last executing test programs: 10m51.838998563s ago: executing program 0 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x70, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffff801}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) (async) pwrite64(r0, &(0x7f0000000280)="ff0c99ff9f3a452de5e499224a14a11afb6517ce37bb18eeddf63c4e26e61d5e609967e3104bfd0d0d180f50582d276978b2988aad0622dcdb46f9e1d02fefc3d6f7a32415cfd8c0f629a8c87a0da319967ae16ecddef123691c9332d12de37fb3c167abacda1f", 0x67, 0x100000001) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_ublk_setup_io_uring(0x7903, &(0x7f0000000480)={0x0, 0x5e2c, 0x200, 0x0, 0x30b}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) munmap$IORING_OFF_SQES(r4, 0x1) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000005c0)={0x1, 0xab18, 0x80000000}) r5 = socket$inet6(0xa, 0x800, 0x5) bind$inet6(r5, &(0x7f0000000600)={0xa, 0x4e22, 0xee5, @private1, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) read$ptp(r6, &(0x7f0000000680)=""/84, 0x54) (async) mlockall(0x2) sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x4000080) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r5, 0x9d56c000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1b4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe0}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f282ac2}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x18}, 0xd312e79c27e7550b) (async) syz_open_dev$sndmidi(&(0x7f0000000ac0), 0xe3a, 0x2200) (async) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000b00)=0x90000) (async) r9 = ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x2) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r9) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, 0x3, 0x3, 0x501, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5b6}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x80000000}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x826}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8018}, 0x100) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000d40)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000e40)=0xe8) mount$afs(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x214040, &(0x7f0000000e80)={[{@flock_write}, {@flock_openafs}, {}, {@flock_strict}, {@flock_write}], [{@permit_directio}, {@uid_gt={'uid>', r11}}, {@fowner_lt={'fowner<', 0xee00}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'syz2\x00'}}, {@measure}]}) setsockopt$inet_udp_int(r6, 0x11, 0x65, &(0x7f0000000f40), 0x4) 10m51.198953893s ago: executing program 0 (id=1190): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000002000000e00000be3e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000035ca00000000001a00"/146], 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r7, @ANYBLOB="05", @ANYRES16=r7, @ANYRES64=r7], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r8}, 0xc) 10m48.637111313s ago: executing program 0 (id=1199): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 3) 10m48.128936964s ago: executing program 0 (id=1203): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, &(0x7f0000000280), &(0x7f0000000100)='syzkaller\x00', 0x4, 0x9, &(0x7f00000000c0)=""/9, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109022400010000000009040000022ec25d000905ff01"], 0x0) syz_usb_connect$midi(0x2, 0x8c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x534d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x1, 0x1, 0x5, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x81, 0x2}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0xfc, 0x7, [{0xc, 0x9}, {0xc0, 0x3}, {0x9, 0x4}, {0x2, 0xe}, {0x0, 0xb}, {0xc8, 0x19}, {0x2}], 0x21}, @midi_out_jack={0x7, 0x24, 0x3, 0x2, 0x2, 0x0, [], 0x1}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc, 0x8}, @ms_header={0x7, 0x24, 0x1, 0xa, 0x7}], [{{0x9, 0x5, 0xa, 0x1, 0x40, 0x6, 0x6, 0x5, {0x4}}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x1, 0x0, 0x9, {0x9, 0x25, 0x1, 0x5, "8f48d2a684"}}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x4, 0x5, 0xc0, {0xa, 0x25, 0x1, 0x6, "36eb5acbcb23"}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x9d, 0x3, 0x5, 0x40, 0x80}, 0x44, &(0x7f00000002c0)={0x5, 0xf, 0x44, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1e, "416492e5ea76dc353edf6687f2a59793"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3, 0x0, 0x9, [0xff3fc0, 0xff00c0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x8, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0x40, 0x41}]}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3009}}, {0x3b, &(0x7f00000003c0)=@string={0x3b, 0x3, "37dffed0e76102b295ee7220550fc9a3244dde7244fd9268a6b96e69194fcf8729a08b588fc6ba355f4e631f593abece4e0381798049421c07"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x430}}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) write$smackfs_labels_list(0xffffffffffffffff, 0x0, 0x10) 10m45.657139551s ago: executing program 0 (id=1213): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="00000000e7efffff0000000000f0ffffffff", @ANYRES32, @ANYBLOB='\x00\x00']) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000740)={0x4d, 0x7, &(0x7f0000000340)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) socket(0x10, 0x3, 0x0) ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) utimensat(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)={[0x4]}, 0x8) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x5, 0x7, 0x8, 0xc}}) 10m44.517180412s ago: executing program 0 (id=1216): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) landlock_restrict_self(r1, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (fail_nth: 3) 10m29.434261081s ago: executing program 32 (id=1216): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) landlock_restrict_self(r1, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (fail_nth: 3) 25.864958651s ago: executing program 4 (id=3851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x1c, r1, 0x101, 0x70bd26, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (fail_nth: 4) 8.091765194s ago: executing program 2 (id=3906): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) 7.774650506s ago: executing program 5 (id=3907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) io_setup(0x74, &(0x7f0000000200)=0x0) r4 = eventfd(0x6) rename(0x0, &(0x7f0000000180)='./file0/file0\x00') mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000002c0)=""/232, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff9d}, 0x78) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xc2, r4, &(0x7f0000000180)='\x00', 0x1, 0x36}]) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x1, 0x7, 0xfffffffc, 0x20000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x1, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b1a, &(0x7f0000000040)) 7.697832646s ago: executing program 2 (id=3908): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r1 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='mode\x00', &(0x7f0000000100)='0', 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000140)={0x1000000, 0x0, {0x1, 0x1000, 0x1010, 0x8, 0x7, 0x2, 0x2, 0x6}}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x9, 0x4, 0x7fffffff, 0x84e1, 0x6f8c, 0x2006, 0x9, 0x8, 0x80ffa, 0x4, 0x0, 0x84fe, 0x1003, 0x1000008, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x200, 0x7, 0x5, 0x5, 0x8, 0x3fd, 0x8, 0x10000, 0x4, 0x7ffd]}) syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 6.548688903s ago: executing program 1 (id=3909): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp, 0x2200}, 0x20) fcntl$setpipe(r0, 0x407, 0x9602) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x4000) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0) 6.466803596s ago: executing program 5 (id=3910): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x45080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030) 6.465289145s ago: executing program 3 (id=3911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYBLOB=',roo', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d878000000092095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c529a11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3beb018000000000000007bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d80000000000000007e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad15f0aa6fcf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d043e26fca3a64eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57229121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8400000000009, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0x6000, 0x7ff, 0x0, 0x0, 0x80, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x121003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637"], 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/120, 0x78, 0x2101, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8014}, 0xc7) r7 = dup2(r0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000004080102000000000000000002000005060002408808000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x4080) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) 5.978873363s ago: executing program 5 (id=3912): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000fbdb5f250a280000ff040003002c000008001e000100000014000500fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x300fff2) r2 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r3 = dup(r2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000001680)=""/220, 0xdc}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9}}, './file1\x00'}) chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0xa00, 0x0, 0x0}, 0x58) quotactl_fd$Q_SETQUOTA(r4, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) 5.858895829s ago: executing program 2 (id=3913): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x142, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r3) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 5.796647759s ago: executing program 4 (id=3855): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x100000) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000200)={r3, 0x4, &(0x7f0000000040)=[0x4, 0xfff8, 0x7f, 0x3], &(0x7f0000000080)=[0x94, 0xd11, 0x7, 0x8, 0x8000, 0x6, 0x1, 0x606], &(0x7f0000000100)=[0x4, 0x2, 0x9]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r1}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, 0x0, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xcc17f, 0x0) 4.900550502s ago: executing program 1 (id=3914): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0xe7ff, 0x34343452, 0x500, 0x2d0, 0x5, @stepwise={{0x800001, 0x4000103}, {0x4, 0x4c7}, {0x5}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000005000000fd09000085e3fc5ab0993069b4c93acab2c0dcda7ccab7f7aabaaf1cfe3e8a19280f1777eb0b3e4089c0fc556fa9d85c5d2e911f", @ANYRES8=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000002c0)={0x0, 0x2d4, 0x0, 0x1, '\x00', '\x00', '\x00', 0x6, 0x8, 0x768, 0x52, "4ee763cdafe4101b23c5311c62559862"}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000b, 0xc3072, r6, 0xffffe000) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0x7, 'syz0\x00', 0x2}, 0x1, [0x8, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x0, 0x1, 0x2, 0x2, 0x10001, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x7f, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x800000, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0x43, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x7, 0x8, 0x88, 0x2, 0x6, 0x4, 0xfffffffd, 0x0, 0x8, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0xfff, 0x4, 0xf, 0xaeb, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x9, 0x1000000205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x0, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x3, 0x0, 0x8, 0x4, 0x101, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x6, 0xfffffffffeffffff, 0x7]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) listen(r8, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r9, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='lp', 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 4.898413815s ago: executing program 5 (id=3915): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x3, 0x5}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x28, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x52, 0x0, 0x1}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 4.825881514s ago: executing program 4 (id=3916): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8101000000", @ANYRES32=r0], 0x10) 4.729266259s ago: executing program 2 (id=3917): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) 3.595853407s ago: executing program 4 (id=3918): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f00000001c0)=0x1001, 0x4) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x70, 0x0, &(0x7f0000000740)=[@acquire={0x40046305, 0x2}, @increfs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000680)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/179, 0xb3, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/109, 0x6d, 0x2, 0x1d}}, &(0x7f0000000700)={0x0, 0x18, 0x40}}}, @acquire_done], 0x6e, 0x0, &(0x7f00000007c0)="23b9dff604c673462c6c2669c99a28a32dd584be6f6677395e3eab951c00d37101e26a0cd8e19e19dc9e739c828b1d9e1f6935c2c7beb5dabff08c94a13777d9df93c813f60ef97313a50993f96302da30e81c3b7800d21534c0cb55231d9efeab67317a511f411f406604238222"}) write$cgroup_devices(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83"], 0xffdd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x30, 0xffffffffffffffff, 0xa292d000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.593626377s ago: executing program 5 (id=3919): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) unshare(0x22020400) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x6, 0x200000006, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000001c0)={{r1}, 0x1, &(0x7f0000000040)=[0x9], 0x40, 0x7}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) listen(r6, 0x8000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="200b01000000f1"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.526030266s ago: executing program 2 (id=3920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r3 = socket$unix(0x1, 0x1, 0x0) sendto(r3, &(0x7f0000001e40)="38a7429e87ac", 0x6, 0x48881, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x6, 0x2, 0x0, 0xffffffff}, 0x10}}, 0x4000840) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64=r4], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="00000c000000070001", @ANYBLOB="5f53541e83"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, [{0x4, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x18, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="3cf40000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250100000018000180140002006772657461703000000000000000000010000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x800) 3.45222516s ago: executing program 1 (id=3921): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x20) 3.123592507s ago: executing program 1 (id=3922): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x45080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44030) 2.880703035s ago: executing program 3 (id=3923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2.724283932s ago: executing program 1 (id=3924): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, 0x0) recvfrom(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40010000, &(0x7f0000001280)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) 2.243040158s ago: executing program 3 (id=3925): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) r0 = epoll_create(0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x160000014}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x2f, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x9}, 0x48) 2.003847765s ago: executing program 3 (id=3926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) r6 = socket$packet(0x11, 0x3, 0x300) r7 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) sync_file_range(r7, 0x7, 0x9093, 0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x19) 1.133510914s ago: executing program 4 (id=3927): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x142, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0xfffffffe, 0x100, 0x2, 0x1d7}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1.133228801s ago: executing program 1 (id=3928): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fadvise64(r2, 0x0, 0x8, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x5, 0xfe, {0x7, 0x25, 0x1, 0xc, 0x8, 0x48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa, 0x2, 0x5, {0x7, 0x25, 0x1, 0x4, 0x3, 0xfffe}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7, 0x7, 0x800, 0x94a, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0xb4, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r5}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES8=r6], 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000180)=ANY=[@ANYBLOB="68000000020000"]) 623.784965ms ago: executing program 3 (id=3929): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="81010000000400", @ANYRES32=r0], 0x10) 585.394275ms ago: executing program 2 (id=3930): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x3, 0x5}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x28, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x52, 0x0, 0x1}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 191.915756ms ago: executing program 3 (id=3931): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000f80)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) 142.086214ms ago: executing program 4 (id=3932): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001000000000000000"], 0x50) r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500012f8b74ae53050571ff050000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) recvmsg(r1, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x142) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000028c0), &(0x7f0000000380)=0x60) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000004c0), 0x10) socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x208a00, 0x5f) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 0s ago: executing program 5 (id=3933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYBLOB=',roo', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8400000000009, 0x6, 0x6, 0x7ff, {0x5, 0x8010001, 0x7, 0x40c, 0x6, 0x20000000, 0xed1, 0x2, 0x5, 0x6000, 0x7ff, 0x0, 0x0, 0x80, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x121003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/120, 0x78, 0x2101, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000100)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8014}, 0xc7) r7 = dup2(r0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000004080102000000000000000002000005060002408808000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x4080) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) kernel console output (not intermixed with test programs): 93.893508][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060bc4000: rx timeout, send abort [ 893.898034][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060bc4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 893.900772][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060c42400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 895.172172][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f5fc400: rx timeout, send abort [ 895.172422][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f5fc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 895.172645][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f5ff800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 895.220278][T14745] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3039'. [ 895.489751][T14754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3042'. [ 895.671178][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 896.323065][ T5619] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 896.492127][ T5619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.492191][ T5619] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 896.492231][ T5619] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 255 [ 896.492252][ T5619] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.522512][ T5619] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 896.522541][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.522560][ T5619] usb 4-1: Product: syz [ 896.522574][ T5619] usb 4-1: Manufacturer: syz [ 896.522586][ T5619] usb 4-1: SerialNumber: syz [ 896.531837][T14782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3055'. [ 896.724545][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3058'. [ 897.012821][ T5619] cdc_ncm 4-1:1.0: bind() failure [ 897.016249][ T5619] usbtest 4-1:1.0: Linux gadget zero [ 897.016267][ T5619] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt) [ 897.020251][ T5619] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 897.020293][ T5619] cdc_ncm 4-1:1.1: bind() failure [ 897.058328][ T5619] usbtest 4-1:1.1: couldn't get endpoints, -22 [ 897.058414][ T5619] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 897.079792][ T5619] usb 4-1: USB disconnect, device number 90 [ 897.352456][ T822] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 897.532482][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 897.535285][ T822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.535310][ T822] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 897.535332][ T822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 897.538238][ T822] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 897.538263][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.538281][ T822] usb 3-1: Product: syz [ 897.538295][ T822] usb 3-1: Manufacturer: syz [ 897.538308][ T822] usb 3-1: SerialNumber: syz [ 897.546856][ T822] usb 3-1: config 0 descriptor?? [ 898.344764][ T822] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 898.454220][ T5619] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 898.602914][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 898.605053][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 898.605088][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 898.605124][ T5619] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 898.605145][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.609867][ T5619] usb 4-1: config 0 descriptor?? [ 898.808190][T14816] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 898.839613][T14816] syz_tun: entered promiscuous mode [ 898.906289][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3072'. [ 898.907977][T14821] FAULT_INJECTION: forcing a failure. [ 898.907977][T14821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.908002][T14821] CPU: 1 UID: 0 PID: 14821 Comm: syz.4.3070 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 898.908018][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 898.908029][T14821] Call Trace: [ 898.908036][T14821] [ 898.908042][T14821] dump_stack_lvl+0xe8/0x150 [ 898.908065][T14821] should_fail_ex+0x46b/0x600 [ 898.908090][T14821] _copy_to_user+0x31/0xb0 [ 898.908106][T14821] simple_read_from_buffer+0xe1/0x170 [ 898.908131][T14821] proc_fail_nth_read+0x1be/0x230 [ 898.908149][T14821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 898.908166][T14821] ? rw_verify_area+0x2ac/0x4e0 [ 898.908180][T14821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 898.908195][T14821] vfs_read+0x212/0xa80 [ 898.908216][T14821] ? __pfx_vfs_read+0x10/0x10 [ 898.908233][T14821] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 898.908263][T14821] ? lockdep_hardirqs_on+0x7a/0x110 [ 898.908281][T14821] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 898.908299][T14821] ? mutex_lock_nested+0x152/0x1d0 [ 898.908312][T14821] ? fdget_pos+0x252/0x320 [ 898.908330][T14821] ksys_read+0x156/0x270 [ 898.908346][T14821] ? __pfx_ksys_read+0x10/0x10 [ 898.908365][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.908379][T14821] do_syscall_64+0x174/0x580 [ 898.908396][T14821] ? trace_irq_disable+0x3b/0x140 [ 898.908411][T14821] ? clear_bhb_loop+0x40/0x90 [ 898.908427][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.908440][T14821] RIP: 0033:0x7fd68adfd68e [ 898.908453][T14821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 898.908465][T14821] RSP: 002b:00007fd68908dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 898.908480][T14821] RAX: ffffffffffffffda RBX: 00007fd68908e6c0 RCX: 00007fd68adfd68e [ 898.908489][T14821] RDX: 000000000000000f RSI: 00007fd68908e0a0 RDI: 0000000000000005 [ 898.908497][T14821] RBP: 00007fd68908e090 R08: 0000000000000000 R09: 0000000000000000 [ 898.908505][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.908512][T14821] R13: 00007fd68b0b6038 R14: 00007fd68b0b5fa0 R15: 00007ffec8fa8758 [ 898.908534][T14821] [ 899.416270][ T822] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 899.416719][ T822] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -110 [ 899.607000][ T5745] usb 4-1: USB disconnect, device number 91 [ 900.535956][ T5619] usb 3-1: USB disconnect, device number 71 [ 902.202275][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'. [ 902.590938][T14869] FAULT_INJECTION: forcing a failure. [ 902.590938][T14869] name failslab, interval 1, probability 0, space 0, times 0 [ 902.590965][T14869] CPU: 1 UID: 0 PID: 14869 Comm: syz.3.3090 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 902.590987][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 902.591003][T14869] Call Trace: [ 902.591008][T14869] [ 902.591017][T14869] dump_stack_lvl+0xe8/0x150 [ 902.591034][T14869] should_fail_ex+0x46b/0x600 [ 902.591053][T14869] should_failslab+0xa8/0x100 [ 902.591069][T14869] __kmalloc_noprof+0xdf/0x7b0 [ 902.591084][T14869] ? sk_prot_alloc+0xe7/0x210 [ 902.591101][T14869] sk_prot_alloc+0xe7/0x210 [ 902.591113][T14869] ? sk_alloc+0x27/0x390 [ 902.591127][T14869] sk_alloc+0x3a/0x390 [ 902.591142][T14869] bpf_prog_test_run_skb+0x415/0x2260 [ 902.591156][T14869] ? bpf_prog_test_run_skb+0x261/0x2260 [ 902.591178][T14869] ? __fget_files+0x3a6/0x420 [ 902.591188][T14869] ? __fget_files+0x2a/0x420 [ 902.591200][T14869] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 902.591213][T14869] bpf_prog_test_run+0x2cd/0x340 [ 902.591228][T14869] __sys_bpf+0x643/0x950 [ 902.591240][T14869] ? __pfx___sys_bpf+0x10/0x10 [ 902.591250][T14869] ? rt_mutex_slowunlock+0x1cb/0x300 [ 902.591271][T14869] ? ksys_write+0x248/0x270 [ 902.591284][T14869] ? __pfx_ksys_write+0x10/0x10 [ 902.591298][T14869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.591309][T14869] __x64_sys_bpf+0x7c/0x90 [ 902.591319][T14869] do_syscall_64+0x174/0x580 [ 902.591334][T14869] ? trace_irq_disable+0x3b/0x140 [ 902.591345][T14869] ? clear_bhb_loop+0x40/0x90 [ 902.591357][T14869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.591367][T14869] RIP: 0033:0x7f46771cce59 [ 902.591378][T14869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.591387][T14869] RSP: 002b:00007f467541e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 902.591399][T14869] RAX: ffffffffffffffda RBX: 00007f4677445fa0 RCX: 00007f46771cce59 [ 902.591407][T14869] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 902.591415][T14869] RBP: 00007f467541e090 R08: 0000000000000000 R09: 0000000000000000 [ 902.591421][T14869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.591428][T14869] R13: 00007f4677446038 R14: 00007f4677445fa0 R15: 00007fff3a84f108 [ 902.591443][T14869] [ 902.959248][T14875] netlink: 'syz.5.3093': attribute type 83 has an invalid length. [ 903.009525][T14877] netlink: 'syz.2.3094': attribute type 9 has an invalid length. [ 904.269577][ T822] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 904.416079][T14892] Illegal XDP return value 4291471584 on prog (id 209) dev syz_tun, expect packet loss! [ 904.425546][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 904.426661][ T822] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.426681][ T822] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 904.426737][ T822] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 904.426759][ T822] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 904.429118][ T822] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 904.429143][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.429161][ T822] usb 4-1: Product: syz [ 904.429174][ T822] usb 4-1: Manufacturer: syz [ 904.429186][ T822] usb 4-1: SerialNumber: syz [ 905.041951][T14903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.128796][ T822] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 905.267888][ T822] usb 4-1: USB disconnect, device number 92 [ 906.370401][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 907.900865][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.356135][ T5619] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 908.506073][ T5619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 908.509860][ T5619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.510249][ T5619] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 908.510597][ T5619] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 908.510623][ T5619] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 908.583350][ T5619] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 908.583369][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.583378][ T5619] usb 4-1: Product: syz [ 908.583386][ T5619] usb 4-1: Manufacturer: syz [ 908.583392][ T5619] usb 4-1: SerialNumber: syz [ 910.889455][ T5619] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 911.096103][ T5619] usb 4-1: USB disconnect, device number 93 [ 911.115854][T14979] FAULT_INJECTION: forcing a failure. [ 911.115854][T14979] name failslab, interval 1, probability 0, space 0, times 0 [ 911.115886][T14979] CPU: 1 UID: 0 PID: 14979 Comm: syz.1.3134 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 911.115908][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 911.115919][T14979] Call Trace: [ 911.115926][T14979] [ 911.115935][T14979] dump_stack_lvl+0xe8/0x150 [ 911.115961][T14979] should_fail_ex+0x46b/0x600 [ 911.115991][T14979] should_failslab+0xa8/0x100 [ 911.116016][T14979] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 911.116036][T14979] ? __alloc_skb+0x1d0/0x7d0 [ 911.116065][T14979] __alloc_skb+0x1d0/0x7d0 [ 911.116101][T14979] tcp_stream_alloc_skb+0x3f/0x5c0 [ 911.116197][T14979] ? __asan_memset+0x22/0x50 [ 911.116216][T14979] tcp_connect+0x15a9/0x53a0 [ 911.116301][T14979] ? __pfx_tcp_connect+0x10/0x10 [ 911.116326][T14979] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 911.116349][T14979] ? lockdep_hardirqs_on+0x7a/0x110 [ 911.116374][T14979] ? ktime_get_with_offset+0x93/0x2d0 [ 911.116393][T14979] ? seqcount_lockdep_reader_access+0xea/0x100 [ 911.116417][T14979] ? __asan_memset+0x22/0x50 [ 911.116436][T14979] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 911.116494][T14979] ? inet6_hash_connect+0xeb/0x170 [ 911.116618][T14979] tcp_v6_connect+0x1295/0x1b10 [ 911.116703][T14979] ? tomoyo_check_inet_address+0x289/0x950 [ 911.116735][T14979] ? __pfx_tcp_v6_connect+0x10/0x10 [ 911.116769][T14979] __inet_stream_connect+0x25a/0xdd0 [ 911.116804][T14979] ? __pfx___inet_stream_connect+0x10/0x10 [ 911.116826][T14979] ? __local_bh_enable+0x1e1/0x2f0 [ 911.116850][T14979] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 911.116867][T14979] ? lockdep_hardirqs_on+0x7a/0x110 [ 911.116897][T14979] inet_stream_connect+0x66/0xa0 [ 911.116924][T14979] __sys_connect+0x315/0x450 [ 911.116950][T14979] ? __pfx___sys_connect+0x10/0x10 [ 911.116985][T14979] ? __pfx_ksys_write+0x10/0x10 [ 911.117011][T14979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.117032][T14979] __x64_sys_connect+0x7a/0x90 [ 911.117056][T14979] do_syscall_64+0x174/0x580 [ 911.117088][T14979] ? trace_irq_disable+0x3b/0x140 [ 911.117108][T14979] ? clear_bhb_loop+0x40/0x90 [ 911.117134][T14979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.117151][T14979] RIP: 0033:0x7f38df4dce59 [ 911.117167][T14979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.117188][T14979] RSP: 002b:00007f38dd72e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 911.117206][T14979] RAX: ffffffffffffffda RBX: 00007f38df755fa0 RCX: 00007f38df4dce59 [ 911.117219][T14979] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000007 [ 911.117231][T14979] RBP: 00007f38dd72e090 R08: 0000000000000000 R09: 0000000000000000 [ 911.117240][T14979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.117250][T14979] R13: 00007f38df756038 R14: 00007f38df755fa0 R15: 00007ffcae694f58 [ 911.117280][T14979] [ 911.514701][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3136'. [ 911.711676][ T5861] udevd[5861]: setting mode of /dev/bus/usb/004/093 to 020664 failed: No such file or directory [ 911.711834][ T5861] udevd[5861]: setting owner of /dev/bus/usb/004/093 to uid=0, gid=0 failed: No such file or directory [ 911.829060][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.972559][ T5619] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 912.125903][ T5619] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 320 [ 912.128496][ T5619] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 912.128521][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.128540][ T5619] usb 4-1: Product: syz [ 912.128559][ T5619] usb 4-1: Manufacturer: syz [ 912.128574][ T5619] usb 4-1: SerialNumber: syz [ 912.281635][T14981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 913.162737][ T5619] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 913.162794][ T5619] usb 4-1: MIDIStreaming interface descriptor not found [ 913.280775][ T5619] usb 4-1: USB disconnect, device number 94 [ 913.646883][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.018087][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 918.502258][T15075] FAULT_INJECTION: forcing a failure. [ 918.502258][T15075] name failslab, interval 1, probability 0, space 0, times 0 [ 918.502279][T15075] CPU: 0 UID: 0 PID: 15075 Comm: syz.2.3173 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 918.502291][T15075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 918.502298][T15075] Call Trace: [ 918.502302][T15075] [ 918.502307][T15075] dump_stack_lvl+0xe8/0x150 [ 918.502326][T15075] should_fail_ex+0x46b/0x600 [ 918.502357][T15075] should_failslab+0xa8/0x100 [ 918.502381][T15075] __kmalloc_noprof+0xdf/0x7b0 [ 918.502402][T15075] ? do_sys_poll+0x30a/0xf50 [ 918.502422][T15075] do_sys_poll+0x30a/0xf50 [ 918.502442][T15075] ? __lock_acquire+0x6b5/0x2cf0 [ 918.502457][T15075] ? __pfx_do_sys_poll+0x10/0x10 [ 918.502472][T15075] ? is_bpf_text_address+0x292/0x2b0 [ 918.502486][T15075] ? is_bpf_text_address+0x26/0x2b0 [ 918.502544][T15075] ? set_user_sigmask+0xcd/0x1c0 [ 918.502555][T15075] ? __pfx_set_user_sigmask+0x10/0x10 [ 918.502565][T15075] ? kmem_cache_free+0x187/0x6c0 [ 918.502576][T15075] ? do_sys_openat2+0x14c/0x200 [ 918.502595][T15075] __se_sys_ppoll+0x209/0x2b0 [ 918.502611][T15075] ? __pfx___se_sys_ppoll+0x10/0x10 [ 918.502624][T15075] ? __pfx_ksys_write+0x10/0x10 [ 918.502641][T15075] ? __x64_sys_ppoll+0x20/0xc0 [ 918.502654][T15075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.502665][T15075] do_syscall_64+0x174/0x580 [ 918.502682][T15075] ? trace_irq_disable+0x3b/0x140 [ 918.502694][T15075] ? clear_bhb_loop+0x40/0x90 [ 918.502706][T15075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.502716][T15075] RIP: 0033:0x7f051e9bce59 [ 918.502727][T15075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.502735][T15075] RSP: 002b:00007f051cc16028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 918.502747][T15075] RAX: ffffffffffffffda RBX: 00007f051ec35fa0 RCX: 00007f051e9bce59 [ 918.502754][T15075] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 918.502761][T15075] RBP: 00007f051cc16090 R08: 0000000000000000 R09: 0000000000000000 [ 918.502767][T15075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.502773][T15075] R13: 00007f051ec36038 R14: 00007f051ec35fa0 R15: 00007fff50dc4f78 [ 918.502788][T15075] [ 920.631384][T15097] FAULT_INJECTION: forcing a failure. [ 920.631384][T15097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.631415][T15097] CPU: 0 UID: 0 PID: 15097 Comm: syz.2.3182 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 920.631440][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 920.631452][T15097] Call Trace: [ 920.631459][T15097] [ 920.631468][T15097] dump_stack_lvl+0xe8/0x150 [ 920.631494][T15097] should_fail_ex+0x46b/0x600 [ 920.631524][T15097] _copy_from_user+0x2d/0xb0 [ 920.631544][T15097] ___sys_recvmsg+0x175/0x590 [ 920.631570][T15097] ? get_pid_task+0x20/0x1f0 [ 920.631591][T15097] ? get_pid_task+0x20/0x1f0 [ 920.631616][T15097] ? __pfx____sys_recvmsg+0x10/0x10 [ 920.631646][T15097] ? __fget_files+0x2a/0x420 [ 920.631680][T15097] ? __fget_files+0x3a6/0x420 [ 920.631707][T15097] __x64_sys_recvmsg+0x1c0/0x2a0 [ 920.631728][T15097] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 920.631754][T15097] ? __pfx_ksys_write+0x10/0x10 [ 920.631783][T15097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.631803][T15097] do_syscall_64+0x174/0x580 [ 920.631828][T15097] ? trace_irq_disable+0x3b/0x140 [ 920.631854][T15097] ? clear_bhb_loop+0x40/0x90 [ 920.631876][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.631895][T15097] RIP: 0033:0x7f051e9bce59 [ 920.631912][T15097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.631927][T15097] RSP: 002b:00007f051cc16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 920.631947][T15097] RAX: ffffffffffffffda RBX: 00007f051ec35fa0 RCX: 00007f051e9bce59 [ 920.631961][T15097] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 920.631973][T15097] RBP: 00007f051cc16090 R08: 0000000000000000 R09: 0000000000000000 [ 920.631985][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.631997][T15097] R13: 00007f051ec36038 R14: 00007f051ec35fa0 R15: 00007fff50dc4f78 [ 920.632026][T15097] [ 920.904319][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 920.904556][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 920.904786][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 920.905019][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 920.905243][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 920.905453][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 920.910077][T15100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3184'. [ 925.007005][T15161] program syz.2.3203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 927.286814][T15187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3211'. [ 927.286830][T15187] openvswitch: netlink: Flow actions attr not present in new flow. [ 929.043217][T15211] FAULT_INJECTION: forcing a failure. [ 929.043217][T15211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.043273][T15211] CPU: 1 UID: 0 PID: 15211 Comm: syz.4.3221 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 929.043295][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 929.043306][T15211] Call Trace: [ 929.043315][T15211] [ 929.043324][T15211] dump_stack_lvl+0xe8/0x150 [ 929.043352][T15211] should_fail_ex+0x46b/0x600 [ 929.043383][T15211] _copy_to_user+0x31/0xb0 [ 929.043403][T15211] simple_read_from_buffer+0xe1/0x170 [ 929.043436][T15211] proc_fail_nth_read+0x1be/0x230 [ 929.043459][T15211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 929.043482][T15211] ? rw_verify_area+0x2ac/0x4e0 [ 929.043502][T15211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 929.043523][T15211] vfs_read+0x212/0xa80 [ 929.043552][T15211] ? __pfx_vfs_read+0x10/0x10 [ 929.043575][T15211] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 929.043603][T15211] ? lockdep_hardirqs_on+0x7a/0x110 [ 929.043628][T15211] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 929.043653][T15211] ? mutex_lock_nested+0x152/0x1d0 [ 929.043672][T15211] ? fdget_pos+0x252/0x320 [ 929.043699][T15211] ksys_read+0x156/0x270 [ 929.043723][T15211] ? __pfx_ksys_read+0x10/0x10 [ 929.043751][T15211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.043772][T15211] do_syscall_64+0x174/0x580 [ 929.043798][T15211] ? clear_bhb_loop+0x40/0x90 [ 929.043820][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.043839][T15211] RIP: 0033:0x7fd68adfd68e [ 929.043857][T15211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 929.043872][T15211] RSP: 002b:00007fd68904bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 929.043892][T15211] RAX: ffffffffffffffda RBX: 00007fd68904c6c0 RCX: 00007fd68adfd68e [ 929.043906][T15211] RDX: 000000000000000f RSI: 00007fd68904c0a0 RDI: 0000000000000005 [ 929.043917][T15211] RBP: 00007fd68904c090 R08: 0000000000000000 R09: 0000000000000000 [ 929.043929][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.043941][T15211] R13: 00007fd68b0b6218 R14: 00007fd68b0b6180 R15: 00007ffec8fa8758 [ 929.043971][T15211] [ 931.427369][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.537478][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 934.111407][T15289] FAULT_INJECTION: forcing a failure. [ 934.111407][T15289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.111440][T15289] CPU: 1 UID: 0 PID: 15289 Comm: syz.1.3248 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 934.111462][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 934.111473][T15289] Call Trace: [ 934.111481][T15289] [ 934.111490][T15289] dump_stack_lvl+0xe8/0x150 [ 934.111517][T15289] should_fail_ex+0x46b/0x600 [ 934.111548][T15289] _copy_to_user+0x31/0xb0 [ 934.111569][T15289] simple_read_from_buffer+0xe1/0x170 [ 934.111601][T15289] proc_fail_nth_read+0x1be/0x230 [ 934.111624][T15289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.111646][T15289] ? rw_verify_area+0x2ac/0x4e0 [ 934.111665][T15289] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 934.111691][T15289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.111711][T15289] vfs_read+0x212/0xa80 [ 934.111740][T15289] ? __pfx_vfs_read+0x10/0x10 [ 934.111762][T15289] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 934.111787][T15289] ? lockdep_hardirqs_on+0x7a/0x110 [ 934.111813][T15289] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 934.111838][T15289] ? mutex_lock_nested+0x152/0x1d0 [ 934.111858][T15289] ? fdget_pos+0x252/0x320 [ 934.111884][T15289] ksys_read+0x156/0x270 [ 934.111914][T15289] ? __pfx_ksys_read+0x10/0x10 [ 934.111944][T15289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.111964][T15289] do_syscall_64+0x174/0x580 [ 934.111988][T15289] ? trace_irq_disable+0x3b/0x140 [ 934.112009][T15289] ? clear_bhb_loop+0x40/0x90 [ 934.112031][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.112049][T15289] RIP: 0033:0x7f38df49d68e [ 934.112067][T15289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 934.112082][T15289] RSP: 002b:00007f38dd6ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.112102][T15289] RAX: ffffffffffffffda RBX: 00007f38dd6ec6c0 RCX: 00007f38df49d68e [ 934.112115][T15289] RDX: 000000000000000f RSI: 00007f38dd6ec0a0 RDI: 0000000000000004 [ 934.112127][T15289] RBP: 00007f38dd6ec090 R08: 0000000000000000 R09: 0000000000000000 [ 934.112139][T15289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.112150][T15289] R13: 00007f38df756218 R14: 00007f38df756180 R15: 00007ffcae694f58 [ 934.112181][T15289] [ 935.215746][ T5715] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 935.455858][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 935.456929][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.456949][ T5715] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 935.457318][ T5715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 935.457338][ T5715] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 935.459431][ T5715] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 935.459454][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.459473][ T5715] usb 4-1: Product: syz [ 935.459486][ T5715] usb 4-1: Manufacturer: syz [ 935.459497][ T5715] usb 4-1: SerialNumber: syz [ 936.600503][ T5715] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 936.803025][ T5715] usb 4-1: USB disconnect, device number 95 [ 937.221446][ T8699] udevd[8699]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.721234][T15326] FAULT_INJECTION: forcing a failure. [ 937.721234][T15326] name failslab, interval 1, probability 0, space 0, times 0 [ 937.721288][T15326] CPU: 1 UID: 0 PID: 15326 Comm: syz.1.3264 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 937.721310][T15326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 937.721321][T15326] Call Trace: [ 937.721329][T15326] [ 937.721338][T15326] dump_stack_lvl+0xe8/0x150 [ 937.721366][T15326] should_fail_ex+0x46b/0x600 [ 937.721397][T15326] should_failslab+0xa8/0x100 [ 937.721422][T15326] __kvmalloc_node_noprof+0x170/0x8e0 [ 937.721446][T15326] ? seq_read_iter+0x203/0xe20 [ 937.721469][T15326] ? mutex_lock_nested+0x152/0x1d0 [ 937.721490][T15326] ? seq_read_iter+0xb8/0xe20 [ 937.721516][T15326] seq_read_iter+0x203/0xe20 [ 937.721538][T15326] ? security_file_permission+0x61/0x260 [ 937.721597][T15326] vfs_read+0x58b/0xa80 [ 937.721628][T15326] ? __pfx_vfs_read+0x10/0x10 [ 937.721651][T15326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 937.721677][T15326] ? lockdep_hardirqs_on+0x7a/0x110 [ 937.721704][T15326] ? mutex_lock_nested+0x152/0x1d0 [ 937.721724][T15326] ? fdget_pos+0x252/0x320 [ 937.721750][T15326] ksys_read+0x156/0x270 [ 937.721774][T15326] ? __pfx_ksys_read+0x10/0x10 [ 937.721792][T15326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.721820][T15326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.721840][T15326] do_syscall_64+0x174/0x580 [ 937.721866][T15326] ? clear_bhb_loop+0x40/0x90 [ 937.721889][T15326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.721908][T15326] RIP: 0033:0x7f38df4dce59 [ 937.721926][T15326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.721942][T15326] RSP: 002b:00007f38dd6ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 937.721962][T15326] RAX: ffffffffffffffda RBX: 00007f38df756180 RCX: 00007f38df4dce59 [ 937.721976][T15326] RDX: 0000000000002020 RSI: 0000200000003480 RDI: 0000000000000006 [ 937.721988][T15326] RBP: 00007f38dd6ec090 R08: 0000000000000000 R09: 0000000000000000 [ 937.722001][T15326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.722012][T15326] R13: 00007f38df756218 R14: 00007f38df756180 R15: 00007ffcae694f58 [ 937.722044][T15326] [ 939.371264][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 941.734948][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 941.734969][T15385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 942.826352][ T161] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.826768][ T1524] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.826819][ T1524] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.826850][ T1524] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.856035][T15380] gfs2: error -5 reading superblock [ 945.877332][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3305'. [ 947.198956][T15450] FAULT_INJECTION: forcing a failure. [ 947.198956][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 947.198989][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz.3.3311 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 947.199010][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.199021][T15450] Call Trace: [ 947.199029][T15450] [ 947.199037][T15450] dump_stack_lvl+0xe8/0x150 [ 947.199064][T15450] should_fail_ex+0x46b/0x600 [ 947.199094][T15450] should_failslab+0xa8/0x100 [ 947.199119][T15450] __kmalloc_noprof+0xdf/0x7b0 [ 947.199138][T15450] ? kfree+0x4d/0x6c0 [ 947.199155][T15450] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 947.199181][T15450] tomoyo_realpath_from_path+0xe3/0x5d0 [ 947.199203][T15450] ? tomoyo_domain+0xd7/0x130 [ 947.199245][T15450] ? tomoyo_path_number_perm+0x219/0x630 [ 947.199271][T15450] tomoyo_path_number_perm+0x246/0x630 [ 947.199299][T15450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 947.199323][T15450] ? __lock_acquire+0x6b5/0x2cf0 [ 947.199349][T15450] ? do_raw_spin_lock+0x12b/0x2f0 [ 947.199401][T15450] ? __fget_files+0x2a/0x420 [ 947.199421][T15450] ? __fget_files+0x2a/0x420 [ 947.199438][T15450] ? __fget_files+0x3a6/0x420 [ 947.199454][T15450] ? __fget_files+0x2a/0x420 [ 947.199476][T15450] security_file_ioctl+0xc3/0x2a0 [ 947.199504][T15450] __se_sys_ioctl+0x47/0x170 [ 947.199526][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.199546][T15450] do_syscall_64+0x174/0x580 [ 947.199570][T15450] ? trace_irq_disable+0x3b/0x140 [ 947.199591][T15450] ? clear_bhb_loop+0x40/0x90 [ 947.199613][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.199631][T15450] RIP: 0033:0x7f46771cce59 [ 947.199648][T15450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.199664][T15450] RSP: 002b:00007f467541e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.199684][T15450] RAX: ffffffffffffffda RBX: 00007f4677445fa0 RCX: 00007f46771cce59 [ 947.199698][T15450] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000004 [ 947.199709][T15450] RBP: 00007f467541e090 R08: 0000000000000000 R09: 0000000000000000 [ 947.199721][T15450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.199732][T15450] R13: 00007f4677446038 R14: 00007f4677445fa0 R15: 00007fff3a84f108 [ 947.199769][T15450] [ 947.199788][T15450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 953.456138][T15524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3333'. [ 954.367985][T15525] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 954.368024][T15525] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 954.368055][T15525] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 954.967524][T15547] 8021q: VLANs not supported on ipvlan0 [ 954.983485][T15547] FAULT_INJECTION: forcing a failure. [ 954.983485][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 954.983537][T15547] CPU: 1 UID: 0 PID: 15547 Comm: syz.4.3342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 954.983559][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.983571][T15547] Call Trace: [ 954.983579][T15547] [ 954.983588][T15547] dump_stack_lvl+0xe8/0x150 [ 954.983615][T15547] should_fail_ex+0x46b/0x600 [ 954.983646][T15547] should_failslab+0xa8/0x100 [ 954.983676][T15547] __kvmalloc_node_noprof+0x170/0x8e0 [ 954.983698][T15547] ? seq_read_iter+0x203/0xe20 [ 954.983719][T15547] ? mutex_lock_nested+0x152/0x1d0 [ 954.983741][T15547] ? seq_read_iter+0xb8/0xe20 [ 954.983767][T15547] seq_read_iter+0x203/0xe20 [ 954.983809][T15547] vfs_read+0x58b/0xa80 [ 954.983838][T15547] ? __pfx_vfs_read+0x10/0x10 [ 954.983869][T15547] ? mutex_lock_nested+0x152/0x1d0 [ 954.983888][T15547] ? fdget_pos+0x252/0x320 [ 954.983915][T15547] ksys_read+0x156/0x270 [ 954.983939][T15547] ? __pfx_ksys_read+0x10/0x10 [ 954.983968][T15547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.983988][T15547] do_syscall_64+0x174/0x580 [ 954.984015][T15547] ? clear_bhb_loop+0x40/0x90 [ 954.984038][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.984056][T15547] RIP: 0033:0x7fd68ae3ce59 [ 954.984074][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.984090][T15547] RSP: 002b:00007fd68904c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 954.984110][T15547] RAX: ffffffffffffffda RBX: 00007fd68b0b6180 RCX: 00007fd68ae3ce59 [ 954.984124][T15547] RDX: 0000000000002020 RSI: 0000200000003480 RDI: 0000000000000008 [ 954.984136][T15547] RBP: 00007fd68904c090 R08: 0000000000000000 R09: 0000000000000000 [ 954.984148][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.984160][T15547] R13: 00007fd68b0b6218 R14: 00007fd68b0b6180 R15: 00007ffec8fa8758 [ 954.984203][T15547] [ 956.062229][T15563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3352'. [ 959.806663][T15612] FAULT_INJECTION: forcing a failure. [ 959.806663][T15612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.806693][T15612] CPU: 1 UID: 0 PID: 15612 Comm: syz.4.3367 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 959.806714][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 959.806726][T15612] Call Trace: [ 959.806733][T15612] [ 959.806745][T15612] dump_stack_lvl+0xe8/0x150 [ 959.806771][T15612] should_fail_ex+0x46b/0x600 [ 959.806802][T15612] _copy_to_user+0x31/0xb0 [ 959.806822][T15612] simple_read_from_buffer+0xe1/0x170 [ 959.806853][T15612] proc_fail_nth_read+0x1be/0x230 [ 959.806875][T15612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.806896][T15612] ? rw_verify_area+0x2ac/0x4e0 [ 959.806916][T15612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 959.806936][T15612] vfs_read+0x212/0xa80 [ 959.806971][T15612] ? __pfx_vfs_read+0x10/0x10 [ 959.806993][T15612] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 959.807019][T15612] ? lockdep_hardirqs_on+0x7a/0x110 [ 959.807042][T15612] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 959.807066][T15612] ? mutex_lock_nested+0x152/0x1d0 [ 959.807085][T15612] ? fdget_pos+0x252/0x320 [ 959.807110][T15612] ksys_read+0x156/0x270 [ 959.807130][T15612] ? __pfx_ksys_read+0x10/0x10 [ 959.807156][T15612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.807174][T15612] do_syscall_64+0x174/0x580 [ 959.807198][T15612] ? trace_irq_disable+0x3b/0x140 [ 959.807219][T15612] ? clear_bhb_loop+0x40/0x90 [ 959.807240][T15612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.807258][T15612] RIP: 0033:0x7fd68adfd68e [ 959.807275][T15612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 959.807288][T15612] RSP: 002b:00007fd68908dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 959.807308][T15612] RAX: ffffffffffffffda RBX: 00007fd68908e6c0 RCX: 00007fd68adfd68e [ 959.807321][T15612] RDX: 000000000000000f RSI: 00007fd68908e0a0 RDI: 0000000000000006 [ 959.807333][T15612] RBP: 00007fd68908e090 R08: 0000000000000000 R09: 0000000000000000 [ 959.807345][T15612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.807356][T15612] R13: 00007fd68b0b6038 R14: 00007fd68b0b5fa0 R15: 00007ffec8fa8758 [ 959.807387][T15612] [ 960.057134][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3369'. [ 962.292517][T14280] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 962.442541][T14280] usb 3-1: Using ep0 maxpacket: 16 [ 962.447378][T14280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 962.451049][T14280] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 962.451074][T14280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.451093][T14280] usb 3-1: Product: syz [ 962.451106][T14280] usb 3-1: Manufacturer: syz [ 962.451119][T14280] usb 3-1: SerialNumber: syz [ 962.761530][T15652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.763874][T15652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.110755][T14280] usb 3-1: USB disconnect, device number 72 [ 963.172187][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.183687][ T5745] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 963.385318][ T5745] usb 4-1: Using ep0 maxpacket: 16 [ 963.387485][ T5745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 963.387520][ T5745] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 963.387541][ T5745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.395096][ T5745] usb 4-1: config 0 descriptor?? [ 963.856291][ T5745] steelseries 0003:1038:12B6.0013: item fetching failed at offset 5/40 [ 963.885425][ T5745] steelseries 0003:1038:12B6.0013: probe with driver steelseries failed with error -22 [ 964.042233][T15672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.042974][T15672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.698026][T14280] usb 4-1: USB disconnect, device number 96 [ 966.323584][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 967.382877][T15327] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 967.436327][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3424'. [ 967.543054][T15327] usb 3-1: Using ep0 maxpacket: 16 [ 967.547603][T15327] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 967.547627][T15327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.547644][T15327] usb 3-1: Product: syz [ 967.547656][T15327] usb 3-1: Manufacturer: syz [ 967.547667][T15327] usb 3-1: SerialNumber: syz [ 967.567774][T15327] r8152-cfgselector 3-1: Unknown version 0x0000 [ 967.567796][T15327] r8152-cfgselector 3-1: config 0 descriptor?? [ 967.842263][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3427'. [ 968.431392][T15754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.432017][T15754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.461022][T14280] r8152-cfgselector 3-1: USB disconnect, device number 73 [ 969.410224][T15782] FAULT_INJECTION: forcing a failure. [ 969.410224][T15782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.410277][T15782] CPU: 0 UID: 0 PID: 15782 Comm: syz.1.3430 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 969.410300][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 969.410311][T15782] Call Trace: [ 969.410320][T15782] [ 969.410328][T15782] dump_stack_lvl+0xe8/0x150 [ 969.410349][T15782] should_fail_ex+0x46b/0x600 [ 969.410373][T15782] _copy_from_user+0x2d/0xb0 [ 969.410384][T15782] ___sys_sendmsg+0x1c6/0x360 [ 969.410399][T15782] ? __lock_acquire+0x6b5/0x2cf0 [ 969.410415][T15782] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.410431][T15782] ? __schedule+0x1702/0x5620 [ 969.410458][T15782] ? __fget_files+0x2a/0x420 [ 969.410468][T15782] ? __fget_files+0x3a6/0x420 [ 969.410482][T15782] __x64_sys_sendmsg+0x1c3/0x2a0 [ 969.410497][T15782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.410516][T15782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.410531][T15782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.410541][T15782] do_syscall_64+0x174/0x580 [ 969.410556][T15782] ? clear_bhb_loop+0x40/0x90 [ 969.410568][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.410578][T15782] RIP: 0033:0x7f38df4dce59 [ 969.410588][T15782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.410596][T15782] RSP: 002b:00007f38dd6ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.410608][T15782] RAX: ffffffffffffffda RBX: 00007f38df756180 RCX: 00007f38df4dce59 [ 969.410615][T15782] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 969.410622][T15782] RBP: 00007f38dd6ec090 R08: 0000000000000000 R09: 0000000000000000 [ 969.410628][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.410633][T15782] R13: 00007f38df756218 R14: 00007f38df756180 R15: 00007ffcae694f58 [ 969.410648][T15782] [ 969.532914][T15782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 972.418332][T15801] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3439'. [ 972.735220][T15809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3441'. [ 973.767033][T15823] binder: 15817:15823 ioctl c0306201 200000000340 returned -14 [ 976.045168][T15852] FAULT_INJECTION: forcing a failure. [ 976.045168][T15852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.045199][T15852] CPU: 0 UID: 0 PID: 15852 Comm: syz.3.3461 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 976.045220][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 976.045231][T15852] Call Trace: [ 976.045239][T15852] [ 976.045249][T15852] dump_stack_lvl+0xe8/0x150 [ 976.045274][T15852] should_fail_ex+0x46b/0x600 [ 976.045302][T15852] _copy_to_user+0x31/0xb0 [ 976.045323][T15852] simple_read_from_buffer+0xe1/0x170 [ 976.045353][T15852] proc_fail_nth_read+0x1be/0x230 [ 976.045375][T15852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 976.045397][T15852] ? rw_verify_area+0x2ac/0x4e0 [ 976.045416][T15852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 976.045435][T15852] vfs_read+0x212/0xa80 [ 976.045464][T15852] ? __pfx_vfs_read+0x10/0x10 [ 976.045487][T15852] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 976.045522][T15852] ? lockdep_hardirqs_on+0x7a/0x110 [ 976.045547][T15852] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 976.045575][T15852] ? mutex_lock_nested+0x152/0x1d0 [ 976.045595][T15852] ? fdget_pos+0x252/0x320 [ 976.045621][T15852] ksys_read+0x156/0x270 [ 976.045644][T15852] ? __pfx_ksys_read+0x10/0x10 [ 976.045664][T15852] ? __pfx_v4l2_ioctl+0x10/0x10 [ 976.045798][T15852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.045818][T15852] do_syscall_64+0x174/0x580 [ 976.045842][T15852] ? trace_irq_disable+0x3b/0x140 [ 976.045862][T15852] ? clear_bhb_loop+0x40/0x90 [ 976.045885][T15852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.045903][T15852] RIP: 0033:0x7f467718d68e [ 976.045920][T15852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 976.045936][T15852] RSP: 002b:00007f467541dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 976.045956][T15852] RAX: ffffffffffffffda RBX: 00007f467541e6c0 RCX: 00007f467718d68e [ 976.045970][T15852] RDX: 000000000000000f RSI: 00007f467541e0a0 RDI: 0000000000000004 [ 976.045982][T15852] RBP: 00007f467541e090 R08: 0000000000000000 R09: 0000000000000000 [ 976.045992][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.046003][T15852] R13: 00007f4677446038 R14: 00007f4677445fa0 R15: 00007fff3a84f108 [ 976.046033][T15852] [ 976.372255][T15861] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3463'. [ 976.482468][T15865] 9pnet_fd: Insufficient options for proto=fd [ 978.250562][T15888] sctp: [Deprecated]: syz.4.3474 (pid 15888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 978.250562][T15888] Use struct sctp_sack_info instead [ 980.253744][T15939] FAULT_INJECTION: forcing a failure. [ 980.253744][T15939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.253799][T15939] CPU: 1 UID: 0 PID: 15939 Comm: syz.1.3491 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 980.253821][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 980.253832][T15939] Call Trace: [ 980.253841][T15939] [ 980.253849][T15939] dump_stack_lvl+0xe8/0x150 [ 980.253877][T15939] should_fail_ex+0x46b/0x600 [ 980.253908][T15939] _copy_to_user+0x31/0xb0 [ 980.253928][T15939] simple_read_from_buffer+0xe1/0x170 [ 980.253961][T15939] proc_fail_nth_read+0x1be/0x230 [ 980.253984][T15939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.254007][T15939] ? rw_verify_area+0x2ac/0x4e0 [ 980.254027][T15939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 980.254047][T15939] vfs_read+0x212/0xa80 [ 980.254077][T15939] ? __pfx_vfs_read+0x10/0x10 [ 980.254100][T15939] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 980.254127][T15939] ? lockdep_hardirqs_on+0x7a/0x110 [ 980.254152][T15939] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 980.254184][T15939] ? mutex_lock_nested+0x152/0x1d0 [ 980.254204][T15939] ? fdget_pos+0x252/0x320 [ 980.254231][T15939] ksys_read+0x156/0x270 [ 980.254254][T15939] ? __pfx_ksys_read+0x10/0x10 [ 980.254273][T15939] ? fput+0xa0/0xd0 [ 980.254305][T15939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.254325][T15939] do_syscall_64+0x174/0x580 [ 980.254351][T15939] ? clear_bhb_loop+0x40/0x90 [ 980.254373][T15939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.254392][T15939] RIP: 0033:0x7f38df49d68e [ 980.254411][T15939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.254426][T15939] RSP: 002b:00007f38dd6ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.254446][T15939] RAX: ffffffffffffffda RBX: 00007f38dd6ec6c0 RCX: 00007f38df49d68e [ 980.254460][T15939] RDX: 000000000000000f RSI: 00007f38dd6ec0a0 RDI: 0000000000000006 [ 980.254472][T15939] RBP: 00007f38dd6ec090 R08: 0000000000000000 R09: 0000000000000000 [ 980.254483][T15939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.254495][T15939] R13: 00007f38df756218 R14: 00007f38df756180 R15: 00007ffcae694f58 [ 980.254526][T15939] [ 981.556120][T15941] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3493'. [ 984.592906][ T822] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 984.752502][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 984.755150][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.755172][ T822] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 984.759054][ T822] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 984.759079][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 984.759097][ T822] usb 5-1: Product: syz [ 984.759110][ T822] usb 5-1: Manufacturer: syz [ 984.759120][ T822] usb 5-1: SerialNumber: syz [ 984.762074][ T822] usb 5-1: config 0 descriptor?? [ 984.941085][T15993] sit1: entered allmulticast mode [ 985.089862][ T5843] usb 5-1: USB disconnect, device number 26 [ 986.821860][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.860916][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.867249][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.871547][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.878892][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.998054][T16013] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3522'. [ 987.139476][T16019] netlink: 'syz.2.3523': attribute type 10 has an invalid length. [ 987.191811][T16019] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.210655][T16019] bond0: (slave team0): Enslaving as an active interface with an up link [ 987.495441][T16028] FAULT_INJECTION: forcing a failure. [ 987.495441][T16028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.495471][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.4.3527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 987.495494][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 987.495504][T16028] Call Trace: [ 987.495511][T16028] [ 987.495519][T16028] dump_stack_lvl+0xe8/0x150 [ 987.495544][T16028] should_fail_ex+0x46b/0x600 [ 987.495573][T16028] _copy_from_user+0x2d/0xb0 [ 987.495593][T16028] __se_sys_listns+0x28a/0x2780 [ 987.495625][T16028] ? __pfx___se_sys_listns+0x10/0x10 [ 987.495646][T16028] ? ksys_write+0x248/0x270 [ 987.495669][T16028] ? __pfx_ksys_write+0x10/0x10 [ 987.495694][T16028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.495721][T16028] do_syscall_64+0x174/0x580 [ 987.495745][T16028] ? trace_irq_disable+0x3b/0x140 [ 987.495766][T16028] ? clear_bhb_loop+0x40/0x90 [ 987.495788][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.495806][T16028] RIP: 0033:0x7fd68ae3ce59 [ 987.495823][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.495837][T16028] RSP: 002b:00007fd68908e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d6 [ 987.495856][T16028] RAX: ffffffffffffffda RBX: 00007fd68b0b5fa0 RCX: 00007fd68ae3ce59 [ 987.495868][T16028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 987.495879][T16028] RBP: 00007fd68908e090 R08: 0000000000000000 R09: 0000000000000000 [ 987.495890][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.495901][T16028] R13: 00007fd68b0b6038 R14: 00007fd68b0b5fa0 R15: 00007ffec8fa8758 [ 987.495929][T16028] [ 987.982498][T14280] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 988.043000][T16031] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3528'. [ 988.133014][T14280] usb 4-1: Using ep0 maxpacket: 32 [ 988.137545][T14280] usb 4-1: unable to get BOS descriptor or descriptor too short [ 988.138770][T14280] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.138791][T14280] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.141620][T14280] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 988.141646][T14280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.141665][T14280] usb 4-1: Product: syz [ 988.141678][T14280] usb 4-1: Manufacturer: syz [ 988.141690][T14280] usb 4-1: SerialNumber: syz [ 988.319031][ T161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.406329][T14280] usb 4-1: unit 255 not found! [ 988.532595][T14280] usb 4-1: USB disconnect, device number 97 [ 988.796173][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.950981][ T161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.023048][ T5623] Bluetooth: hci0: command tx timeout [ 989.037436][T16057] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3535'. [ 989.481036][ T161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.825569][T16008] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.825763][T16008] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.825928][T16008] bridge_slave_0: entered allmulticast mode [ 989.828860][T16008] bridge_slave_0: entered promiscuous mode [ 989.832252][T16008] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.833681][T16008] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.833862][T16008] bridge_slave_1: entered allmulticast mode [ 989.836436][T16008] bridge_slave_1: entered promiscuous mode [ 989.936981][T16008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.946257][T16008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.977502][T16008] team0: Port device team_slave_0 added [ 990.980829][T16008] team0: Port device team_slave_1 added [ 991.102485][ T5623] Bluetooth: hci0: command tx timeout [ 991.171558][T16085] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3548'. [ 991.199626][ T161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.542444][T16089] FAULT_INJECTION: forcing a failure. [ 991.542444][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.542479][T16089] CPU: 1 UID: 0 PID: 16089 Comm: syz.2.3547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 991.542501][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 991.542512][T16089] Call Trace: [ 991.542520][T16089] [ 991.542529][T16089] dump_stack_lvl+0xe8/0x150 [ 991.542556][T16089] should_fail_ex+0x46b/0x600 [ 991.542586][T16089] _copy_from_user+0x2d/0xb0 [ 991.542606][T16089] restore_altstack+0xab/0x4c0 [ 991.542627][T16089] ? reacquire_held_locks+0x104/0x190 [ 991.542653][T16089] ? rt_spin_lock+0x1e0/0x400 [ 991.542678][T16089] ? __pfx_restore_altstack+0x10/0x10 [ 991.542701][T16089] ? rt_spin_unlock+0x14f/0x200 [ 991.542726][T16089] ? rt_spin_unlock+0x160/0x200 [ 991.542749][T16089] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 991.542787][T16089] ? __lock_acquire+0x6b5/0x2cf0 [ 991.542813][T16089] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 991.542839][T16089] ? rt_spin_unlock+0x160/0x200 [ 991.542862][T16089] ? signal_setup_done+0x22f/0x310 [ 991.542887][T16089] ? __task_pid_nr_ns+0x28/0x470 [ 991.542919][T16089] ? __task_pid_nr_ns+0x28/0x470 [ 991.542948][T16089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.542969][T16089] do_syscall_64+0x174/0x580 [ 991.542992][T16089] ? trace_irq_disable+0x3b/0x140 [ 991.543012][T16089] ? clear_bhb_loop+0x40/0x90 [ 991.543034][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.543052][T16089] RIP: 0033:0x7f051e95e1d9 [ 991.543068][T16089] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 991.543084][T16089] RSP: 002b:00007f051cc15a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 991.543103][T16089] RAX: ffffffffffffffda RBX: 00007f051ec35fa0 RCX: 00007f051e95e1d9 [ 991.543117][T16089] RDX: 00007f051cc15a80 RSI: 00007f051cc15bb0 RDI: 0000000000000021 [ 991.543130][T16089] RBP: 00007f051cc16090 R08: 0000000000000000 R09: 0000000000000000 [ 991.543141][T16089] R10: 0000200000400000 R11: 0000000000000202 R12: 0000000000000001 [ 991.543153][T16089] R13: 00007f051ec36038 R14: 00007f051ec35fa0 R15: 00007fff50dc4f78 [ 991.543183][T16089] [ 991.872600][T16008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.872616][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.872641][T16008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.879127][T16008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.880065][T16008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.880089][T16008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.948392][T16008] hsr_slave_0: entered promiscuous mode [ 991.949594][T16008] hsr_slave_1: entered promiscuous mode [ 992.752631][T16107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.869502][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.958324][T16119] FAULT_INJECTION: forcing a failure. [ 992.958324][T16119] name failslab, interval 1, probability 0, space 0, times 0 [ 992.958356][T16119] CPU: 1 UID: 0 PID: 16119 Comm: syz.3.3558 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 992.958377][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 992.958389][T16119] Call Trace: [ 992.958397][T16119] [ 992.958405][T16119] dump_stack_lvl+0xe8/0x150 [ 992.958433][T16119] should_fail_ex+0x46b/0x600 [ 992.958463][T16119] should_failslab+0xa8/0x100 [ 992.958487][T16119] __kmalloc_noprof+0xdf/0x7b0 [ 992.958509][T16119] ? tomoyo_encode+0x28b/0x550 [ 992.958534][T16119] tomoyo_encode+0x28b/0x550 [ 992.958559][T16119] tomoyo_realpath_from_path+0x58d/0x5d0 [ 992.958583][T16119] ? tomoyo_domain+0xd7/0x130 [ 992.958609][T16119] ? tomoyo_path_number_perm+0x219/0x630 [ 992.958635][T16119] tomoyo_path_number_perm+0x246/0x630 [ 992.958663][T16119] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 992.958687][T16119] ? __lock_acquire+0x6b5/0x2cf0 [ 992.958714][T16119] ? do_raw_spin_lock+0x12b/0x2f0 [ 992.958765][T16119] ? __fget_files+0x2a/0x420 [ 992.958793][T16119] ? __fget_files+0x2a/0x420 [ 992.958809][T16119] ? __fget_files+0x3a6/0x420 [ 992.958825][T16119] ? __fget_files+0x2a/0x420 [ 992.958847][T16119] security_file_ioctl+0xc3/0x2a0 [ 992.958876][T16119] __se_sys_ioctl+0x47/0x170 [ 992.958897][T16119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.958918][T16119] do_syscall_64+0x174/0x580 [ 992.958942][T16119] ? trace_irq_disable+0x3b/0x140 [ 992.958963][T16119] ? clear_bhb_loop+0x40/0x90 [ 992.958985][T16119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.959003][T16119] RIP: 0033:0x7f46771cce59 [ 992.959021][T16119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.959036][T16119] RSP: 002b:00007f467541e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.959056][T16119] RAX: ffffffffffffffda RBX: 00007f4677445fa0 RCX: 00007f46771cce59 [ 992.959070][T16119] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000003 [ 992.959082][T16119] RBP: 00007f467541e090 R08: 0000000000000000 R09: 0000000000000000 [ 992.959094][T16119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.959105][T16119] R13: 00007f4677446038 R14: 00007f4677445fa0 R15: 00007fff3a84f108 [ 992.959135][T16119] [ 992.959155][T16119] ERROR: Out of memory at tomoyo_realpath_from_path. [ 993.172893][ T5623] Bluetooth: hci0: command tx timeout [ 993.573153][T16136] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3562'. [ 993.818282][ T161] bridge_slave_1: left allmulticast mode [ 993.818315][ T161] bridge_slave_1: left promiscuous mode [ 993.818558][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.079141][ T161] bridge_slave_0: left allmulticast mode [ 994.079182][ T161] bridge_slave_0: left promiscuous mode [ 994.079426][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.322781][ T5745] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 994.493350][ T5745] usb 4-1: Using ep0 maxpacket: 16 [ 994.500641][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 994.528239][ T5745] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 994.528265][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.528282][ T5745] usb 4-1: Product: syz [ 994.528294][ T5745] usb 4-1: Manufacturer: syz [ 994.528305][ T5745] usb 4-1: SerialNumber: syz [ 995.302884][ T5623] Bluetooth: hci0: command tx timeout [ 995.326724][ T5745] usb 4-1: USB disconnect, device number 98 [ 995.363102][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.460326][T16154] FAULT_INJECTION: forcing a failure. [ 995.460326][T16154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.460347][T16154] CPU: 1 UID: 0 PID: 16154 Comm: syz.3.3569 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 995.460360][T16154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 995.460366][T16154] Call Trace: [ 995.460371][T16154] [ 995.460376][T16154] dump_stack_lvl+0xe8/0x150 [ 995.460393][T16154] should_fail_ex+0x46b/0x600 [ 995.460411][T16154] _copy_to_user+0x31/0xb0 [ 995.460422][T16154] simple_read_from_buffer+0xe1/0x170 [ 995.460443][T16154] proc_fail_nth_read+0x1be/0x230 [ 995.460456][T16154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.460467][T16154] ? rw_verify_area+0x2ac/0x4e0 [ 995.460479][T16154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 995.460490][T16154] vfs_read+0x212/0xa80 [ 995.460505][T16154] ? __pfx_vfs_read+0x10/0x10 [ 995.460517][T16154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 995.460533][T16154] ? lockdep_hardirqs_on+0x7a/0x110 [ 995.460547][T16154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 995.460561][T16154] ? mutex_lock_nested+0x152/0x1d0 [ 995.460572][T16154] ? fdget_pos+0x252/0x320 [ 995.460586][T16154] ksys_read+0x156/0x270 [ 995.460598][T16154] ? __pfx_ksys_read+0x10/0x10 [ 995.460609][T16154] ? __pfx_v4l2_ioctl+0x10/0x10 [ 995.460627][T16154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.460638][T16154] do_syscall_64+0x174/0x580 [ 995.460652][T16154] ? trace_irq_disable+0x3b/0x140 [ 995.460664][T16154] ? clear_bhb_loop+0x40/0x90 [ 995.460676][T16154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.460686][T16154] RIP: 0033:0x7f467718d68e [ 995.460696][T16154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 995.460705][T16154] RSP: 002b:00007f467541dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 995.460717][T16154] RAX: ffffffffffffffda RBX: 00007f467541e6c0 RCX: 00007f467718d68e [ 995.460724][T16154] RDX: 000000000000000f RSI: 00007f467541e0a0 RDI: 0000000000000004 [ 995.460730][T16154] RBP: 00007f467541e090 R08: 0000000000000000 R09: 0000000000000000 [ 995.460736][T16154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.460742][T16154] R13: 00007f4677446038 R14: 00007f4677445fa0 R15: 00007fff3a84f108 [ 995.460758][T16154] [ 995.743646][ T161] team0: Port device bridge0 removed [ 996.777427][ T161] bond1 (unregistering): Released all slaves [ 996.790542][ T161] bond2 (unregistering): Released all slaves [ 996.834598][ T161] bond3 (unregistering): Released all slaves [ 996.883788][ T161] bond4 (unregistering): Released all slaves [ 996.948457][ T161] bond0 (unregistering): Released all slaves [ 996.971902][ T161] bond5 (unregistering): Released all slaves [ 997.021502][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 998.809759][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1000.213761][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1001.352645][ T161] hsr_slave_0: left promiscuous mode [ 1001.409128][ T161] hsr_slave_1: left promiscuous mode [ 1001.410129][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.410152][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.455045][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.455079][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.572872][ T161] veth1_macvtap: left promiscuous mode [ 1001.572975][ T161] veth0_macvtap: left promiscuous mode [ 1001.573228][ T161] veth1_vlan: left promiscuous mode [ 1001.573297][ T161] veth0_vlan: left promiscuous mode [ 1002.344679][ T5715] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1002.392725][ T5745] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1002.525625][ T5715] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1002.525643][ T5715] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.525666][ T5715] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1002.525678][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.562546][ T5745] usb 4-1: Using ep0 maxpacket: 16 [ 1002.581238][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1002.593832][ T5745] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1002.593859][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.593877][ T5745] usb 4-1: Product: syz [ 1002.593890][ T5745] usb 4-1: Manufacturer: syz [ 1002.593904][ T5745] usb 4-1: SerialNumber: syz [ 1002.797785][T16291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3604'. [ 1002.955218][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.961348][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.564226][ T5745] usb 4-1: USB disconnect, device number 99 [ 1003.683175][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.413091][ T161] team0 (unregistering): Port device team_slave_1 removed [ 1004.586894][ T161] team0 (unregistering): Port device team_slave_0 removed [ 1005.730742][ T5715] usb 3-1: usb_control_msg returned -71 [ 1005.730794][ T5715] usbtmc 3-1:16.0: can't read capabilities [ 1005.839011][ T5715] usb 3-1: USB disconnect, device number 74 [ 1007.788826][T16008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1007.868143][T16008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.869438][T16008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1007.978678][T16008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.987400][T16008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1008.100667][T16008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.101520][T16008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1008.159569][T16008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.461435][T16008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.517346][T16008] 8021q: adding VLAN 0 to HW filter on device team0 [ 1008.540643][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.540844][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.667133][T16402] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1008.667394][T16403] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1008.754751][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.754941][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.149273][ T161] IPVS: stop unused estimator thread 0... [ 1009.602464][ T5619] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1009.752457][ T5619] usb 3-1: Using ep0 maxpacket: 16 [ 1009.757448][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1009.761771][ T5619] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1009.761797][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.761817][ T5619] usb 3-1: Product: syz [ 1009.761831][ T5619] usb 3-1: Manufacturer: syz [ 1009.761853][ T5619] usb 3-1: SerialNumber: syz [ 1009.814533][T16008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.959941][T15327] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1010.091524][T16419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.097720][T16419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.106491][T16008] veth0_vlan: entered promiscuous mode [ 1010.114935][T15327] usb 4-1: config 7 has an invalid interface number: 223 but max is 0 [ 1010.114959][T15327] usb 4-1: config 7 has no interface number 0 [ 1010.114988][T15327] usb 4-1: too many endpoints for config 7 interface 223 altsetting 7: 36, using maximum allowed: 30 [ 1010.115028][T15327] usb 4-1: config 7 interface 223 altsetting 7 has an endpoint descriptor with address 0x52, changing to 0x2 [ 1010.115051][T15327] usb 4-1: config 7 interface 223 altsetting 7 endpoint 0x2 has invalid maxpacket 60846, setting to 64 [ 1010.115134][T15327] usb 4-1: config 7 interface 223 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 1010.115155][T15327] usb 4-1: config 7 interface 223 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 36 [ 1010.115180][T15327] usb 4-1: config 7 interface 223 has no altsetting 0 [ 1010.117800][T15327] usb 4-1: New USB device found, idVendor=1199, idProduct=0023, bcdDevice=58.16 [ 1010.117825][T15327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.117844][T15327] usb 4-1: Product: syz [ 1010.117858][T15327] usb 4-1: Manufacturer: syz [ 1010.117871][T15327] usb 4-1: SerialNumber: syz [ 1010.120268][T16008] veth1_vlan: entered promiscuous mode [ 1010.379677][T15327] sierra 4-1:7.223: Sierra USB modem converter detected [ 1010.425378][T15327] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1010.471413][T15327] usb 4-1: USB disconnect, device number 100 [ 1010.576484][T16008] veth0_macvtap: entered promiscuous mode [ 1010.588794][ T5619] usb 3-1: USB disconnect, device number 75 [ 1010.597666][T16008] veth1_macvtap: entered promiscuous mode [ 1010.644975][T15327] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1010.666498][T15327] sierra 4-1:7.223: device disconnected [ 1010.685694][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.718112][T16008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.741720][T16008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.751590][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.753193][ T161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.753231][ T161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.753264][ T161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.608340][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.608360][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.736896][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.736917][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.032586][T15327] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1015.193067][T15327] usb 3-1: Using ep0 maxpacket: 8 [ 1015.200809][T15327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1015.200855][T15327] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1015.200901][T15327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.060266][T15327] usb 3-1: config 0 descriptor?? [ 1016.919624][T16508] FAULT_INJECTION: forcing a failure. [ 1016.919624][T16508] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.919651][T16508] CPU: 0 UID: 0 PID: 16508 Comm: syz.4.3667 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1016.919668][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1016.919676][T16508] Call Trace: [ 1016.919682][T16508] [ 1016.919688][T16508] dump_stack_lvl+0xe8/0x150 [ 1016.919710][T16508] should_fail_ex+0x46b/0x600 [ 1016.919734][T16508] should_failslab+0xa8/0x100 [ 1016.919752][T16508] kmem_cache_alloc_noprof+0x87/0x680 [ 1016.919767][T16508] ? __netlink_lookup+0xc6/0x8b0 [ 1016.919786][T16508] ? skb_clone+0x212/0x3a0 [ 1016.919803][T16508] skb_clone+0x212/0x3a0 [ 1016.919827][T16508] __netlink_deliver_tap+0x404/0x850 [ 1016.919854][T16508] ? netlink_deliver_tap+0x2e/0x1b0 [ 1016.919872][T16508] netlink_deliver_tap+0x19c/0x1b0 [ 1016.919891][T16508] netlink_unicast+0x754/0x920 [ 1016.919954][T16508] netlink_sendmsg+0x813/0xb40 [ 1016.919979][T16508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1016.919999][T16508] ? unwind_get_return_address+0x4d/0x90 [ 1016.920021][T16508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1016.920040][T16508] ____sys_sendmsg+0x94c/0x9c0 [ 1016.920067][T16508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1016.920092][T16508] ? import_iovec+0x73/0xa0 [ 1016.920115][T16508] ___sys_sendmsg+0x2a5/0x360 [ 1016.920133][T16508] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.920154][T16508] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.920197][T16508] ? __fget_files+0x2a/0x420 [ 1016.920211][T16508] ? __fget_files+0x3a6/0x420 [ 1016.920236][T16508] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1016.920261][T16508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1016.920288][T16508] ? __pfx_ksys_write+0x10/0x10 [ 1016.920313][T16508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.920329][T16508] do_syscall_64+0x174/0x580 [ 1016.920348][T16508] ? trace_irq_disable+0x3b/0x140 [ 1016.920363][T16508] ? clear_bhb_loop+0x40/0x90 [ 1016.920380][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.920392][T16508] RIP: 0033:0x7fd68ae3ce59 [ 1016.920407][T16508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.920418][T16508] RSP: 002b:00007fd68908e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.920434][T16508] RAX: ffffffffffffffda RBX: 00007fd68b0b5fa0 RCX: 00007fd68ae3ce59 [ 1016.920444][T16508] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1016.920453][T16508] RBP: 00007fd68908e090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.920461][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.920471][T16508] R13: 00007fd68b0b6038 R14: 00007fd68b0b5fa0 R15: 00007ffec8fa8758 [ 1016.920494][T16508] [ 1017.665015][T15327] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1017.667008][T16515] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1017.736486][T15327] usb 3-1: USB disconnect, device number 76 [ 1018.362425][T15327] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1018.598161][T15327] usb 3-1: Using ep0 maxpacket: 32 [ 1018.601851][T15327] usb 3-1: config 6 has an invalid interface number: 4 but max is 0 [ 1018.601873][T15327] usb 3-1: config 6 has no interface number 0 [ 1018.601901][T15327] usb 3-1: config 6 interface 4 has no altsetting 0 [ 1018.640931][T15327] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=a4.f7 [ 1018.640959][T15327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.640976][T15327] usb 3-1: Product: syz [ 1018.640989][T15327] usb 3-1: Manufacturer: syz [ 1018.641002][T15327] usb 3-1: SerialNumber: syz [ 1019.505589][ T5715] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1020.299821][ T5715] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1020.299849][ T5715] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1020.325854][ T5715] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1020.325881][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.325900][ T5715] usb 2-1: Product: syz [ 1020.325912][ T5715] usb 2-1: Manufacturer: syz [ 1020.325926][ T5715] usb 2-1: SerialNumber: syz [ 1021.244121][ T5715] usb 2-1: config 0 descriptor?? [ 1021.296656][ T5715] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1021.430819][T15327] apple-mfi-fastcharge 3-1: USB disconnect, device number 77 [ 1021.441883][ T5820] udevd[5820]: setting owner of /dev/bus/usb/003/077 to uid=0, gid=0 failed: No such file or directory [ 1022.679228][ T5715] usb 2-1: USB disconnect, device number 87 [ 1024.179008][ T36] audit: type=1326 audit(1780903103.475:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179059][ T36] audit: type=1326 audit(1780903103.475:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179097][ T36] audit: type=1326 audit(1780903103.475:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179135][ T36] audit: type=1326 audit(1780903103.475:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179174][ T36] audit: type=1326 audit(1780903103.475:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179211][ T36] audit: type=1326 audit(1780903103.475:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179251][ T36] audit: type=1326 audit(1780903103.475:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179289][ T36] audit: type=1326 audit(1780903103.475:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179325][ T36] audit: type=1326 audit(1780903103.475:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.179364][ T36] audit: type=1326 audit(1780903103.475:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16584 comm="syz.5.3692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f2ce59 code=0x7ffc0000 [ 1024.211255][T16586] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1024.217025][T16586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1025.117870][T16603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1152 (2304 ns) > initial count (512 ns). Using initial count to start timer. [ 1025.352482][ T5619] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1025.502464][ T5619] usb 3-1: Using ep0 maxpacket: 8 [ 1025.504481][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.504526][ T5619] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1025.504547][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.545744][ T5619] usb 3-1: config 0 descriptor?? [ 1026.333379][T16619] Bluetooth: MGMT ver 1.23 [ 1028.074821][ T5619] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1028.105803][ T5619] usb 3-1: USB disconnect, device number 78 [ 1028.433505][ T5820] udevd[5820]: setting mode of /dev/usb/iowarrior0 to 020600 failed: No such file or directory [ 1028.433661][ T5820] udevd[5820]: setting owner of /dev/usb/iowarrior0 to uid=0, gid=0 failed: No such file or directory [ 1029.828307][T16664] libceph: resolve '0' (ret=-3): failed [ 1031.252539][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1031.403099][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1031.406001][ T10] usb 2-1: config 6 has an invalid interface number: 4 but max is 0 [ 1031.406024][ T10] usb 2-1: config 6 has no interface number 0 [ 1031.406052][ T10] usb 2-1: config 6 interface 4 has no altsetting 0 [ 1031.408279][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=a4.f7 [ 1031.408305][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.408324][ T10] usb 2-1: Product: syz [ 1031.408335][ T10] usb 2-1: Manufacturer: syz [ 1031.408342][ T10] usb 2-1: SerialNumber: syz [ 1031.592397][T15327] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1031.883561][T15327] usb 3-1: Using ep0 maxpacket: 32 [ 1031.888206][T15327] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1031.888229][T15327] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1031.888249][T15327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1031.888269][T15327] usb 3-1: config 1 has no interface number 0 [ 1031.888325][T15327] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1031.888363][T15327] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1031.888403][T15327] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1031.888424][T15327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.711171][T15327] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1032.971905][T15327] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1033.533277][ T5715] usb 3-1: USB disconnect, device number 79 [ 1033.597792][ T5715] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1033.780904][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3744'. [ 1034.133714][ T10] apple-mfi-fastcharge 2-1: USB disconnect, device number 88 [ 1034.601077][T16730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1034.652835][T16731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3749'. [ 1035.148402][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.181282][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.202639][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1035.204209][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1035.207115][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1035.227611][T16738] FAULT_INJECTION: forcing a failure. [ 1035.227611][T16738] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.227642][T16738] CPU: 1 UID: 0 PID: 16738 Comm: syz.2.3751 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1035.227664][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.227675][T16738] Call Trace: [ 1035.227682][T16738] [ 1035.227691][T16738] dump_stack_lvl+0xe8/0x150 [ 1035.227719][T16738] should_fail_ex+0x46b/0x600 [ 1035.227750][T16738] should_failslab+0xa8/0x100 [ 1035.227775][T16738] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 1035.227798][T16738] ? simple_xattr_alloc+0x5e/0x100 [ 1035.227819][T16738] ? simple_xattr_set+0x76/0x2770 [ 1035.227843][T16738] kstrdup+0x42/0x100 [ 1035.227871][T16738] simple_xattr_set+0x76/0x2770 [ 1035.227899][T16738] ? do_raw_spin_unlock+0xf5/0x210 [ 1035.227925][T16738] shmem_xattr_handler_set+0x1d6/0x310 [ 1035.227952][T16738] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1035.227982][T16738] __vfs_setxattr+0x43c/0x480 [ 1035.228019][T16738] __vfs_setxattr_noperm+0x12d/0x660 [ 1035.228051][T16738] vfs_setxattr+0x163/0x370 [ 1035.228068][T16738] ? mnt_get_write_access+0x66/0x2d0 [ 1035.228093][T16738] ? __pfx_vfs_setxattr+0x10/0x10 [ 1035.228113][T16738] ? mnt_want_write_file+0x17e/0x210 [ 1035.228136][T16738] file_setxattr+0x1d9/0x2b0 [ 1035.228158][T16738] path_setxattrat+0x3b0/0x440 [ 1035.228187][T16738] ? __pfx_path_setxattrat+0x10/0x10 [ 1035.228233][T16738] ? ksys_write+0x248/0x270 [ 1035.228256][T16738] ? __pfx_ksys_write+0x10/0x10 [ 1035.228282][T16738] __x64_sys_fsetxattr+0xbc/0xe0 [ 1035.228301][T16738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.228322][T16738] do_syscall_64+0x174/0x580 [ 1035.228348][T16738] ? trace_irq_disable+0x3b/0x140 [ 1035.228369][T16738] ? clear_bhb_loop+0x40/0x90 [ 1035.228391][T16738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.228408][T16738] RIP: 0033:0x7f051e9bce59 [ 1035.228425][T16738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.228440][T16738] RSP: 002b:00007f051cc16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1035.228459][T16738] RAX: ffffffffffffffda RBX: 00007f051ec35fa0 RCX: 00007f051e9bce59 [ 1035.228473][T16738] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1035.228484][T16738] RBP: 00007f051cc16090 R08: 0000000000000003 R09: 0000000000000000 [ 1035.228496][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.228507][T16738] R13: 00007f051ec36038 R14: 00007f051ec35fa0 R15: 00007fff50dc4f78 [ 1035.228537][T16738] [ 1035.783329][T16757] FAULT_INJECTION: forcing a failure. [ 1035.783329][T16757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.783363][T16757] CPU: 0 UID: 0 PID: 16757 Comm: syz.2.3756 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1035.783384][T16757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.783396][T16757] Call Trace: [ 1035.783404][T16757] [ 1035.783412][T16757] dump_stack_lvl+0xe8/0x150 [ 1035.783440][T16757] should_fail_ex+0x46b/0x600 [ 1035.783470][T16757] _copy_from_iter+0x1d3/0x1670 [ 1035.783506][T16757] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1035.783526][T16757] ? __alloc_skb+0x27d/0x7d0 [ 1035.783552][T16757] ? __pfx__copy_from_iter+0x10/0x10 [ 1035.783574][T16757] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1035.783594][T16757] ? __alloc_skb+0x27d/0x7d0 [ 1035.783621][T16757] ? netlink_sendmsg+0x650/0xb40 [ 1035.783644][T16757] ? skb_put+0x11b/0x210 [ 1035.783669][T16757] netlink_sendmsg+0x6c0/0xb40 [ 1035.783701][T16757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1035.783726][T16757] ? unwind_get_return_address+0x4d/0x90 [ 1035.783753][T16757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1035.783776][T16757] ____sys_sendmsg+0x94c/0x9c0 [ 1035.783807][T16757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1035.783840][T16757] ? import_iovec+0x73/0xa0 [ 1035.783868][T16757] ___sys_sendmsg+0x2a5/0x360 [ 1035.783893][T16757] ? __lock_acquire+0x6b5/0x2cf0 [ 1035.783925][T16757] ? __pfx____sys_sendmsg+0x10/0x10 [ 1035.783983][T16757] ? __fget_files+0x2a/0x420 [ 1035.784000][T16757] ? __fget_files+0x3a6/0x420 [ 1035.784028][T16757] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1035.784054][T16757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1035.784089][T16757] ? __pfx_ksys_write+0x10/0x10 [ 1035.784117][T16757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.784138][T16757] do_syscall_64+0x174/0x580 [ 1035.784162][T16757] ? trace_irq_disable+0x3b/0x140 [ 1035.784182][T16757] ? clear_bhb_loop+0x40/0x90 [ 1035.784204][T16757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.784222][T16757] RIP: 0033:0x7f051e9bce59 [ 1035.784240][T16757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.784255][T16757] RSP: 002b:00007f051cc16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.784276][T16757] RAX: ffffffffffffffda RBX: 00007f051ec35fa0 RCX: 00007f051e9bce59 [ 1035.784289][T16757] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 1035.784301][T16757] RBP: 00007f051cc16090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.784313][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.784324][T16757] R13: 00007f051ec36038 R14: 00007f051ec35fa0 R15: 00007fff50dc4f78 [ 1035.784354][T16757] [ 1036.358869][T16770] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1037.192556][ T10] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1037.210928][T15492] bond0: (slave syz_tun): Releasing backup interface [ 1037.254508][ T5623] Bluetooth: hci4: command tx timeout [ 1037.344728][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1037.344761][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.344782][ T10] usb 2-1: config 0 has no interface number 0 [ 1037.344825][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.344849][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.344891][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1037.344913][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.351073][ T10] usb 2-1: config 0 descriptor?? [ 1037.427725][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1037.489811][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.493623][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.493861][T16735] bridge_slave_0: entered allmulticast mode [ 1037.498655][T16735] bridge_slave_0: entered promiscuous mode [ 1037.546150][T16735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.546216][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.546377][T16735] bridge_slave_1: entered allmulticast mode [ 1037.547868][T16735] bridge_slave_1: entered promiscuous mode [ 1037.572455][T14280] usb 3-1: new low-speed USB device number 80 using dummy_hcd [ 1037.597151][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.600151][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.729378][T14280] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1037.729405][T14280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.729422][T14280] usb 3-1: config 0 has no interface number 0 [ 1037.729463][T14280] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1037.729482][T14280] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.729520][T14280] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1037.729539][T14280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.798585][T14280] usb 3-1: config 0 descriptor?? [ 1037.836254][T14280] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1037.908163][ T1453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.946206][T16794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.946784][T16794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.130299][T16735] team0: Port device team_slave_0 added [ 1038.139234][T16735] team0: Port device team_slave_1 added [ 1038.370069][ T1453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.394475][T16801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.395238][T16801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.424058][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.424073][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.424097][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.438483][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.438499][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.438524][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.972764][T16735] hsr_slave_0: entered promiscuous mode [ 1038.975793][T16735] hsr_slave_1: entered promiscuous mode [ 1038.977356][T16735] debugfs: 'hsr0' already exists in 'hsr' [ 1038.977379][T16735] Cannot create hsr debugfs directory [ 1039.289371][ T1453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.332406][ T5623] Bluetooth: hci4: command tx timeout [ 1039.723626][ T1453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.981679][ T10] usb 2-1: USB disconnect, device number 89 [ 1040.567740][ T822] usb 3-1: USB disconnect, device number 80 [ 1041.412400][ T5623] Bluetooth: hci4: command tx timeout [ 1042.162901][ T1453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.223352][ T1453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.264301][ T1453] bond0 (unregistering): Released all slaves [ 1042.272836][ T1453] bond1 (unregistering): Released all slaves [ 1042.282982][ T1453] bond2 (unregistering): Released all slaves [ 1042.293589][ T1453] bond3 (unregistering): Released all slaves [ 1042.718633][T16840] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3781'. [ 1042.758644][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1043.174164][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1043.222469][ T822] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1043.445183][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 1043.445248][ T822] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 1043.455352][ T822] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1043.455387][ T822] usb 5-1: can't read configurations, error -61 [ 1043.493881][ T5623] Bluetooth: hci4: command tx timeout [ 1043.602427][ T822] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1043.753913][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 1043.753981][ T822] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 1043.755854][ T822] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1043.755887][ T822] usb 5-1: can't read configurations, error -61 [ 1043.756624][ T822] usb usb5-port1: attempt power cycle [ 1043.782459][ T31] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1043.928835][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1043.982523][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1043.984269][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.984330][ T31] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1043.984348][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.987343][ T31] usb 3-1: config 0 descriptor?? [ 1044.184345][ T822] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1044.245951][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 1044.246007][ T822] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 1044.248457][ T822] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1044.248487][ T822] usb 5-1: can't read configurations, error -61 [ 1044.386161][ T822] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1044.434741][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 1044.434805][ T822] usb 5-1: too many configurations: 118, using maximum allowed: 8 [ 1044.437345][ T822] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1044.437377][ T822] usb 5-1: can't read configurations, error -61 [ 1044.507096][ T822] usb usb5-port1: unable to enumerate USB device [ 1046.426765][ T31] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1046.451648][ T31] usb 3-1: USB disconnect, device number 81 [ 1048.834391][ T1453] hsr_slave_0: left promiscuous mode [ 1048.872536][ T1453] hsr_slave_1: left promiscuous mode [ 1048.873431][ T1453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.873455][ T1453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.914018][ T1453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.914044][ T1453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.040381][ T1453] veth1_macvtap: left promiscuous mode [ 1049.040515][ T1453] veth0_macvtap: left promiscuous mode [ 1049.040746][ T1453] veth1_vlan: left promiscuous mode [ 1049.040906][ T1453] veth0_vlan: left promiscuous mode [ 1049.572457][ T31] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1049.736934][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 1049.741946][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1049.768627][ T31] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1049.768653][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.768672][ T31] usb 3-1: Product: syz [ 1049.768685][ T31] usb 3-1: Manufacturer: syz [ 1049.768699][ T31] usb 3-1: SerialNumber: syz [ 1050.128944][T17004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.129605][T17004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.203450][ T1453] team0 (unregistering): Port device team_slave_1 removed [ 1050.309820][ T1453] team0 (unregistering): Port device team_slave_0 removed [ 1050.582404][ T5341] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 1050.639180][T16735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1050.677737][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.679039][T16735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1050.717629][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.719067][T16735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1050.747458][ T822] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1050.751205][ T5341] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 254, using maximum allowed: 30 [ 1050.751246][ T5341] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1050.751270][ T5341] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1050.751294][ T5341] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1050.751324][ T5341] usb 2-1: New USB device found, idVendor=046d, idProduct=c548, bcdDevice= 0.00 [ 1050.751345][ T5341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.827645][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.828842][T16735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1050.857396][ T5341] usb 2-1: config 0 descriptor?? [ 1050.858157][T17008] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1050.887132][ T822] usb 5-1: device descriptor read/64, error -71 [ 1050.915566][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.130533][ T822] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1051.175373][ T31] usb 3-1: USB disconnect, device number 82 [ 1051.196278][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.285563][ T5341] hid (null): unknown global tag 0xd [ 1051.289521][T16735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.294227][ T5341] hid-generic 0003:046D:C548.0014: unknown main item tag 0x1 [ 1051.294258][ T5341] hid-generic 0003:046D:C548.0014: unknown global tag 0xd [ 1051.294273][ T5341] hid-generic 0003:046D:C548.0014: item 0 4 1 13 parsing failed [ 1051.305481][ T5341] hid-generic 0003:046D:C548.0014: probe with driver hid-generic failed with error -22 [ 1051.321779][T16735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.326738][ T822] usb 5-1: device descriptor read/64, error -71 [ 1051.330279][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.330469][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.421769][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.421887][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.461002][ T822] usb usb5-port1: attempt power cycle [ 1051.587298][ T31] usb 2-1: USB disconnect, device number 90 [ 1051.852269][ T822] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1051.917171][ T822] usb 5-1: device descriptor read/8, error -71 [ 1052.162464][ T822] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1052.185097][ T822] usb 5-1: device descriptor read/8, error -71 [ 1052.294036][ T822] usb usb5-port1: unable to enumerate USB device [ 1052.505174][T16735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.676012][T16735] veth0_vlan: entered promiscuous mode [ 1052.695087][T16735] veth1_vlan: entered promiscuous mode [ 1052.734015][T16735] veth0_macvtap: entered promiscuous mode [ 1052.751205][T16735] veth1_macvtap: entered promiscuous mode [ 1052.784403][T16735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.788728][T16735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.835920][ T1524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.836188][ T1524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.836224][ T1524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.836256][ T1524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.306625][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.764327][T10695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.764347][T10695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.917816][ T5715] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1055.857699][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 1055.863632][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1055.864783][ T5715] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 1055.864796][ T5715] usb 2-1: config 1 has no interface number 0 [ 1055.864819][ T5715] usb 2-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1055.864831][ T5715] usb 2-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1055.864842][ T5715] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1055.864855][ T5715] usb 2-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1055.864866][ T5715] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.864877][ T5715] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.864889][ T5715] usb 2-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1055.864901][ T5715] usb 2-1: config 1 interface 8 has no altsetting 0 [ 1055.917269][ T5715] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 1055.917296][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.917306][ T5715] usb 2-1: Product: syz [ 1055.917314][ T5715] usb 2-1: Manufacturer: syz [ 1055.917321][ T5715] usb 2-1: SerialNumber: syz [ 1056.155451][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.155476][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.388962][T17048] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1056.444377][T17051] netlink: 480 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1056.444434][T17051] netlink: 480 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1056.477952][ T5715] cxacru_cm: 27 callbacks suppressed [ 1056.478008][ T5715] cxacru 2-1:1.8: submit of read urb for cm 0x90 failed (-90) [ 1056.478063][ T5715] cxacru 2-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 1056.478625][ T5715] cxacru 2-1:1.8: probe with driver cxacru failed with error -22 [ 1056.512663][ T5715] usb 2-1: USB disconnect, device number 91 [ 1059.022407][ T822] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1059.183882][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 1059.190386][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1059.190441][ T822] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1059.190462][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.197184][ T822] usb 4-1: config 0 descriptor?? [ 1060.237974][T17101] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3843'. [ 1061.153119][T17118] FAULT_INJECTION: forcing a failure. [ 1061.153119][T17118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.153154][T17118] CPU: 1 UID: 0 PID: 17118 Comm: syz.4.3851 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1061.153182][T17118] Tainted: [L]=SOFTLOCKUP [ 1061.153188][T17118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1061.153200][T17118] Call Trace: [ 1061.153207][T17118] [ 1061.153215][T17118] dump_stack_lvl+0xe8/0x150 [ 1061.153243][T17118] should_fail_ex+0x46b/0x600 [ 1061.153273][T17118] _copy_from_iter+0x1d3/0x1670 [ 1061.153306][T17118] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1061.153326][T17118] ? __alloc_skb+0x27d/0x7d0 [ 1061.153349][T17118] ? __pfx__copy_from_iter+0x10/0x10 [ 1061.153369][T17118] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1061.153388][T17118] ? __alloc_skb+0x27d/0x7d0 [ 1061.153413][T17118] ? netlink_sendmsg+0x650/0xb40 [ 1061.153436][T17118] ? skb_put+0x11b/0x210 [ 1061.153462][T17118] netlink_sendmsg+0x6c0/0xb40 [ 1061.153493][T17118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1061.153518][T17118] ? unwind_get_return_address+0x4d/0x90 [ 1061.153545][T17118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1061.153568][T17118] ____sys_sendmsg+0x94c/0x9c0 [ 1061.153598][T17118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1061.153631][T17118] ? import_iovec+0x73/0xa0 [ 1061.153659][T17118] ___sys_sendmsg+0x2a5/0x360 [ 1061.153683][T17118] ? __lock_acquire+0x6b5/0x2cf0 [ 1061.153710][T17118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1061.153763][T17118] ? __fget_files+0x2a/0x420 [ 1061.153780][T17118] ? __fget_files+0x3a6/0x420 [ 1061.153806][T17118] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1061.153834][T17118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1061.153867][T17118] ? __pfx_ksys_write+0x10/0x10 [ 1061.153903][T17118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.153922][T17118] do_syscall_64+0x174/0x580 [ 1061.153948][T17118] ? clear_bhb_loop+0x40/0x90 [ 1061.153970][T17118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.153988][T17118] RIP: 0033:0x7fd68ae3ce59 [ 1061.154005][T17118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.154021][T17118] RSP: 002b:00007fd68908e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1061.154041][T17118] RAX: ffffffffffffffda RBX: 00007fd68b0b5fa0 RCX: 00007fd68ae3ce59 [ 1061.154054][T17118] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 1061.154067][T17118] RBP: 00007fd68908e090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.154078][T17118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.154090][T17118] R13: 00007fd68b0b6038 R14: 00007fd68b0b5fa0 R15: 00007ffec8fa8758 [ 1061.154119][T17118] [ 1061.232437][T17045] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 1061.488981][ T822] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1061.503541][ T822] usb 4-1: USB disconnect, device number 101 [ 1062.064332][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1062.144039][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1062.161013][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1062.176857][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1062.185432][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1064.301366][ T5623] Bluetooth: hci1: command tx timeout [ 1064.337453][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.338875][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.339442][T17130] bridge_slave_0: entered allmulticast mode [ 1064.369907][T17130] bridge_slave_0: entered promiscuous mode [ 1064.379996][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.380175][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.380370][T17130] bridge_slave_1: entered allmulticast mode [ 1064.404877][T17130] bridge_slave_1: entered promiscuous mode [ 1064.466074][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.469850][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.492689][T14280] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 1064.605620][T17130] team0: Port device team_slave_0 added [ 1064.618713][T17130] team0: Port device team_slave_1 added [ 1064.749568][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.749580][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.749594][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.753533][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.753547][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.753572][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.135381][T17130] hsr_slave_0: entered promiscuous mode [ 1065.136198][T17130] hsr_slave_1: entered promiscuous mode [ 1065.137801][T17130] debugfs: 'hsr0' already exists in 'hsr' [ 1065.138434][T17130] Cannot create hsr debugfs directory [ 1066.099407][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1066.302465][T14280] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1066.373745][ T5623] Bluetooth: hci1: command tx timeout [ 1066.514149][T14280] usb 4-1: Using ep0 maxpacket: 32 [ 1066.517396][T14280] usb 4-1: config 6 has an invalid interface number: 4 but max is 0 [ 1066.517419][T14280] usb 4-1: config 6 has no interface number 0 [ 1066.517448][T14280] usb 4-1: config 6 interface 4 has no altsetting 0 [ 1066.523455][T14280] usb 4-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice=a4.f7 [ 1066.523480][T14280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.523498][T14280] usb 4-1: Product: syz [ 1066.523511][T14280] usb 4-1: Manufacturer: syz [ 1066.523524][T14280] usb 4-1: SerialNumber: syz [ 1068.282405][ T5745] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1068.368959][T17130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.446533][ T5745] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1068.446558][ T5745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.446576][ T5745] usb 3-1: config 0 has no interface number 0 [ 1068.446612][ T5745] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1068.446632][ T5745] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.446739][ T5745] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1068.446762][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.462791][ T5623] Bluetooth: hci1: command tx timeout [ 1068.545934][ T5745] usb 3-1: config 0 descriptor?? [ 1068.550666][ T5745] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1069.068734][T14280] apple-mfi-fastcharge 4-1: USB disconnect, device number 102 [ 1069.419648][T17130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.028606][T17130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.202439][T14280] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1070.538869][ T5623] Bluetooth: hci1: command tx timeout [ 1070.646698][T14280] usb 4-1: device descriptor read/64, error -71 [ 1070.902422][T14280] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1070.925042][T17130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.357934][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 1071.362054][T14280] usb 4-1: device descriptor read/64, error -71 [ 1071.462748][T14280] usb usb4-port1: attempt power cycle [ 1071.472229][ T31] usb 3-1: USB disconnect, device number 83 [ 1071.802429][T14280] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1071.825541][T14280] usb 4-1: device descriptor read/8, error -71 [ 1071.961299][T17130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1072.027859][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1072.028673][T17130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1072.069018][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1072.091242][T17130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1072.092849][T14280] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1072.116030][T14280] usb 4-1: device descriptor read/8, error -71 [ 1072.158091][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1072.173434][T17130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1072.202818][T17130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1072.223415][T14280] usb usb4-port1: unable to enumerate USB device [ 1072.326509][T15327] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1072.407372][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.420413][ T5745] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 1072.437394][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.450731][ T1485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.450947][ T1485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.471898][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.472084][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.502680][T15327] usb 3-1: Using ep0 maxpacket: 8 [ 1072.504647][T15327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1072.504690][T15327] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.504717][T15327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.549919][T15327] usb 3-1: config 0 descriptor?? [ 1074.863018][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.942451][T15327] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1074.950001][T15327] usb 3-1: USB disconnect, device number 84 [ 1076.962387][ T5745] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1077.238070][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3899'. [ 1077.570044][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1078.649302][T17130] veth0_vlan: entered promiscuous mode [ 1078.748827][T17130] veth1_vlan: entered promiscuous mode [ 1078.829227][T17130] veth0_macvtap: entered promiscuous mode [ 1078.867836][T17130] veth1_macvtap: entered promiscuous mode [ 1079.008850][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.031509][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.073727][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.073984][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.074020][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.074052][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.429832][T17335] comedi comedi0: Minor 9 could not be opened [ 1079.738212][ T5341] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1079.878237][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.878256][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.945786][ T5341] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1079.945813][ T5341] usb 3-1: config 0 has no interface number 0 [ 1079.945850][ T5341] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1079.986710][ T5341] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1079.986736][ T5341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.986755][ T5341] usb 3-1: Product: syz [ 1079.986768][ T5341] usb 3-1: Manufacturer: syz [ 1079.986782][ T5341] usb 3-1: SerialNumber: syz [ 1080.025873][ T5341] usb 3-1: config 0 descriptor?? [ 1080.026765][T17335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1080.265324][ T5341] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, ee:18:bf:5a:a9:f2 [ 1080.310982][ T5341] usb 3-1: USB disconnect, device number 85 [ 1080.337546][ T5341] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1080.547407][T16576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.547424][T16576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.353821][ T31] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1081.634030][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1081.635812][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1081.635856][ T31] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1081.635879][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.684374][ T31] usb 4-1: config 0 descriptor?? [ 1081.932413][ T5715] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1082.235991][T17363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3915'. [ 1083.672635][ T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1083.710857][ T5715] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1083.787140][ T31] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1083.809786][ T31] usb 4-1: USB disconnect, device number 107 [ 1083.905431][ T5715] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1083.905458][ T5715] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1083.905475][ T5715] usb 3-1: config 0 has no interface number 0 [ 1083.905514][ T5715] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 1083.905528][ T5715] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1083.905541][ T5715] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1083.906567][ T5715] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1083.906599][ T5715] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1083.906619][ T5715] usb 3-1: Manufacturer: syz [ 1083.947666][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1083.947693][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.947711][ T43] usb 5-1: Product: syz [ 1083.947723][ T43] usb 5-1: Manufacturer: syz [ 1083.947735][ T43] usb 5-1: SerialNumber: syz [ 1084.046970][ T43] usb 5-1: config 0 descriptor?? [ 1084.047659][ T5715] usb 3-1: config 0 descriptor?? [ 1084.066749][ T5715] hub 3-1:0.52: bad descriptor, ignoring hub [ 1084.066784][ T5715] hub 3-1:0.52: probe with driver hub failed with error -5 [ 1084.070183][ T43] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1084.341121][ T5715] usb 3-1: Can not set alternate setting to 1, error: -71 [ 1084.341178][ T5715] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1084.457839][ T5715] usb 3-1: USB disconnect, device number 87 [ 1084.684912][ T5715] usb 5-1: USB disconnect, device number 35 [ 1086.142743][ T5715] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1086.322590][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 1086.325292][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1086.329315][ T5715] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1086.329340][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.329359][ T5715] usb 2-1: Product: syz [ 1086.329373][ T5715] usb 2-1: Manufacturer: syz [ 1086.329386][ T5715] usb 2-1: SerialNumber: syz [ 1086.781234][T17394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.794313][T17394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.921458][ T5626] 1024-page vmalloc region starting at 0xf[ 1086.921458][ T5626] 1024-page vmalloc region starting at 0xffffc90010d89000 allocated at kcov_ioctl+0x58/0x640 [ 1086.921498][ T5626] list_del corruption. next->prev should be ffffc9001c78a000, but was 0000000000000000. (next=ffffc90010d89000) [ 1086.923150][ T5626] ------------[ cut here ]------------ [ 1086.923161][ T5626] kernel BUG at lib/list_debug.c:67! [ 1086.928752][ T5626] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1086.928896][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1086.928922][ T5626] Tainted: [L]=SOFTLOCKUP [ 1086.928929][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1086.928941][ T5626] Workqueue: hci3 hci_rx_work [ 1086.929038][ T5626] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1086.929099][ T5626] Code: 0c 9a 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d ae 7f fd 49 8b 56 08 48 c7 c7 20 62 a7 8b 48 89 de 4c 89 f1 e8 27 68 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1086.929114][ T5626] RSP: 0018:ffffc90004eff9e0 EFLAGS: 00010246 [ 1086.929129][ T5626] RAX: 000000000000006d RBX: ffffc9001c78a000 RCX: e25645ba78eabf00 [ 1086.929143][ T5626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1086.929153][ T5626] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.929164][ T5626] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff920021b1201 [ 1086.929177][ T5626] R13: dffffc0000000000 R14: ffffc90010d89000 R15: ffffc90010d89008 [ 1086.929190][ T5626] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 1086.929205][ T5626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1086.929217][ T5626] CR2: 00007fa00acd56b8 CR3: 000000002a47a000 CR4: 00000000003526f0 [ 1086.929233][ T5626] Call Trace: [ 1086.929240][ T5626] [ 1086.929249][ T5626] kcov_remote_start+0x2af/0x710 [ 1086.929271][ T5626] hci_rx_work+0x10f/0x1040 [ 1086.929297][ T5626] ? process_scheduled_works+0xa70/0x1860 [ 1086.929317][ T5626] process_scheduled_works+0xb5d/0x1860 [ 1086.929346][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 1086.929365][ T5626] ? assign_work+0x3d5/0x5e0 [ 1086.929383][ T5626] worker_thread+0xa53/0xfc0 [ 1086.929410][ T5626] kthread+0x388/0x470 [ 1086.929431][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 1086.929448][ T5626] ? __pfx_kthread+0x10/0x10 [ 1086.929468][ T5626] ret_from_fork+0x514/0xb70 [ 1086.929489][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.929505][ T5626] ? __switch_to+0xc79/0x1410 [ 1086.929530][ T5626] ? __pfx_kthread+0x10/0x10 [ 1086.929550][ T5626] ret_from_fork_asm+0x1a/0x30 [ 1086.929576][ T5626] [ 1086.929589][ T5626] Modules linked in: [ 1086.929610][ T5626] ---[ end trace 0000000000000000 ]--- [ 1086.929623][ T5626] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1086.929647][ T5626] Code: 0c 9a 5f fd 43 80 3c 2c 00 74 08 4c 89 ff e8 8d ae 7f fd 49 8b 56 08 48 c7 c7 20 62 a7 8b 48 89 de 4c 89 f1 e8 27 68 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1086.929662][ T5626] RSP: 0018:ffffc90004eff9e0 EFLAGS: 00010246 [ 1086.929676][ T5626] RAX: 000000000000006d RBX: ffffc9001c78a000 RCX: e25645ba78eabf00 [ 1086.929690][ T5626] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1086.929701][ T5626] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.929712][ T5626] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff920021b1201 [ 1086.929725][ T5626] R13: dffffc0000000000 R14: ffffc90010d89000 R15: ffffc90010d89008 [ 1086.929744][ T5626] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 1086.929758][ T5626] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1086.929770][ T5626] CR2: 00007fa00acd56b8 CR3: 000000002a47a000 CR4: 00000000003526f0 [ 1086.929830][ T5626] Kernel panic - not syncing: Fatal exception [ 1086.929973][ T5626] Kernel Offset: disabled