last executing test programs: 16.539368097s ago: executing program 2 (id=999): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x5, &(0x7f0000000040)=""/249, &(0x7f0000000180)=0xf9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000340)="00f762d830df", 0x6) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f00000002c0)='\x00\x00', 0x2}], 0x1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) 14.80791396s ago: executing program 1 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e50100000000fdffffff070000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="80e0d1c8d7"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) 14.653969685s ago: executing program 2 (id=1005): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fcntl$getownex(r0, 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f00003c2000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000400)=""/102400, 0x19000) write$char_usb(r2, &(0x7f0000000340)="f2da3567324536f49c926f0c37d8195846d67aca41136af7d432c98b6a357b2644287f8445fcbcba33806bd19ab48ff4ae93ce875bafda85ec9f4eef1f5f311dac7979d0bb8ae6dda400000000000000000000000000000000000000000000000000de014643b5578e6be17130a3f9029d88e4b4c6d4effbce4bb70c0cb3a69c34d527a3b27634d5a658d76f2242726922db700c0b6c5e9d343bac9ec6105feeab7d8af39d56b0e1de9dfb1738a7fe8d482fea24a92e4f49", 0xb8) r7 = syz_open_procfs$userns(r1, &(0x7f0000000040)) socket(0x21, 0x2, 0x9d5) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000080)={r7, 0x10007ffd, 0x13, 0x2}) 14.491536536s ago: executing program 1 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01072cbd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 12.988547888s ago: executing program 4 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x7, 0xfd, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x100000020, 0x3, 0x2, 0x106c, 0x102, 0x8000000000000, 0x1000000003, 0x0, 0x8, 0x10, 0x6, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2200401, &(0x7f0000001900)=ANY=[@ANYBLOB='nr_blocks']) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000d40)=""/189, 0xbd}, {&(0x7f0000000e00)=""/202, 0xca}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000001100)=""/4083, 0xff3}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000100)=""/72, 0x48}, {&(0x7f0000003100)=""/4097, 0x1001}, {0x0}, {&(0x7f00000009c0)=""/132, 0x84}, {0x0}, {0x0}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/102, 0x66}], 0xf}, 0x0) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0xfffffffffffffff7}}, 0x513300) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x20bc, 0x5500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xa0, 0x3, "", [{{0x9, 0x4, 0x0, 0xe4, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xfa6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x40, 0x54, 0x9, 0xff, 0x81}, 0xf, &(0x7f0000000900)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x55662d9786a99ef1, 0xa, 0x6, 0x8}]}}) r5 = syz_open_dev$mouse(&(0x7f0000000c80), 0x4, 0x12822) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000cc0)="8c8ddf30fd34cfdc739cc0bc137034cfc910f6a01763eb9f74e014ddea3c2dc9a032fcc6e171dca8c4d97427c4a94d5b0afb98bfbd9421afa61a51e1611d8d5d02687641cfc5546f7edd07ccda3a6679ea8a1ab9ec6ff0e5817f72bf379fc35cfb28ee3a07c7281dc18d5459d20250", 0x6f) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x14, {{0x29, 0x0, 0x5000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x22, 0xf4, {0xf4, 0x21, "42a48fc4aba9aa0d4795c9dbf7e9a356338d093b89716ac55de7d66e02246133ba2ec2984aa2c0d475a8a5dab95dfc8e149348df004055553cbcefd67bf0ac0497de5e10871897f2479fb7c9e6a135a1e53d0dd669f41193f433b4843572641deecb194c6c654aac11601ad023dc2c5f9b1fabcdd75a6465b2803ff1dd7a3ac8759956ed2ab7bdaeea7f62283251fbea56b1a19e2be0c5cbf80eeb3f3250c49d15187ce323d34da32313f239691df3b9ccaa257cc2081085753a584aeda986bea19d2d23332ec74b3f81bd925d6b3d6d57b8a65c5f2bb629186260605a5b8553a68a86d3b53b4a7000f15bfe2a8ac266a220"}}, &(0x7f0000000180)={0x0, 0x3, 0x77, @string={0x77, 0x3, "4fae68a713ae8d4c454c1a6a8cba5d6f913d969dcd592994e3360591171c15965cd638c8f69f32f2a462711b8b0cf177488971f6b5d7d207fbf12f731e22155543742a2d18a584b9641e2561840a37337b529e2110e5f6c070b840afa3f413ff0752a245cc72ab7a962e159475bb7dbd362c6c3ded"}}, &(0x7f0000000200)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "095e907d20bee1d612aacca4070032c5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0xe, 0xfff8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "f8f9c8f41c8d9b929b368cb33c2e03cb"}, @ss_container_id={0x14, 0x10, 0x4, 0x95, "c895670f569e5d15db9b64b7005dd1ab"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10b, 0x7, 0x5, 0x1, 0x7}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x30, 0x7, "305ed712", "d97ac5a1"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x5, 0x40, 0x81, 0x2, 0x27}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x10, 0xa9, "37501ee625431a1e02da401193dc09cf3ea0872cb39f7f063658d91bdd64273e15830740871a2f7d9914163940e12cd0b72fa52d835688cad9814d7003572e6e53c559798d32d60f5e3de31ecf141c90b8d7737e6713636c9f2b4fe0d10a47e1a4c79f4f81f34d12db276a2d76f77864dc52d38b63d5c99c7b50fbe763faad50ffb3067c2983f96cbceb5d1804a9a9f6e0fd31c0edee16b34d4f39e7a1026f0a727c23100b5e13b2c1"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5b}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000004c0)=ANY=[@ANYBLOB="000200009c81f713a934"], &(0x7f0000000500)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000580)={0x40, 0xb, 0x2, "c6c8"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xfffa}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000680)={0x40, 0x19, 0x2, '7x'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x44}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x22}}) 12.703707001s ago: executing program 3 (id=1010): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.526454426s ago: executing program 1 (id=1011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) unshare(0x6a040000) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e640000"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x0, 0x8000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffbfff000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000110000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usb_connect$midi(0x0, 0xee, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x1, 0x1, 0x7, 0x50, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x10, 0x8, [@midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x5, 0x7}, {0x0, 0x9}, {0x0, 0x8f}, {0x3e, 0xa}], 0x6}, @midi_in_jack={0x6, 0x24, 0x2, 0x6, 0x1, 0xe}, @midi_in_jack={0x6, 0x24, 0x2, 0xe04eaba37d1c9669, 0x4, 0x9}, @ms_header={0x7, 0x24, 0x1, 0xf7e, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x38, 0x1}], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x2, 0x6, 0x4, {0x5, 0x25, 0x1, 0x1, 'O'}}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0xba, 0x6, 0x9, {0x11, 0x25, 0x1, 0xd, "b620a26bd1dc65f8de255adfe7"}}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0xc5, 0xa2, 0xa5, {0xe, 0x25, 0x1, 0xa, "9a161e46dfe05080d958"}}}, {{0x9, 0x5, 0x0, 0x9457d520644c7ee4, 0x400, 0x10, 0x1, 0x2, {0x14, 0x25, 0x1, 0x10, "3404f0184754353da26f73e205234bd0"}}}, {{0x9, 0x5, 0xd, 0x1dc562f134f13f3d, 0x8, 0xf, 0x9, 0x8, {0xe, 0x25, 0x1, 0xa, "d80b084b39fe48efdffd"}}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xa0, 0x9, 0xd, {0x13, 0x25, 0x1, 0xf, "674c421169fd1cdf88469e8eab022f"}}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0x2, 0x30, {0xa, 0x25, 0x1, 0x6, "390ba039b850"}}}]}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x4, 0x1c, 0x5, 0x50, 0x8}, 0x5, &(0x7f00000005c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x429}}, {0xba, &(0x7f00000006c0)=@string={0xba, 0x3, "ffea386091e856bebaeb135837213af32e1c2c6b0210e5956ede2338832988ed8e55768036c681c5056b9013f938acd5130685ed8271153ff089c05df395ffd60e49a3762362e43d1add4e02f0ebbdac35b4045f8747a3496f02bd3e033b30b59268e944e24ce61e134aebd38ba94a012f6efce4f6bc7e2c4ea2706ff1e86beb07c90c002c2cac9b81a1d44f2bc174eda534607a977fc1335da21625649d46261123cc2924d65e0e83f9c8b3610707649b9b9e8f74eab919"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x410}}, {0xac, &(0x7f00000007c0)=@string={0xac, 0x3, "b6363557fb78a47f4e0a05ab8a7cb10db472df9d5813297235ad0707b700ee58cdf22d561626926325807cd0a9a2b8c893fe1c7f8c4b2952f23c8ef364820d4dd5a89d9f85c1eeea3fc0ad86c31c4f9171f6f0a353e2c2004138b0e15a86a92f0a5a36f263f45f8685c195dd98e760192ca0d93153a16b646e395418941a381ebc85efa6e6e4b1be15a6ceb45b46c2bc8d247d799b0f4b1fa998d62b27a857e49f19225ec28f4fe20dbe"}}]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 12.478003803s ago: executing program 2 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x400b, 0x2) 10.937509464s ago: executing program 3 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.433475177s ago: executing program 3 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f58000000040000000090000909000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000"], 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) readlinkat(r7, 0x0, &(0x7f00000004c0)=""/199, 0xc7) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000580)={0x2, 0x100, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}}) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r9, 0x0, 0x200048cc) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x8098f905, 0x0, "6005588a3f9f90ac060100050000009a9f7e1db9c90600008040f722e62200", 0x1, 0xfff}) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYRESOCT=r8], 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r10, 0x10e, 0xc, &(0x7f0000000080)=0xa, 0x4) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2884a93227028e1b4ac3f20f3d97d363000006000000f2de00000c206e3c9287480000367ec9bb93", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 7.431808161s ago: executing program 0 (id=1017): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e50100000000fdffffff070000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="80e0d1c8d7"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.034184533s ago: executing program 4 (id=1018): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x17c, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r5, &(0x7f0000000140)=""/116, 0x74) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000010c0)={0xffffffffffffffff, 0x18, [0xb, 0x3df1, 0x1, 0x8001], &(0x7f0000001080)=[0x0, 0x0, 0x0]}) preadv(r6, 0x0, 0x0, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) 5.855928611s ago: executing program 0 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa5, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_DELAY_DIST={0xd, 0x2, "80d3898fbb602d80a8"}]}}}]}, 0x5c}}, 0x4000010) socket$netlink(0x10, 0x3, 0x14) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x169c02) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001198aea0000feff"], 0xc8) 4.994560919s ago: executing program 2 (id=1020): socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000b80)) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) fcntl$setlease(r1, 0x400, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r4, &(0x7f00000001c0)=""/178, 0xb2) 4.99408763s ago: executing program 4 (id=1021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000bbd27d7787dff96d4ccf2cfbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x8800) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x4, 0xfffffffb, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x1, 0x7e4, 0x0, 0x0, 0x45, [0xf3, 0x100089ff]}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10}}, 0x9c}}, 0x4008008) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x880) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x1, 0x2, 0x8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r4, &(0x7f0000002580)={&(0x7f0000002380)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x4}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002400)="17a9b4b8e5d0f5fe6bf85306d5e4", 0xe}], 0x1, &(0x7f0000002540)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}, 0x400) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x311481) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40}], 0x1, 0x102, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.869610368s ago: executing program 3 (id=1022): ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x3, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200"}}) 3.675665518s ago: executing program 0 (id=1023): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_clone3(0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) (async, rerun: 64) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000200)={0x3, 0xb, 0x3, 0x2, 0x9, "3651d60cb79b2293c9f32d3f1da5db4f2db21b", 0x9531, 0x3}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.504326725s ago: executing program 2 (id=1024): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r5, 0x8cee000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x7, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x1c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x8, 0x8, 0x1) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r11, 0x4b3a, 0x2) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="09ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42884}, 0x0) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) syz_clone(0x38000000, &(0x7f00000014c0)="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", 0xfb, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="88227aba86dc1a47a999d5091adf63d24947a9d4e781e1c36f2fa09c5ce8fa58e1ef1999fac544d5a28ff97e5d07097a7a19b05b09592ee0e7640f2c1586df9fa1c58060cf33c0f84914aa4c5522ff357743e74e6a19f8ea74b349bc") sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1404, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x840) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000100)={&(0x7f0000000080)=[{0x88cd, 0x53c9, 0x3}], 0x1, 0x10, 0xf, 0x1}) 3.338412902s ago: executing program 0 (id=1025): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="18010000fa00000000000000feffffff8500000075000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r3, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/66, 0x42}], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r3, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 3.277081955s ago: executing program 3 (id=1026): socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000140)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r7 = open(0x0, 0xd0000, 0x0) getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.243579403s ago: executing program 1 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000140)="66b80500000066b9070000000f01c10f78d20f01cb6566f20fd6d30f01cb64f30f21700fc7a80a00f3f30f860000260fae960000baf80c66b801e91b8366efbafc0cb000ee", 0x45}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.428671622s ago: executing program 3 (id=1028): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04e60f08"], 0x7) 1.31407844s ago: executing program 0 (id=1029): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011020, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}]) dup3(r2, r0, 0x0) 1.295673323s ago: executing program 4 (id=1030): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 1.144780663s ago: executing program 1 (id=1031): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.082161639s ago: executing program 2 (id=1032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f00000017c0)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x57, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_dev$sndctrl(0x0, 0x201, 0x6b6100) r3 = syz_usbip_server_init(0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$uac2(0x5, 0xe2, &(0x7f0000000680)=ANY=[@ANYBLOB="120100030000001082052b004000010203010902d0000301725003080b00000100200709"], 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 886.059088ms ago: executing program 4 (id=1033): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="a8ef351b", 0x4}], 0x1}}], 0x1, 0x24008094) 742.74691ms ago: executing program 1 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 72.315518ms ago: executing program 4 (id=1035): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 0 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x3c, r1, 0x301, 0x70bd29, 0x25dfdbf8, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x14) kernel console output (not intermixed with test programs): , usb_gadget_register_driver returned -16 [ 375.352351][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.369495][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.787773][ T7846] netlink: 9 bytes leftover after parsing attributes in process `syz.0.539'. [ 376.875152][ T7846] netlink: 9 bytes leftover after parsing attributes in process `syz.0.539'. [ 376.910832][ T5718] usb 4-1: USB disconnect, device number 26 [ 376.947021][ T5340] Bluetooth: Can't get state to change to load configuration err [ 376.947037][ T5340] Bluetooth: Loading sysconfig file failed [ 376.947071][ T5340] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 377.162820][ T5340] usb 2-1: USB disconnect, device number 20 [ 379.438776][ T7856] netlink: 'syz.3.542': attribute type 3 has an invalid length. [ 379.438797][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 379.534356][ T7860] mmap: syz.3.542 (7860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 382.053194][ T7872] FAULT_INJECTION: forcing a failure. [ 382.053194][ T7872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.053239][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.3.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 382.053275][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.053288][ T7872] Call Trace: [ 382.053296][ T7872] [ 382.053305][ T7872] dump_stack_lvl+0xe8/0x150 [ 382.053333][ T7872] should_fail_ex+0x46b/0x600 [ 382.053388][ T7872] _copy_from_user+0x2d/0xb0 [ 382.053410][ T7872] __sys_connect+0x156/0x450 [ 382.053444][ T7872] ? __pfx___sys_connect+0x10/0x10 [ 382.053487][ T7872] ? __pfx_ksys_write+0x10/0x10 [ 382.053519][ T7872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.053543][ T7872] __x64_sys_connect+0x7a/0x90 [ 382.053575][ T7872] do_syscall_64+0x174/0x580 [ 382.053607][ T7872] ? trace_irq_disable+0x3b/0x140 [ 382.053638][ T7872] ? clear_bhb_loop+0x40/0x90 [ 382.053666][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.053688][ T7872] RIP: 0033:0x7fa7fe59ce59 [ 382.053708][ T7872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.053728][ T7872] RSP: 002b:00007fa7fc7ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 382.053751][ T7872] RAX: ffffffffffffffda RBX: 00007fa7fe815fa0 RCX: 00007fa7fe59ce59 [ 382.053768][ T7872] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 382.053783][ T7872] RBP: 00007fa7fc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 382.053797][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.053809][ T7872] R13: 00007fa7fe816038 R14: 00007fa7fe815fa0 R15: 00007fffd20b4388 [ 382.053843][ T7872] [ 383.850773][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.850848][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.166194][ T5340] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 385.486348][ T7892] netlink: 9 bytes leftover after parsing attributes in process `syz.4.550'. [ 386.570195][ T7895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 386.986608][ T7892] netlink: 9 bytes leftover after parsing attributes in process `syz.4.550'. [ 387.048187][ T5340] usb 2-1: device descriptor read/all, error -71 [ 388.890293][ T7909] netlink: 9 bytes leftover after parsing attributes in process `syz.0.555'. [ 388.996779][ T7909] netlink: 9 bytes leftover after parsing attributes in process `syz.0.555'. [ 389.104579][ T5898] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 390.109216][ T7916] netlink: 'syz.2.557': attribute type 3 has an invalid length. [ 390.109232][ T7916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'. [ 391.938392][ T5898] usb 4-1: device descriptor read/all, error -71 [ 396.709238][ T7945] netlink: 9 bytes leftover after parsing attributes in process `syz.3.564'. [ 397.617686][ T7945] netlink: 9 bytes leftover after parsing attributes in process `syz.3.564'. [ 397.884423][ T5726] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 398.049255][ T5726] usb 2-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 398.049322][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 398.049352][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 398.049381][ T5726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2176, setting to 64 [ 398.049410][ T5726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.053321][ T5726] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 398.053354][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 398.053376][ T5726] usb 2-1: Product: syz [ 398.053392][ T5726] usb 2-1: Manufacturer: syz [ 398.053408][ T5726] usb 2-1: SerialNumber: syz [ 398.223576][ T5726] usb 2-1: config 0 descriptor?? [ 398.224705][ T7939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.521042][ T5726] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 398.521375][ T5726] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 398.527421][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.556455][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.802691][ T9] usb 2-1: USB disconnect, device number 23 [ 399.725851][ T6486] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 399.884464][ T6486] usb 3-1: Using ep0 maxpacket: 32 [ 399.887887][ T6486] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.887913][ T6486] usb 3-1: config 0 has no interface number 0 [ 399.890818][ T6486] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.890848][ T6486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.890870][ T6486] usb 3-1: Product: syz [ 399.890887][ T6486] usb 3-1: Manufacturer: syz [ 399.890903][ T6486] usb 3-1: SerialNumber: syz [ 399.969204][ T6486] usb 3-1: config 0 descriptor?? [ 399.992939][ T6486] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 400.222925][ T9] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 400.283599][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 400.951708][ T9] usb 4-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 400.951833][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 400.951873][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 400.952001][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2176, setting to 64 [ 400.952082][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.172815][ T7958] FAULT_INJECTION: forcing a failure. [ 401.172815][ T7958] name failslab, interval 1, probability 0, space 0, times 0 [ 401.172895][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.2.567 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.172921][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.172936][ T7958] Call Trace: [ 401.172948][ T7958] [ 401.172958][ T7958] dump_stack_lvl+0xe8/0x150 [ 401.172990][ T7958] should_fail_ex+0x46b/0x600 [ 401.173028][ T7958] should_failslab+0xa8/0x100 [ 401.173060][ T7958] __kmalloc_noprof+0xdf/0x7b0 [ 401.173088][ T7958] ? tomoyo_encode+0x28b/0x550 [ 401.173119][ T7958] tomoyo_encode+0x28b/0x550 [ 401.173152][ T7958] tomoyo_realpath_from_path+0x58d/0x5d0 [ 401.173190][ T7958] ? tomoyo_path_number_perm+0x219/0x630 [ 401.173225][ T7958] tomoyo_path_number_perm+0x246/0x630 [ 401.173264][ T7958] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.173298][ T7958] ? __lock_acquire+0x6b5/0x2cf0 [ 401.173331][ T7958] ? do_raw_spin_lock+0x12b/0x2f0 [ 401.173391][ T7958] ? __fget_files+0x2a/0x420 [ 401.173417][ T7958] ? __fget_files+0x2a/0x420 [ 401.173438][ T7958] ? __fget_files+0x3a6/0x420 [ 401.173459][ T7958] ? __fget_files+0x2a/0x420 [ 401.173485][ T7958] security_file_ioctl+0xc3/0x2a0 [ 401.173524][ T7958] __se_sys_ioctl+0x47/0x170 [ 401.173553][ T7958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.173585][ T7958] do_syscall_64+0x174/0x580 [ 401.173621][ T7958] ? clear_bhb_loop+0x40/0x90 [ 401.173650][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.173672][ T7958] RIP: 0033:0x7fa7af2dce59 [ 401.173693][ T7958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.173713][ T7958] RSP: 002b:00007fa7ad536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.173737][ T7958] RAX: ffffffffffffffda RBX: 00007fa7af555fa0 RCX: 00007fa7af2dce59 [ 401.173754][ T7958] RDX: 0000200000000040 RSI: 0000000000003b83 RDI: 0000000000000004 [ 401.173770][ T7958] RBP: 00007fa7ad536090 R08: 0000000000000000 R09: 0000000000000000 [ 401.173784][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.173797][ T7958] R13: 00007fa7af556038 R14: 00007fa7af555fa0 R15: 00007ffedf995c08 [ 401.173834][ T7958] [ 401.210031][ T7958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.326861][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 401.354036][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.354070][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 401.354093][ T9] usb 4-1: Product: syz [ 401.354109][ T9] usb 4-1: Manufacturer: syz [ 401.354125][ T9] usb 4-1: SerialNumber: syz [ 401.692096][ T6486] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 401.717399][ T9] usb 4-1: config 0 descriptor?? [ 401.718624][ T7960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 401.777447][ T6486] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 401.810183][ T6486] usb 3-1: USB disconnect, device number 20 [ 401.905669][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 401.974227][ T6486] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 401.996389][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.997151][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.018009][ T9] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 402.018917][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 402.071206][ T6486] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.073057][ T6486] quatech2 3-1:0.51: device disconnected [ 402.246391][ T5866] usb 4-1: USB disconnect, device number 29 [ 402.331685][ T7977] FAULT_INJECTION: forcing a failure. [ 402.331685][ T7977] name failslab, interval 1, probability 0, space 0, times 0 [ 402.331728][ T7977] CPU: 1 UID: 0 PID: 7977 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.331751][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.331762][ T7977] Call Trace: [ 402.331770][ T7977] [ 402.331778][ T7977] dump_stack_lvl+0xe8/0x150 [ 402.331805][ T7977] should_fail_ex+0x46b/0x600 [ 402.331838][ T7977] should_failslab+0xa8/0x100 [ 402.331863][ T7977] __kmalloc_cache_noprof+0x84/0x690 [ 402.331886][ T7977] ? io_ring_ctx_alloc+0x53/0xc70 [ 402.331915][ T7977] io_ring_ctx_alloc+0x53/0xc70 [ 402.331939][ T7977] ? io_prepare_config+0x8c8/0xc70 [ 402.331965][ T7977] io_uring_create+0x50/0x9a0 [ 402.331994][ T7977] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 402.332016][ T7977] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 402.332041][ T7977] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 402.332077][ T7977] ? __pfx_ksys_write+0x10/0x10 [ 402.332108][ T7977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.332129][ T7977] do_syscall_64+0x174/0x580 [ 402.332175][ T7977] ? trace_irq_disable+0x3b/0x140 [ 402.332198][ T7977] ? clear_bhb_loop+0x40/0x90 [ 402.332224][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.332245][ T7977] RIP: 0033:0x7fa7af2dce59 [ 402.332275][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.332291][ T7977] RSP: 002b:00007fa7ad535fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 402.332315][ T7977] RAX: ffffffffffffffda RBX: 0000200000000500 RCX: 00007fa7af2dce59 [ 402.332329][ T7977] RDX: 0000200000000200 RSI: 0000200000000500 RDI: 000000000000126a [ 402.332342][ T7977] RBP: 00007fa7ad536090 R08: 0000000000000000 R09: 0000000000000101 [ 402.332354][ T7977] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000200 [ 402.332366][ T7977] R13: 0000200000000000 R14: 0000200000000140 R15: 00007ffedf995c08 [ 402.332401][ T7977] [ 402.569920][ T7980] ======================================================= [ 402.569920][ T7980] WARNING: The mand mount option has been deprecated and [ 402.569920][ T7980] and is ignored by this kernel. Remove the mand [ 402.569920][ T7980] option from the mount to silence this warning. [ 402.569920][ T7980] ======================================================= [ 402.579792][ T7980] overlayfs: failed to clone lowerpath [ 404.316629][ T7987] netlink: 9 bytes leftover after parsing attributes in process `syz.0.576'. [ 404.394645][ T7987] netlink: 9 bytes leftover after parsing attributes in process `syz.0.576'. [ 404.449089][ T7990] binder: 7982:7990 unknown command 0 [ 404.449107][ T7990] binder: 7982:7990 ioctl c0306201 200000000480 returned -22 [ 404.837487][ T7995] netlink: 'syz.1.578': attribute type 6 has an invalid length. [ 404.837502][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 404.935434][ T7998] FAULT_INJECTION: forcing a failure. [ 404.935434][ T7998] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.935472][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.2.580 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.935498][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.935512][ T7998] Call Trace: [ 404.935521][ T7998] [ 404.935531][ T7998] dump_stack_lvl+0xe8/0x150 [ 404.935563][ T7998] should_fail_ex+0x46b/0x600 [ 404.935602][ T7998] prepare_alloc_pages+0x22a/0x6b0 [ 404.935642][ T7998] __alloc_frozen_pages_noprof+0x12f/0x380 [ 404.935679][ T7998] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 404.935717][ T7998] ? __pfx_policy_nodemask+0x10/0x10 [ 404.935750][ T7998] ? mtree_range_walk+0x6fc/0x8b0 [ 404.935780][ T7998] alloc_pages_mpol+0xd1/0x380 [ 404.935814][ T7998] alloc_pages_noprof+0xd2/0x2f0 [ 404.935847][ T7998] __pud_alloc+0x3a/0x460 [ 404.935879][ T7998] handle_mm_fault+0xe68/0x1400 [ 404.935916][ T7998] ? handle_mm_fault+0xec/0x1400 [ 404.935944][ T7998] ? __pfx_handle_mm_fault+0x10/0x10 [ 404.935984][ T7998] ? __lock_acquire+0x6b5/0x2cf0 [ 404.936022][ T7998] ? lock_mm_and_find_vma+0xa7/0x340 [ 404.936056][ T7998] do_user_addr_fault+0x75b/0x1340 [ 404.936101][ T7998] exc_page_fault+0x6a/0xc0 [ 404.936138][ T7998] asm_exc_page_fault+0x26/0x30 [ 404.936161][ T7998] RIP: 0010:strncpy_from_user+0xb7/0x2b0 [ 404.936199][ T7998] Code: 00 00 4c 89 f6 e8 e9 c1 e6 fc 49 83 fe 07 0f 86 9d 00 00 00 48 89 1c 24 4c 89 74 24 08 48 c7 c5 f8 ff ff ff 45 31 ff 4c 89 e3 <4f> 8b 34 3c 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 06 4d 89 f5 49 [ 404.936219][ T7998] RSP: 0018:ffffc90002f2fc98 EFLAGS: 00050246 [ 404.936240][ T7998] RAX: ffffffff84ddaf97 RBX: 00002000000002c0 RCX: ffff88802ffb3d80 [ 404.936257][ T7998] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000007 [ 404.936271][ T7998] RBP: fffffffffffffff8 R08: 0000000000000000 R09: 0000000000000000 [ 404.936286][ T7998] R10: dffffc0000000000 R11: fffff520005e5fc8 R12: 00002000000002c0 [ 404.936304][ T7998] R13: 1ffff920005e5fa4 R14: 0000000000000100 R15: 0000000000000000 [ 404.936329][ T7998] ? strncpy_from_user+0x97/0x2b0 [ 404.936366][ T7998] ? strncpy_from_user+0x97/0x2b0 [ 404.936401][ T7998] path_getxattrat+0x162/0x460 [ 404.936438][ T7998] ? __pfx_path_getxattrat+0x10/0x10 [ 404.936495][ T7998] ? __pfx_ksys_write+0x10/0x10 [ 404.936533][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.936557][ T7998] do_syscall_64+0x174/0x580 [ 404.936592][ T7998] ? trace_irq_disable+0x3b/0x140 [ 404.936619][ T7998] ? clear_bhb_loop+0x40/0x90 [ 404.936647][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.936671][ T7998] RIP: 0033:0x7fa7af2dce59 [ 404.936692][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.936711][ T7998] RSP: 002b:00007fa7ad536028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 404.936733][ T7998] RAX: ffffffffffffffda RBX: 00007fa7af555fa0 RCX: 00007fa7af2dce59 [ 404.936750][ T7998] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 404.936766][ T7998] RBP: 00007fa7ad536090 R08: 0000000000000000 R09: 0000000000000000 [ 404.936780][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.936795][ T7998] R13: 00007fa7af556038 R14: 00007fa7af555fa0 R15: 00007ffedf995c08 [ 404.936832][ T7998] [ 405.528420][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 405.554455][ T5866] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 405.714420][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 405.717187][ T5866] usb 5-1: unable to get BOS descriptor or descriptor too short [ 405.719096][ T5866] usb 5-1: config 4 interface 0 has no altsetting 0 [ 405.747986][ T5866] usb 5-1: string descriptor 0 read error: -22 [ 405.748085][ T5866] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 405.748112][ T5866] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 405.825081][ T5866] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 405.866310][ T5866] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 405.866738][ T5866] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 405.866790][ T5866] usb 5-1: media controller created [ 405.906643][ T5866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 406.405431][ T6486] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 406.584403][ T6486] usb 4-1: Using ep0 maxpacket: 32 [ 406.593194][ T6486] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 406.593224][ T6486] usb 4-1: config 0 has no interface number 0 [ 406.616605][ T6486] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 406.616635][ T6486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.616854][ T6486] usb 4-1: Product: syz [ 406.616866][ T6486] usb 4-1: Manufacturer: syz [ 406.616876][ T6486] usb 4-1: SerialNumber: syz [ 406.708689][ T6486] usb 4-1: config 0 descriptor?? [ 406.899463][ T6486] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 406.981211][ T5866] zl10353_read_register: readreg error (reg=127, ret==0) [ 407.034716][ T8001] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 407.049826][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.053876][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.681834][ T5866] usb 5-1: USB disconnect, device number 21 [ 409.095883][ T5340] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 409.284926][ T5340] usb 3-1: Using ep0 maxpacket: 8 [ 409.293059][ T5340] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 409.314308][ T5340] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=70.4b [ 409.314413][ T5340] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 409.314439][ T5340] usb 3-1: Product: syz [ 409.314454][ T5340] usb 3-1: Manufacturer: syz [ 409.314469][ T5340] usb 3-1: SerialNumber: syz [ 409.449242][ T6486] usb 4-1: qt2_attach - failed to power on unit: -71 [ 409.450074][ T6486] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 409.528844][ T6486] usb 4-1: USB disconnect, device number 30 [ 409.698853][ T5340] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 409.698936][ T5340] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 409.743635][ T5340] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 409.859675][ T5340] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 409.880786][ T5340] usb 3-1: USB disconnect, device number 21 [ 409.939548][ T5340] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 410.000232][ T5340] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 410.039138][ T5340] visor 3-1:1.0: device disconnected [ 410.184434][ T6486] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 410.271609][ T8045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.593'. [ 410.350906][ T6486] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.350936][ T6486] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.352406][ T6486] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.352435][ T6486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 410.352458][ T6486] usb 2-1: SerialNumber: syz [ 410.633668][ T6486] usb 2-1: 0:2 : does not exist [ 411.195622][ T6486] usb 2-1: USB disconnect, device number 24 [ 411.908753][ T7729] udevd[7729]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.987304][ T8063] bridge0: port 3(syz_tun) entered blocking state [ 411.987425][ T8063] bridge0: port 3(syz_tun) entered disabled state [ 411.988351][ T8063] syz_tun: entered allmulticast mode [ 411.991637][ T8063] syz_tun: entered promiscuous mode [ 411.993084][ T8063] bridge0: port 3(syz_tun) entered blocking state [ 411.993248][ T8063] bridge0: port 3(syz_tun) entered forwarding state [ 413.845584][ T8068] netlink: 9 bytes leftover after parsing attributes in process `syz.0.589'. [ 413.984558][ T8068] netlink: 9 bytes leftover after parsing attributes in process `syz.0.589'. [ 416.337639][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.605'. [ 418.130620][ T8094] FAULT_INJECTION: forcing a failure. [ 418.130620][ T8094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.130658][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.4.607 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.130683][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.130698][ T8094] Call Trace: [ 418.130707][ T8094] [ 418.130717][ T8094] dump_stack_lvl+0xe8/0x150 [ 418.130749][ T8094] should_fail_ex+0x46b/0x600 [ 418.130788][ T8094] _copy_to_user+0x31/0xb0 [ 418.130814][ T8094] simple_read_from_buffer+0xe1/0x170 [ 418.130857][ T8094] proc_fail_nth_read+0x1be/0x230 [ 418.130884][ T8094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.130912][ T8094] ? rw_verify_area+0x2ac/0x4e0 [ 418.130938][ T8094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.130963][ T8094] vfs_read+0x212/0xa80 [ 418.130999][ T8094] ? __pfx_vfs_read+0x10/0x10 [ 418.131028][ T8094] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 418.131066][ T8094] ? lockdep_hardirqs_on+0x7a/0x110 [ 418.131101][ T8094] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 418.131137][ T8094] ? mutex_lock_nested+0x152/0x1d0 [ 418.131162][ T8094] ? fdget_pos+0x252/0x320 [ 418.131195][ T8094] ksys_read+0x156/0x270 [ 418.131225][ T8094] ? __pfx_ksys_read+0x10/0x10 [ 418.131263][ T8094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.131289][ T8094] do_syscall_64+0x174/0x580 [ 418.131321][ T8094] ? trace_irq_disable+0x3b/0x140 [ 418.131350][ T8094] ? clear_bhb_loop+0x40/0x90 [ 418.131379][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.131402][ T8094] RIP: 0033:0x7f401228d68e [ 418.131423][ T8094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.131443][ T8094] RSP: 002b:00007f401051dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.131467][ T8094] RAX: ffffffffffffffda RBX: 00007f401051e6c0 RCX: 00007f401228d68e [ 418.131485][ T8094] RDX: 000000000000000f RSI: 00007f401051e0a0 RDI: 0000000000000004 [ 418.131499][ T8094] RBP: 00007f401051e090 R08: 0000000000000000 R09: 0000000000000000 [ 418.131513][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.131526][ T8094] R13: 00007f4012546038 R14: 00007f4012545fa0 R15: 00007ffc58cfada8 [ 418.131571][ T8094] [ 420.203718][ T8108] netlink: 9 bytes leftover after parsing attributes in process `syz.4.612'. [ 420.348973][ T8108] netlink: 9 bytes leftover after parsing attributes in process `syz.4.612'. [ 420.354427][ T6486] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 420.612221][ T6486] usb 2-1: unable to get BOS descriptor or descriptor too short [ 420.613602][ T6486] usb 2-1: not running at top speed; connect to a high speed hub [ 420.623518][ T6486] usb 2-1: config 1 has an invalid interface number: 116 but max is 0 [ 420.623544][ T6486] usb 2-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 420.623566][ T6486] usb 2-1: config 1 has no interface number 0 [ 420.623611][ T6486] usb 2-1: config 1 interface 116 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.623641][ T6486] usb 2-1: config 1 interface 116 has no altsetting 0 [ 420.753033][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 421.838431][ T6486] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 421.838468][ T6486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.867615][ T6486] usb 2-1: can't set config #1, error -71 [ 421.872955][ T6486] usb 2-1: USB disconnect, device number 25 [ 422.057744][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.617'. [ 422.258301][ T8126] netlink: 'syz.3.619': attribute type 3 has an invalid length. [ 422.258317][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.619'. [ 423.836109][ T8139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.623'. [ 426.532499][ T8150] netlink: 9 bytes leftover after parsing attributes in process `syz.2.626'. [ 427.730084][ T8150] netlink: 9 bytes leftover after parsing attributes in process `syz.2.626'. [ 428.041890][ T8159] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 428.041922][ T8159] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 428.041955][ T8159] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 428.047497][ T8159] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 428.057615][ T8159] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 429.076752][ T8168] syzkaller0: entered promiscuous mode [ 429.076787][ T8168] syzkaller0: entered allmulticast mode [ 429.230668][ T8176] tipc: Enabled bearer , priority 0 [ 429.394691][ T8174] siw: device registration error -23 [ 430.531058][ T5864] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 431.164567][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 431.193575][ T5864] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 431.193805][ T5864] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.599340][ T5864] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice= 0.b7 [ 431.599384][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.599408][ T5864] usb 2-1: Product: syz [ 431.599468][ T5864] usb 2-1: Manufacturer: syz [ 431.599485][ T5864] usb 2-1: SerialNumber: syz [ 431.978607][ T8167] tipc: Resetting bearer [ 432.014194][ T5864] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 432.039385][ T5864] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 432.115427][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.630'. [ 432.186789][ T8167] tipc: Disabling bearer [ 432.211753][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.212344][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.336931][ T8186] batadv_slave_0: entered promiscuous mode [ 432.337722][ T8187] veth1_macvtap: left promiscuous mode [ 432.337747][ T8187] macsec0: entered allmulticast mode [ 432.343283][ T5718] usb 2-1: USB disconnect, device number 26 [ 432.396377][ T8188] veth1_macvtap: entered promiscuous mode [ 432.396403][ T8188] veth1_macvtap: entered allmulticast mode [ 432.399250][ T8188] macsec0: left allmulticast mode [ 432.399270][ T8188] veth1_macvtap: left allmulticast mode [ 432.461542][ T8186] batadv_slave_0: left promiscuous mode [ 432.476054][ T5718] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 432.476796][ T5718] qcserial 2-1:1.0: device disconnected [ 432.674904][ T8191] FAULT_INJECTION: forcing a failure. [ 432.674904][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 432.674930][ T8191] CPU: 1 UID: 0 PID: 8191 Comm: syz.2.636 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 432.674948][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.674958][ T8191] Call Trace: [ 432.674964][ T8191] [ 432.674970][ T8191] dump_stack_lvl+0xe8/0x150 [ 432.674992][ T8191] should_fail_ex+0x46b/0x600 [ 432.675019][ T8191] should_failslab+0xa8/0x100 [ 432.675041][ T8191] __kmalloc_noprof+0xdf/0x7b0 [ 432.675059][ T8191] ? do_sys_poll+0x30a/0xf50 [ 432.675086][ T8191] do_sys_poll+0x30a/0xf50 [ 432.675118][ T8191] ? __lock_acquire+0x6b5/0x2cf0 [ 432.675139][ T8191] ? __pfx_do_sys_poll+0x10/0x10 [ 432.675164][ T8191] ? is_bpf_text_address+0x292/0x2b0 [ 432.675185][ T8191] ? is_bpf_text_address+0x26/0x2b0 [ 432.675277][ T8191] ? set_user_sigmask+0xcd/0x1c0 [ 432.675294][ T8191] ? __pfx_set_user_sigmask+0x10/0x10 [ 432.675310][ T8191] ? rt_mutex_slowunlock+0x1cb/0x300 [ 432.675336][ T8191] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 432.675360][ T8191] __se_sys_ppoll+0x209/0x2b0 [ 432.675383][ T8191] ? fput+0xa0/0xd0 [ 432.675409][ T8191] ? __pfx___se_sys_ppoll+0x10/0x10 [ 432.675432][ T8191] ? __pfx_ksys_write+0x10/0x10 [ 432.675454][ T8191] ? __x64_sys_ppoll+0x20/0xc0 [ 432.675477][ T8191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.675494][ T8191] do_syscall_64+0x174/0x580 [ 432.675517][ T8191] ? trace_irq_disable+0x3b/0x140 [ 432.675535][ T8191] ? clear_bhb_loop+0x40/0x90 [ 432.675554][ T8191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.675570][ T8191] RIP: 0033:0x7fa7af2dce59 [ 432.675583][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.675597][ T8191] RSP: 002b:00007fa7ad536028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 432.675613][ T8191] RAX: ffffffffffffffda RBX: 00007fa7af555fa0 RCX: 00007fa7af2dce59 [ 432.675625][ T8191] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 432.675636][ T8191] RBP: 00007fa7ad536090 R08: 0000000000000000 R09: 0000000000000000 [ 432.675645][ T8191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.675654][ T8191] R13: 00007fa7af556038 R14: 00007fa7af555fa0 R15: 00007ffedf995c08 [ 432.675678][ T8191] [ 434.010516][ T5864] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 434.440610][ T5864] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 434.440693][ T5864] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 434.440757][ T5864] usb 5-1: Product: syz [ 434.440833][ T5864] usb 5-1: Manufacturer: syz [ 434.440906][ T5864] usb 5-1: SerialNumber: syz [ 435.619807][ T8205] netlink: 9 bytes leftover after parsing attributes in process `syz.2.640'. [ 436.038795][ T5864] usb 5-1: config 0 descriptor?? [ 436.293357][ T5864] usb 5-1: can't set config #0, error -71 [ 436.302848][ T5864] usb 5-1: USB disconnect, device number 22 [ 436.322961][ T7722] udevd[7722]: setting mode of /dev/bus/usb/005/022 to 020664 failed: No such file or directory [ 436.323093][ T7722] udevd[7722]: setting owner of /dev/bus/usb/005/022 to uid=0, gid=0 failed: No such file or directory [ 437.135892][ T5866] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 437.434453][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 437.469167][ T5866] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 437.469511][ T5866] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 437.469733][ T5866] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 437.470052][ T5866] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 437.470282][ T5866] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 437.470522][ T5866] usb 2-1: config 0 has no interface number 0 [ 437.471015][ T5866] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 437.471375][ T5866] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 437.471532][ T5866] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 437.471828][ T5866] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.472069][ T5866] usb 2-1: config 0 interface 125 has no altsetting 0 [ 437.472396][ T5866] usb 2-1: config 0 interface 125 has no altsetting 2 [ 438.149442][ T5866] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 438.149486][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.149565][ T5866] usb 2-1: Product: syz [ 438.149626][ T5866] usb 2-1: Manufacturer: syz [ 438.149686][ T5866] usb 2-1: SerialNumber: syz [ 438.324002][ T5866] usb 2-1: config 0 descriptor?? [ 438.745903][ T5866] usb 2-1: selecting invalid altsetting 2 [ 439.490328][ C1] usb 2-1: async_complete: urb error -71 [ 439.752463][ C1] usb 2-1: async_complete: urb error -71 [ 439.830473][ C1] usb 2-1: async_complete: urb error -71 [ 439.831980][ C1] usb 2-1: async_complete: urb error -71 [ 439.851194][ T5866] get_1284_register: usb error -71 [ 440.777861][ T5866] usb 2-1: USB disconnect, device number 27 [ 441.453044][ T8236] FAULT_INJECTION: forcing a failure. [ 441.453044][ T8236] name failslab, interval 1, probability 0, space 0, times 0 [ 441.453079][ T8236] CPU: 0 UID: 0 PID: 8236 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 441.453105][ T8236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.453120][ T8236] Call Trace: [ 441.453129][ T8236] [ 441.453139][ T8236] dump_stack_lvl+0xe8/0x150 [ 441.453172][ T8236] should_fail_ex+0x46b/0x600 [ 441.453218][ T8236] should_failslab+0xa8/0x100 [ 441.453251][ T8236] kmem_cache_alloc_noprof+0x87/0x680 [ 441.453271][ T8236] ? dst_alloc+0x105/0x170 [ 441.453286][ T8236] ? fib_lookup+0x76/0x440 [ 441.453311][ T8236] dst_alloc+0x105/0x170 [ 441.453330][ T8236] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 441.453363][ T8236] ? ip_route_output_key_hash+0xd8/0x2a0 [ 441.453389][ T8236] ip_route_output_key_hash+0x18d/0x2a0 [ 441.453417][ T8236] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 441.453460][ T8236] tcp_v4_connect+0x74e/0x19b0 [ 441.453477][ T8236] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.453517][ T8236] ? __pfx_tcp_v4_connect+0x10/0x10 [ 441.453534][ T8236] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 441.453558][ T8236] mptcp_connect+0x56b/0x830 [ 441.453586][ T8236] __inet_stream_connect+0x25a/0xdd0 [ 441.453620][ T8236] ? __pfx___inet_stream_connect+0x10/0x10 [ 441.453643][ T8236] ? __local_bh_enable+0x1e1/0x2f0 [ 441.453664][ T8236] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 441.453681][ T8236] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.453710][ T8236] inet_stream_connect+0x66/0xa0 [ 441.453736][ T8236] __sys_connect+0x315/0x450 [ 441.453760][ T8236] ? __pfx___sys_connect+0x10/0x10 [ 441.453780][ T8236] ? irqentry_exit+0x218/0x8b0 [ 441.453814][ T8236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.453835][ T8236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.453852][ T8236] __x64_sys_connect+0x7a/0x90 [ 441.453875][ T8236] do_syscall_64+0x174/0x580 [ 441.453900][ T8236] ? clear_bhb_loop+0x40/0x90 [ 441.453921][ T8236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.453938][ T8236] RIP: 0033:0x7fa7fe59ce59 [ 441.453954][ T8236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.453968][ T8236] RSP: 002b:00007fa7fc7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 441.453985][ T8236] RAX: ffffffffffffffda RBX: 00007fa7fe816180 RCX: 00007fa7fe59ce59 [ 441.453997][ T8236] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000007 [ 441.454007][ T8236] RBP: 00007fa7fc7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 441.454018][ T8236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.454027][ T8236] R13: 00007fa7fe816218 R14: 00007fa7fe816180 R15: 00007fffd20b4388 [ 441.454053][ T8236] [ 444.524158][ T8267] netlink: 9 bytes leftover after parsing attributes in process `syz.1.656'. [ 444.815000][ T8267] netlink: 9 bytes leftover after parsing attributes in process `syz.1.656'. [ 445.208808][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.208859][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.502864][ T8283] FAULT_INJECTION: forcing a failure. [ 446.502864][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.502902][ T8283] CPU: 0 UID: 0 PID: 8283 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 446.502926][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.502941][ T8283] Call Trace: [ 446.502949][ T8283] [ 446.502959][ T8283] dump_stack_lvl+0xe8/0x150 [ 446.502990][ T8283] should_fail_ex+0x46b/0x600 [ 446.503027][ T8283] _copy_to_user+0x31/0xb0 [ 446.503058][ T8283] simple_read_from_buffer+0xe1/0x170 [ 446.503101][ T8283] proc_fail_nth_read+0x1be/0x230 [ 446.503126][ T8283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.503153][ T8283] ? rw_verify_area+0x2ac/0x4e0 [ 446.503178][ T8283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.503202][ T8283] vfs_read+0x212/0xa80 [ 446.503236][ T8283] ? __pfx_vfs_read+0x10/0x10 [ 446.503281][ T8283] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 446.503313][ T8283] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.503345][ T8283] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 446.503376][ T8283] ? mutex_lock_nested+0x152/0x1d0 [ 446.503399][ T8283] ? fdget_pos+0x252/0x320 [ 446.503428][ T8283] ksys_read+0x156/0x270 [ 446.503454][ T8283] ? __pfx_ksys_read+0x10/0x10 [ 446.503486][ T8283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.503509][ T8283] do_syscall_64+0x174/0x580 [ 446.503540][ T8283] ? clear_bhb_loop+0x40/0x90 [ 446.503567][ T8283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.503588][ T8283] RIP: 0033:0x7f401228d68e [ 446.503606][ T8283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.503625][ T8283] RSP: 002b:00007f40104fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.503647][ T8283] RAX: ffffffffffffffda RBX: 00007f40104fd6c0 RCX: 00007f401228d68e [ 446.503662][ T8283] RDX: 000000000000000f RSI: 00007f40104fd0a0 RDI: 0000000000000004 [ 446.503675][ T8283] RBP: 00007f40104fd090 R08: 0000000000000000 R09: 0000000000000000 [ 446.503688][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.503700][ T8283] R13: 00007f4012546128 R14: 00007f4012546090 R15: 00007ffc58cfada8 [ 446.503733][ T8283] [ 447.339095][ T8284] tipc: New replicast peer: 0.0.0.0 [ 447.387606][ T8284] tipc: Enabled bearer , priority 10 [ 447.413112][ T8284] tipc: New replicast peer: 224.0.0.1 [ 448.475333][ T8289] lo speed is unknown, defaulting to 1000 [ 448.476088][ T8289] lo speed is unknown, defaulting to 1000 [ 448.522447][ T8289] lo speed is unknown, defaulting to 1000 [ 448.563063][ T8289] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 448.563135][ T8289] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 448.563208][ T8289] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 448.905581][ T8289] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 448.972889][ T8289] lo speed is unknown, defaulting to 1000 [ 448.974938][ T8289] lo speed is unknown, defaulting to 1000 [ 448.976897][ T8289] lo speed is unknown, defaulting to 1000 [ 448.978762][ T8289] lo speed is unknown, defaulting to 1000 [ 448.980595][ T8289] lo speed is unknown, defaulting to 1000 [ 449.137723][ T5866] tipc: Node number set to 3193947343 [ 449.996791][ T8297] netlink: 56 bytes leftover after parsing attributes in process `syz.4.664'. [ 450.571020][ T8302] netlink: 'syz.3.667': attribute type 3 has an invalid length. [ 450.571036][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 452.730087][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 455.784835][ T8342] netlink: 9 bytes leftover after parsing attributes in process `syz.2.675'. [ 455.890244][ T8342] netlink: 9 bytes leftover after parsing attributes in process `syz.2.675'. [ 456.354869][ T8351] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 456.434469][ T5864] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 456.439332][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 456.539003][ T8351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.587720][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 456.590267][ T5864] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.590298][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.590325][ T5864] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.590359][ T5864] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.590402][ T5864] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.590427][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.746929][ T8352] macvlan2: entered promiscuous mode [ 456.748735][ T8352] macvlan2: entered allmulticast mode [ 457.155160][ T5726] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 457.314171][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.314200][ T5726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 457.333656][ T5726] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 457.343920][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.376414][ T5726] usb 5-1: config 0 descriptor?? [ 457.632606][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.654118][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.708721][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.735149][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.016049][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.030981][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.290428][ T5726] Bluetooth: Can't get version to change to load ram patch err [ 458.290449][ T5726] Bluetooth: Loading sysconfig file failed [ 458.290513][ T5726] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 458.368278][ T5726] usb 5-1: USB disconnect, device number 23 [ 458.765367][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 459.479167][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 459.646060][ T8372] fuse: Bad value for 'fd' [ 459.667543][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.667573][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.701698][ T31] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 459.701732][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.701753][ T31] usb 2-1: Product: syz [ 459.701769][ T31] usb 2-1: Manufacturer: syz [ 459.701785][ T31] usb 2-1: SerialNumber: syz [ 459.780876][ T31] usb 2-1: 0:1 : does not exist [ 460.375431][ T31] usb 2-1: unit 0 not found! [ 460.555591][ T5864] usb 4-1: usb_control_msg returned -71 [ 460.555624][ T5864] usbtmc 4-1:16.0: can't read capabilities [ 460.818653][ T5864] usb 4-1: USB disconnect, device number 31 [ 460.871621][ T31] usb 2-1: USB disconnect, device number 28 [ 461.439815][ T7729] udevd[7729]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.656729][ T8374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.661003][ T8374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.678725][ T8374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 461.678896][ T8374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.865271][ T8387] FAULT_INJECTION: forcing a failure. [ 461.865271][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 461.865306][ T8387] CPU: 1 UID: 0 PID: 8387 Comm: syz.3.692 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.865331][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 461.865356][ T8387] Call Trace: [ 461.865364][ T8387] [ 461.865372][ T8387] dump_stack_lvl+0xe8/0x150 [ 461.865402][ T8387] should_fail_ex+0x46b/0x600 [ 461.865438][ T8387] should_failslab+0xa8/0x100 [ 461.865485][ T8387] __kmalloc_noprof+0xdf/0x7b0 [ 461.865512][ T8387] ? tomoyo_encode+0x28b/0x550 [ 461.865542][ T8387] tomoyo_encode+0x28b/0x550 [ 461.865573][ T8387] tomoyo_realpath_from_path+0x58d/0x5d0 [ 461.865611][ T8387] ? tomoyo_path_number_perm+0x219/0x630 [ 461.865646][ T8387] tomoyo_path_number_perm+0x246/0x630 [ 461.865684][ T8387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.865717][ T8387] ? __lock_acquire+0x6b5/0x2cf0 [ 461.865749][ T8387] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.865807][ T8387] ? __fget_files+0x2a/0x420 [ 461.865831][ T8387] ? __fget_files+0x2a/0x420 [ 461.865851][ T8387] ? __fget_files+0x3a6/0x420 [ 461.865881][ T8387] ? __fget_files+0x2a/0x420 [ 461.865904][ T8387] security_file_ioctl+0xc3/0x2a0 [ 461.865939][ T8387] __se_sys_ioctl+0x47/0x170 [ 461.865965][ T8387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.865989][ T8387] do_syscall_64+0x174/0x580 [ 461.866024][ T8387] ? trace_irq_disable+0x3b/0x140 [ 461.866049][ T8387] ? clear_bhb_loop+0x40/0x90 [ 461.866075][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.866095][ T8387] RIP: 0033:0x7fa7fe59ce59 [ 461.866113][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.866131][ T8387] RSP: 002b:00007fa7fc7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.866153][ T8387] RAX: ffffffffffffffda RBX: 00007fa7fe815fa0 RCX: 00007fa7fe59ce59 [ 461.866175][ T8387] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 461.866188][ T8387] RBP: 00007fa7fc7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 461.866201][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.866214][ T8387] R13: 00007fa7fe816038 R14: 00007fa7fe815fa0 R15: 00007fffd20b4388 [ 461.866248][ T8387] [ 461.914690][ T8387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.919810][ T5718] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 462.375591][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 462.644560][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 462.796982][ T8390] block device autoloading is deprecated and will be removed. [ 463.017702][ T5718] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 463.017760][ T5718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.017783][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.017809][ T5718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.017834][ T5718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.017877][ T5718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.017903][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.414428][ T5718] usb 2-1: usb_control_msg returned -32 [ 463.414979][ T5718] usbtmc 2-1:16.0: can't read capabilities [ 463.684924][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 463.684972][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 463.684998][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 464.443019][ T8412] netlink: 71 bytes leftover after parsing attributes in process `syz.2.680'. [ 464.584405][ T5622] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 464.594677][ T5340] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 464.741893][ T5622] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 464.741924][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.741945][ T5622] usb 5-1: Product: syz [ 464.741961][ T5622] usb 5-1: Manufacturer: syz [ 464.741974][ T5622] usb 5-1: SerialNumber: syz [ 464.764735][ T5340] usb 4-1: Using ep0 maxpacket: 32 [ 464.782841][ T5340] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.782872][ T5340] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.809600][ T5340] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 464.809685][ T5340] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 464.809705][ T5340] usb 4-1: Product: syz [ 464.809719][ T5340] usb 4-1: Manufacturer: syz [ 464.811898][ T5622] usb 5-1: config 0 descriptor?? [ 464.860929][ T5622] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 464.889823][ T5340] hub 4-1:4.0: USB hub found [ 465.092897][ T5340] hub 4-1:4.0: 2 ports detected [ 465.551118][ T31] usb 2-1: USB disconnect, device number 29 [ 465.665614][ T5340] hub 4-1:4.0: set hub depth failed [ 465.697656][ T5340] usb 4-1: USB disconnect, device number 32 [ 466.006212][ T5718] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 466.154374][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 466.161309][ T5718] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.161577][ T5718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.161608][ T5718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.161635][ T5718] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.161939][ T5718] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.161966][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.578387][ T5622] gspca_m5602: Failed to find a sensor [ 466.578403][ T5622] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 466.650116][ T5622] usb 5-1: USB disconnect, device number 24 [ 468.261182][ T8454] netlink: 9 bytes leftover after parsing attributes in process `syz.3.711'. [ 470.053944][ T8457] Bluetooth: MGMT ver 1.23 [ 470.066340][ T8457] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 470.256810][ T5622] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 470.407419][ T5622] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.407452][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.464102][ T5622] usb 5-1: config 0 descriptor?? [ 470.513615][ T5622] cp210x 5-1:0.0: cp210x converter detected [ 470.683862][ T8468] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.716'. [ 470.753411][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.716'. [ 470.970269][ T5622] usb 5-1: cp210x converter now attached to ttyUSB0 [ 471.005523][ T5718] usb 3-1: usb_control_msg returned -71 [ 471.005575][ T5718] usbtmc 3-1:16.0: can't read capabilities [ 471.075643][ T5718] usb 3-1: USB disconnect, device number 22 [ 473.907619][ T5340] usb 5-1: USB disconnect, device number 25 [ 473.960654][ T5340] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 474.704810][ T8496] netlink: 9 bytes leftover after parsing attributes in process `syz.2.724'. [ 475.621887][ T5340] cp210x 5-1:0.0: device disconnected [ 475.654340][ T5866] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 475.837173][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.840451][ T5866] usb 4-1: config 175 has an invalid descriptor of length 0, skipping remainder of the config [ 475.840480][ T5866] usb 4-1: config 175 has 0 interfaces, different from the descriptor's value: 1 [ 475.887386][ T5866] usb 4-1: New USB device found, idVendor=0557, idProduct=fd11, bcdDevice=f3.7a [ 475.887425][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.887447][ T5866] usb 4-1: Product: syz [ 475.887462][ T5866] usb 4-1: Manufacturer: syz [ 475.887477][ T5866] usb 4-1: SerialNumber: syz [ 476.194951][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.201528][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.233308][ T5866] usb 4-1: USB disconnect, device number 33 [ 477.590053][ T8505] netlink: 9 bytes leftover after parsing attributes in process `syz.0.729'. [ 477.729372][ T8505] netlink: 9 bytes leftover after parsing attributes in process `syz.0.729'. [ 478.982763][ T8516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.982807][ T8516] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 479.371187][ T8516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.371212][ T8516] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 479.477290][ T8516] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 479.477307][ T8516] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 479.515559][ T8516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.515582][ T8516] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 480.014390][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 480.174861][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 480.178732][ T5898] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.178765][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.178792][ T5898] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.178831][ T5898] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.178875][ T5898] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 480.178899][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.288911][ T8539] netlink: 9 bytes leftover after parsing attributes in process `syz.3.738'. [ 484.875487][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 485.558731][ T5898] usb 3-1: usb_control_msg returned -110 [ 485.558774][ T5898] usbtmc 3-1:16.0: can't read capabilities [ 485.877104][ T5866] usb 3-1: USB disconnect, device number 23 [ 486.147694][ T8563] FAULT_INJECTION: forcing a failure. [ 486.147694][ T8563] name failslab, interval 1, probability 0, space 0, times 0 [ 486.147731][ T8563] CPU: 0 UID: 0 PID: 8563 Comm: syz.4.743 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 486.147756][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.147770][ T8563] Call Trace: [ 486.147778][ T8563] [ 486.147787][ T8563] dump_stack_lvl+0xe8/0x150 [ 486.147819][ T8563] should_fail_ex+0x46b/0x600 [ 486.147855][ T8563] should_failslab+0xa8/0x100 [ 486.147885][ T8563] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 486.147911][ T8563] ? __alloc_skb+0x1d0/0x7d0 [ 486.147939][ T8563] ? lockdep_hardirqs_on+0x7a/0x110 [ 486.147983][ T8563] __alloc_skb+0x1d0/0x7d0 [ 486.148056][ T8563] netlink_sendmsg+0x5d4/0xb40 [ 486.148103][ T8563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.148146][ T8563] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.148173][ T8563] ____sys_sendmsg+0x94c/0x9c0 [ 486.148214][ T8563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.148258][ T8563] ? import_iovec+0x73/0xa0 [ 486.148297][ T8563] ___sys_sendmsg+0x2a5/0x360 [ 486.148331][ T8563] ? __lock_acquire+0x6b5/0x2cf0 [ 486.148365][ T8563] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.148438][ T8563] ? __fget_files+0x2a/0x420 [ 486.148459][ T8563] ? __fget_files+0x3a6/0x420 [ 486.148491][ T8563] __x64_sys_sendmsg+0x1c3/0x2a0 [ 486.148529][ T8563] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.148573][ T8563] ? rcu_is_watching+0x15/0xb0 [ 486.148617][ T8563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.148642][ T8563] do_syscall_64+0x174/0x580 [ 486.148676][ T8563] ? trace_irq_disable+0x3b/0x140 [ 486.148703][ T8563] ? clear_bhb_loop+0x40/0x90 [ 486.148730][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.148754][ T8563] RIP: 0033:0x7f40122cce59 [ 486.148774][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.148795][ T8563] RSP: 002b:00007f40104dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.148819][ T8563] RAX: ffffffffffffffda RBX: 00007f4012546180 RCX: 00007f40122cce59 [ 486.148836][ T8563] RDX: 0000000000000840 RSI: 00002000000002c0 RDI: 0000000000000003 [ 486.148851][ T8563] RBP: 00007f40104dc090 R08: 0000000000000000 R09: 0000000000000000 [ 486.148866][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.148879][ T8563] R13: 00007f4012546218 R14: 00007f4012546180 R15: 00007ffc58cfada8 [ 486.148914][ T8563] [ 487.144733][ T8568] netlink: 9 bytes leftover after parsing attributes in process `syz.2.744'. [ 488.324984][ T8568] netlink: 9 bytes leftover after parsing attributes in process `syz.2.744'. [ 488.597589][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 488.805978][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 489.780741][ T8584] netlink: 9 bytes leftover after parsing attributes in process `syz.3.749'. [ 491.008387][ T8589] FAULT_INJECTION: forcing a failure. [ 491.008387][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 491.008465][ T8589] CPU: 1 UID: 0 PID: 8589 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 491.008491][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.008506][ T8589] Call Trace: [ 491.008515][ T8589] [ 491.008525][ T8589] dump_stack_lvl+0xe8/0x150 [ 491.008557][ T8589] should_fail_ex+0x46b/0x600 [ 491.008595][ T8589] should_failslab+0xa8/0x100 [ 491.008625][ T8589] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 491.008652][ T8589] ? __alloc_skb+0x1d0/0x7d0 [ 491.008682][ T8589] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 491.008713][ T8589] __alloc_skb+0x1d0/0x7d0 [ 491.008749][ T8589] alloc_skb_with_frags+0xc8/0x760 [ 491.008787][ T8589] ? __pfx___schedule+0x10/0x10 [ 491.008823][ T8589] sock_alloc_send_pskb+0x884/0x9a0 [ 491.008865][ T8589] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 491.008894][ T8589] ? __pfx_pep_sendmsg+0x10/0x10 [ 491.008933][ T8589] pep_sendmsg+0x158/0xb00 [ 491.008959][ T8589] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.008991][ T8589] ? irqentry_exit+0x218/0x8b0 [ 491.009036][ T8589] ? __pfx_pep_sendmsg+0x10/0x10 [ 491.009069][ T8589] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 491.009098][ T8589] ? pn_socket_bind+0x40d/0x550 [ 491.009126][ T8589] pn_socket_sendmsg+0x1e5/0x250 [ 491.009159][ T8589] ? __pfx_pn_socket_sendmsg+0x10/0x10 [ 491.009212][ T8589] ____sys_sendmsg+0x94c/0x9c0 [ 491.009254][ T8589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.009299][ T8589] ? import_iovec+0x73/0xa0 [ 491.009339][ T8589] ___sys_sendmsg+0x2a5/0x360 [ 491.009374][ T8589] ? __lock_acquire+0x6b5/0x2cf0 [ 491.009409][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.009483][ T8589] ? __fget_files+0x2a/0x420 [ 491.009505][ T8589] ? __fget_files+0x3a6/0x420 [ 491.009538][ T8589] __x64_sys_sendmsg+0x1c3/0x2a0 [ 491.009577][ T8589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.009624][ T8589] ? __pfx_ksys_write+0x10/0x10 [ 491.009660][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.009685][ T8589] do_syscall_64+0x174/0x580 [ 491.009721][ T8589] ? clear_bhb_loop+0x40/0x90 [ 491.009750][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.009774][ T8589] RIP: 0033:0x7f8cfb61ce59 [ 491.009796][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.009816][ T8589] RSP: 002b:00007f8cf982c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.009841][ T8589] RAX: ffffffffffffffda RBX: 00007f8cfb896180 RCX: 00007f8cfb61ce59 [ 491.009857][ T8589] RDX: 0000000000000080 RSI: 0000200000001100 RDI: 0000000000000005 [ 491.009872][ T8589] RBP: 00007f8cf982c090 R08: 0000000000000000 R09: 0000000000000000 [ 491.009886][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.009900][ T8589] R13: 00007f8cfb896218 R14: 00007f8cfb896180 R15: 00007fffc95567e8 [ 491.009934][ T8589] [ 492.554382][ T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 492.704897][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 492.709412][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.709563][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 492.709595][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 492.709619][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 492.709665][ T31] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 492.709690][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.734471][ T5864] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 492.806677][ T31] usb 3-1: config 0 descriptor?? [ 492.894402][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 492.896942][ T5864] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.896972][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.897001][ T5864] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.897029][ T5864] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.897075][ T5864] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.897099][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.289545][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.322680][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.416674][ T31] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 493.416722][ T31] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 493.416748][ T31] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 493.416772][ T31] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 493.416796][ T31] nintendo 0003:057E:2019.0005: unknown main item tag 0x0 [ 493.464422][ T31] nintendo 0003:057E:2019.0005: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 493.668222][ T8605] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 493.689252][ T8605] sctp: [Deprecated]: syz.3.753 (pid 8605) Use of int in maxseg socket option. [ 493.689252][ T8605] Use struct sctp_assoc_value instead [ 493.722055][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.753'. [ 493.868774][ T31] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-90 [ 493.868799][ T31] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-90 [ 493.868849][ T31] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-90 [ 494.319304][ T31] nintendo 0003:057E:2019.0005: probe - fail = -90 [ 494.319606][ T31] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -90 [ 494.428009][ T31] usb 3-1: USB disconnect, device number 24 [ 494.703049][ T8612] netlink: 9 bytes leftover after parsing attributes in process `syz.0.757'. [ 495.057862][ T8612] netlink: 9 bytes leftover after parsing attributes in process `syz.0.757'. [ 497.212550][ T8631] FAULT_INJECTION: forcing a failure. [ 497.212550][ T8631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.214166][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.4.762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 497.214204][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.214218][ T8631] Call Trace: [ 497.214227][ T8631] [ 497.214237][ T8631] dump_stack_lvl+0xe8/0x150 [ 497.214268][ T8631] should_fail_ex+0x46b/0x600 [ 497.214306][ T8631] _copy_from_user+0x2d/0xb0 [ 497.214322][ T8631] kstrtouint_from_user+0xd6/0x180 [ 497.214347][ T8631] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 497.214381][ T8631] proc_fail_nth_write+0x8e/0x210 [ 497.214397][ T8631] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.214418][ T8631] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.214436][ T8631] vfs_write+0x2a3/0xba0 [ 497.214462][ T8631] ? __pfx_vfs_write+0x10/0x10 [ 497.214483][ T8631] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.214509][ T8631] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.214533][ T8631] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.214558][ T8631] ? mutex_lock_nested+0x152/0x1d0 [ 497.214576][ T8631] ? fdget_pos+0x252/0x320 [ 497.214599][ T8631] ksys_write+0x156/0x270 [ 497.214620][ T8631] ? __pfx_ksys_write+0x10/0x10 [ 497.214645][ T8631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.214663][ T8631] do_syscall_64+0x174/0x580 [ 497.214688][ T8631] ? clear_bhb_loop+0x40/0x90 [ 497.214710][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.214727][ T8631] RIP: 0033:0x7f401228d68e [ 497.214742][ T8631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.214755][ T8631] RSP: 002b:00007f40104dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.214772][ T8631] RAX: ffffffffffffffda RBX: 00007f40104dc6c0 RCX: 00007f401228d68e [ 497.214784][ T8631] RDX: 0000000000000001 RSI: 00007f40104dc0a0 RDI: 0000000000000004 [ 497.214794][ T8631] RBP: 00007f40104dc090 R08: 0000000000000000 R09: 0000000000000000 [ 497.214804][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.214814][ T8631] R13: 00007f4012546218 R14: 00007f4012546180 R15: 00007ffc58cfada8 [ 497.214839][ T8631] [ 497.575689][ T31] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 497.770011][ T31] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 497.770052][ T31] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 497.770074][ T31] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 497.770099][ T31] usb 3-1: config 150 has no interface number 0 [ 497.770134][ T31] usb 3-1: config 150 interface 204 has no altsetting 0 [ 497.825698][ T31] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 497.825728][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.825749][ T31] usb 3-1: Product: syz [ 497.825765][ T31] usb 3-1: Manufacturer: syz [ 497.825780][ T31] usb 3-1: SerialNumber: syz [ 498.007143][ T5864] usb 2-1: usb_control_msg returned -110 [ 498.007196][ T5864] usbtmc 2-1:16.0: can't read capabilities [ 498.724181][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.760757][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.138602][ T5866] usb 2-1: USB disconnect, device number 30 [ 500.184373][ T5866] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 500.345766][ T5866] usb 2-1: Using ep0 maxpacket: 8 [ 500.363555][ T5866] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.363576][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.363594][ T5866] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.364118][ T5866] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.364151][ T5866] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 500.364168][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.817749][ T8647] netlink: 9 bytes leftover after parsing attributes in process `syz.0.766'. [ 501.955897][ T8647] netlink: 9 bytes leftover after parsing attributes in process `syz.0.766'. [ 503.661106][ T5866] usb 2-1: usb_control_msg returned -71 [ 503.661141][ T5866] usbtmc 2-1:16.0: can't read capabilities [ 503.794539][ T5866] usb 2-1: USB disconnect, device number 31 [ 506.441957][ T31] usb 3-1: USB disconnect, device number 25 [ 506.644535][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 506.649728][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.649811][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.391660][ T8672] netlink: 9 bytes leftover after parsing attributes in process `syz.3.774'. [ 508.561616][ T8672] netlink: 9 bytes leftover after parsing attributes in process `syz.3.774'. [ 509.684701][ T8676] netlink: 9 bytes leftover after parsing attributes in process `syz.4.776'. [ 510.254359][ T5866] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 511.308714][ T8685] netlink: 9 bytes leftover after parsing attributes in process `syz.2.780'. [ 512.212744][ T5726] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 512.284952][ T8685] netlink: 9 bytes leftover after parsing attributes in process `syz.2.780'. [ 512.480021][ T5726] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 512.480055][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.480078][ T5726] usb 2-1: Product: syz [ 512.480093][ T5726] usb 2-1: Manufacturer: syz [ 512.480110][ T5726] usb 2-1: SerialNumber: syz [ 512.519490][ T5726] usb 2-1: config 0 descriptor?? [ 513.874691][ T5726] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 513.883446][ T5726] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 513.908477][ T5726] usb 2-1: USB disconnect, device number 32 [ 514.533343][ T8714] netlink: 'syz.4.786': attribute type 3 has an invalid length. [ 516.191889][ T8729] netlink: 9 bytes leftover after parsing attributes in process `syz.1.788'. [ 517.710800][ T8729] netlink: 9 bytes leftover after parsing attributes in process `syz.1.788'. [ 519.336408][ T8757] FAULT_INJECTION: forcing a failure. [ 519.336408][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 519.336442][ T8757] CPU: 1 UID: 0 PID: 8757 Comm: syz.4.799 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 519.336465][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.336477][ T8757] Call Trace: [ 519.336486][ T8757] [ 519.336494][ T8757] dump_stack_lvl+0xe8/0x150 [ 519.336522][ T8757] should_fail_ex+0x46b/0x600 [ 519.336558][ T8757] should_failslab+0xa8/0x100 [ 519.336588][ T8757] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 519.336612][ T8757] ? __alloc_skb+0x1d0/0x7d0 [ 519.336637][ T8757] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.336674][ T8757] __alloc_skb+0x1d0/0x7d0 [ 519.336706][ T8757] netlink_sendmsg+0x5d4/0xb40 [ 519.336744][ T8757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.336777][ T8757] ? unwind_get_return_address+0x4d/0x90 [ 519.336808][ T8757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.336834][ T8757] ____sys_sendmsg+0x94c/0x9c0 [ 519.336871][ T8757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.336912][ T8757] ? import_iovec+0x73/0xa0 [ 519.336947][ T8757] ___sys_sendmsg+0x2a5/0x360 [ 519.336977][ T8757] ? __lock_acquire+0x6b5/0x2cf0 [ 519.337010][ T8757] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.337074][ T8757] ? __fget_files+0x2a/0x420 [ 519.337098][ T8757] ? __fget_files+0x3a6/0x420 [ 519.337128][ T8757] __x64_sys_sendmsg+0x1c3/0x2a0 [ 519.337169][ T8757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.337211][ T8757] ? __pfx_ksys_write+0x10/0x10 [ 519.337244][ T8757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.337265][ T8757] do_syscall_64+0x174/0x580 [ 519.337294][ T8757] ? trace_irq_disable+0x3b/0x140 [ 519.337317][ T8757] ? clear_bhb_loop+0x40/0x90 [ 519.337341][ T8757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.337360][ T8757] RIP: 0033:0x7f40122cce59 [ 519.337377][ T8757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.337395][ T8757] RSP: 002b:00007f401051e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.337415][ T8757] RAX: ffffffffffffffda RBX: 00007f4012545fa0 RCX: 00007f40122cce59 [ 519.337430][ T8757] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 519.337442][ T8757] RBP: 00007f401051e090 R08: 0000000000000000 R09: 0000000000000000 [ 519.337454][ T8757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.337466][ T8757] R13: 00007f4012546038 R14: 00007f4012545fa0 R15: 00007ffc58cfada8 [ 519.337496][ T8757] [ 519.518696][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 519.526797][ T5866] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 519.722125][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 519.734322][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 519.757072][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 519.759122][ T9] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 519.759168][ T9] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 519.759191][ T9] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 519.759214][ T9] usb 4-1: config 166 has no interface number 0 [ 519.759231][ T9] usb 4-1: config 166 has no interface number 1 [ 519.759304][ T9] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 519.759328][ T9] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 519.759367][ T9] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 519.759393][ T9] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 519.759423][ T9] usb 4-1: config 166 interface 34 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 519.759453][ T9] usb 4-1: config 166 interface 177 has no altsetting 0 [ 519.759475][ T9] usb 4-1: config 166 interface 34 has no altsetting 0 [ 519.761095][ T5866] usb 3-1: unable to get BOS descriptor or descriptor too short [ 519.764639][ T5866] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 519.764717][ T5866] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 519.764765][ T5866] usb 3-1: config 14 has no interface number 0 [ 519.764783][ T5866] usb 3-1: config 14 has no interface number 1 [ 519.765043][ T5866] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 519.765095][ T5866] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 519.765124][ T5866] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 519.765160][ T5866] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 519.765232][ T5866] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 519.765274][ T5866] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.765304][ T5866] usb 3-1: config 14 interface 57 has no altsetting 0 [ 519.765350][ T5866] usb 3-1: config 14 interface 228 has no altsetting 0 [ 519.801358][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 519.801390][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.801412][ T9] usb 4-1: Product: syz [ 519.801429][ T9] usb 4-1: Manufacturer: syz [ 519.801445][ T9] usb 4-1: SerialNumber: syz [ 519.828328][ T5866] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 519.828406][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.828468][ T5866] usb 3-1: Product: syz [ 519.828510][ T5866] usb 3-1: Manufacturer: syz [ 519.828545][ T5866] usb 3-1: SerialNumber: syz [ 520.365098][ T9] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 520.393542][ T5866] legousbtower 3-1:14.57: interrupt endpoints not found [ 520.444133][ T8767] process 'syz.4.801' launched './file0' with NULL argv: empty string added [ 520.629086][ T9] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 520.826907][ T5866] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 520.833332][ T5866] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 521.380889][ T8779] FAULT_INJECTION: forcing a failure. [ 521.380889][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.380928][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.2.798 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 521.380954][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 521.380969][ T8779] Call Trace: [ 521.380978][ T8779] [ 521.380987][ T8779] dump_stack_lvl+0xe8/0x150 [ 521.381018][ T8779] should_fail_ex+0x46b/0x600 [ 521.381056][ T8779] strncpy_from_user+0x36/0x2b0 [ 521.381092][ T8779] do_getname+0x77/0x250 [ 521.381130][ T8779] do_sys_openat2+0xca/0x200 [ 521.381171][ T8779] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.381209][ T8779] ? ksys_write+0x248/0x270 [ 521.381238][ T8779] ? __pfx_ksys_write+0x10/0x10 [ 521.381270][ T8779] __x64_sys_openat+0x138/0x170 [ 521.381295][ T8779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.381319][ T8779] do_syscall_64+0x174/0x580 [ 521.381355][ T8779] ? trace_irq_disable+0x3b/0x140 [ 521.381381][ T8779] ? clear_bhb_loop+0x40/0x90 [ 521.381409][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.381441][ T8779] RIP: 0033:0x7fa7af29d68e [ 521.381462][ T8779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.381482][ T8779] RSP: 002b:00007fa7ad514b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.381506][ T8779] RAX: ffffffffffffffda RBX: 00007fa7ad5156c0 RCX: 00007fa7af29d68e [ 521.381522][ T8779] RDX: 0000000000000002 RSI: 00007fa7ad514c00 RDI: ffffffffffffff9c [ 521.381537][ T8779] RBP: 00007fa7ad515090 R08: 0000000000000000 R09: 0000000000000000 [ 521.381550][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.381563][ T8779] R13: 00007fa7af556128 R14: 00007fa7af556090 R15: 00007ffedf995c08 [ 521.381598][ T8779] [ 522.459697][ T5718] usb 3-1: USB disconnect, device number 27 [ 522.700917][ T5718] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 522.738341][ T9] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 522.738389][ T9] uvcvideo 4-1:166.34: No valid video chain found. [ 522.742795][ T9] usb 4-1: USB disconnect, device number 34 [ 523.214361][ T31] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 523.386132][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 523.757403][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 524.252424][ T8795] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 524.282476][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 524.282523][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 524.282540][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.282556][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.282585][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 524.282600][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.634418][ T5718] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 524.800370][ T5718] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 524.800404][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.858561][ T5718] usb 4-1: config 0 descriptor?? [ 524.920842][ T5718] cp210x 4-1:0.0: cp210x converter detected [ 525.129403][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 525.284444][ T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 525.459511][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.459549][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.459592][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 525.459619][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.571674][ T9] usb 2-1: config 0 descriptor?? [ 525.596568][ T5718] usb 4-1: cp210x converter now attached to ttyUSB0 [ 526.116118][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.116159][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.116188][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.116217][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.116244][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.116272][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.116464][ T9] isku 0003:1E7D:319C.0006: unknown main item tag 0x0 [ 526.377760][ T9] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 526.379139][ T9] isku 0003:1E7D:319C.0006: couldn't init struct isku_device [ 526.379211][ T9] isku 0003:1E7D:319C.0006: couldn't install keyboard [ 526.628679][ T9] isku 0003:1E7D:319C.0006: probe with driver isku failed with error -71 [ 526.741176][ T9] usb 2-1: USB disconnect, device number 33 [ 526.959139][ T5622] usb 4-1: USB disconnect, device number 35 [ 527.012082][ T8817] fido_id[8817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 527.289824][ T5622] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.490288][ T5622] cp210x 4-1:0.0: device disconnected [ 527.494910][ T5718] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 527.660032][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 527.670537][ T5718] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 527.670565][ T5718] usb 5-1: config 0 has no interface number 0 [ 527.670614][ T5718] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 527.670652][ T5718] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 527.721313][ T5718] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 527.721345][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.721372][ T5718] usb 5-1: Product: syz [ 527.721384][ T5718] usb 5-1: Manufacturer: syz [ 527.721394][ T5718] usb 5-1: SerialNumber: syz [ 527.789874][ T5718] usb 5-1: config 0 descriptor?? [ 527.807896][ T8820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 527.811667][ T8820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.160996][ T8820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.176825][ T8820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.275764][ T8827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'. [ 528.275783][ T8827] openvswitch: netlink: Flow key attr not present in new flow. [ 528.437244][ T5718] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 529.444622][ T31] usb 3-1: usb_control_msg returned -110 [ 529.444671][ T31] usbtmc 3-1:16.0: can't read capabilities [ 530.284360][ T8836] netlink: 9 bytes leftover after parsing attributes in process `syz.3.821'. [ 531.354825][ T8836] netlink: 9 bytes leftover after parsing attributes in process `syz.3.821'. [ 531.402444][ T5718] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 531.402657][ T5718] asix 5-1:0.34: probe with driver asix failed with error -71 [ 531.409017][ T5718] usb 5-1: USB disconnect, device number 26 [ 532.006823][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'. [ 532.051980][ T8844] sctp: [Deprecated]: syz.4.824 (pid 8844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.051980][ T8844] Use struct sctp_sack_info instead [ 532.592131][ T5866] usb 3-1: USB disconnect, device number 28 [ 532.992843][ T8854] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 533.244734][ T5866] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 533.419075][ T5866] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.419107][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.453010][ T5866] usb 3-1: config 0 descriptor?? [ 533.468992][ T5866] cp210x 3-1:0.0: cp210x converter detected [ 534.613679][ T5866] usb 3-1: cp210x converter now attached to ttyUSB0 [ 537.484739][ T5898] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 538.488158][ T31] usb 3-1: USB disconnect, device number 29 [ 538.558184][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 538.810319][ T31] cp210x 3-1:0.0: device disconnected [ 539.165502][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 539.264382][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 539.424776][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 539.427178][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.427212][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.427231][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.427249][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.427280][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.427298][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.482415][ T31] usb 3-1: usb_control_msg returned -71 [ 540.482461][ T31] usbtmc 3-1:16.0: can't read capabilities [ 540.502741][ T31] usb 3-1: USB disconnect, device number 30 [ 540.954482][ T5866] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 541.088272][ T8915] FAULT_INJECTION: forcing a failure. [ 541.088272][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.088299][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.1.846 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.088316][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 541.088325][ T8915] Call Trace: [ 541.088330][ T8915] [ 541.088336][ T8915] dump_stack_lvl+0xe8/0x150 [ 541.088357][ T8915] should_fail_ex+0x46b/0x600 [ 541.088382][ T8915] _copy_from_iter+0x1d3/0x1670 [ 541.088412][ T8915] ? __pfx__copy_from_iter+0x10/0x10 [ 541.088432][ T8915] ? trace_kmalloc+0x2a/0xf0 [ 541.088451][ T8915] ? rcu_is_watching+0x15/0xb0 [ 541.088480][ T8915] file_tty_write+0x4c9/0xa10 [ 541.088501][ T8915] vfs_write+0x629/0xba0 [ 541.088524][ T8915] ? __pfx_vfs_write+0x10/0x10 [ 541.088548][ T8915] ? __fget_files+0x2a/0x420 [ 541.088568][ T8915] ksys_write+0x156/0x270 [ 541.088586][ T8915] ? __pfx_ksys_write+0x10/0x10 [ 541.088609][ T8915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.088625][ T8915] do_syscall_64+0x174/0x580 [ 541.088674][ T8915] ? clear_bhb_loop+0x40/0x90 [ 541.088700][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.088721][ T8915] RIP: 0033:0x7f8cfb61ce59 [ 541.088738][ T8915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.088756][ T8915] RSP: 002b:00007f8cf986e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.088777][ T8915] RAX: ffffffffffffffda RBX: 00007f8cfb895fa0 RCX: 00007f8cfb61ce59 [ 541.088799][ T8915] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 541.088809][ T8915] RBP: 00007f8cf986e090 R08: 0000000000000000 R09: 0000000000000000 [ 541.088818][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.088826][ T8915] R13: 00007f8cfb896038 R14: 00007f8cfb895fa0 R15: 00007fffc95567e8 [ 541.088849][ T8915] [ 541.801114][ T8930] FAULT_INJECTION: forcing a failure. [ 541.801114][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.801146][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.1.850 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.801167][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 541.801178][ T8930] Call Trace: [ 541.801190][ T8930] [ 541.801198][ T8930] dump_stack_lvl+0xe8/0x150 [ 541.801225][ T8930] should_fail_ex+0x46b/0x600 [ 541.801258][ T8930] _copy_from_iter+0x1d3/0x1670 [ 541.801287][ T8930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.801321][ T8930] ? __pfx_policy_nodemask+0x10/0x10 [ 541.801351][ T8930] ? __pfx__copy_from_iter+0x10/0x10 [ 541.801381][ T8930] ? alloc_pages_mpol+0x2ae/0x380 [ 541.801412][ T8930] copy_page_from_iter+0x220/0x2d0 [ 541.801443][ T8930] tun_get_user+0x1bfa/0x4400 [ 541.801472][ T8930] ? is_bpf_text_address+0x292/0x2b0 [ 541.801498][ T8930] ? tun_get_user+0x8a1/0x4400 [ 541.801545][ T8930] ? __pfx_tun_get_user+0x10/0x10 [ 541.801577][ T8930] ? __lock_acquire+0x6b5/0x2cf0 [ 541.801617][ T8930] ? ref_tracker_alloc+0x332/0x4a0 [ 541.801649][ T8930] ? get_pid_task+0x20/0x1f0 [ 541.801678][ T8930] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 541.801708][ T8930] ? tun_get+0x1c/0x2f0 [ 541.801745][ T8930] ? tun_get+0x1c/0x2f0 [ 541.801771][ T8930] ? tun_get+0x1c/0x2f0 [ 541.801803][ T8930] ? tun_get+0x1c/0x2f0 [ 541.801829][ T8930] tun_chr_write_iter+0x119/0x200 [ 541.801855][ T8930] vfs_write+0x629/0xba0 [ 541.801880][ T8930] ? __pfx_vfs_write+0x10/0x10 [ 541.801906][ T8930] ? __fget_files+0x2a/0x420 [ 541.801929][ T8930] ksys_write+0x156/0x270 [ 541.801950][ T8930] ? __pfx_ksys_write+0x10/0x10 [ 541.801977][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.801997][ T8930] do_syscall_64+0x174/0x580 [ 541.802021][ T8930] ? trace_irq_disable+0x3b/0x140 [ 541.802039][ T8930] ? clear_bhb_loop+0x40/0x90 [ 541.802058][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.802075][ T8930] RIP: 0033:0x7f8cfb5dd68e [ 541.802091][ T8930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 541.802105][ T8930] RSP: 002b:00007f8cf984cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.802123][ T8930] RAX: ffffffffffffffda RBX: 00007f8cf984d6c0 RCX: 00007f8cfb5dd68e [ 541.802136][ T8930] RDX: 0000000000000036 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 541.802147][ T8930] RBP: 00007f8cf984d090 R08: 0000000000000000 R09: 0000000000000000 [ 541.802158][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.802168][ T8930] R13: 00007f8cfb896128 R14: 00007f8cfb896090 R15: 00007fffc95567e8 [ 541.802194][ T8930] [ 542.863090][ T8934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 543.366323][ T8938] 9p: Bad value for 'rfdno' [ 546.180059][ T5866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 546.183356][ T5866] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 546.183385][ T5866] usb 4-1: chopping to 0 config(s) [ 546.183413][ T5866] usb 4-1: can't read configurations, error -32 [ 546.726452][ T8955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.857'. [ 547.819231][ T8961] lo speed is unknown, defaulting to 1000 [ 547.914428][ T5622] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 547.974377][ T36] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 548.074350][ T5622] usb 3-1: Using ep0 maxpacket: 16 [ 548.076859][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 548.076890][ T5622] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.076911][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 548.076937][ T5622] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 548.076961][ T5622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 548.076988][ T5622] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 548.082560][ T5622] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 548.082590][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.082612][ T5622] usb 3-1: Product: syz [ 548.082628][ T5622] usb 3-1: Manufacturer: syz [ 548.082642][ T5622] usb 3-1: SerialNumber: syz [ 548.139326][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 548.207458][ T5622] usb 3-1: config 0 descriptor?? [ 548.210823][ T8957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 548.210960][ T8957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 548.251266][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.251295][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.251321][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.251452][ T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.251493][ T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.251515][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.268166][ T8970] netem: incorrect gi model size [ 548.269888][ T8970] netem: change failed [ 548.500084][ T8972] binder: 8956:8972 ioctl 40106614 200000000000 returned -22 [ 548.539686][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 548.539897][ T5622] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 548.540090][ C0] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 549.268685][ T36] usb 5-1: usb_control_msg returned -71 [ 549.269683][ T36] usbtmc 5-1:16.0: can't read capabilities [ 549.397415][ T36] usb 5-1: USB disconnect, device number 28 [ 549.554393][ T8972] syzkaller1: entered promiscuous mode [ 549.554422][ T8972] syzkaller1: entered allmulticast mode [ 549.822990][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 550.342378][ T5622] usb 3-1: USB disconnect, device number 31 [ 550.366097][ T5622] mcba_usb 3-1:0.0 can0: device disconnected [ 550.824384][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 550.984216][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 550.984248][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.984275][ T9] usb 5-1: Product: syz [ 550.984292][ T9] usb 5-1: Manufacturer: syz [ 550.984308][ T9] usb 5-1: SerialNumber: syz [ 551.072114][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.383967][ T9007] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 552.088286][ T5718] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 552.656997][ T36] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 552.791067][ T5866] usb 5-1: USB disconnect, device number 29 [ 552.826671][ T36] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 552.826713][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.826733][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.826749][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 552.828093][ T36] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 552.828114][ T36] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 552.828128][ T36] usb 4-1: Manufacturer: syz [ 552.947865][ T36] usb 4-1: config 0 descriptor?? [ 553.437597][ T36] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 553.455063][ T5718] usb 5-1: Service connection timeout for: 256 [ 553.455088][ T5718] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 553.612535][ T36] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 553.615843][ T5718] ath9k_htc: Failed to initialize the device [ 553.627177][ T5866] usb 5-1: ath9k_htc: USB layer deinitialized [ 553.955338][ T5866] usb 4-1: USB disconnect, device number 38 [ 553.988954][ T9030] fido_id[9030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8243.0007/report_descriptor': No such file or directory [ 556.644343][ T5866] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 556.694392][ T36] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 556.794304][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 556.796482][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.796516][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.796546][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.796574][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.796623][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 556.796651][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.844294][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 556.853527][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.853644][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.853694][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.853723][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.242192][ T36] usb 2-1: config 0 descriptor?? [ 557.671244][ T36] hub 2-1:0.0: USB hub found [ 557.681586][ T36] hub 2-1:0.0: 1 port detected [ 557.754824][ T5866] usb 5-1: usb_control_msg returned -71 [ 557.754871][ T5866] usbtmc 5-1:16.0: can't read capabilities [ 557.919920][ T5866] usb 5-1: USB disconnect, device number 30 [ 558.224354][ T36] hub 2-1:0.0: activate --> -90 [ 558.764358][ T8442] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 558.914684][ T8442] usb 4-1: Using ep0 maxpacket: 8 [ 558.938348][ T8442] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 558.938379][ T8442] usb 4-1: config 0 has no interface number 0 [ 558.996173][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'. [ 559.473691][ T8442] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 559.473723][ T8442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.474028][ T8442] usb 4-1: Product: syz [ 559.474045][ T8442] usb 4-1: Manufacturer: syz [ 559.474060][ T8442] usb 4-1: SerialNumber: syz [ 559.491293][ T8442] usb 4-1: config 0 descriptor?? [ 559.905502][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.878'. [ 559.943560][ T36] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 559.943914][ T36] usb 2-1-port1: cannot reset (err = -32) [ 559.943934][ T36] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 559.947435][ T36] usb 2-1-port1: cannot disable (err = -32) [ 559.971958][ T36] usb 2-1-port1: cannot reset (err = -32) [ 559.972713][ T36] usb 2-1-port1: cannot reset (err = -32) [ 559.972735][ T36] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 559.973207][ T36] usb 2-1-port1: cannot disable (err = -32) [ 559.973355][ T36] usb 2-1-port1: attempt power cycle [ 560.020936][ T8442] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 560.021199][ T8442] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 560.369887][ T8442] usb 4-1: USB disconnect, device number 39 [ 561.437404][ T31] usb 2-1: USB disconnect, device number 34 [ 561.469639][ T9086] FAULT_INJECTION: forcing a failure. [ 561.469639][ T9086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.469675][ T9086] CPU: 1 UID: 0 PID: 9086 Comm: syz.2.882 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 561.469700][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.469715][ T9086] Call Trace: [ 561.469723][ T9086] [ 561.469750][ T9086] dump_stack_lvl+0xe8/0x150 [ 561.469783][ T9086] should_fail_ex+0x46b/0x600 [ 561.469824][ T9086] _copy_to_user+0x31/0xb0 [ 561.469848][ T9086] simple_read_from_buffer+0xe1/0x170 [ 561.469892][ T9086] proc_fail_nth_read+0x1be/0x230 [ 561.469920][ T9086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.469948][ T9086] ? rw_verify_area+0x2ac/0x4e0 [ 561.469975][ T9086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.470002][ T9086] vfs_read+0x212/0xa80 [ 561.470038][ T9086] ? __pfx_vfs_read+0x10/0x10 [ 561.470069][ T9086] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.470105][ T9086] ? lockdep_hardirqs_on+0x7a/0x110 [ 561.470142][ T9086] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 561.470178][ T9086] ? mutex_lock_nested+0x152/0x1d0 [ 561.470205][ T9086] ? fdget_pos+0x252/0x320 [ 561.470238][ T9086] ksys_read+0x156/0x270 [ 561.470269][ T9086] ? __pfx_ksys_read+0x10/0x10 [ 561.470306][ T9086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.470332][ T9086] do_syscall_64+0x174/0x580 [ 561.470368][ T9086] ? trace_irq_disable+0x3b/0x140 [ 561.470405][ T9086] ? clear_bhb_loop+0x40/0x90 [ 561.470435][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.470459][ T9086] RIP: 0033:0x7fa7af29d68e [ 561.470485][ T9086] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.470506][ T9086] RSP: 002b:00007fa7ad514fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.470531][ T9086] RAX: ffffffffffffffda RBX: 00007fa7ad5156c0 RCX: 00007fa7af29d68e [ 561.470548][ T9086] RDX: 000000000000000f RSI: 00007fa7ad5150a0 RDI: 0000000000000005 [ 561.470562][ T9086] RBP: 00007fa7ad515090 R08: 0000000000000000 R09: 0000000000000000 [ 561.470576][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.470590][ T9086] R13: 00007fa7af556128 R14: 00007fa7af556090 R15: 00007ffedf995c08 [ 561.470626][ T9086] [ 561.474086][ T36] usb 2-1-port1: cannot reset (err = -71) [ 564.396677][ T9089] netlink: 'syz.4.883': attribute type 4 has an invalid length. [ 568.351038][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.563973][ T9147] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.899'. [ 572.575579][ T9147] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.899'. [ 573.899971][ T9151] netlink: 9 bytes leftover after parsing attributes in process `syz.3.900'. [ 574.025708][ T5864] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 574.152840][ T9161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 575.184338][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 575.186449][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 575.189007][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 575.189035][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.189056][ T5864] usb 3-1: Product: syz [ 575.189071][ T5864] usb 3-1: Manufacturer: syz [ 575.189087][ T5864] usb 3-1: SerialNumber: syz [ 575.248460][ T5864] usb 3-1: config 0 descriptor?? [ 575.277894][ T5864] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 575.277935][ T5864] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 575.429456][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 575.897549][ T5864] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 576.058958][ T9180] netlink: 36 bytes leftover after parsing attributes in process `syz.4.909'. [ 576.076783][ T9180] netlink: 36 bytes leftover after parsing attributes in process `syz.4.909'. [ 576.573644][ T5864] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 576.573690][ T5864] em28xx 3-1:0.0: board has no eeprom [ 576.954377][ T5864] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 576.954418][ T5864] em28xx 3-1:0.0: dvb set to bulk mode. [ 576.955117][ T8442] em28xx 3-1:0.0: Binding DVB extension [ 577.010774][ T5864] usb 3-1: USB disconnect, device number 32 [ 577.015344][ T5864] em28xx 3-1:0.0: Disconnecting em28xx [ 578.334667][ T9200] netlink: 9 bytes leftover after parsing attributes in process `syz.1.914'. [ 578.532599][ T9200] netlink: 9 bytes leftover after parsing attributes in process `syz.1.914'. [ 578.758141][ T9207] xt_limit: Overflow, try lower: 324384747/4200216962 [ 579.987940][ T9207] vlan2: entered allmulticast mode [ 579.987965][ T9207] bond0: entered allmulticast mode [ 579.987980][ T9207] bond_slave_0: entered allmulticast mode [ 579.988019][ T9207] bond_slave_1: entered allmulticast mode [ 580.194576][ T9211] netlink: 9 bytes leftover after parsing attributes in process `syz.0.915'. [ 580.347076][ T9211] netlink: 9 bytes leftover after parsing attributes in process `syz.0.915'. [ 580.521007][ T8442] em28xx 3-1:0.0: Registering input extension [ 580.521624][ T5864] em28xx 3-1:0.0: Closing input extension [ 580.638636][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'. [ 582.702616][ T5864] em28xx 3-1:0.0: Freeing device [ 583.239663][ T9241] FAULT_INJECTION: forcing a failure. [ 583.239663][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 583.239690][ T9241] CPU: 0 UID: 0 PID: 9241 Comm: syz.4.923 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 583.239708][ T9241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.239718][ T9241] Call Trace: [ 583.239724][ T9241] [ 583.239730][ T9241] dump_stack_lvl+0xe8/0x150 [ 583.239752][ T9241] should_fail_ex+0x46b/0x600 [ 583.239779][ T9241] should_failslab+0xa8/0x100 [ 583.239800][ T9241] __kvmalloc_node_noprof+0x170/0x8e0 [ 583.239822][ T9241] ? seq_read_iter+0x203/0xe20 [ 583.239843][ T9241] ? mutex_lock_nested+0x152/0x1d0 [ 583.239862][ T9241] ? seq_read_iter+0xb8/0xe20 [ 583.239884][ T9241] seq_read_iter+0x203/0xe20 [ 583.239906][ T9241] ? _parse_integer_limit+0x1ae/0x1f0 [ 583.239930][ T9241] ? __asan_memset+0x22/0x50 [ 583.239968][ T9241] seq_read+0x36a/0x490 [ 583.239995][ T9241] ? __pfx_seq_read+0x10/0x10 [ 583.240016][ T9241] ? __debugfs_file_get+0x5d5/0x710 [ 583.240034][ T9241] ? __pfx___debugfs_file_get+0x10/0x10 [ 583.240058][ T9241] full_proxy_read+0x127/0x1f0 [ 583.240076][ T9241] ? __pfx_full_proxy_read+0x10/0x10 [ 583.240093][ T9241] vfs_read+0x212/0xa80 [ 583.240118][ T9241] ? __pfx_vfs_read+0x10/0x10 [ 583.240139][ T9241] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.240164][ T9241] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.240188][ T9241] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 583.240213][ T9241] ? mutex_lock_nested+0x152/0x1d0 [ 583.240231][ T9241] ? fdget_pos+0x252/0x320 [ 583.240253][ T9241] ksys_read+0x156/0x270 [ 583.240274][ T9241] ? __pfx_ksys_read+0x10/0x10 [ 583.240298][ T9241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.240316][ T9241] do_syscall_64+0x174/0x580 [ 583.240340][ T9241] ? trace_irq_disable+0x3b/0x140 [ 583.240359][ T9241] ? clear_bhb_loop+0x40/0x90 [ 583.240379][ T9241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.240395][ T9241] RIP: 0033:0x7f40122cce59 [ 583.240409][ T9241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.240423][ T9241] RSP: 002b:00007f401051e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.240441][ T9241] RAX: ffffffffffffffda RBX: 00007f4012545fa0 RCX: 00007f40122cce59 [ 583.240453][ T9241] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000003 [ 583.240463][ T9241] RBP: 00007f401051e090 R08: 0000000000000000 R09: 0000000000000000 [ 583.240473][ T9241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.240482][ T9241] R13: 00007f4012546038 R14: 00007f4012545fa0 R15: 00007ffc58cfada8 [ 583.240513][ T9241] [ 584.033317][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 585.577062][ T37] kauditd_printk_skb: 115 callbacks suppressed [ 585.577078][ T37] audit: type=1326 audit(1780799575.984:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.577121][ T37] audit: type=1326 audit(1780799575.984:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.577517][ T37] audit: type=1326 audit(1780799575.984:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.577564][ T37] audit: type=1326 audit(1780799575.984:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.578627][ T37] audit: type=1326 audit(1780799575.984:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.581895][ T37] audit: type=1326 audit(1780799575.984:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.581946][ T37] audit: type=1326 audit(1780799575.984:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.587073][ T37] audit: type=1326 audit(1780799575.984:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 585.592544][ T37] audit: type=1326 audit(1780799575.994:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 586.778043][ T37] audit: type=1326 audit(1780799577.184:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.928" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7fe59ce59 code=0x7ffc0000 [ 587.044105][ T9261] netlink: 9 bytes leftover after parsing attributes in process `syz.2.927'. [ 587.167999][ T9261] netlink: 9 bytes leftover after parsing attributes in process `syz.2.927'. [ 588.198420][ T9270] lo speed is unknown, defaulting to 1000 [ 591.549552][ T9298] lo speed is unknown, defaulting to 1000 [ 594.739956][ T9313] netlink: 56 bytes leftover after parsing attributes in process `syz.4.941'. [ 596.425383][ T9319] netlink: 56 bytes leftover after parsing attributes in process `syz.0.942'. [ 597.784696][ T9321] netlink: 9 bytes leftover after parsing attributes in process `syz.2.943'. [ 597.894543][ T9321] netlink: 9 bytes leftover after parsing attributes in process `syz.2.943'. [ 600.625717][ T5866] IPVS: starting estimator thread 0... [ 600.874372][ T9350] IPVS: using max 7 ests per chain, 16800 per kthread [ 602.455551][ T9356] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 602.774632][ T5718] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 602.927020][ T5718] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 602.927055][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.918998][ T5718] usb 2-1: config 0 descriptor?? [ 603.963268][ T5718] cp210x 2-1:0.0: cp210x converter detected [ 604.402784][ T5718] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 604.402867][ T5718] cp210x 2-1:0.0: querying part number failed [ 604.451213][ T5718] usb 2-1: cp210x converter now attached to ttyUSB0 [ 604.466517][ T5718] usb 2-1: USB disconnect, device number 39 [ 605.438719][ T9368] netlink: 9 bytes leftover after parsing attributes in process `syz.3.956'. [ 605.817994][ T5718] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 605.818857][ T5718] cp210x 2-1:0.0: device disconnected [ 605.984039][ T9368] netlink: 9 bytes leftover after parsing attributes in process `syz.3.956'. [ 605.996249][ T9375] netlink: 56 bytes leftover after parsing attributes in process `syz.4.957'. [ 606.537388][ T9381] tipc: Started in network mode [ 606.537422][ T9381] tipc: Node identity ac141441, cluster identity 4711 [ 606.586530][ T9381] tipc: Enabled bearer , priority 10 [ 607.668773][ T9] tipc: Node number set to 2886997057 [ 608.854125][ T9419] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 609.104298][ T5866] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 609.346860][ T5866] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 609.346893][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.389644][ T5866] usb 5-1: config 0 descriptor?? [ 609.409781][ T5866] cp210x 5-1:0.0: cp210x converter detected [ 611.138918][ T9428] netlink: 56 bytes leftover after parsing attributes in process `syz.0.971'. [ 612.354722][ T9430] netlink: 9 bytes leftover after parsing attributes in process `syz.1.972'. [ 612.864780][ T9430] netlink: 9 bytes leftover after parsing attributes in process `syz.1.972'. [ 614.009470][ T5866] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 614.009498][ T5866] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 614.058876][ T5866] usb 5-1: cp210x converter now attached to ttyUSB0 [ 614.115744][ T5866] usb 5-1: USB disconnect, device number 31 [ 614.207741][ T5866] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 614.214984][ T5866] cp210x 5-1:0.0: device disconnected [ 614.590957][ T9459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 617.784756][ T9483] netlink: 9 bytes leftover after parsing attributes in process `syz.4.985'. [ 617.845697][ T9483] netlink: 9 bytes leftover after parsing attributes in process `syz.4.985'. [ 619.097264][ T9478] netlink: 9 bytes leftover after parsing attributes in process `syz.3.983'. [ 619.303637][ T9478] netlink: 9 bytes leftover after parsing attributes in process `syz.3.983'. [ 619.353613][ T9489] netlink: 56 bytes leftover after parsing attributes in process `syz.0.986'. [ 621.833522][ T9510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.993'. [ 622.034369][ T31] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 622.446953][ T31] usb 3-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 622.447041][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 622.447071][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 622.447101][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2176, setting to 64 [ 622.447131][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 622.452767][ T31] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 622.452800][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 622.452824][ T31] usb 3-1: Product: syz [ 622.452841][ T31] usb 3-1: Manufacturer: syz [ 622.452856][ T31] usb 3-1: SerialNumber: syz [ 622.519163][ T31] usb 3-1: config 0 descriptor?? [ 623.173597][ T9502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.377493][ T31] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 623.379488][ T31] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 623.382485][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.393918][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.599143][ T5340] usb 3-1: USB disconnect, device number 33 [ 623.866834][ T9526] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 624.104434][ T5718] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 624.261878][ T5718] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 624.261912][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.293438][ T5718] usb 4-1: config 0 descriptor?? [ 624.312393][ T5718] cp210x 4-1:0.0: cp210x converter detected [ 626.454013][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'. [ 628.169640][ T5718] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 628.169672][ T5718] cp210x 4-1:0.0: querying part number failed [ 628.213268][ T5718] usb 4-1: cp210x converter now attached to ttyUSB0 [ 628.258146][ T5718] usb 4-1: USB disconnect, device number 40 [ 628.341682][ T5718] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 628.362099][ T5718] cp210x 4-1:0.0: device disconnected [ 629.183377][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 629.827725][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.904560][ T9576] lo speed is unknown, defaulting to 1000 [ 629.922675][ T9] usb 5-1: config 0 has an invalid descriptor of length 103, skipping remainder of the config [ 629.922733][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 629.922762][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 629.922791][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 2176, setting to 64 [ 629.922820][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 629.965646][ T9] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 629.965696][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 629.965721][ T9] usb 5-1: Product: syz [ 629.965737][ T9] usb 5-1: Manufacturer: syz [ 629.965753][ T9] usb 5-1: SerialNumber: syz [ 630.050652][ T9] usb 5-1: config 0 descriptor?? [ 630.052605][ T9567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 630.074677][ T5622] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 630.260578][ T9] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 630.261988][ T9] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 630.274810][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.279899][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.426571][ T9] usb 5-1: USB disconnect, device number 32 [ 634.944948][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1017'. [ 634.964369][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 635.094387][ T9] usb 4-1: device descriptor read/64, error -71 [ 635.264390][ T5622] usb 2-1: device descriptor read/64, error -110 [ 635.344418][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 635.494552][ T9] usb 4-1: device descriptor read/64, error -71 [ 635.507770][ T5622] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 635.627600][ T9] usb usb4-port1: attempt power cycle [ 635.654718][ T5622] usb 2-1: device descriptor read/64, error -32 [ 635.803672][ T5622] usb usb2-port1: attempt power cycle [ 636.114334][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 636.135144][ T9] usb 4-1: device descriptor read/8, error -71 [ 636.154553][ T5622] raw-gadget.1 gadget.1: failed to queue resume event [ 636.214366][ T5622] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 636.221045][ T9611] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 636.236386][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 636.236530][ T5622] usb 2-1: device descriptor read/8, error -32 [ 636.344612][ T5622] raw-gadget.1 gadget.1: failed to queue suspend event [ 636.345122][ T5622] raw-gadget.1 gadget.1: failed to queue reset event [ 636.374315][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 636.395041][ T9] usb 4-1: device descriptor read/8, error -71 [ 636.414360][ T5622] raw-gadget.1 gadget.1: failed to queue resume event [ 637.314659][ T5622] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 637.315163][ T9] usb usb4-port1: unable to enumerate USB device [ 637.334571][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 637.334646][ T5622] usb 2-1: device descriptor read/8, error -32 [ 637.445425][ T5622] raw-gadget.1 gadget.1: failed to queue suspend event [ 637.445639][ T5622] usb usb2-port1: unable to enumerate USB device [ 637.730127][ T9576] raw-gadget.1 gadget.1: failed to queue disconnect event [ 639.890188][ T9646] fuse: fd is not a fuse device [ 640.163735][ T9651] netlink: 'syz.1.1031': attribute type 2 has an invalid length. [ 640.332634][ T9653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 640.332664][ T9653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 640.429577][ T9653] vhci_hcd vhci_hcd.0: Device attached [ 640.778552][ T36] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 640.814306][ T31] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 640.935028][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 640.941512][ T9654] usb 37-1: recv xbuf, 0 [ 640.982394][ T9655] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 640.982421][ T9655] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 640.982446][ T9655] CPU: 1 UID: 0 PID: 9655 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT_{R[ 640.982446][ T9655] CPU: 1 UID: 0 PID: 9655 Comm: vhci_tx Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.982496][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.982510][ T9655] RIP: 0010:vhci_tx_loop+0x5fc/0x1c50 [ 640.982550][ T9655] Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 bd e3 05 fb 4c 8b 23 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 96 e3 05 fb 4c 8b 33 48 b8 00 00 00 [ 640.982570][ T9655] RSP: 0018:ffffc900083bfa40 EFLAGS: 00010206 [ 640.982591][ T9655] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 640.982606][ T9655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.982619][ T9655] RBP: ffffc900083bfe18 R08: 0000000000000000 R09: 0000000000000000 [ 640.982645][ T9655] R10: dffffc0000000000 R11: fffffbfff1f10ddf R12: 0000000000000000 [ 640.982660][ T9655] R13: fffff52001077f64 R14: ffff888032b7cd00 R15: dffffc0000000000 [ 640.982676][ T9655] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 640.982711][ T9655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.982726][ T9655] CR2: 000000110c37cfce CR3: 0000000063db8000 CR4: 00000000003526f0 [ 640.982745][ T9655] Call Trace: [ 640.982753][ T9655] [ 640.982761][ T9655] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 640.982809][ T9655] ? __pfx_vhci_tx_loop+0x10/0x10 [ 640.982847][ T9655] ? __lock_acquire+0x6b5/0x2cf0 [ 640.982890][ T9655] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.982914][ T9655] ? lock_acquire+0x106/0x350 [ 640.982949][ T9655] ? __pfx_autoremove_wake_function+0x10/0x10 [ 640.982978][ T9655] ? __kthread_parkme+0x7a/0x1f0 [ 640.983009][ T9655] kthread+0x388/0x470 [ 640.983037][ T9655] ? __pfx_vhci_tx_loop+0x10/0x10 [ 640.983068][ T9655] ? __pfx_kthread+0x10/0x10 [ 640.983098][ T9655] ret_from_fork+0x514/0xb70 [ 640.983124][ T9655] ? __pfx_ret_from_fork+0x10/0x10 [ 640.983148][ T9655] ? __switch_to+0xc79/0x1410 [ 640.983184][ T9655] ? __pfx_kthread+0x10/0x10 [ 640.983214][ T9655] ret_from_fork_asm+0x1a/0x30 [ 640.983251][ T9655] [ 640.983265][ T9655] Modules linked in: [ 640.983302][ T9655] ---[ end trace 0000000000000000 ]--- [ 640.992251][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 640.999815][ T36] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 640.999910][ T36] usb 3-1: can't read configurations, error -71 [ 641.012163][ T9655] RIP: 0010:vhci_tx_loop+0x5fc/0x1c50 [ 641.012276][ T9655] Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 bd e3 05 fb 4c 8b 23 49 8d 5c 24 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 96 e3 05 fb 4c 8b 33 48 b8 00 00 00 [ 641.012338][ T9655] RSP: 0018:ffffc900083bfa40 EFLAGS: 00010206 [ 641.012404][ T9655] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 641.012425][ T9655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.012473][ T9655] RBP: ffffc900083bfe18 R08: 0000000000000000 R09: 0000000000000000 [ 641.012506][ T9655] R10: dffffc0000000000 R11: fffffbfff1f10ddf R12: 0000000000000000 [ 641.012529][ T9655] R13: fffff52001077f64 R14: ffff888032b7cd00 R15: dffffc0000000000 [ 641.012546][ T9655] FS: 0000000000000000(0000) GS:ffff888126287000(0000) knlGS:0000000000000000 [ 641.012579][ T9655] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.012916][ T9655] CR2: 000000110c37cfce CR3: 000000003a244000 CR4: 00000000003526f0 [ 641.013001][ T9655] Kernel panic - not syncing: Fatal exception [ 641.013630][ T9655] Kernel Offset: disabled