6 [ 140.510625][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.730345][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 140.734058][ T10] usb 1-1: config 16 has an invalid interface number: 179 but max is 0 [ 140.734084][ T10] usb 1-1: config 16 has no interface number 0 [ 140.734128][ T10] usb 1-1: config 16 interface 179 has no altsetting 0 [ 140.752872][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.752910][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.752933][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.752958][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.752981][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.753005][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.753028][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.753052][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.753075][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.753116][ T1800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.783402][ T1800] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.04 Device [syz0] on syz1 [ 140.862656][ T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=8d29, bcdDevice=9c.9a [ 140.862676][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.862686][ T10] usb 1-1: Product: syz [ 140.862693][ T10] usb 1-1: Manufacturer: ခ [ 140.862701][ T10] usb 1-1: SerialNumber: syz [ 141.021386][ T6565] FAULT_INJECTION: forcing a failure. [ 141.021386][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.021418][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.2.210 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 141.021440][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.021450][ T6565] Call Trace: [ 141.021457][ T6565] [ 141.021465][ T6565] dump_stack_lvl+0xe8/0x150 [ 141.021494][ T6565] should_fail_ex+0x46b/0x600 [ 141.021519][ T6565] _copy_from_user+0x2d/0xb0 [ 141.021543][ T6565] sctp_getsockopt_local_auth_chunks+0xdd/0x470 [ 141.021571][ T6565] ? __local_bh_enable+0x1e1/0x2f0 [ 141.021594][ T6565] ? __pfx_sctp_getsockopt_local_auth_chunks+0x10/0x10 [ 141.021616][ T6565] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 141.021640][ T6565] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.021671][ T6565] sctp_getsockopt+0x3e0/0xb90 [ 141.021692][ T6565] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 141.021716][ T6565] do_sock_getsockopt+0x2d3/0x3f0 [ 141.021737][ T6565] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 141.021755][ T6565] ? __fget_files+0x3a6/0x420 [ 141.021781][ T6565] ? __fget_files+0x2a/0x420 [ 141.021809][ T6565] __x64_sys_getsockopt+0x1aa/0x250 [ 141.021835][ T6565] do_syscall_64+0x14d/0xf80 [ 141.021856][ T6565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.021873][ T6565] ? trace_irq_disable+0x37/0x100 [ 141.021888][ T6565] ? clear_bhb_loop+0x40/0x90 [ 141.021909][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.021926][ T6565] RIP: 0033:0x7f7ae23bc629 [ 141.021942][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.021956][ T6565] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 141.021975][ T6565] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 141.021988][ T6565] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003 [ 141.021998][ T6565] RBP: 00007f7ae0616090 R08: 0000200000000200 R09: 0000000000000000 [ 141.022009][ T6565] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 141.022020][ T6565] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 141.022049][ T6565] [ 141.292907][ T10] option 1-1:16.179: GSM modem (1-port) converter detected [ 141.311433][ T6566] fido_id[6566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.360768][ T10] usb 1-1: USB disconnect, device number 8 [ 141.379695][ T10] option 1-1:16.179: device disconnected [ 141.589254][ T6573] netlink: 572 bytes leftover after parsing attributes in process `syz.1.213'. [ 141.589278][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 147.331071][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.331578][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.359758][ T6609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.372107][ T6609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.439498][ T6614] FAULT_INJECTION: forcing a failure. [ 147.439498][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 147.439534][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.3.228 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.439552][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.439562][ T6614] Call Trace: [ 147.439570][ T6614] [ 147.439578][ T6614] dump_stack_lvl+0xe8/0x150 [ 147.439608][ T6614] should_fail_ex+0x46b/0x600 [ 147.439635][ T6614] should_failslab+0xa8/0x100 [ 147.439667][ T6614] kmem_cache_alloc_noprof+0x87/0x680 [ 147.439685][ T6614] ? dst_alloc+0x105/0x170 [ 147.439701][ T6614] ? fib_lookup+0x76/0x440 [ 147.439725][ T6614] dst_alloc+0x105/0x170 [ 147.439749][ T6614] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 147.439771][ T6614] ? ip_route_output_key_hash_rcu+0x12a1/0x25d0 [ 147.439798][ T6614] ? ip_route_output_key_hash+0xd8/0x2a0 [ 147.439820][ T6614] ip_route_output_key_hash+0x18d/0x2a0 [ 147.439844][ T6614] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 147.439868][ T6614] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.439889][ T6614] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 147.439917][ T6614] tcp_v4_connect+0x716/0x1a90 [ 147.439940][ T6614] ? kasan_save_track+0x3e/0x80 [ 147.439956][ T6614] ? inet_reqsk_alloc+0x40/0x5e0 [ 147.440006][ T6614] ? __pfx_tcp_v4_connect+0x10/0x10 [ 147.440038][ T6614] __inet_stream_connect+0x25a/0xdd0 [ 147.440074][ T6614] ? __pfx___inet_stream_connect+0x10/0x10 [ 147.440099][ T6614] ? __kasan_kmalloc+0x93/0xb0 [ 147.440118][ T6614] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 147.440135][ T6614] ? check_noncircular+0xda/0x150 [ 147.440150][ T6614] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 147.440178][ T6614] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 147.440210][ T6614] tcp_sendmsg_locked+0x4d18/0x55b0 [ 147.440255][ T6614] ? __lock_acquire+0x6b5/0x2cf0 [ 147.440286][ T6614] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.440306][ T6614] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.440326][ T6614] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 147.440345][ T6614] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 147.440369][ T6614] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 147.440399][ T6614] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 147.440427][ T6614] tcp_sendmsg+0x2f/0x50 [ 147.440451][ T6614] smc_sendmsg+0x250/0x4d0 [ 147.440477][ T6614] ____sys_sendmsg+0xa4e/0xac0 [ 147.440506][ T6614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.440535][ T6614] ? import_iovec+0x73/0xa0 [ 147.440562][ T6614] ___sys_sendmsg+0x2a5/0x360 [ 147.440579][ T6614] ? __lock_acquire+0x6b5/0x2cf0 [ 147.440605][ T6614] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.440671][ T6614] ? __fget_files+0x2a/0x420 [ 147.440693][ T6614] ? __fget_files+0x3a6/0x420 [ 147.440726][ T6614] __x64_sys_sendmsg+0x1c3/0x2a0 [ 147.440747][ T6614] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.440776][ T6614] ? __pfx_ksys_write+0x10/0x10 [ 147.440807][ T6614] do_syscall_64+0x14d/0xf80 [ 147.440829][ T6614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.440847][ T6614] ? trace_irq_disable+0x37/0x100 [ 147.440863][ T6614] ? clear_bhb_loop+0x40/0x90 [ 147.440884][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.440900][ T6614] RIP: 0033:0x7f770facc629 [ 147.440917][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.440933][ T6614] RSP: 002b:00007f770dd1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.440953][ T6614] RAX: ffffffffffffffda RBX: 00007f770fd45fa0 RCX: 00007f770facc629 [ 147.440966][ T6614] RDX: 000000003406c012 RSI: 0000200000000680 RDI: 0000000000000003 [ 147.440979][ T6614] RBP: 00007f770dd1e090 R08: 0000000000000000 R09: 0000000000000000 [ 147.440990][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.441001][ T6614] R13: 00007f770fd46038 R14: 00007f770fd45fa0 R15: 00007ffd672f7608 [ 147.441039][ T6614] [ 147.590380][ T1800] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 147.753341][ T1800] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 147.753368][ T1800] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.753387][ T1800] usb 3-1: config 0 has no interface number 0 [ 147.784660][ T1800] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 147.784688][ T1800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.784707][ T1800] usb 3-1: Product: syz [ 147.784720][ T1800] usb 3-1: Manufacturer: syz [ 147.784733][ T1800] usb 3-1: SerialNumber: syz [ 147.850115][ T1800] usb 3-1: config 0 descriptor?? [ 148.157671][ T1800] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 148.157700][ T1800] uvcvideo 3-1:0.64: No valid video chain found. [ 148.280487][ T1800] usb 3-1: USB disconnect, device number 9 [ 150.971846][ T6649] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 150.991230][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 151.573296][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.238'. [ 153.985299][ T6683] FAULT_INJECTION: forcing a failure. [ 153.985299][ T6683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.985355][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.985377][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.985387][ T6683] Call Trace: [ 153.985394][ T6683] [ 153.985403][ T6683] dump_stack_lvl+0xe8/0x150 [ 153.985432][ T6683] should_fail_ex+0x46b/0x600 [ 153.985459][ T6683] _copy_from_user+0x2d/0xb0 [ 153.985484][ T6683] memdup_user+0x5e/0xd0 [ 153.985508][ T6683] strndup_user+0x68/0xd0 [ 153.985531][ T6683] __se_sys_mount+0x9d/0x420 [ 153.985559][ T6683] ? __pfx___se_sys_mount+0x10/0x10 [ 153.985587][ T6683] ? __x64_sys_mount+0x20/0xc0 [ 153.985611][ T6683] do_syscall_64+0x14d/0xf80 [ 153.985631][ T6683] ? rcu_is_watching+0x15/0xb0 [ 153.985653][ T6683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.985671][ T6683] ? clear_bhb_loop+0x40/0x90 [ 153.985692][ T6683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.985709][ T6683] RIP: 0033:0x7f7ae23bc629 [ 153.985725][ T6683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.985740][ T6683] RSP: 002b:00007f7ae05d4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.985759][ T6683] RAX: ffffffffffffffda RBX: 00007f7ae2636180 RCX: 00007f7ae23bc629 [ 153.985773][ T6683] RDX: 00002000000020c0 RSI: 0000200000002080 RDI: 0000000000000000 [ 153.985785][ T6683] RBP: 00007f7ae05d4090 R08: 0000200000000340 R09: 0000000000000000 [ 153.985796][ T6683] R10: 0000000000000413 R11: 0000000000000246 R12: 0000000000000001 [ 153.985808][ T6683] R13: 00007f7ae2636218 R14: 00007f7ae2636180 R15: 00007fffb1a43518 [ 153.985838][ T6683] [ 154.041527][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.310738][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 154.650792][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.650822][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.749492][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.749511][ T31] pvrusb2: ********** [ 154.749518][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.749529][ T31] pvrusb2: Important functionality might not be entirely working. [ 154.749541][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.749552][ T31] pvrusb2: ********** [ 154.911066][ T2359] pvrusb2: Invalid write control endpoint [ 155.052647][ T6690] warning: `syz.4.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.101415][ T2359] pvrusb2: Invalid write control endpoint [ 155.101441][ T2359] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.101450][ T2359] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.101460][ T2359] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.101469][ T2359] pvrusb2: Device being rendered inoperable [ 155.106418][ T2359] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 155.106485][ T2359] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 155.169180][ T2359] pvrusb2: Attached sub-driver cx25840 [ 155.169195][ T2359] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.169205][ T2359] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.256344][ T6695] FAULT_INJECTION: forcing a failure. [ 155.256344][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.256375][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.4.255 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.256396][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 155.256405][ T6695] Call Trace: [ 155.256413][ T6695] [ 155.256421][ T6695] dump_stack_lvl+0xe8/0x150 [ 155.256450][ T6695] should_fail_ex+0x46b/0x600 [ 155.256481][ T6695] _copy_to_user+0x31/0xb0 [ 155.256506][ T6695] simple_read_from_buffer+0xe1/0x170 [ 155.256533][ T6695] proc_fail_nth_read+0x1be/0x230 [ 155.256554][ T6695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.256575][ T6695] ? rw_verify_area+0x2ac/0x4e0 [ 155.256598][ T6695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.256618][ T6695] vfs_read+0x212/0xa70 [ 155.256643][ T6695] ? __pfx_vfs_read+0x10/0x10 [ 155.256662][ T6695] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 155.256684][ T6695] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.256705][ T6695] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 155.256725][ T6695] ? mutex_lock_nested+0x152/0x1d0 [ 155.256741][ T6695] ? fdget_pos+0x252/0x320 [ 155.256772][ T6695] ksys_read+0x156/0x270 [ 155.256792][ T6695] ? __pfx_ksys_read+0x10/0x10 [ 155.256820][ T6695] do_syscall_64+0x14d/0xf80 [ 155.256841][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.256858][ T6695] ? trace_irq_disable+0x37/0x100 [ 155.256881][ T6695] ? clear_bhb_loop+0x40/0x90 [ 155.256902][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.256917][ T6695] RIP: 0033:0x7f3e49dbcece [ 155.256933][ T6695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 155.256947][ T6695] RSP: 002b:00007f3e4804dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.256966][ T6695] RAX: ffffffffffffffda RBX: 00007f3e4804e6c0 RCX: 00007f3e49dbcece [ 155.256979][ T6695] RDX: 000000000000000f RSI: 00007f3e4804e0a0 RDI: 0000000000000005 [ 155.256988][ T6695] RBP: 00007f3e4804e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.256998][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.257009][ T6695] R13: 00007f3e4a076038 R14: 00007f3e4a075fa0 R15: 00007ffe31bda008 [ 155.257035][ T6695] [ 155.722533][ T1800] usb 2-1: USB disconnect, device number 9 [ 156.212133][ T6712] dvmrp8: entered allmulticast mode [ 158.164996][ T6752] FAULT_INJECTION: forcing a failure. [ 158.164996][ T6752] name failslab, interval 1, probability 0, space 0, times 0 [ 158.165027][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.4.278 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.165048][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.165057][ T6752] Call Trace: [ 158.165065][ T6752] [ 158.165073][ T6752] dump_stack_lvl+0xe8/0x150 [ 158.165101][ T6752] should_fail_ex+0x46b/0x600 [ 158.165127][ T6752] should_failslab+0xa8/0x100 [ 158.165149][ T6752] __kmalloc_noprof+0xdf/0x7b0 [ 158.165167][ T6752] ? kfree+0x4d/0x690 [ 158.165182][ T6752] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.165206][ T6752] tomoyo_realpath_from_path+0xe3/0x5d0 [ 158.165226][ T6752] ? tomoyo_domain+0xd8/0x130 [ 158.165249][ T6752] ? tomoyo_path_number_perm+0x219/0x630 [ 158.165273][ T6752] tomoyo_path_number_perm+0x246/0x630 [ 158.165316][ T6752] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 158.165337][ T6752] ? __lock_acquire+0x6b5/0x2cf0 [ 158.165360][ T6752] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.165412][ T6752] ? __fget_files+0x2a/0x420 [ 158.165436][ T6752] ? __fget_files+0x2a/0x420 [ 158.165455][ T6752] ? __fget_files+0x3a6/0x420 [ 158.165474][ T6752] ? __fget_files+0x2a/0x420 [ 158.165498][ T6752] security_file_ioctl+0xc3/0x2a0 [ 158.165525][ T6752] __se_sys_ioctl+0x47/0x170 [ 158.165553][ T6752] do_syscall_64+0x14d/0xf80 [ 158.165574][ T6752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.165590][ T6752] ? trace_irq_disable+0x37/0x100 [ 158.165605][ T6752] ? clear_bhb_loop+0x40/0x90 [ 158.165626][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.165643][ T6752] RIP: 0033:0x7f3e49dfc629 [ 158.165658][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.165670][ T6752] RSP: 002b:00007f3e4804e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.165689][ T6752] RAX: ffffffffffffffda RBX: 00007f3e4a075fa0 RCX: 00007f3e49dfc629 [ 158.165701][ T6752] RDX: 0000200000000340 RSI: 0000000040146f2c RDI: 0000000000000003 [ 158.165711][ T6752] RBP: 00007f3e4804e090 R08: 0000000000000000 R09: 0000000000000000 [ 158.165722][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.165731][ T6752] R13: 00007f3e4a076038 R14: 00007f3e4a075fa0 R15: 00007ffe31bda008 [ 158.165759][ T6752] [ 158.165918][ T6752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.360409][ T1800] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 158.530393][ T1800] usb 4-1: device descriptor read/64, error -71 [ 158.770460][ T1800] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 160.021537][ T1800] usb 4-1: device descriptor read/64, error -71 [ 160.134253][ T1800] usb usb4-port1: attempt power cycle [ 160.500421][ T1800] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.544077][ T1800] usb 4-1: device descriptor read/8, error -71 [ 160.550400][ T5860] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.690434][ T5860] usb 5-1: device descriptor read/64, error -71 [ 160.930378][ T5860] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 161.070451][ T1800] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.090728][ T1800] usb 4-1: device descriptor read/8, error -71 [ 161.100454][ T5860] usb 5-1: device descriptor read/64, error -71 [ 161.200936][ T1800] usb usb4-port1: unable to enumerate USB device [ 161.211531][ T5860] usb usb5-port1: attempt power cycle [ 162.394139][ T5860] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.420326][ T5860] usb 5-1: device descriptor read/8, error -71 [ 162.554139][ T6783] 9p: Bad value for 'rfdno' [ 162.662342][ T5860] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.690856][ T5860] usb 5-1: device descriptor read/8, error -71 [ 164.160443][ T5860] usb usb5-port1: unable to enumerate USB device [ 164.344786][ T6784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.345032][ T6784] block device autoloading is deprecated and will be removed. [ 164.660401][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 164.820387][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 164.822602][ T10] usb 5-1: config index 0 descriptor too short (expected 50325, got 36) [ 164.822659][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.822701][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 164.822723][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.861828][ T10] usb 5-1: config 0 descriptor?? [ 165.276277][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.276864][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.284683][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.285237][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.373995][ T10] hid_parser_main: 21 callbacks suppressed [ 165.374024][ T10] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 165.374052][ T10] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 165.404621][ T10] hid-steam 0003:28DE:1102.0003: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 165.535294][ T10] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 165.688802][ T10] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0003/input/input6 [ 165.715125][ T6805] FAULT_INJECTION: forcing a failure. [ 165.715125][ T6805] name failslab, interval 1, probability 0, space 0, times 0 [ 165.715161][ T6805] CPU: 1 UID: 0 PID: 6805 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.715182][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 165.715193][ T6805] Call Trace: [ 165.715200][ T6805] [ 165.715208][ T6805] dump_stack_lvl+0xe8/0x150 [ 165.715238][ T6805] should_fail_ex+0x46b/0x600 [ 165.715266][ T6805] should_failslab+0xa8/0x100 [ 165.715289][ T6805] __kmalloc_noprof+0xdf/0x7b0 [ 165.715309][ T6805] ? tomoyo_encode+0x28b/0x550 [ 165.715334][ T6805] tomoyo_encode+0x28b/0x550 [ 165.715359][ T6805] tomoyo_realpath_from_path+0x58d/0x5d0 [ 165.715390][ T6805] ? tomoyo_path_number_perm+0x219/0x630 [ 165.715415][ T6805] tomoyo_path_number_perm+0x246/0x630 [ 165.715442][ T6805] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.715464][ T6805] ? __lock_acquire+0x6b5/0x2cf0 [ 165.715490][ T6805] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.715544][ T6805] ? __fget_files+0x2a/0x420 [ 165.715569][ T6805] ? __fget_files+0x2a/0x420 [ 165.715590][ T6805] ? __fget_files+0x3a6/0x420 [ 165.715610][ T6805] ? __fget_files+0x2a/0x420 [ 165.715635][ T6805] security_file_ioctl+0xc3/0x2a0 [ 165.715663][ T6805] __se_sys_ioctl+0x47/0x170 [ 165.715684][ T6805] do_syscall_64+0x14d/0xf80 [ 165.715706][ T6805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.715722][ T6805] ? trace_irq_disable+0x37/0x100 [ 165.715737][ T6805] ? clear_bhb_loop+0x40/0x90 [ 165.715759][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.715776][ T6805] RIP: 0033:0x7f7ae23bc629 [ 165.715793][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.715807][ T6805] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.715827][ T6805] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 165.715848][ T6805] RDX: 0000200000000140 RSI: 000000000000560e RDI: 0000000000000004 [ 165.715859][ T6805] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 165.715870][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.715880][ T6805] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 165.715908][ T6805] [ 165.715927][ T6805] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.305941][ T10] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 166.306715][ T10] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 166.401814][ T6811] mmap: syz.3.294 (6811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.597580][ T10] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 168.770592][ T55] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.042139][ T5860] usb 5-1: USB disconnect, device number 10 [ 169.154114][ T6824] fido_id[6824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 169.450162][ T5860] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 169.610058][ T1799] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.621829][ T6842] FAULT_INJECTION: forcing a failure. [ 169.621829][ T6842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.621862][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.2.309 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.621883][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.621893][ T6842] Call Trace: [ 169.621899][ T6842] [ 169.621906][ T6842] dump_stack_lvl+0xe8/0x150 [ 169.621934][ T6842] should_fail_ex+0x46b/0x600 [ 169.621961][ T6842] _copy_from_iter+0x1d3/0x1670 [ 169.621984][ T6842] ? rcu_is_watching+0x15/0xb0 [ 169.622012][ T6842] ? __pfx__copy_from_iter+0x10/0x10 [ 169.622031][ T6842] ? __build_skb_around+0x22d/0x3c0 [ 169.622056][ T6842] ? __alloc_skb+0x193/0x390 [ 169.622078][ T6842] ? netlink_sendmsg+0x650/0xb40 [ 169.622097][ T6842] ? skb_put+0x11b/0x210 [ 169.622122][ T6842] netlink_sendmsg+0x6c0/0xb40 [ 169.622152][ T6842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.622179][ T6842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.622202][ T6842] ____sys_sendmsg+0xa4e/0xac0 [ 169.622220][ T6842] ? __might_fault+0xaf/0x130 [ 169.622243][ T6842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.622269][ T6842] ? import_iovec+0x73/0xa0 [ 169.622291][ T6842] ___sys_sendmsg+0x2a5/0x360 [ 169.622307][ T6842] ? __lock_acquire+0x6b5/0x2cf0 [ 169.622330][ T6842] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.622388][ T6842] ? __fget_files+0x2a/0x420 [ 169.622409][ T6842] ? __fget_files+0x3a6/0x420 [ 169.622438][ T6842] __x64_sys_sendmsg+0x1c3/0x2a0 [ 169.622458][ T6842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.622483][ T6842] ? __pfx_ksys_write+0x10/0x10 [ 169.622509][ T6842] do_syscall_64+0x14d/0xf80 [ 169.622529][ T6842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.622546][ T6842] ? trace_irq_disable+0x37/0x100 [ 169.622559][ T6842] ? clear_bhb_loop+0x40/0x90 [ 169.622579][ T6842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.622595][ T6842] RIP: 0033:0x7f7ae23bc629 [ 169.622612][ T6842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.622625][ T6842] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.622643][ T6842] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 169.622656][ T6842] RDX: 00000000040440c4 RSI: 0000200000000400 RDI: 0000000000000003 [ 169.622667][ T6842] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 169.622677][ T6842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.622688][ T6842] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 169.622716][ T6842] [ 169.749039][ T6844] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.784843][ T1799] usb 2-1: Using ep0 maxpacket: 8 [ 169.795407][ T1799] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 169.795434][ T1799] usb 2-1: config 0 has no interface number 0 [ 169.795477][ T1799] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 169.795501][ T1799] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 169.795525][ T1799] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.795550][ T1799] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 169.795572][ T1799] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.795611][ T1799] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 169.795632][ T1799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.812454][ T1799] usb 2-1: config 0 descriptor?? [ 170.376001][ T1799] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 170.443374][ T1799] usb 2-1: USB disconnect, device number 10 [ 170.454740][ T1799] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 172.341368][ T6877] FAULT_INJECTION: forcing a failure. [ 172.341368][ T6877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.341415][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.341439][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.341451][ T6877] Call Trace: [ 172.341478][ T6877] [ 172.341487][ T6877] dump_stack_lvl+0xe8/0x150 [ 172.341519][ T6877] should_fail_ex+0x46b/0x600 [ 172.341550][ T6877] _copy_from_iter+0x1d3/0x1670 [ 172.341579][ T6877] ? rcu_is_watching+0x15/0xb0 [ 172.341613][ T6877] ? __pfx__copy_from_iter+0x10/0x10 [ 172.341638][ T6877] ? __build_skb_around+0x22d/0x3c0 [ 172.341668][ T6877] ? __alloc_skb+0x193/0x390 [ 172.341694][ T6877] ? netlink_sendmsg+0x650/0xb40 [ 172.341717][ T6877] ? skb_put+0x11b/0x210 [ 172.341747][ T6877] netlink_sendmsg+0x6c0/0xb40 [ 172.341787][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.341821][ T6877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.341846][ T6877] ____sys_sendmsg+0xa4e/0xac0 [ 172.341865][ T6877] ? __might_fault+0xaf/0x130 [ 172.341893][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.341922][ T6877] ? import_iovec+0x73/0xa0 [ 172.341950][ T6877] ___sys_sendmsg+0x2a5/0x360 [ 172.341968][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 172.341998][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.342058][ T6877] ? __fget_files+0x2a/0x420 [ 172.342083][ T6877] ? __fget_files+0x3a6/0x420 [ 172.342119][ T6877] __x64_sys_sendmsg+0x1c3/0x2a0 [ 172.342143][ T6877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.342174][ T6877] ? __pfx_ksys_write+0x10/0x10 [ 172.342207][ T6877] do_syscall_64+0x14d/0xf80 [ 172.342231][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.342251][ T6877] ? trace_irq_disable+0x37/0x100 [ 172.342268][ T6877] ? clear_bhb_loop+0x40/0x90 [ 172.342292][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.342311][ T6877] RIP: 0033:0x7f7ae23bc629 [ 172.342331][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.342348][ T6877] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.342371][ T6877] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 172.342386][ T6877] RDX: 0000000004004810 RSI: 0000200000000080 RDI: 0000000000000003 [ 172.342400][ T6877] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 172.342419][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.342432][ T6877] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 172.342466][ T6877] [ 172.648569][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 172.648607][ T6883] openvswitch: netlink: Invalid VLAN frame [ 173.069135][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 173.180865][ T6892] team_slave_0: entered promiscuous mode [ 173.180928][ T6892] team_slave_1: entered promiscuous mode [ 173.184349][ T6892] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.779736][ T6895] FAULT_INJECTION: forcing a failure. [ 173.779736][ T6895] name failslab, interval 1, probability 0, space 0, times 0 [ 173.779789][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.779812][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.779822][ T6895] Call Trace: [ 173.779829][ T6895] [ 173.779836][ T6895] dump_stack_lvl+0xe8/0x150 [ 173.779855][ T6895] should_fail_ex+0x46b/0x600 [ 173.779871][ T6895] should_failslab+0xa8/0x100 [ 173.779884][ T6895] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 173.779895][ T6895] ? __alloc_skb+0x1d7/0x390 [ 173.779911][ T6895] ? __alloc_skb+0x193/0x390 [ 173.779925][ T6895] __alloc_skb+0x1d7/0x390 [ 173.779940][ T6895] netlink_sendmsg+0x5d4/0xb40 [ 173.779965][ T6895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.779981][ T6895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.779994][ T6895] ____sys_sendmsg+0xa4e/0xac0 [ 173.780004][ T6895] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.780020][ T6895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.780033][ T6895] ? ___sys_sendmsg+0x280/0x360 [ 173.780046][ T6895] ___sys_sendmsg+0x2a5/0x360 [ 173.780055][ T6895] ? __lock_acquire+0x6b5/0x2cf0 [ 173.780070][ T6895] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.780082][ T6895] ? __schedule+0x14f4/0x5210 [ 173.780108][ T6895] ? __fget_files+0x2a/0x420 [ 173.780121][ T6895] ? __fget_files+0x3a6/0x420 [ 173.780139][ T6895] __x64_sys_sendmsg+0x1c3/0x2a0 [ 173.780150][ T6895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.780172][ T6895] do_syscall_64+0x14d/0xf80 [ 173.780185][ T6895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.780196][ T6895] ? clear_bhb_loop+0x40/0x90 [ 173.780213][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.780228][ T6895] RIP: 0033:0x7f175738c629 [ 173.780242][ T6895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.780253][ T6895] RSP: 002b:00007f17555c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.780271][ T6895] RAX: ffffffffffffffda RBX: 00007f1757606090 RCX: 00007f175738c629 [ 173.780283][ T6895] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 173.780289][ T6895] RBP: 00007f17555c5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.780295][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.780301][ T6895] R13: 00007f1757606128 R14: 00007f1757606090 R15: 00007fff23692998 [ 173.780316][ T6895] [ 175.548109][ T6906] FAULT_INJECTION: forcing a failure. [ 175.548109][ T6906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.548141][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.4.319 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.548162][ T6906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.548172][ T6906] Call Trace: [ 175.548179][ T6906] [ 175.548187][ T6906] dump_stack_lvl+0xe8/0x150 [ 175.548215][ T6906] should_fail_ex+0x46b/0x600 [ 175.548241][ T6906] strncpy_from_user+0x36/0x2b0 [ 175.548265][ T6906] mptcp_setsockopt+0x1380/0x36f0 [ 175.548292][ T6906] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 175.548318][ T6906] ? __fget_files+0x2a/0x420 [ 175.548342][ T6906] ? sock_common_setsockopt+0x36/0xc0 [ 175.548364][ T6906] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 175.548386][ T6906] do_sock_setsockopt+0x17c/0x1b0 [ 175.548414][ T6906] __x64_sys_setsockopt+0x143/0x1b0 [ 175.548443][ T6906] do_syscall_64+0x14d/0xf80 [ 175.548465][ T6906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.548481][ T6906] ? trace_irq_disable+0x37/0x100 [ 175.548497][ T6906] ? clear_bhb_loop+0x40/0x90 [ 175.548518][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.548535][ T6906] RIP: 0033:0x7f3e49dfc629 [ 175.548551][ T6906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.548565][ T6906] RSP: 002b:00007f3e4804e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.548584][ T6906] RAX: ffffffffffffffda RBX: 00007f3e4a075fa0 RCX: 00007f3e49dfc629 [ 175.548597][ T6906] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 175.548608][ T6906] RBP: 00007f3e4804e090 R08: 0000000100000022 R09: 0000000000000000 [ 175.548620][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.548631][ T6906] R13: 00007f3e4a076038 R14: 00007f3e4a075fa0 R15: 00007ffe31bda008 [ 175.548659][ T6906] [ 175.654980][ T6910] overlayfs: failed to resolve './bus': -2 [ 177.129194][ T6910] netlink: 44 bytes leftover after parsing attributes in process `syz.4.336'. [ 179.013140][ T6931] FAULT_INJECTION: forcing a failure. [ 179.013140][ T6931] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.013171][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.013188][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.013197][ T6931] Call Trace: [ 179.013203][ T6931] [ 179.013210][ T6931] dump_stack_lvl+0xe8/0x150 [ 179.013234][ T6931] should_fail_ex+0x46b/0x600 [ 179.013257][ T6931] prepare_alloc_pages+0x22a/0x6b0 [ 179.013282][ T6931] __alloc_frozen_pages_noprof+0x12f/0x380 [ 179.013303][ T6931] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.013322][ T6931] ? __pfx_policy_nodemask+0x10/0x10 [ 179.013341][ T6931] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.013365][ T6931] alloc_pages_bulk_noprof+0x5f1/0x7d0 [ 179.013387][ T6931] ? alloc_pages_noprof+0xe3/0x1e0 [ 179.013405][ T6931] __kasan_populate_vmalloc+0xc1/0x1d0 [ 179.013428][ T6931] ? rt_spin_unlock+0x160/0x200 [ 179.013447][ T6931] alloc_vmap_area+0xdbc/0x14a0 [ 179.013479][ T6931] ? __pfx_alloc_vmap_area+0x10/0x10 [ 179.013493][ T6931] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 179.013520][ T6931] ? __get_vm_area_node+0x171/0x350 [ 179.013538][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.013552][ T6931] __get_vm_area_node+0x226/0x350 [ 179.013570][ T6931] __vmalloc_node_range_noprof+0x372/0x1730 [ 179.013585][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.013614][ T6931] ? kernel_text_address+0xa5/0xe0 [ 179.013630][ T6931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.013649][ T6931] ? __lock_acquire+0x6b5/0x2cf0 [ 179.013670][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.013682][ T6931] __vmalloc_noprof+0xd2/0x120 [ 179.013696][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.013711][ T6931] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.013728][ T6931] bpf_prog_alloc+0x3c/0x1a0 [ 179.013744][ T6931] bpf_prog_load+0x7ba/0x1ae0 [ 179.013770][ T6931] ? __pfx_bpf_prog_load+0x10/0x10 [ 179.013782][ T6931] ? __might_fault+0xaf/0x130 [ 179.013810][ T6931] ? bpf_lsm_bpf+0x9/0x20 [ 179.013826][ T6931] ? security_bpf+0x7e/0x2d0 [ 179.013842][ T6931] __sys_bpf+0x618/0x950 [ 179.013863][ T6931] ? __pfx___sys_bpf+0x10/0x10 [ 179.013880][ T6931] ? rt_mutex_slowunlock+0x1cb/0x300 [ 179.013908][ T6931] ? ksys_write+0x248/0x270 [ 179.013925][ T6931] ? __pfx_ksys_write+0x10/0x10 [ 179.013943][ T6931] __x64_sys_bpf+0x7c/0x90 [ 179.013962][ T6931] do_syscall_64+0x14d/0xf80 [ 179.013980][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.013994][ T6931] ? trace_irq_disable+0x37/0x100 [ 179.014006][ T6931] ? clear_bhb_loop+0x40/0x90 [ 179.014024][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.014038][ T6931] RIP: 0033:0x7f7ae23bc629 [ 179.014053][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.014066][ T6931] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.014082][ T6931] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 179.014093][ T6931] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 179.014103][ T6931] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 179.014112][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.014121][ T6931] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 179.014146][ T6931] [ 179.015242][ T6931] syz.2.340: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.019868][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.019889][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.019899][ T6931] Call Trace: [ 179.019906][ T6931] [ 179.019914][ T6931] dump_stack_lvl+0xe8/0x150 [ 179.019939][ T6931] warn_alloc+0x263/0x3e0 [ 179.019961][ T6931] ? kasan_quarantine_put+0xbb/0x1f0 [ 179.019988][ T6931] ? __pfx_warn_alloc+0x10/0x10 [ 179.020006][ T6931] ? __get_vm_area_node+0x23f/0x350 [ 179.020019][ T6931] ? __get_vm_area_node+0x171/0x350 [ 179.020034][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.020049][ T6931] ? __get_vm_area_node+0x23f/0x350 [ 179.020072][ T6931] __vmalloc_node_range_noprof+0x397/0x1730 [ 179.020112][ T6931] ? kernel_text_address+0xa5/0xe0 [ 179.020132][ T6931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.020155][ T6931] ? __lock_acquire+0x6b5/0x2cf0 [ 179.020181][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.020185][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.020196][ T6931] __vmalloc_noprof+0xd2/0x120 [ 179.020218][ T6931] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.020234][ T6931] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 179.020252][ T6931] bpf_prog_alloc+0x3c/0x1a0 [ 179.020269][ T6931] bpf_prog_load+0x7ba/0x1ae0 [ 179.020296][ T6931] ? __pfx_bpf_prog_load+0x10/0x10 [ 179.020308][ T6931] ? __might_fault+0xaf/0x130 [ 179.020337][ T6931] ? bpf_lsm_bpf+0x9/0x20 [ 179.020353][ T6931] ? security_bpf+0x7e/0x2d0 [ 179.020369][ T6931] __sys_bpf+0x618/0x950 [ 179.020388][ T6931] ? __pfx___sys_bpf+0x10/0x10 [ 179.020404][ T6931] ? rt_mutex_slowunlock+0x1cb/0x300 [ 179.020431][ T6931] ? ksys_write+0x248/0x270 [ 179.020445][ T6931] ? __pfx_ksys_write+0x10/0x10 [ 179.020463][ T6931] __x64_sys_bpf+0x7c/0x90 [ 179.020481][ T6931] do_syscall_64+0x14d/0xf80 [ 179.020498][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.020520][ T6931] ? trace_irq_disable+0x37/0x100 [ 179.020533][ T6931] ? clear_bhb_loop+0x40/0x90 [ 179.020550][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.020562][ T6931] RIP: 0033:0x7f7ae23bc629 [ 179.020576][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.020586][ T6931] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.020600][ T6931] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 179.020609][ T6931] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 179.020617][ T6931] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 179.020625][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.020633][ T6931] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 179.020655][ T6931] [ 179.024768][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.045069][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.046402][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.047146][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.094542][ T6931] Mem-Info: [ 179.094562][ T6931] active_anon:282 inactive_anon:44708 isolated_anon:0 [ 179.094562][ T6931] active_file:22905 inactive_file:39666 isolated_file:0 [ 179.094562][ T6931] unevictable:768 dirty:121 writeback:0 [ 179.094562][ T6931] slab_reclaimable:12153 slab_unreclaimable:99254 [ 179.094562][ T6931] mapped:30877 shmem:39272 pagetables:1251 [ 179.094562][ T6931] sec_pagetables:0 bounce:0 [ 179.094562][ T6931] kernel_misc_reclaimable:0 [ 179.094562][ T6931] free:1272258 free_pcp:7251 free_cma:0 [ 179.094611][ T6931] Node 0 active_anon:1128kB inactive_anon:178832kB active_file:91356kB inactive_file:158664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123452kB dirty:484kB writeback:0kB shmem:155552kB kernel_stack:12692kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.094654][ T6931] Node 1 active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.094693][ T6931] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.094747][ T6931] lowmem_reserve[]: 0 2507 2508 2508 2508 [ 179.094777][ T6931] Node 0 DMA32 free:1140348kB boost:0kB min:3936kB low:6476kB high:9016kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1128kB inactive_anon:178832kB active_file:91356kB inactive_file:158664kB unevictable:1536kB writepending:484kB zspages:0kB present:3129332kB managed:2567896kB mlocked:0kB bounce:0kB free_pcp:28996kB local_pcp:12916kB free_cma:0kB [ 179.094831][ T6931] lowmem_reserve[]: 0 0 0 0 0 [ 179.094860][ T6931] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:720kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 179.094911][ T6931] lowmem_reserve[]: 0 0 0 0 0 [ 179.094938][ T6931] Node 1 Normal free:3933324kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:264kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.094991][ T6931] lowmem_reserve[]: 0 0 0 0 0 [ 179.095023][ T6931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.095125][ T6931] Node 0 DMA32: 1411*4kB (UE) 1464*8kB (UME) 837*16kB (UE) 105*32kB (U) 81*64kB (UME) 26*128kB (UE) 16*256kB (UME) 10*512kB (UE) 5*1024kB (U) 17*2048kB (UM) 256*4096kB (M) = 1140348kB [ 179.095261][ T6931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 179.095346][ T6931] Node 1 Normal: 3*4kB (UE) 8*8kB (U) 12*16kB (UE) 6*32kB (U) 7*64kB (UME) 2*128kB (UM) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 958*4096kB (M) = 3933324kB [ 179.095482][ T6931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.095497][ T6931] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.095517][ T6931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.095531][ T6931] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.095545][ T6931] 101839 total pagecache pages [ 179.095555][ T6931] 0 pages in swap cache [ 179.095561][ T6931] Free swap = 124996kB [ 179.095568][ T6931] Total swap = 124996kB [ 179.095574][ T6931] 2097051 pages RAM [ 179.095580][ T6931] 0 pages HighMem/MovableOnly [ 179.095586][ T6931] 423282 pages reserved [ 179.095592][ T6931] 0 pages cma reserved [ 179.297901][ T1394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.572675][ T1394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.031023][ T1394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.120494][ T5809] Bluetooth: hci0: command tx timeout [ 181.322296][ T1394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.382404][ T6956] FAULT_INJECTION: forcing a failure. [ 181.382404][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.382436][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 181.382457][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.382468][ T6956] Call Trace: [ 181.382475][ T6956] [ 181.382483][ T6956] dump_stack_lvl+0xe8/0x150 [ 181.382511][ T6956] should_fail_ex+0x46b/0x600 [ 181.382547][ T6956] _copy_from_user+0x2d/0xb0 [ 181.382570][ T6956] __copy_msghdr+0x3c5/0x5b0 [ 181.382593][ T6956] ___sys_sendmsg+0x213/0x360 [ 181.382609][ T6956] ? __lock_acquire+0x6b5/0x2cf0 [ 181.382635][ T6956] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.382658][ T6956] ? kstrtouint+0x6e/0xe0 [ 181.382701][ T6956] ? __fget_files+0x2a/0x420 [ 181.382722][ T6956] ? __fget_files+0x3a6/0x420 [ 181.382752][ T6956] __sys_sendmmsg+0x282/0x4e0 [ 181.382776][ T6956] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.382802][ T6956] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 181.382834][ T6956] ? ksys_write+0x248/0x270 [ 181.382854][ T6956] ? __pfx_ksys_write+0x10/0x10 [ 181.382877][ T6956] __x64_sys_sendmmsg+0xa0/0xc0 [ 181.382897][ T6956] do_syscall_64+0x14d/0xf80 [ 181.382918][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.382935][ T6956] ? trace_irq_disable+0x37/0x100 [ 181.382951][ T6956] ? clear_bhb_loop+0x40/0x90 [ 181.382972][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.382989][ T6956] RIP: 0033:0x7f7ae23bc629 [ 181.383005][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.383020][ T6956] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.383039][ T6956] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 181.383052][ T6956] RDX: 0000000000000002 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 181.383063][ T6956] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 181.383075][ T6956] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 181.383086][ T6956] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 181.383116][ T6956] [ 183.593533][ T5809] Bluetooth: hci0: command tx timeout [ 183.601685][ T6971] FAULT_INJECTION: forcing a failure. [ 183.601685][ T6971] name failslab, interval 1, probability 0, space 0, times 0 [ 183.601716][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.601736][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.601746][ T6971] Call Trace: [ 183.601753][ T6971] [ 183.601761][ T6971] dump_stack_lvl+0xe8/0x150 [ 183.601795][ T6971] should_fail_ex+0x46b/0x600 [ 183.601821][ T6971] should_failslab+0xa8/0x100 [ 183.601842][ T6971] __kmalloc_noprof+0xdf/0x7b0 [ 183.601861][ T6971] ? tomoyo_encode+0x28b/0x550 [ 183.601885][ T6971] tomoyo_encode+0x28b/0x550 [ 183.601908][ T6971] tomoyo_realpath_from_path+0x58d/0x5d0 [ 183.601937][ T6971] ? tomoyo_path_number_perm+0x219/0x630 [ 183.601960][ T6971] tomoyo_path_number_perm+0x246/0x630 [ 183.601985][ T6971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 183.602007][ T6971] ? __lock_acquire+0x6b5/0x2cf0 [ 183.602032][ T6971] ? do_raw_spin_lock+0x12b/0x2f0 [ 183.602088][ T6971] ? __fget_files+0x2a/0x420 [ 183.602112][ T6971] ? __fget_files+0x2a/0x420 [ 183.602131][ T6971] ? __fget_files+0x3a6/0x420 [ 183.602151][ T6971] ? __fget_files+0x2a/0x420 [ 183.602175][ T6971] security_file_ioctl+0xc3/0x2a0 [ 183.602201][ T6971] __se_sys_ioctl+0x47/0x170 [ 183.602222][ T6971] do_syscall_64+0x14d/0xf80 [ 183.602243][ T6971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.602259][ T6971] ? trace_irq_disable+0x37/0x100 [ 183.602274][ T6971] ? clear_bhb_loop+0x40/0x90 [ 183.602294][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.602310][ T6971] RIP: 0033:0x7f3e49dfc629 [ 183.602326][ T6971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.602341][ T6971] RSP: 002b:00007f3e4804e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.602359][ T6971] RAX: ffffffffffffffda RBX: 00007f3e4a075fa0 RCX: 00007f3e49dfc629 [ 183.602372][ T6971] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 183.602384][ T6971] RBP: 00007f3e4804e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.602394][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.602405][ T6971] R13: 00007f3e4a076038 R14: 00007f3e4a075fa0 R15: 00007ffe31bda008 [ 183.602434][ T6971] [ 183.602451][ T6971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.642945][ T6971] loop5: detected capacity change from 0 to 7 [ 183.716330][ T6971] Dev loop5: unable to read RDB block 7 [ 183.716369][ T6971] loop5: AHDI p1 [ 183.716398][ T6971] loop5: partition table partially beyond EOD, truncated [ 184.341876][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 185.601236][ T5802] Bluetooth: hci0: command tx timeout [ 185.737675][ T6987] syzkaller0: entered promiscuous mode [ 185.737699][ T6987] syzkaller0: entered allmulticast mode [ 185.750150][ T1394] bridge_slave_1: left allmulticast mode [ 185.751382][ T1394] bridge_slave_1: left promiscuous mode [ 185.753584][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.987340][ T1394] bridge_slave_0: left allmulticast mode [ 185.987372][ T1394] bridge_slave_0: left promiscuous mode [ 185.987643][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.006523][ T7007] overlayfs: failed to resolve './bus': -2 [ 187.711659][ T5802] Bluetooth: hci0: command tx timeout [ 188.830996][ T1394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.893833][ T1394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.912724][ T1394] bond0 (unregistering): Released all slaves [ 188.950540][ T7007] netlink: 44 bytes leftover after parsing attributes in process `syz.1.366'. [ 189.008373][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 189.408938][ T7040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.497721][ T7050] FAULT_INJECTION: forcing a failure. [ 189.497721][ T7050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.497756][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.497784][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.497795][ T7050] Call Trace: [ 189.497803][ T7050] [ 189.497812][ T7050] dump_stack_lvl+0xe8/0x150 [ 189.497842][ T7050] should_fail_ex+0x46b/0x600 [ 189.497870][ T7050] _copy_to_user+0x31/0xb0 [ 189.497897][ T7050] inotify_read+0x351/0xc20 [ 189.497927][ T7050] ? __pfx_inotify_read+0x10/0x10 [ 189.497951][ T7050] ? __pfx_woken_wake_function+0x10/0x10 [ 189.497983][ T7050] ? rw_verify_area+0x2ac/0x4e0 [ 189.498009][ T7050] ? __pfx_inotify_read+0x10/0x10 [ 189.498031][ T7050] vfs_read+0x212/0xa70 [ 189.498058][ T7050] ? __pfx_vfs_read+0x10/0x10 [ 189.498078][ T7050] ? __fget_files+0x2a/0x420 [ 189.498105][ T7050] ? __fget_files+0x2a/0x420 [ 189.498126][ T7050] ? __fget_files+0x3a6/0x420 [ 189.498147][ T7050] ? __fget_files+0x2a/0x420 [ 189.498179][ T7050] ksys_read+0x156/0x270 [ 189.498200][ T7050] ? __pfx_ksys_read+0x10/0x10 [ 189.498231][ T7050] do_syscall_64+0x14d/0xf80 [ 189.498254][ T7050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.498272][ T7050] ? trace_irq_disable+0x37/0x100 [ 189.498290][ T7050] ? clear_bhb_loop+0x40/0x90 [ 189.498312][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.498330][ T7050] RIP: 0033:0x7f3e49dfc629 [ 189.498348][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.498364][ T7050] RSP: 002b:00007f3e4804e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.498384][ T7050] RAX: ffffffffffffffda RBX: 00007f3e4a075fa0 RCX: 00007f3e49dfc629 [ 189.498399][ T7050] RDX: 0000000000002020 RSI: 0000200000001fc0 RDI: 0000000000000003 [ 189.498411][ T7050] RBP: 00007f3e4804e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.498423][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.498435][ T7050] R13: 00007f3e4a076038 R14: 00007f3e4a075fa0 R15: 00007ffe31bda008 [ 189.498467][ T7050] [ 190.203833][ T7077] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 191.625492][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.625617][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.625848][ T6926] bridge_slave_0: entered allmulticast mode [ 191.628684][ T6926] bridge_slave_0: entered promiscuous mode [ 191.667318][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.667741][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.667971][ T6926] bridge_slave_1: entered allmulticast mode [ 191.693949][ T6926] bridge_slave_1: entered promiscuous mode [ 191.838308][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.854497][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.925559][ T6926] team0: Port device team_slave_0 added [ 192.067148][ T6926] team0: Port device team_slave_1 added [ 192.650860][ T1394] hsr_slave_0: left promiscuous mode [ 192.652762][ T7164] FAULT_INJECTION: forcing a failure. [ 192.652762][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 192.652908][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.0.406 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.652929][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.652939][ T7164] Call Trace: [ 192.652947][ T7164] [ 192.652954][ T7164] dump_stack_lvl+0xe8/0x150 [ 192.652983][ T7164] should_fail_ex+0x46b/0x600 [ 192.653008][ T7164] should_failslab+0xa8/0x100 [ 192.653029][ T7164] __kmalloc_noprof+0xdf/0x7b0 [ 192.653048][ T7164] ? sk_prot_alloc+0xe7/0x210 [ 192.653070][ T7164] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 192.653093][ T7164] sk_prot_alloc+0xe7/0x210 [ 192.653113][ T7164] ? sk_alloc+0x27/0x390 [ 192.653136][ T7164] sk_alloc+0x3a/0x390 [ 192.653162][ T7164] __netlink_create+0x65/0x260 [ 192.653182][ T7164] ? __pfx_genl_release+0x10/0x10 [ 192.653199][ T7164] netlink_create+0x3be/0x580 [ 192.653220][ T7164] ? __pfx_genl_unbind+0x10/0x10 [ 192.653234][ T7164] ? __pfx_genl_bind+0x10/0x10 [ 192.653252][ T7164] __sock_create+0x4b2/0x9d0 [ 192.653283][ T7164] __sys_socket+0xd6/0x1b0 [ 192.653307][ T7164] __x64_sys_socket+0x7a/0x90 [ 192.653337][ T7164] do_syscall_64+0x14d/0xf80 [ 192.653358][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.653374][ T7164] ? trace_irq_disable+0x37/0x100 [ 192.653390][ T7164] ? clear_bhb_loop+0x40/0x90 [ 192.653410][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.653427][ T7164] RIP: 0033:0x7f175738dec7 [ 192.653443][ T7164] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.653457][ T7164] RSP: 002b:00007f17555e4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 192.653476][ T7164] RAX: ffffffffffffffda RBX: 00007f1757605fa0 RCX: 00007f175738dec7 [ 192.653489][ T7164] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 192.653500][ T7164] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 192.653511][ T7164] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000001 [ 192.653522][ T7164] R13: 00007f1757606038 R14: 00007f1757605fa0 R15: 00007fff23692998 [ 192.653552][ T7164] [ 192.778082][ T1394] hsr_slave_1: left promiscuous mode [ 192.787241][ T1394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.789056][ T1394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.877256][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 192.886074][ T7168] FAULT_INJECTION: forcing a failure. [ 192.886074][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.886106][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.2.408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.886126][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.886136][ T7168] Call Trace: [ 192.886143][ T7168] [ 192.886154][ T7168] dump_stack_lvl+0xe8/0x150 [ 192.886182][ T7168] should_fail_ex+0x46b/0x600 [ 192.886207][ T7168] _copy_from_iter+0x1d3/0x1670 [ 192.886231][ T7168] ? rcu_is_watching+0x15/0xb0 [ 192.886261][ T7168] ? __pfx__copy_from_iter+0x10/0x10 [ 192.886281][ T7168] ? __build_skb_around+0x22d/0x3c0 [ 192.886307][ T7168] ? __alloc_skb+0x193/0x390 [ 192.886328][ T7168] ? netlink_sendmsg+0x650/0xb40 [ 192.886348][ T7168] ? skb_put+0x11b/0x210 [ 192.886373][ T7168] netlink_sendmsg+0x6c0/0xb40 [ 192.886402][ T7168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.886429][ T7168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.886451][ T7168] ____sys_sendmsg+0xa4e/0xac0 [ 192.886468][ T7168] ? __might_fault+0xaf/0x130 [ 192.886492][ T7168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.886518][ T7168] ? import_iovec+0x73/0xa0 [ 192.886542][ T7168] ___sys_sendmsg+0x2a5/0x360 [ 192.886557][ T7168] ? __lock_acquire+0x6b5/0x2cf0 [ 192.886583][ T7168] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.886604][ T7168] ? kstrtouint+0x6e/0xe0 [ 192.886646][ T7168] ? __fget_files+0x2a/0x420 [ 192.886666][ T7168] ? __fget_files+0x3a6/0x420 [ 192.886696][ T7168] __sys_sendmmsg+0x282/0x4e0 [ 192.886718][ T7168] ? __pfx___sys_sendmmsg+0x10/0x10 [ 192.886744][ T7168] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 192.886775][ T7168] ? ksys_write+0x248/0x270 [ 192.886794][ T7168] ? __pfx_ksys_write+0x10/0x10 [ 192.886816][ T7168] __x64_sys_sendmmsg+0xa0/0xc0 [ 192.886835][ T7168] do_syscall_64+0x14d/0xf80 [ 192.886855][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.886871][ T7168] ? trace_irq_disable+0x37/0x100 [ 192.886885][ T7168] ? clear_bhb_loop+0x40/0x90 [ 192.886909][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.886925][ T7168] RIP: 0033:0x7f7ae23bc629 [ 192.886941][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.886956][ T7168] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.886974][ T7168] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 192.886987][ T7168] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004 [ 192.886998][ T7168] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 192.887009][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.887019][ T7168] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 192.887047][ T7168] [ 192.889885][ T1394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.889910][ T1394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.957217][ T1394] veth1_macvtap: left promiscuous mode [ 193.957476][ T1394] veth0_macvtap: left promiscuous mode [ 193.957758][ T1394] veth1_vlan: left promiscuous mode [ 193.967357][ T1394] veth0_vlan: left promiscuous mode [ 194.973976][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.974019][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.691252][ T7210] FAULT_INJECTION: forcing a failure. [ 199.691252][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 199.691290][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz.2.421 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.691336][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.691360][ T7210] Call Trace: [ 199.691375][ T7210] [ 199.691383][ T7210] dump_stack_lvl+0xe8/0x150 [ 199.691412][ T7210] should_fail_ex+0x46b/0x600 [ 199.691447][ T7210] should_failslab+0xa8/0x100 [ 199.691469][ T7210] kmem_cache_alloc_noprof+0x87/0x680 [ 199.691488][ T7210] ? do_getname_kernel+0x54/0x230 [ 199.691513][ T7210] do_getname_kernel+0x54/0x230 [ 199.691531][ T7210] ? kern_path+0x1b/0x150 [ 199.691554][ T7210] kern_path+0x25/0x150 [ 199.691578][ T7210] bpf_uprobe_multi_link_attach+0x3ae/0x1020 [ 199.691611][ T7210] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 199.691627][ T7210] ? __fget_files+0x2a/0x420 [ 199.691652][ T7210] ? __fget_files+0x2a/0x420 [ 199.691672][ T7210] ? __fget_files+0x2a/0x420 [ 199.691695][ T7210] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 199.691719][ T7210] link_create+0x67c/0x850 [ 199.691741][ T7210] __sys_bpf+0x468/0x950 [ 199.691767][ T7210] ? __pfx___sys_bpf+0x10/0x10 [ 199.691792][ T7210] ? rt_mutex_slowunlock+0x1cb/0x300 [ 199.691826][ T7210] ? ksys_write+0x248/0x270 [ 199.691844][ T7210] ? __pfx_ksys_write+0x10/0x10 [ 199.691868][ T7210] __x64_sys_bpf+0x7c/0x90 [ 199.691891][ T7210] do_syscall_64+0x14d/0xf80 [ 199.691912][ T7210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.691928][ T7210] ? trace_irq_disable+0x37/0x100 [ 199.691943][ T7210] ? clear_bhb_loop+0x40/0x90 [ 199.691964][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.691981][ T7210] RIP: 0033:0x7f7ae23bc629 [ 199.691997][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.692011][ T7210] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.692031][ T7210] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 199.692044][ T7210] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 199.692055][ T7210] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 199.692066][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.692077][ T7210] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 199.692107][ T7210] [ 200.530859][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'. [ 201.775225][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 201.775259][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 201.775281][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 201.775300][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 207.400861][ T1394] team0 (unregistering): Port device team_slave_1 removed [ 207.590837][ T1394] team0 (unregistering): Port device team_slave_0 removed [ 209.511716][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.511731][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.511749][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.835177][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.835189][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.835202][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.858856][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.860087][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.490423][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.525725][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.555533][ T7269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.654093][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 212.657879][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 212.657912][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 212.661331][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.661359][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.661379][ T10] usb 1-1: Product: syz [ 212.661393][ T10] usb 1-1: Manufacturer: syz [ 212.661408][ T10] usb 1-1: SerialNumber: syz [ 212.944192][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 212.979539][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 213.127357][ T10] usb 1-1: USB disconnect, device number 9 [ 213.244741][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.404469][ T7328] FAULT_INJECTION: forcing a failure. [ 213.404469][ T7328] name failslab, interval 1, probability 0, space 0, times 0 [ 213.404492][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.2.469 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.404504][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 213.404511][ T7328] Call Trace: [ 213.404515][ T7328] [ 213.404519][ T7328] dump_stack_lvl+0xe8/0x150 [ 213.404539][ T7328] should_fail_ex+0x46b/0x600 [ 213.404555][ T7328] should_failslab+0xa8/0x100 [ 213.404569][ T7328] __kmalloc_noprof+0xdf/0x7b0 [ 213.404580][ T7328] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 213.404595][ T7328] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 213.404609][ T7328] genl_family_rcv_msg_doit+0xd9/0x330 [ 213.404619][ T7328] ? __asan_memcpy+0x40/0x70 [ 213.404637][ T7328] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 213.404648][ T7328] ? rcu_is_watching+0x15/0xb0 [ 213.404664][ T7328] ? cap_capable+0x123/0x440 [ 213.404679][ T7328] ? safesetid_security_capable+0xa9/0x1a0 [ 213.404696][ T7328] ? bpf_lsm_capable+0x9/0x20 [ 213.404710][ T7328] ? security_capable+0x7e/0x2c0 [ 213.404724][ T7328] genl_rcv_msg+0x61c/0x7a0 [ 213.404737][ T7328] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.404746][ T7328] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 213.404758][ T7328] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 213.404772][ T7328] ? __pfx_nl802154_post_doit+0x10/0x10 [ 213.404785][ T7328] ? __lock_acquire+0x6b5/0x2cf0 [ 213.404804][ T7328] netlink_rcv_skb+0x232/0x4b0 [ 213.404817][ T7328] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.404828][ T7328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.404848][ T7328] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.404860][ T7328] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.404875][ T7328] genl_rcv+0x28/0x40 [ 213.404883][ T7328] netlink_unicast+0x831/0x9f0 [ 213.404899][ T7328] ? __pfx_netlink_unicast+0x10/0x10 [ 213.404910][ T7328] ? __alloc_skb+0x193/0x390 [ 213.404926][ T7328] ? netlink_sendmsg+0x650/0xb40 [ 213.404943][ T7328] ? skb_put+0x11b/0x210 [ 213.404960][ T7328] netlink_sendmsg+0x813/0xb40 [ 213.404977][ T7328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.404994][ T7328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.405007][ T7328] ____sys_sendmsg+0xa4e/0xac0 [ 213.405018][ T7328] ? __might_fault+0xaf/0x130 [ 213.405033][ T7328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.405047][ T7328] ? import_iovec+0x73/0xa0 [ 213.405069][ T7328] ___sys_sendmsg+0x2a5/0x360 [ 213.405079][ T7328] ? __lock_acquire+0x6b5/0x2cf0 [ 213.405094][ T7328] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.405122][ T7328] ? __fget_files+0x2a/0x420 [ 213.405136][ T7328] ? __fget_files+0x3a6/0x420 [ 213.405155][ T7328] __x64_sys_sendmsg+0x1c3/0x2a0 [ 213.405166][ T7328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.405181][ T7328] ? __pfx_ksys_write+0x10/0x10 [ 213.405197][ T7328] do_syscall_64+0x14d/0xf80 [ 213.405211][ T7328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.405221][ T7328] ? trace_irq_disable+0x37/0x100 [ 213.405229][ T7328] ? clear_bhb_loop+0x40/0x90 [ 213.405242][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.405251][ T7328] RIP: 0033:0x7f7ae23bc629 [ 213.405261][ T7328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.405270][ T7328] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.405281][ T7328] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 213.405289][ T7328] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 213.405295][ T7328] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 213.405301][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.405307][ T7328] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 213.405326][ T7328] [ 215.396020][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.397236][ T7334] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.536733][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.552867][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.710802][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.004075][ T7365] 9p: Bad value for 'rfdno' [ 216.217252][ T6926] hsr_slave_0: entered promiscuous mode [ 216.218349][ T6926] hsr_slave_1: entered promiscuous mode [ 216.218995][ T6926] debugfs: 'hsr0' already exists in 'hsr' [ 216.219015][ T6926] Cannot create hsr debugfs directory [ 217.851914][ T7386] FAULT_INJECTION: forcing a failure. [ 217.851914][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 217.851948][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.2.492 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.851969][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.851980][ T7386] Call Trace: [ 217.851988][ T7386] [ 217.851996][ T7386] dump_stack_lvl+0xe8/0x150 [ 217.852024][ T7386] should_fail_ex+0x46b/0x600 [ 217.852050][ T7386] should_failslab+0xa8/0x100 [ 217.852070][ T7386] kmem_cache_alloc_noprof+0x87/0x680 [ 217.852089][ T7386] ? skb_clone+0x212/0x3a0 [ 217.852112][ T7386] skb_clone+0x212/0x3a0 [ 217.852134][ T7386] __netlink_deliver_tap+0x404/0x850 [ 217.852168][ T7386] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.852190][ T7386] netlink_deliver_tap+0x19c/0x1b0 [ 217.852213][ T7386] netlink_unicast+0x805/0x9f0 [ 217.852239][ T7386] ? __pfx_netlink_unicast+0x10/0x10 [ 217.852257][ T7386] ? __alloc_skb+0x193/0x390 [ 217.852279][ T7386] ? netlink_sendmsg+0x650/0xb40 [ 217.852296][ T7386] ? skb_put+0x11b/0x210 [ 217.852322][ T7386] netlink_sendmsg+0x813/0xb40 [ 217.852351][ T7386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.852379][ T7386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.852401][ T7386] ____sys_sendmsg+0xa4e/0xac0 [ 217.852419][ T7386] ? __might_fault+0xaf/0x130 [ 217.852444][ T7386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.852471][ T7386] ? import_iovec+0x73/0xa0 [ 217.852497][ T7386] ___sys_sendmsg+0x2a5/0x360 [ 217.852513][ T7386] ? __lock_acquire+0x6b5/0x2cf0 [ 217.852539][ T7386] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.852590][ T7386] ? __fget_files+0x2a/0x420 [ 217.852612][ T7386] ? __fget_files+0x3a6/0x420 [ 217.852643][ T7386] __x64_sys_sendmsg+0x1c3/0x2a0 [ 217.852664][ T7386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.852701][ T7386] ? __pfx_ksys_write+0x10/0x10 [ 217.852730][ T7386] do_syscall_64+0x14d/0xf80 [ 217.852752][ T7386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.852769][ T7386] ? trace_irq_disable+0x37/0x100 [ 217.852785][ T7386] ? clear_bhb_loop+0x40/0x90 [ 217.852807][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.852824][ T7386] RIP: 0033:0x7f7ae23bc629 [ 217.852846][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.852862][ T7386] RSP: 002b:00007f7ae0616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.852882][ T7386] RAX: ffffffffffffffda RBX: 00007f7ae2635fa0 RCX: 00007f7ae23bc629 [ 217.852896][ T7386] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 217.852907][ T7386] RBP: 00007f7ae0616090 R08: 0000000000000000 R09: 0000000000000000 [ 217.852919][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.852930][ T7386] R13: 00007f7ae2636038 R14: 00007f7ae2635fa0 R15: 00007fffb1a43518 [ 217.852960][ T7386] [ 218.816615][ T7397] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 218.962596][ T5861] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 219.112808][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.112864][ T5861] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.112887][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.124243][ T5861] usb 2-1: config 0 descriptor?? [ 219.132838][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 219.356844][ T5861] pwc: send_video_command error -71 [ 219.356865][ T5861] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 219.357207][ T5861] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 219.443762][ T7416] netlink: 80 bytes leftover after parsing attributes in process `syz.4.494'. [ 220.321462][ T5861] usb 2-1: USB disconnect, device number 11 [ 220.720351][ T5861] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 220.891215][ T5861] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.891271][ T5861] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 220.891293][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.941693][ T5861] usb 2-1: config 0 descriptor?? [ 220.947662][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 222.543391][ T5861] pwc: recv_control_msg error -71 req 02 val 2b00 [ 222.579798][ T5861] pwc: recv_control_msg error -71 req 02 val 2700 [ 222.587963][ T5861] pwc: recv_control_msg error -71 req 02 val 2c00 [ 222.589932][ T5861] pwc: recv_control_msg error -71 req 04 val 1000 [ 222.603292][ T5861] pwc: recv_control_msg error -71 req 04 val 1300 [ 222.603680][ T5861] pwc: recv_control_msg error -71 req 04 val 1400 [ 222.604129][ T5861] pwc: recv_control_msg error -71 req 02 val 2000 [ 222.604513][ T5861] pwc: recv_control_msg error -71 req 02 val 2100 [ 222.604989][ T5861] pwc: recv_control_msg error -71 req 04 val 1500 [ 222.605480][ T5861] pwc: recv_control_msg error -71 req 02 val 2500 [ 222.605936][ T5861] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.606420][ T5861] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.607001][ T5861] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.607465][ T5861] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.608121][ T5861] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.608600][ T5861] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.704127][ T5861] pwc: Registered as video103. [ 222.716019][ T5861] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 222.750623][ T5861] usb 2-1: USB disconnect, device number 12 [ 223.474687][ T7478] netlink: 'syz.1.513': attribute type 21 has an invalid length. [ 223.474711][ T7478] netlink: 128 bytes leftover after parsing attributes in process `syz.1.513'. [ 223.602814][ T7478] netlink: 'syz.1.513': attribute type 5 has an invalid length. [ 223.602850][ T7478] netlink: 'syz.1.513': attribute type 6 has an invalid length. [ 223.602879][ T7478] netlink: 3 bytes leftover after parsing attributes in process `syz.1.513'. [ 224.372403][ T6926] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.397444][ T6926] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.496548][ T6926] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.554092][ T6926] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.760493][ T1800] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 224.910368][ T1800] usb 5-1: Using ep0 maxpacket: 32 [ 224.914617][ T1800] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.914660][ T1800] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 224.914681][ T1800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.969259][ T1800] usb 5-1: config 0 descriptor?? [ 225.619163][ T7500] tmpfs: Unknown parameter 'usrquotaast' [ 225.836246][ T1800] usbhid 5-1:0.0: can't add hid device: -71 [ 225.836365][ T1800] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.854034][ T1800] usb 5-1: USB disconnect, device number 11 [ 226.864182][ T1799] 1024-page vmalloc region starting at 0xffffc9000e72b000 allocated at kcov_ioctl+0x58/0x640 [ 226.864209][ T1799] list_del corruption. next->prev should be ffffc9001b333000, but was 0000000000000000. (next=ffffc9000e72b000) [ 226.864481][ T1799] ------------[ cut here ]------------ [ 226.864486][ T1799] kernel BUG at lib/list_debug.c:67! [ 226.864515][ T1799] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 226.864528][ T1799] CPU: 1 UID: 0 PID: 1799 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.864539][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.864547][ T1799] Workqueue: usb_hub_wq hub_event [ 226.864564][ T1799] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 226.864577][ T1799] Code: 2c d2 68 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d 9b 89 fd 49 8b 56 08 48 c7 c7 c0 1a 86 8b 48 89 de 4c 89 f1 e8 97 c8 88 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 226.864586][ T1799] RSP: 0018:ffffc90005bef7b8 EFLAGS: 00010246 [ 226.864594][ T1799] RAX: 000000000000006d RBX: ffffc9001b333000 RCX: 9cceec85859db100 [ 226.864601][ T1799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.864607][ T1799] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 226.864614][ T1799] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92001ce5601 [ 226.864620][ T1799] R13: dffffc0000000000 R14: ffffc9000e72b000 R15: ffffc9000e72b008 [ 226.864628][ T1799] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 226.864636][ T1799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.864642][ T1799] CR2: 0000200000028000 CR3: 000000003e6fc000 CR4: 00000000003526f0 [ 226.864652][ T1799] Call Trace: [ 226.864656][ T1799] [ 226.864662][ T1799] kcov_remote_start+0x2af/0x710 [ 226.864679][ T1799] hub_event+0x150/0x4f60 [ 226.864691][ T1799] ? __lock_acquire+0x6b5/0x2cf0 [ 226.864707][ T1799] ? __lock_acquire+0x6b5/0x2cf0 [ 226.864719][ T1799] ? look_up_lock_class+0x57/0x110 [ 226.864733][ T1799] ? __lock_acquire+0x6b5/0x2cf0 [ 226.864749][ T1799] ? do_raw_spin_unlock+0xf5/0x210 [ 226.864761][ T1799] ? lock_acquire+0x106/0x330 [ 226.864774][ T1799] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.864785][ T1799] ? __pfx_hub_event+0x10/0x10 [ 226.864798][ T1799] ? process_scheduled_works+0xa0f/0x17a0 [ 226.864811][ T1799] ? process_scheduled_works+0xa0f/0x17a0 [ 226.864821][ T1799] ? process_scheduled_works+0xa0f/0x17a0 [ 226.864832][ T1799] process_scheduled_works+0xaec/0x17a0 [ 226.864848][ T1799] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.864860][ T1799] ? assign_work+0x3d5/0x5e0 [ 226.864871][ T1799] worker_thread+0xa50/0xfc0 [ 226.864892][ T1799] kthread+0x388/0x470 [ 226.864907][ T1799] ? __pfx_worker_thread+0x10/0x10 [ 226.864917][ T1799] ? __pfx_kthread+0x10/0x10 [ 226.864930][ T1799] ret_from_fork+0x51e/0xb90 [ 226.864943][ T1799] ? __pfx_ret_from_fork+0x10/0x10 [ 226.864954][ T1799] ? __switch_to+0xc7d/0x1400 [ 226.864965][ T1799] ? __pfx_kthread+0x10/0x10 [ 226.864979][ T1799] ret_from_fork_asm+0x1a/0x30 [ 226.865004][ T1799] [ 226.865008][ T1799] Modules linked in: [ 226.865019][ T1799] ---[ end trace 0000000000000000 ]--- [ 226.865024][ T1799] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 226.865036][ T1799] Code: 2c d2 68 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d 9b 89 fd 49 8b 56 08 48 c7 c7 c0 1a 86 8b 48 89 de 4c 89 f1 e8 97 c8 88 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 226.865044][ T1799] RSP: 0018:ffffc90005bef7b8 EFLAGS: 00010246 [ 226.865052][ T1799] RAX: 000000000000006d RBX: ffffc9001b333000 RCX: 9cceec85859db100 [ 226.865059][ T1799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.865065][ T1799] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 226.865071][ T1799] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92001ce5601 [ 226.865078][ T1799] R13: dffffc0000000000 R14: ffffc9000e72b000 R15: ffffc9000e72b008 [ 226.865084][ T1799] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 226.865092][ T1799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.865099][ T1799] CR2: 0000200000028000 CR3: 000000003e6fc000 CR4: 00000000003526f0 [ 226.865109][ T1799] Kernel panic - not syncing: Fatal exception [ 226.865449][ T1799] Kernel Offset: disabled