last executing test programs: 35.116836371s ago: executing program 4 (id=449): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xf7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000e00)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 33.017316701s ago: executing program 0 (id=451): kexec_load(0x5, 0x5, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f6c59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add000000000000000000", 0x77, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 31.045612541s ago: executing program 2 (id=452): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f04e, 0x0, 0x1, 0x36a}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$full(0xffffff9c, 0x0, 0x200200, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling', 0x1, 0x18f) socket$l2tp(0x2, 0x2, 0x73) memfd_secret(0x80000) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 30.749959366s ago: executing program 4 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) r7 = io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0x710d, 0x16dff, 0xc}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) r9 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYRES8=r4, @ANYBLOB="0389ada6d698cf1f44d6dbd8010a11f3dce3a2e237f0886cf7b41736542b5ce758ca446668c6e325ad827a357ea633f8fffe67d9c7d5ef9952c0742d5f641e4ca2ce975f8791869cccd21164693188b1451bb4d1af6aab6817c1ca0df07220256dcc22d4f80fcec9a97ee308e7f82252e77510bd4a9a2d39782b45a4188a11", @ANYRES16=r5, @ANYRESDEC=r3, @ANYRES64=r8, @ANYRES32=r6, @ANYRESHEX=r7, @ANYBLOB="2eb96f07d35156b400b83aa5fdb4fbdee91eac561ef4fc257c1f0200000000000000b88aa7cbc7e24fb77b90bb8cd62d85309731dc1cefea14088839e0d07ac95cf999c3fcb853d07909030e45d03c2fd4188e785181e7811ca304c5a6feb5a34d4e641ba9a3341b15cca15d5c18f0da19f02c4305950930c8387ccbbf0704a70ff546488365ad83eab8f0", @ANYRES16=r1], 0x7c}}, 0x4840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463690000002c00028014000300840005000000e7ff01000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) 30.459539949s ago: executing program 2 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f0001"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x200, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r4, &(0x7f0000000040)=0x1000, 0x14) syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44988}, 0x0) 30.303883252s ago: executing program 0 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df5", 0x2}], 0x1, 0x0, 0x0, 0x11d0}, 0x885) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 28.268189005s ago: executing program 4 (id=457): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000f900000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 25.010857014s ago: executing program 0 (id=459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r0, 0x0) listen(r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067fbc45ff8105000000df060058000b480400945f6400942751b2e45996e035b5402d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100050808004149004001049288639447ecd004ac8bfd1a5c291f2bf957f5da8d926e64fe62bf160b9807e7ce2972cfdb917a0455892d49b77c6c3b3efb7d849f7eeec72c418c5ecb8b68df4003bf9fa52d275fe37e5185827f", 0xad}], 0x1) 25.002048505s ago: executing program 2 (id=460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 20.496722667s ago: executing program 2 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) r6 = io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0x710d, 0x16dff, 0xc}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) r8 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYRES8=r3, @ANYBLOB="0389ada6d698cf1f44d6dbd8010a11f3dce3a2e237f0886cf7b41736542b5ce758ca446668c6e325ad827a357ea633f8fffe67d9c7d5ef9952c0742d5f641e4ca2ce975f8791869cccd21164693188b1451bb4d1af6aab6817c1ca0df07220256dcc22d4f80fcec9a97ee308e7f82252e77510bd4a9a2d39782b45a4188a11", @ANYRES16=r4, @ANYRESDEC=r2, @ANYRES64=r7, @ANYRES32=r5, @ANYRESHEX=r6, @ANYBLOB="2eb96f07d35156b400b83aa5fdb4fbdee91eac561ef4fc257c1f0200000000000000b88aa7cbc7e24fb77b90bb8cd62d85309731dc1cefea14088839e0d07ac95cf999c3fcb853d07909030e45d03c2fd4188e785181e7811ca304c5a6feb5a34d4e641ba9a3341b15cca15d5c18f0da19f02c4305950930c8387ccbbf0704a70ff546488365ad83eab8f0", @ANYRES16], 0x7c}}, 0x4840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463690000002c00028014000300840005000000e7ff01000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) 18.636727904s ago: executing program 3 (id=463): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x104, {0x5, 0x3, 0xbe, 0x4000000000008, 0x40000, 0x6, {0x2, 0x6, 0x6, 0x100000000000, 0x4, 0x81, 0x8, 0x6, 0x2008, 0x1000, 0xe44, r1, r2, 0x0, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r8}}]}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x180000, &(0x7f0000000980)={[{@uid={'uid', 0x3d, r1}}, {@mode}, {@mode={'mode', 0x3d, 0xffffffffffffff01}}, {@gid}, {@uid={'uid', 0x3d, r1}}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {@uid={'uid', 0x3d, 0xee01}}], [{@audit}, {@flag='dirsync'}, {@euid_gt={'euid>', r6}}, {@euid_lt={'euid<', 0xee00}}, {@appraise}, {@euid_eq={'euid', 0x3d, r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']\'((/'}}]}) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r10 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000400)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000640)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 17.296623894s ago: executing program 1 (id=465): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$sndmidi(0x0, 0x5aa, 0x50000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="03a0c2000000bbbbbbbbbbbb0806000108000604000300760000"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_io_uring_setup(0x3797, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000000180), &(0x7f0000ffe000), 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1bc0}}, 0x8000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff0018009df61f39330ad5e817daad90b3c75a4761384c8714f3fce3bd54c1b9a0b9791bac103f2da1a9cc2077f8817b3530589f0afcf732d33bf6d4120db23903bc7a06143dba6ed8efd720d00787565208ab190da5538ad353e3bf0d586cfb01f4e8913bd69e9a84348fe1a9ec52b64a2f4d250331aed29c4feede55b67cc5d91b99f11e5b891deacfe7e6225a71be9381d368942188633a276f4cc2bbe294ff75eb6462e2457513da", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 16.035240766s ago: executing program 1 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f0001"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r4, &(0x7f0000000040)=0x1000, 0x14) 13.595620215s ago: executing program 0 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) r7 = io_uring_setup(0x41ad, &(0x7f0000000140)={0x0, 0x710d, 0x16dff, 0xc}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0xee01, 0x0) r9 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYRES8=r4, @ANYBLOB="0389ada6d698cf1f44d6dbd8010a11f3dce3a2e237f0886cf7b41736542b5ce758ca446668c6e325ad827a357ea633f8fffe67d9c7d5ef9952c0742d5f641e4ca2ce975f8791869cccd21164693188b1451bb4d1af6aab6817c1ca0df07220256dcc22d4f80fcec9a97ee308e7f82252e77510bd4a9a2d39782b45a4188a11", @ANYRES16=r5, @ANYRESDEC=r3, @ANYRES64=r8, @ANYRES32=r6, @ANYRESHEX=r7, @ANYBLOB="2eb96f07d35156b400b83aa5fdb4fbdee91eac561ef4fc257c1f0200000000000000b88aa7cbc7e24fb77b90bb8cd62d85309731dc1cefea14088839e0d07ac95cf999c3fcb853d07909030e45d03c2fd4188e785181e7811ca304c5a6feb5a34d4e641ba9a3341b15cca15d5c18f0da19f02c4305950930c8387ccbbf0704a70ff546488365ad83eab8f0", @ANYRES16=r1], 0x7c}}, 0x4840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463690000002c00028014000300840005000000e7ff01000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) 13.266650765s ago: executing program 4 (id=468): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) inotify_init1(0x0) pipe(&(0x7f0000000040)) timerfd_create(0x7, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x100000001, 0x5, 0x8000000000000001, 0x2627bc44, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f0000000140)={0x7ff, 0x7, 0x3ff, 0x4e, 0x80021, 0x6, 0x1, 0x7f}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000007fc0)={0x2020}, 0x2020) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000"], 0x0) syz_usb_connect$uac2(0x6, 0x103, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x249c, 0x9002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x7, 0x80, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfcab, 0x0, 0x40, 0x1c}, [@processing_unit={0xd, 0x24, 0x8, 0x2, 0x1, [0x2, 0x2, 0x3, 0x0]}, @processing_unit={0xf, 0x24, 0x8, 0x5, 0x4, [0x3, 0x3, 0x0, 0x0, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x54b85bf745db9f30, 0x3, 0x6, 0x9, 0x14, 0x1}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x4, [0x0, 0x2, 0xb, 0x4, 0x8]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x2a}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x40, 0x1, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0x5e, 0x11}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x2, 0x8, 0xf9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0x9, 0xca, {0x8, 0x25, 0x1, 0x0, 0x30, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0x0, 0x7b, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x32, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x4, 0x9, 0xcb, "cb8f", "fc39"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x7, 0x5, {0x8, 0x25, 0x1, 0x0, 0x0, 0x5, 0xa}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x8, 0x3, 0xe, 0x40, 0x2}, 0xb, &(0x7f0000000180)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @generic={0x3, 0x10, 0x1}]}, 0x9, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0xc7, &(0x7f0000000300)=@string={0xc7, 0x3, "963d3b7333b077de32af7cbae3e22992782025ac67919f59a508a55421f8c37007dfe68090ae1127029c335d6e15e7eb7debe6e96a95dfd07010f7b1e3cf2a7266eb9104b863399d44ac68ce74850feaf10ee9cfd7d524e8ffe5b81eec8902096963a1538c3eaa0aaf83cf5e761a514900e33caff109a785957ca06914e5f1aa5f4d500386a7ea1efbc414422f5f478da950f3ceb843738dc01773ddce4918ef9f0822b1dce7cf7d7a1a9d1640a82ba8ee7ce44f87d4464dd140ba27f6f07b58f5349c24a1"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x406}}, {0x2d, &(0x7f0000000440)=@string={0x2d, 0x3, "48ae869ff8788ac9823d0ffa7d8a92aff16bf1a74d15b697bbfa51ff7a46340cf87b9c61a517b0d628eded"}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x423}}, {0x9a, &(0x7f0000000500)=@string={0x9a, 0x3, "53de52b43dbeb18467a640c7c38891fa1571b246475185d485a4102159a0d9ad2d9d4f33336582e7081f8aba43eae38073cf976a4a4d830bbe7142bbc978001bffc19a55e0772e1466f20371e8187fc1960d1a962318c44fa2033efe8fa291a819ffa401b42753ee07ba6b5cb12b6e609cff5aeb0fe83454f22712c3e06878cabc74e6324b66046eb9e488d5ebe3af1e2159c0b6a08daa6c"}}, {0x61, &(0x7f0000000600)=@string={0x61, 0x3, "b068a79034f2e7aab8ff2eee5068a2f8a95adf236b1d7061488dee4a9de8791a3cad499f32d68f9d6c2a85df6b5fff8cf2a9119e83a1091368784612d649bff241bb8618727b5d3e7f1311bbb805ca4a28fc4759600cbf514556dfbb321814"}}]}) syz_usb_control_io(r4, 0x0, 0x0) 13.106774413s ago: executing program 2 (id=469): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_complete(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xdddd0000, 0x1000, &(0x7f000084a000/0x1000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r3, 0x2000, 0x0) 12.779482275s ago: executing program 3 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() r2 = getpgrp(r1) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df5", 0x2}], 0x1, 0x0, 0x0, 0x11d0}, 0x885) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 10.847988248s ago: executing program 0 (id=471): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x1}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f0000006680)) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) r1 = socket(0x10, 0x3, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525", 0x0, 0xa}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x8, 0xa1d, 0xfffffffffffffff1, 0x5, 0x4, 0x3, 0xa, 0x0, 0x4], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00c666113ce28d000052000100fcffffff000000000a0000000600"], 0x1c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) chmod(&(0x7f0000000100)='./file0\x00', 0x3dc) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f00000004c0)={0x50, 0x0, 0x7, {0x7, 0x29, 0x10000, 0x20000, 0xdd6, 0xce5, 0x9, 0x20000c00, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000042c0)="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", 0x2000, 0x0) r7 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000100)) sendmsg(r5, &(0x7f0000002440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @random="6b22b821e1d7", 'veth1_vlan\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="5db65dda596d170fe710efa4537b8b294ab048cb41c67756bdb305563ec474073939dc58a3b8cde1f68a74a88e7a118e8f04d0c025bbaf5c2bb7efdc1e4c537715b238db06dd4cee8e7d8600aa97c903dbf54db77e974f8da2a216b92ae7dffbc42849", 0x63}, {&(0x7f0000000140)="2bb9cba381f2fcf74ec02ee9d75610ac6cc176abfe1d2bcbde810c8d2eebe9a60c6a05d3925f8b065e7020559ef998e24ea2d9ffc254d6ff4cc88643308f49273f73a4b062bcdc742dc612833a6be09dca261f32ef6a944b6e1c41df1ce530a48fb90d62e673e8d9f1f83909bfb404cc1fff4ea34205688fbfb2b2508a9cbfdb5b71d2e068d23f581a1fc83881832c7b536e8a6587c58c18579ebf1c0888b775ff40e1f2d74bbd7a772187cf28aabc1b7dc57873fdf8ec294b47", 0xba}, {&(0x7f0000000200)="a41ca53a539899147630108cc4428cb09a407660ba047dc228eff35a0ba46833a4ea952060774a251d9a1f601bd840f904d1a68dd82465266a400785ab36c5dfbf6bca66a0813fe12253afa5c1641f0665", 0x51}], 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2020}, 0x0) 10.680940686s ago: executing program 1 (id=472): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000938c0000000000"], 0x50) r0 = socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f02ebbeeb, 0xa031, 0xffffffffffffffff, 0xe539e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = gettid() tkill(r6, 0x12) io_pgetevents(0x0, 0x7, 0x6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180), &(0x7f00000003c0)={&(0x7f0000000380)={[0x9]}, 0x8}) keyctl$assume_authority(0x10, r5) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @broadcast}, 0x6f631b4376e74f0e, {0x2, 0x0, @rand_addr=0x64010102}, 'ipvlan0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x1000, @local}, {0x7, @local}, 0x42, {0x2, 0x0, @private=0xa010102}, 'syz_tun\x00'}) 8.698217098s ago: executing program 3 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f00000000000001"], 0xfc}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) 8.507476s ago: executing program 4 (id=474): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000"], 0x110) 6.963251256s ago: executing program 1 (id=475): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10c89d, 0xc000, 0xa, 0x20002f7}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r0 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x0, 0x3, 0x4}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 5.872550704s ago: executing program 1 (id=476): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$sndmidi(0x0, 0x5aa, 0x50000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="03a0c2000000bbbbbbbbbbbb0806000108000604000300760000"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_io_uring_setup(0x3797, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe, 0x0, r1}, &(0x7f0000000180), &(0x7f0000ffe000), 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x1bc0}}, 0x8000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000000, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff0018009df61f39330ad5e817daad90b3c75a4761384c8714f3fce3bd54c1b9a0b9791bac103f2da1a9cc2077f8817b3530589f0afcf732d33bf6d4120db23903bc7a06143dba6ed8efd720d00787565208ab190da5538ad353e3bf0d586cfb01f4e8913bd69e9a84348fe1a9ec52b64a2f4d250331aed29c4feede55b67cc5d91b99f11e5b891deacfe7e6225a71be9381d368942188633a276f4cc2bbe294ff75eb6462e2457513da", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.515832037s ago: executing program 3 (id=477): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r0, 0x0) listen(r1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067fbc45ff8105000000df060058000b480400945f6400942751b2e45996e035b5402d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100050808004149004001049288639447ecd004ac8bfd1a5c291f2bf957f5da8d926e64fe62bf160b9807e7ce2972cfdb917a0455892d49b77c6c3b3efb7d849f7eeec72c418c5ecb8b68df4003bf9fa52d275fe37e5185827f", 0xad}], 0x1) 606.32339ms ago: executing program 3 (id=478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000f900000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 569.579738ms ago: executing program 4 (id=479): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x994, 0x800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x3008, 0x0, 0x0, 0x0, 0x3}}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x40f, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x0, 0x30, 0x0, @in={0x2, 0x4e21, @multicast1}, @ib={0x1b, 0x0, 0xffffffff, {"00000000000000000000000000000001"}, 0xfffffffffffffffd, 0x0, 0x2}}}, 0x118) 16.663952ms ago: executing program 0 (id=480): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x1000003, "180080e8090a6339f00837dc740a6408ef00270500", 0xffffffffffffffff}) syz_usb_connect$uac2(0x1, 0x7b, &(0x7f0000000440)=ANY=[@ANYBLOB="120101020000000844060f804000010203010902690003010e0040080b0102010420f90904000000010120000924010010f309000309040100000102200009040101010102200009050109ff03050807082501800d041200090402000001022000090402010101022000090582091000f18006082501000a81e6a3"], &(0x7f0000000ec0)={0x0, 0x0, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="010f"], 0x1, [{0x0, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d130600ebe45600e4f5b53e0c034dd02acecdc67c5e3126628168", r1}) r4 = socket$inet6(0xa, 0x8000e, 0x6) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)='5', 0xfffffe9b}], 0x1}}], 0x2, 0x400c844) syz_emit_ethernet(0x36, 0x0, 0x0) write(r4, &(0x7f00000001c0)='+', 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x80000000, "14e6498c270e00e2fff9cc808000000000000000040000002be8ffffffffffff"}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0xfff) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r6, 0x6, &(0x7f00000003c0)=0x100006) fremovexattr(r8, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240)={'fscrypt:', @auto=[0x37, 0x37, 0x32, 0x33, 0x30, 0x66, 0x30, 0x37, 0x34, 0x63, 0x36, 0x0, 0x65, 0x31, 0x34, 0x36]}, &(0x7f00000004c0)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a42120000000000000d36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b100", 0x200028}, 0x48, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r9, 0xd4) 8.338523ms ago: executing program 1 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000000000001f, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd000000060005"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000009000000030000006a"], 0x48) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r7) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, &(0x7f0000000180)={{@align=0x401, {0x7f, 0xffff, 0xf8, 0x2b1f597a}}, {{[0x800, 0x3ff, 0x1, 0x249c]}, 0x0, 0x2, 0x96aa, 0x0, &(0x7f0000000080)=[{{@align=0x80000001, {0x0, 0xe55, 0x7, 0x1}}, 0x4, 0x0, '/dev/hidraw#\x00'}, {{@_ha_fsid={[0x7, 0x6]}, {0xf145, 0x600, 0xabaa, 0xc}}, 0x2605, 0x0, '/dev/hidraw#\x00'}, {{@_ha_fsid={[0x2]}, {0x7f, 0x9, 0x5, 0x401}}, 0x4, 0x0, '!\x00'}]}}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x88000005, 0x7f5d3963}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x86d5}]}}}, {0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0xc4}}, 0x20050800) r10 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r11, 0xc01c64ae, &(0x7f0000002640)={0x0, 0x3, 0x3ff, 0x7, 0x18, 0x0, 0x10001}) read$hidraw(r10, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r8, 0x81, 0x1, &(0x7f0000000140)='\b') 5.781114ms ago: executing program 2 (id=482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f0001"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) write$smackfs_cipsonum(r4, &(0x7f0000000040)=0x1000, 0x14) 0s ago: executing program 3 (id=483): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socket(0x400000000010, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44956) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x10, 0x80, 0x5, 0x6, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x67, 0x0, 0xf3, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x43, [@remote, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0x4, 0x23, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x40, 0x2, 0x200020}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x0, 0x424d, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x10, 0x20, 0x1, 0x6}}) kernel console output (not intermixed with test programs): l_nth_read+0x1be/0x230 [ 151.186511][ T6013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.186537][ T6013] ? rw_verify_area+0x2ac/0x4e0 [ 151.186562][ T6013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.186590][ T6013] vfs_read+0x212/0xa80 [ 151.186614][ T6013] ? __pfx_vfs_read+0x10/0x10 [ 151.186633][ T6013] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.186657][ T6013] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.186704][ T6013] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.186737][ T6013] ? mutex_lock_nested+0x152/0x1d0 [ 151.186761][ T6013] ? fdget_pos+0x252/0x320 [ 151.186789][ T6013] ksys_read+0x156/0x270 [ 151.186818][ T6013] ? __pfx_ksys_read+0x10/0x10 [ 151.186849][ T6013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.186866][ T6013] do_syscall_64+0x15f/0xf80 [ 151.186888][ T6013] ? trace_irq_disable+0x3b/0x140 [ 151.186906][ T6013] ? clear_bhb_loop+0x40/0x90 [ 151.186925][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.186941][ T6013] RIP: 0033:0x7f4ae2aed68e [ 151.186955][ T6013] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.186968][ T6013] RSP: 002b:00007f4ae0d85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.186984][ T6013] RAX: ffffffffffffffda RBX: 00007f4ae0d866c0 RCX: 00007f4ae2aed68e [ 151.186996][ T6013] RDX: 000000000000000f RSI: 00007f4ae0d860a0 RDI: 0000000000000004 [ 151.187007][ T6013] RBP: 00007f4ae0d86090 R08: 0000000000000000 R09: 0000000000000000 [ 151.187017][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.187026][ T6013] R13: 00007f4ae2da6038 R14: 00007f4ae2da5fa0 R15: 00007ffe54df9a58 [ 151.187050][ T6013] [ 152.710619][ T37] audit: type=1326 audit(1779626512.436:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 152.710679][ T37] audit: type=1326 audit(1779626512.436:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 152.710726][ T37] audit: type=1326 audit(1779626512.436:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 152.710772][ T37] audit: type=1326 audit(1779626512.436:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 152.712218][ T37] audit: type=1326 audit(1779626512.436:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 152.712369][ T37] audit: type=1326 audit(1779626512.436:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 152.712878][ T37] audit: type=1326 audit(1779626512.436:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 153.040711][ T37] audit: type=1326 audit(1779626512.696:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 153.040769][ T37] audit: type=1326 audit(1779626512.696:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 153.040816][ T37] audit: type=1326 audit(1779626512.696:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6031 comm="syz.4.68" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 154.199761][ T6048] netlink: 84 bytes leftover after parsing attributes in process `syz.2.73'. [ 155.446204][ T6045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.446446][ T6045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.447353][ T6045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.447532][ T6045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.500846][ T6045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.833105][ T5838] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.954760][ T5732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.990115][ T5838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.990143][ T5838] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.990183][ T5838] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 155.990208][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.078851][ T5838] usb 1-1: config 0 descriptor?? [ 156.104537][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 156.107145][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 156.107198][ T5732] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.107215][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.187305][ T5732] usb 2-1: config 0 descriptor?? [ 156.194581][ T6052] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.312788][ T5732] hub 2-1:0.0: USB hub found [ 156.359795][ T5611] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 156.456052][ T5732] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 156.524518][ T5611] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.551872][ T6060] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 156.566322][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.77'. [ 156.571382][ T5732] usbhid 2-1:0.0: can't add hid device: -71 [ 156.571610][ T5732] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.639535][ T5732] usb 2-1: USB disconnect, device number 4 [ 156.953072][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.013030][ T6056] FAULT_INJECTION: forcing a failure. [ 157.013030][ T6056] name failslab, interval 1, probability 0, space 0, times 1 [ 157.013068][ T6056] CPU: 0 UID: 0 PID: 6056 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.013094][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.013107][ T6056] Call Trace: [ 157.013115][ T6056] [ 157.013123][ T6056] dump_stack_lvl+0xe8/0x150 [ 157.013154][ T6056] should_fail_ex+0x46b/0x600 [ 157.013182][ T6056] should_failslab+0xa8/0x100 [ 157.013209][ T6056] kmem_cache_alloc_noprof+0x87/0x680 [ 157.013232][ T6056] ? taskstats_exit+0x147/0xa60 [ 157.013259][ T6056] taskstats_exit+0x147/0xa60 [ 157.013283][ T6056] ? seccomp_filter_release+0x18a/0x2d0 [ 157.013317][ T6056] do_exit+0x682/0x22c0 [ 157.013344][ T6056] ? preempt_schedule_common+0x82/0xd0 [ 157.013381][ T6056] ? __pfx_do_exit+0x10/0x10 [ 157.013411][ T6056] ? rt_mutex_slowunlock+0x681/0x8b0 [ 157.013441][ T6056] do_group_exit+0x21b/0x2d0 [ 157.013463][ T6056] ? rt_spin_unlock+0x160/0x200 [ 157.013483][ T6056] get_signal+0x1284/0x1330 [ 157.013519][ T6056] arch_do_signal_or_restart+0xbc/0x840 [ 157.013546][ T6056] ? __fget_files+0x3a6/0x420 [ 157.013560][ T6056] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.013591][ T6056] ? __x64_sys_preadv+0x27e/0x2b0 [ 157.013618][ T6056] exit_to_user_mode_loop+0x8c/0x4d0 [ 157.013637][ T6056] ? rcu_is_watching+0x15/0xb0 [ 157.013662][ T6056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.013679][ T6056] do_syscall_64+0x33e/0xf80 [ 157.013701][ T6056] ? trace_irq_disable+0x3b/0x140 [ 157.013726][ T6056] ? clear_bhb_loop+0x40/0x90 [ 157.013745][ T6056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.013761][ T6056] RIP: 0033:0x7f501e7fce59 [ 157.013778][ T6056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.013791][ T6056] RSP: 002b:00007f501ca56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 157.013809][ T6056] RAX: fffffffffffffe00 RBX: 00007f501ea75fa0 RCX: 00007f501e7fce59 [ 157.013820][ T6056] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000003 [ 157.013830][ T6056] RBP: 00007f501ca56090 R08: 000000000000000d R09: 0000000000000000 [ 157.013839][ T6056] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 157.013848][ T6056] R13: 00007f501ea76038 R14: 00007f501ea75fa0 R15: 00007ffc8fc18b28 [ 157.013872][ T6056] [ 157.143505][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 157.307875][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.307910][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.307952][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 157.307976][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.358153][ T1983] usb 1-1: USB disconnect, device number 3 [ 157.431008][ T31] usb 3-1: config 0 descriptor?? [ 157.553166][ T5611] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.553218][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.553277][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.050763][ T31] apple 0003:05AC:024B.0001: unknown global tag 0xc [ 159.050791][ T31] apple 0003:05AC:024B.0001: item 0 1 1 12 parsing failed [ 159.051737][ T31] apple 0003:05AC:024B.0001: parse failed [ 159.051852][ T31] apple 0003:05AC:024B.0001: probe with driver apple failed with error -22 [ 160.716923][ T5609] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 160.717103][ T5609] Bluetooth: hci1: Injecting HCI hardware error event [ 160.719153][ T5611] Bluetooth: hci1: hardware error 0x00 [ 161.000128][ T5838] usb 3-1: USB disconnect, device number 3 [ 161.077724][ T6089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.85'. [ 161.352624][ T6089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.85'. [ 162.763361][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 162.966743][ T5611] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 163.005112][ T37] kauditd_printk_skb: 72 callbacks suppressed [ 163.005126][ T37] audit: type=1326 audit(1779626522.726:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.005543][ T37] audit: type=1326 audit(1779626522.736:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.006170][ T37] audit: type=1326 audit(1779626522.736:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.010568][ T37] audit: type=1326 audit(1779626522.736:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.010607][ T37] audit: type=1326 audit(1779626522.736:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.010692][ T37] audit: type=1326 audit(1779626522.736:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.010724][ T37] audit: type=1326 audit(1779626522.736:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.010756][ T37] audit: type=1326 audit(1779626522.736:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.010787][ T37] audit: type=1326 audit(1779626522.736:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.012637][ T37] audit: type=1326 audit(1779626522.736:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6096 comm="syz.0.87" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8842cfce59 code=0x7ffc0000 [ 163.799895][ T6103] netlink: 68 bytes leftover after parsing attributes in process `syz.2.90'. [ 164.384510][ T6105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.90'. [ 166.043188][ T821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.669771][ T6107] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 166.737581][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.89'. [ 166.973292][ T5611] Bluetooth: hci0: unexpected event for opcode 0x007f [ 167.406812][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.572072][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.572103][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.572144][ T10] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 167.572171][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.685996][ T10] usb 4-1: config 0 descriptor?? [ 168.089473][ T5611] Bluetooth: hci0: unexpected event for opcode 0x007f [ 168.548850][ T6127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.91'. [ 168.673310][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.824806][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 168.834616][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 168.834716][ T5838] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.834790][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.922557][ T5838] usb 5-1: config 0 descriptor?? [ 168.934251][ T6125] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 169.021992][ T5838] hub 5-1:0.0: USB hub found [ 169.188749][ T5838] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 169.225687][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 169.225814][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.300620][ T5838] usb 5-1: USB disconnect, device number 3 [ 170.522314][ T5718] usb 4-1: USB disconnect, device number 6 [ 170.949247][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.034079][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.035799][ T6140] netlink: 68 bytes leftover after parsing attributes in process `syz.2.100'. [ 172.806537][ T36] usb 1-1: device descriptor read/64, error -71 [ 173.653116][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 174.301284][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 175.734852][ T1983] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 175.900430][ T1983] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.900463][ T1983] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 175.900483][ T1983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.972483][ T1983] usb 2-1: config 0 descriptor?? [ 176.197650][ T1983] smsusb:smsusb_probe: board id=8, interface number 0 [ 176.197752][ T1983] smsusb:smsusb_probe: Device initialized with return code -19 [ 177.704652][ T6158] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 177.729594][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.105'. [ 178.333601][ T1983] usb 2-1: USB disconnect, device number 5 [ 178.787538][ T31] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 178.945019][ T31] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 178.945049][ T31] usb 4-1: config 0 has no interface number 0 [ 178.948988][ T31] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 178.949020][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.949040][ T31] usb 4-1: Product: syz [ 178.949055][ T31] usb 4-1: Manufacturer: syz [ 178.949071][ T31] usb 4-1: SerialNumber: syz [ 179.013180][ T31] usb 4-1: config 0 descriptor?? [ 179.015890][ T6161] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.249609][ T31] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 179.270516][ T31] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 179.270614][ T31] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 179.270699][ T31] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 179.327220][ T31] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 179.365882][ T31] usb 4-1: USB disconnect, device number 7 [ 179.438391][ T31] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 179.470300][ T31] keyspan 4-1:0.133: device disconnected [ 180.433148][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.137543][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 181.356788][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 181.356859][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.356886][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.414475][ T31] usb 5-1: config 0 descriptor?? [ 181.415889][ T6171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 181.527134][ T31] hub 5-1:0.0: USB hub found [ 181.681953][ T31] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 181.704612][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 181.704754][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.746678][ T31] usb 5-1: USB disconnect, device number 4 [ 181.823180][ T5698] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.001852][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.001883][ T5698] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.001924][ T5698] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 182.001949][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.083978][ T5698] usb 1-1: config 0 descriptor?? [ 182.193114][ T36] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 182.356853][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.356880][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.356914][ T36] usb 4-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 182.356936][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.407067][ T36] usb 4-1: config 0 descriptor?? [ 184.060345][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.110035][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.165010][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165052][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165081][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165108][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165134][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165161][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165188][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165216][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165243][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165271][ T36] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 184.165865][ T36] wacom 0003:056A:5012.0002: unexpected long global item [ 184.166702][ T36] wacom 0003:056A:5012.0002: parse failed [ 184.166810][ T36] wacom 0003:056A:5012.0002: probe with driver wacom failed with error -22 [ 184.323173][ T9] usb 1-1: USB disconnect, device number 6 [ 184.589379][ T821] usb 4-1: USB disconnect, device number 8 [ 186.186197][ T6199] Bluetooth: MGMT ver 1.23 [ 186.186247][ T6199] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 186.313036][ T5732] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 186.664965][ T5732] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.664985][ T5732] usb 3-1: config 0 has no interface number 0 [ 186.667383][ T5732] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 186.667407][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.667421][ T5732] usb 3-1: Product: syz [ 186.667433][ T5732] usb 3-1: Manufacturer: syz [ 186.667444][ T5732] usb 3-1: SerialNumber: syz [ 188.030303][ T5732] usb 3-1: config 0 descriptor?? [ 188.107908][ T5732] usb 3-1: selecting invalid altsetting 1 [ 188.108629][ T5732] dvb_ttusb_budget: ttusb_init_controller: error [ 188.108762][ T5732] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 188.210603][ T6204] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 188.249951][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 188.442553][ T5732] DVB: Unable to find symbol stv0299_attach() [ 188.639893][ T5732] DVB: Unable to find symbol tda8083_attach() [ 188.639911][ T5732] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 188.749844][ T5732] usb 3-1: USB disconnect, device number 4 [ 190.723093][ T6222] FAULT_INJECTION: forcing a failure. [ 190.723093][ T6222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.723148][ T6222] CPU: 0 UID: 0 PID: 6222 Comm: syz.3.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.723174][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.723188][ T6222] Call Trace: [ 190.723196][ T6222] [ 190.723205][ T6222] dump_stack_lvl+0xe8/0x150 [ 190.723239][ T6222] should_fail_ex+0x46b/0x600 [ 190.723369][ T6222] _copy_from_iter+0x1d3/0x1670 [ 190.723393][ T6222] ? unwind_next_frame+0xa6/0x2550 [ 190.723436][ T6222] ? __pfx__copy_from_iter+0x10/0x10 [ 190.723457][ T6222] ? is_bpf_text_address+0x26/0x2b0 [ 190.723505][ T6222] tun_get_user+0x264/0x4400 [ 190.723533][ T6222] ? is_bpf_text_address+0x292/0x2b0 [ 190.723562][ T6222] ? is_bpf_text_address+0x26/0x2b0 [ 190.723595][ T6222] ? kernel_text_address+0xa5/0xe0 [ 190.723630][ T6222] ? __kernel_text_address+0xd/0x30 [ 190.723663][ T6222] ? unwind_get_return_address+0x4d/0x90 [ 190.723693][ T6222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 190.723727][ T6222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.723757][ T6222] ? __pfx_tun_get_user+0x10/0x10 [ 190.723787][ T6222] ? __lock_acquire+0x6b5/0x2cf0 [ 190.723821][ T6222] ? kstrtoull+0x12f/0x1d0 [ 190.723862][ T6222] ? ref_tracker_alloc+0x332/0x4a0 [ 190.723885][ T6222] ? get_pid_task+0x20/0x1f0 [ 190.723916][ T6222] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 190.723944][ T6222] ? tun_get+0x1c/0x2f0 [ 190.723970][ T6222] ? tun_get+0x1c/0x2f0 [ 190.724003][ T6222] ? tun_get+0x1c/0x2f0 [ 190.724038][ T6222] ? tun_get+0x1c/0x2f0 [ 190.724071][ T6222] tun_chr_write_iter+0x119/0x200 [ 190.724103][ T6222] vfs_write+0x629/0xba0 [ 190.724139][ T6222] ? __pfx_vfs_write+0x10/0x10 [ 190.724177][ T6222] ? __fget_files+0x2a/0x420 [ 190.724209][ T6222] ksys_write+0x156/0x270 [ 190.724240][ T6222] ? __pfx_ksys_write+0x10/0x10 [ 190.724277][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.724303][ T6222] do_syscall_64+0x15f/0xf80 [ 190.724339][ T6222] ? clear_bhb_loop+0x40/0x90 [ 190.724369][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.724394][ T6222] RIP: 0033:0x7f501e7fce59 [ 190.724417][ T6222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.724436][ T6222] RSP: 002b:00007f501ca14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.724460][ T6222] RAX: ffffffffffffffda RBX: 00007f501ea76180 RCX: 00007f501e7fce59 [ 190.724476][ T6222] RDX: 00000000000001af RSI: 0000200000000700 RDI: 0000000000000003 [ 190.724490][ T6222] RBP: 00007f501ca14090 R08: 0000000000000000 R09: 0000000000000000 [ 190.724505][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.724518][ T6222] R13: 00007f501ea76218 R14: 00007f501ea76180 R15: 00007ffc8fc18b28 [ 190.724559][ T6222] [ 191.406754][ T5611] Bluetooth: hci2: unexpected event for opcode 0x0406 [ 191.673705][ T36] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.843035][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 191.901005][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 191.901064][ T36] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.901089][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.961625][ T36] usb 3-1: config 0 descriptor?? [ 191.965818][ T6225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 192.087084][ T36] hub 3-1:0.0: USB hub found [ 192.498734][ T36] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 192.538178][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 192.538308][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 192.584479][ T36] usb 3-1: USB disconnect, device number 5 [ 192.923175][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 193.085644][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.085746][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.085839][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 193.085863][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.150692][ T9] usb 5-1: config 0 descriptor?? [ 193.374156][ T6250] netlink: 84 bytes leftover after parsing attributes in process `syz.3.129'. [ 195.543163][ T5611] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 195.543508][ T5611] Bluetooth: hci2: Injecting HCI hardware error event [ 195.560159][ T5609] Bluetooth: hci2: hardware error 0x00 [ 196.472533][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.472613][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.648293][ T5732] usb 5-1: USB disconnect, device number 5 [ 196.698227][ T6258] netlink: 84 bytes leftover after parsing attributes in process `syz.1.131'. [ 198.513347][ T5609] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 198.748597][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.133'. [ 201.045227][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0406 [ 201.309289][ T6291] FAULT_INJECTION: forcing a failure. [ 201.309289][ T6291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.309327][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.3.141 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.309352][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.309365][ T6291] Call Trace: [ 201.309374][ T6291] [ 201.309384][ T6291] dump_stack_lvl+0xe8/0x150 [ 201.309416][ T6291] should_fail_ex+0x46b/0x600 [ 201.309446][ T6291] _copy_to_user+0x31/0xb0 [ 201.309475][ T6291] simple_read_from_buffer+0xe1/0x170 [ 201.309513][ T6291] proc_fail_nth_read+0x1be/0x230 [ 201.309538][ T6291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.309562][ T6291] ? rw_verify_area+0x2ac/0x4e0 [ 201.309587][ T6291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.309612][ T6291] vfs_read+0x212/0xa80 [ 201.309645][ T6291] ? __pfx_vfs_read+0x10/0x10 [ 201.309673][ T6291] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 201.309707][ T6291] ? lockdep_hardirqs_on+0x7a/0x110 [ 201.309739][ T6291] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 201.309770][ T6291] ? mutex_lock_nested+0x152/0x1d0 [ 201.309793][ T6291] ? fdget_pos+0x252/0x320 [ 201.309824][ T6291] ksys_read+0x156/0x270 [ 201.309852][ T6291] ? __pfx_ksys_read+0x10/0x10 [ 201.309887][ T6291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.309918][ T6291] do_syscall_64+0x15f/0xf80 [ 201.309948][ T6291] ? trace_irq_disable+0x3b/0x140 [ 201.309974][ T6291] ? clear_bhb_loop+0x40/0x90 [ 201.310002][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.310024][ T6291] RIP: 0033:0x7f501e7bd68e [ 201.310044][ T6291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.310063][ T6291] RSP: 002b:00007f501ca55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.310086][ T6291] RAX: ffffffffffffffda RBX: 00007f501ca566c0 RCX: 00007f501e7bd68e [ 201.310102][ T6291] RDX: 000000000000000f RSI: 00007f501ca560a0 RDI: 0000000000000005 [ 201.310116][ T6291] RBP: 00007f501ca56090 R08: 0000000000000000 R09: 0000000000000000 [ 201.310130][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.310158][ T6291] R13: 00007f501ea76038 R14: 00007f501ea75fa0 R15: 00007ffc8fc18b28 [ 201.310194][ T6291] [ 201.535092][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 201.693230][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 201.695960][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 201.696011][ T5838] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.696034][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.777861][ T5838] usb 5-1: config 0 descriptor?? [ 201.779517][ T6292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.876913][ T5838] hub 5-1:0.0: USB hub found [ 202.067945][ T6303] netlink: 84 bytes leftover after parsing attributes in process `syz.3.144'. [ 203.509328][ T5838] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 203.530457][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 203.530601][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 203.558656][ T5838] usb 5-1: USB disconnect, device number 6 [ 203.606852][ T6295] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.607094][ T6295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 203.607328][ T6295] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.024468][ T5328] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 205.102172][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.148'. [ 206.293377][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.293480][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.293554][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.503073][ T5328] usb 1-1: device not accepting address 7, error -71 [ 207.520632][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 209.508218][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 209.508278][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'. [ 209.944157][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.944602][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.944646][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.944685][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.944932][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 209.944963][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'. [ 209.947637][ T6333] Zero length message leads to an empty skb [ 211.556896][ T5611] Bluetooth: hci3: unexpected event for opcode 0x0406 [ 211.894095][ T6347] netlink: 84 bytes leftover after parsing attributes in process `syz.0.157'. [ 214.365396][ T5611] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 216.954310][ T5611] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 216.954604][ T5611] Bluetooth: hci3: Injecting HCI hardware error event [ 216.964932][ T5611] Bluetooth: hci3: hardware error 0x00 [ 217.193079][ T5840] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 217.263706][ T1983] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 217.351488][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.351516][ T5840] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.351555][ T5840] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 217.351590][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.400197][ T5840] usb 1-1: config 0 descriptor?? [ 217.425757][ T1983] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 217.425788][ T1983] usb 5-1: config 0 has no interface number 0 [ 217.429437][ T1983] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 217.429532][ T1983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.429555][ T1983] usb 5-1: Product: syz [ 217.429570][ T1983] usb 5-1: Manufacturer: syz [ 217.429586][ T1983] usb 5-1: SerialNumber: syz [ 218.607806][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 218.612556][ T1983] usb 5-1: config 0 descriptor?? [ 218.988399][ T6372] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 218.989333][ T5609] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 218.990057][ T5609] Bluetooth: hci4: Injecting HCI hardware error event [ 219.004264][ T5614] Bluetooth: hci4: hardware error 0x00 [ 219.046796][ T5840] usb 1-1: can't set config #0, error -71 [ 219.074972][ T5611] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 219.328365][ T5840] usb 1-1: USB disconnect, device number 9 [ 219.462398][ T1983] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 219.524095][ T1983] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 219.524197][ T1983] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 219.524286][ T1983] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 219.542303][ T1983] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 219.910349][ T1983] usb 5-1: USB disconnect, device number 7 [ 219.997205][ T6385] loop8: detected capacity change from 0 to 7 [ 220.470562][ T6385] Dev loop8: unable to read RDB block 7 [ 220.470623][ T6385] loop8: unable to read partition table [ 220.470870][ T6385] loop8: partition table beyond EOD, truncated [ 220.470891][ T6385] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.931391][ T1983] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 220.977843][ T1983] keyspan 5-1:0.133: device disconnected [ 221.073505][ T5614] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 223.423094][ T6402] netlink: 84 bytes leftover after parsing attributes in process `syz.4.171'. [ 225.463129][ T6286] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 227.397104][ T6286] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.432059][ T6420] fuse: Bad value for 'fd' [ 227.749042][ T6286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.749074][ T6286] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.749114][ T6286] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 227.749138][ T6286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.799742][ T6286] usb 5-1: config 0 descriptor?? [ 227.863031][ T5698] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 228.013055][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 228.030660][ T5698] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 228.030694][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.030725][ T5698] usb 2-1: Product: syz [ 228.030741][ T5698] usb 2-1: Manufacturer: syz [ 228.030757][ T5698] usb 2-1: SerialNumber: syz [ 228.092801][ T5698] usb 2-1: config 0 descriptor?? [ 228.373174][ T5698] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 228.435390][ T5698] usb 2-1: USB disconnect, device number 7 [ 230.625146][ T5698] usb 5-1: USB disconnect, device number 8 [ 230.722146][ T6443] syz.2.179 uses obsolete (PF_INET,SOCK_PACKET) [ 230.736555][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 230.736578][ T6443] netlink: 348 bytes leftover after parsing attributes in process `syz.2.179'. [ 230.736609][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 230.736623][ T6443] netlink: 348 bytes leftover after parsing attributes in process `syz.2.179'. [ 230.736758][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 231.331849][ T37] kauditd_printk_skb: 79 callbacks suppressed [ 231.331871][ T37] audit: type=1326 audit(1779626590.666:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.332324][ T37] audit: type=1326 audit(1779626590.676:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.332712][ T37] audit: type=1326 audit(1779626590.686:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.332820][ T37] audit: type=1326 audit(1779626590.686:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.343386][ T37] audit: type=1326 audit(1779626590.686:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.343677][ T37] audit: type=1326 audit(1779626590.686:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.343912][ T37] audit: type=1326 audit(1779626590.686:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.344201][ T37] audit: type=1326 audit(1779626590.696:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.344486][ T37] audit: type=1326 audit(1779626590.696:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 231.344821][ T37] audit: type=1326 audit(1779626590.696:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6448 comm="syz.4.182" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 232.126624][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 232.126648][ T6443] netlink: 348 bytes leftover after parsing attributes in process `syz.2.179'. [ 232.126670][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 232.126685][ T6443] netlink: 348 bytes leftover after parsing attributes in process `syz.2.179'. [ 232.126765][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 232.493507][ T6460] FAULT_INJECTION: forcing a failure. [ 232.493507][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 232.493545][ T6460] CPU: 0 UID: 0 PID: 6460 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 232.493571][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.493584][ T6460] Call Trace: [ 232.493605][ T6460] [ 232.493616][ T6460] dump_stack_lvl+0xe8/0x150 [ 232.493648][ T6460] should_fail_ex+0x46b/0x600 [ 232.493680][ T6460] should_failslab+0xa8/0x100 [ 232.493711][ T6460] __kmalloc_noprof+0xdf/0x7b0 [ 232.493738][ T6460] ? kfree+0x4d/0x6c0 [ 232.493758][ T6460] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 232.493789][ T6460] tomoyo_realpath_from_path+0xe3/0x5d0 [ 232.493814][ T6460] ? tomoyo_domain+0xd7/0x130 [ 232.493843][ T6460] ? tomoyo_path_number_perm+0x219/0x630 [ 232.493874][ T6460] tomoyo_path_number_perm+0x246/0x630 [ 232.493909][ T6460] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 232.493938][ T6460] ? __lock_acquire+0x6b5/0x2cf0 [ 232.493989][ T6460] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.494049][ T6460] ? __fget_files+0x2a/0x420 [ 232.494073][ T6460] ? __fget_files+0x2a/0x420 [ 232.494092][ T6460] ? __fget_files+0x3a6/0x420 [ 232.494112][ T6460] ? __fget_files+0x2a/0x420 [ 232.494136][ T6460] security_file_ioctl+0xc3/0x2a0 [ 232.494170][ T6460] __se_sys_ioctl+0x47/0x170 [ 232.494197][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.494221][ T6460] do_syscall_64+0x15f/0xf80 [ 232.494252][ T6460] ? trace_irq_disable+0x3b/0x140 [ 232.494279][ T6460] ? clear_bhb_loop+0x40/0x90 [ 232.494306][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.494328][ T6460] RIP: 0033:0x7f8842cfce59 [ 232.494349][ T6460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.494368][ T6460] RSP: 002b:00007f8840f56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.494391][ T6460] RAX: ffffffffffffffda RBX: 00007f8842f75fa0 RCX: 00007f8842cfce59 [ 232.494408][ T6460] RDX: 0000200000000200 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 232.494423][ T6460] RBP: 00007f8840f56090 R08: 0000000000000000 R09: 0000000000000000 [ 232.494437][ T6460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.494450][ T6460] R13: 00007f8842f76038 R14: 00007f8842f75fa0 R15: 00007ffcca869448 [ 232.494487][ T6460] [ 232.494854][ T6460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.819493][ T6462] veth1: entered promiscuous mode [ 232.819520][ T6462] veth1: entered allmulticast mode [ 233.113617][ T6466] netlink: 'syz.0.185': attribute type 10 has an invalid length. [ 233.166021][ T6465] comedi comedi3: pcl724: I/O base address or length out of range [ 235.897723][ T6485] __nla_validate_parse: 8 callbacks suppressed [ 235.897746][ T6485] netlink: 84 bytes leftover after parsing attributes in process `syz.2.190'. [ 237.135326][ T6490] netlink: 84 bytes leftover after parsing attributes in process `syz.1.191'. [ 238.973083][ T5698] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 239.125727][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.125755][ T5698] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.125793][ T5698] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 239.125826][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.195933][ T5698] usb 5-1: config 0 descriptor?? [ 239.291511][ T6509] netlink: 84 bytes leftover after parsing attributes in process `syz.2.198'. [ 239.659836][ T6512] FAULT_INJECTION: forcing a failure. [ 239.659836][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 239.659865][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 239.659883][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.659905][ T6512] Call Trace: [ 239.659911][ T6512] [ 239.659918][ T6512] dump_stack_lvl+0xe8/0x150 [ 239.659942][ T6512] should_fail_ex+0x46b/0x600 [ 239.659963][ T6512] should_failslab+0xa8/0x100 [ 239.659984][ T6512] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 239.660002][ T6512] ? __alloc_skb+0x1d0/0x7d0 [ 239.660021][ T6512] ? __pfx_tcp_current_mss+0x10/0x10 [ 239.660048][ T6512] __alloc_skb+0x1d0/0x7d0 [ 239.660071][ T6512] tcp_stream_alloc_skb+0x3f/0x5c0 [ 239.660100][ T6512] tcp_sendmsg_locked+0x134b/0x5370 [ 239.660132][ T6512] ? __lock_acquire+0x6b5/0x2cf0 [ 239.660173][ T6512] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 239.660195][ T6512] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 239.660212][ T6512] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.660236][ T6512] ? __pfx_inet_sendmsg+0x10/0x10 [ 239.660260][ T6512] tcp_sendmsg+0x2f/0x50 [ 239.660275][ T6512] __sys_sendto+0x5f1/0x710 [ 239.660300][ T6512] ? __pfx___sys_sendto+0x10/0x10 [ 239.660339][ T6512] ? ksys_write+0x248/0x270 [ 239.660359][ T6512] ? __pfx_ksys_write+0x10/0x10 [ 239.660381][ T6512] __x64_sys_sendto+0xde/0x100 [ 239.660402][ T6512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.660420][ T6512] do_syscall_64+0x15f/0xf80 [ 239.660442][ T6512] ? trace_irq_disable+0x3b/0x140 [ 239.660461][ T6512] ? clear_bhb_loop+0x40/0x90 [ 239.660480][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.660496][ T6512] RIP: 0033:0x7f4ae2b2ce59 [ 239.660512][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.660525][ T6512] RSP: 002b:00007f4ae0d86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 239.660542][ T6512] RAX: ffffffffffffffda RBX: 00007f4ae2da5fa0 RCX: 00007f4ae2b2ce59 [ 239.660553][ T6512] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 239.660563][ T6512] RBP: 00007f4ae0d86090 R08: 0000000000000000 R09: 0000000000000000 [ 239.660573][ T6512] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 239.660582][ T6512] R13: 00007f4ae2da6038 R14: 00007f4ae2da5fa0 R15: 00007ffe54df9a58 [ 239.660606][ T6512] [ 239.992225][ T6514] netlink: 84 bytes leftover after parsing attributes in process `syz.0.200'. [ 241.223456][ T6519] usb 5-1: USB disconnect, device number 9 [ 241.290456][ T37] kauditd_printk_skb: 81 callbacks suppressed [ 241.290476][ T37] audit: type=1326 audit(1779626601.016:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.290984][ T37] audit: type=1326 audit(1779626601.016:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.291144][ T37] audit: type=1326 audit(1779626601.016:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.291306][ T37] audit: type=1326 audit(1779626601.016:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.291450][ T37] audit: type=1326 audit(1779626601.016:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.291628][ T37] audit: type=1326 audit(1779626601.016:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.292213][ T37] audit: type=1326 audit(1779626601.016:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.292381][ T37] audit: type=1326 audit(1779626601.016:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.292531][ T37] audit: type=1326 audit(1779626601.016:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.292766][ T37] audit: type=1326 audit(1779626601.016:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6520 comm="syz.1.202" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae2b2ce59 code=0x7ffc0000 [ 241.931424][ T6528] netlink: 84 bytes leftover after parsing attributes in process `syz.2.204'. [ 247.373052][ T1983] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 247.719993][ T1983] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.720042][ T1983] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 247.720067][ T1983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.817883][ T6552] loop8: detected capacity change from 0 to 7 [ 248.663970][ T1983] usb 3-1: config 0 descriptor?? [ 248.675196][ T1983] usb 3-1: can't set config #0, error -71 [ 248.741517][ T1983] usb 3-1: USB disconnect, device number 6 [ 248.783869][ T6552] Dev loop8: unable to read RDB block 7 [ 248.783924][ T6552] loop8: unable to read partition table [ 248.784152][ T6552] loop8: partition table beyond EOD, truncated [ 248.784189][ T6552] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 249.463155][ T6565] netlink: 84 bytes leftover after parsing attributes in process `syz.1.215'. [ 250.890764][ T6572] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 251.000423][ T6575] netlink: 84 bytes leftover after parsing attributes in process `syz.1.217'. [ 252.183140][ T5328] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 252.346218][ T5328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.346247][ T5328] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 252.346303][ T5328] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 252.346337][ T5328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.396017][ T5328] usb 1-1: config 0 descriptor?? [ 252.489084][ T37] kauditd_printk_skb: 73 callbacks suppressed [ 252.489104][ T37] audit: type=1326 audit(1779626612.216:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.489670][ T37] audit: type=1326 audit(1779626612.216:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.489817][ T37] audit: type=1326 audit(1779626612.216:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.489994][ T37] audit: type=1326 audit(1779626612.216:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.490152][ T37] audit: type=1326 audit(1779626612.216:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.490776][ T37] audit: type=1326 audit(1779626612.216:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.491543][ T37] audit: type=1326 audit(1779626612.216:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.491595][ T37] audit: type=1326 audit(1779626612.216:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.491642][ T37] audit: type=1326 audit(1779626612.216:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 252.491690][ T37] audit: type=1326 audit(1779626612.216:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf88f6ce59 code=0x7ffc0000 [ 253.983882][ T31] usb 1-1: USB disconnect, device number 10 [ 254.397856][ T6596] netlink: 84 bytes leftover after parsing attributes in process `syz.1.223'. [ 254.692738][ T6600] netlink: 84 bytes leftover after parsing attributes in process `syz.0.222'. [ 255.114922][ T6605] loop8: detected capacity change from 0 to 7 [ 255.775852][ T6605] Dev loop8: unable to read RDB block 7 [ 255.775907][ T6605] loop8: unable to read partition table [ 255.776134][ T6605] loop8: partition table beyond EOD, truncated [ 255.779159][ T6605] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.336028][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.336107][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.881710][ T6610] netlink: 68 bytes leftover after parsing attributes in process `syz.3.226'. [ 261.548366][ T6627] Bluetooth: hci0: unsupported parameter 255 [ 261.548392][ T6627] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 261.607620][ T37] kauditd_printk_skb: 63 callbacks suppressed [ 261.607639][ T37] audit: type=1326 audit(1779626621.336:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6611 comm="syz.2.227" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c7da4ce59 code=0x0 [ 262.034783][ T6519] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.218975][ T6519] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.219005][ T6519] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.219045][ T6519] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 262.219069][ T6519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.318061][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 262.370954][ T6519] usb 5-1: config 0 descriptor?? [ 263.854170][ T821] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 264.013130][ T821] usb 2-1: Using ep0 maxpacket: 32 [ 264.015624][ T821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 264.015676][ T821] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.015693][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.022446][ T821] usb 2-1: config 0 descriptor?? [ 264.067863][ T6655] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 264.123010][ T1983] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 264.127710][ T821] hub 2-1:0.0: USB hub found [ 265.188726][ T1983] usb 4-1: device descriptor read/64, error -71 [ 265.287342][ T821] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 265.397751][ T821] usbhid 2-1:0.0: can't add hid device: -71 [ 265.397858][ T821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 265.470153][ T1983] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 266.700687][ T5838] usb 5-1: USB disconnect, device number 10 [ 266.725127][ T821] usb 2-1: USB disconnect, device number 8 [ 267.019304][ T37] audit: type=1326 audit(1779626626.746:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.022042][ T37] audit: type=1326 audit(1779626626.746:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.022105][ T37] audit: type=1326 audit(1779626626.746:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.022151][ T37] audit: type=1326 audit(1779626626.746:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.143287][ T6667] FAULT_INJECTION: forcing a failure. [ 267.143287][ T6667] name failslab, interval 1, probability 0, space 0, times 0 [ 267.143321][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.0.239 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 267.143346][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.143359][ T6667] Call Trace: [ 267.143367][ T6667] [ 267.143375][ T6667] dump_stack_lvl+0xe8/0x150 [ 267.143406][ T6667] should_fail_ex+0x46b/0x600 [ 267.143436][ T6667] should_failslab+0xa8/0x100 [ 267.143466][ T6667] __kmalloc_noprof+0xdf/0x7b0 [ 267.143489][ T6667] ? kfree+0x4d/0x6c0 [ 267.143522][ T6667] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 267.143552][ T6667] tomoyo_realpath_from_path+0xe3/0x5d0 [ 267.143578][ T6667] ? tomoyo_domain+0xd7/0x130 [ 267.143608][ T6667] ? tomoyo_path_number_perm+0x219/0x630 [ 267.143639][ T6667] tomoyo_path_number_perm+0x246/0x630 [ 267.143674][ T6667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.143704][ T6667] ? __lock_acquire+0x6b5/0x2cf0 [ 267.143738][ T6667] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.143800][ T6667] ? __fget_files+0x2a/0x420 [ 267.143824][ T6667] ? __fget_files+0x2a/0x420 [ 267.143844][ T6667] ? __fget_files+0x3a6/0x420 [ 267.143864][ T6667] ? __fget_files+0x2a/0x420 [ 267.143889][ T6667] security_file_ioctl+0xc3/0x2a0 [ 267.143923][ T6667] __se_sys_ioctl+0x47/0x170 [ 267.143951][ T6667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.143975][ T6667] do_syscall_64+0x15f/0xf80 [ 267.144007][ T6667] ? trace_irq_disable+0x3b/0x140 [ 267.144034][ T6667] ? clear_bhb_loop+0x40/0x90 [ 267.144062][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.144084][ T6667] RIP: 0033:0x7f8842cfce59 [ 267.144105][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.144122][ T6667] RSP: 002b:00007f8840f56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.144146][ T6667] RAX: ffffffffffffffda RBX: 00007f8842f75fa0 RCX: 00007f8842cfce59 [ 267.144162][ T6667] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 267.144175][ T6667] RBP: 00007f8840f56090 R08: 0000000000000000 R09: 0000000000000000 [ 267.144189][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.144202][ T6667] R13: 00007f8842f76038 R14: 00007f8842f75fa0 R15: 00007ffcca869448 [ 267.144237][ T6667] [ 267.144246][ T6667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.151977][ T37] audit: type=1326 audit(1779626626.746:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.152039][ T37] audit: type=1326 audit(1779626626.756:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.152091][ T37] audit: type=1326 audit(1779626626.756:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.152141][ T37] audit: type=1326 audit(1779626626.756:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.152212][ T37] audit: type=1326 audit(1779626626.766:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 267.152262][ T37] audit: type=1326 audit(1779626626.766:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.240" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c7da4ce59 code=0x7ffc0000 [ 268.210687][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 269.345718][ T1983] usb usb4-port1: attempt power cycle [ 269.443064][ T5838] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 269.595126][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.595159][ T5838] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 269.595177][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.600580][ T5838] usb 2-1: config 0 descriptor?? [ 269.655031][ T5838] smsusb:smsusb_probe: board id=8, interface number 0 [ 269.655133][ T5838] smsusb:smsusb_probe: Device initialized with return code -19 [ 269.702999][ T1983] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 269.724262][ T1983] usb 4-1: Using ep0 maxpacket: 16 [ 269.727009][ T1983] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.728860][ T1983] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 269.750474][ T1983] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 269.750505][ T1983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.750532][ T1983] usb 4-1: Product: syz [ 269.750547][ T1983] usb 4-1: Manufacturer: syz [ 269.750569][ T1983] usb 4-1: SerialNumber: syz [ 269.840843][ T5838] usb 2-1: USB disconnect, device number 9 [ 270.985785][ T1983] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 270.988558][ T1983] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 271.207334][ T1983] usb 4-1: 2:1 : can't get High Capability descriptor [ 272.096120][ T5698] usb 4-1: USB disconnect, device number 11 [ 275.933491][ T5698] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.083044][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 276.083088][ T5838] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 276.086713][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 96, changing to 10 [ 276.086751][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.086792][ T5698] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.086817][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.090800][ T5698] usb 4-1: config 0 descriptor?? [ 276.175281][ T6724] netlink: 68 bytes leftover after parsing attributes in process `syz.0.254'. [ 276.525444][ T5838] usb 5-1: device descriptor read/64, error -71 [ 277.168321][ T5698] hub 4-1:0.0: USB hub found [ 277.169291][ T5698] hub 4-1:0.0: 1 port detected [ 277.303093][ T5838] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 277.376309][ T5698] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 277.376337][ T5698] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 277.422163][ T5698] usbhid 4-1:0.0: can't add hid device: -71 [ 277.422290][ T5698] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 277.485451][ T5698] usb 4-1: USB disconnect, device number 12 [ 277.493160][ T5838] usb 5-1: device descriptor read/64, error -71 [ 277.603504][ T5838] usb usb5-port1: attempt power cycle [ 277.963140][ T5838] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 277.985000][ T5838] usb 5-1: device descriptor read/8, error -71 [ 278.750871][ T6741] warning: `syz.1.257' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 279.213251][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.257'. [ 280.152321][ T5838] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 280.563248][ T5838] usb 5-1: device descriptor read/8, error -71 [ 281.179169][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 282.314193][ T5838] usb usb5-port1: unable to enumerate USB device [ 282.583027][ T1983] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 282.736376][ T1983] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.736408][ T1983] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 282.736426][ T1983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.750845][ T1983] usb 4-1: config 0 descriptor?? [ 282.854826][ T1983] smsusb:smsusb_probe: board id=8, interface number 0 [ 282.854916][ T1983] smsusb:smsusb_probe: Device initialized with return code -19 [ 282.912424][ T6757] netlink: 84 bytes leftover after parsing attributes in process `syz.2.261'. [ 284.569227][ T6750] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.672195][ T1983] usb 4-1: USB disconnect, device number 13 [ 284.673064][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.765424][ T6775] FAULT_INJECTION: forcing a failure. [ 287.765424][ T6775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.765460][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.765480][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.765490][ T6775] Call Trace: [ 287.765497][ T6775] [ 287.765504][ T6775] dump_stack_lvl+0xe8/0x150 [ 287.765529][ T6775] should_fail_ex+0x46b/0x600 [ 287.765551][ T6775] _copy_from_user+0x2d/0xb0 [ 287.765574][ T6775] ___sys_sendmsg+0x1c6/0x360 [ 287.765600][ T6775] ? __lock_acquire+0x6b5/0x2cf0 [ 287.765631][ T6775] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.765694][ T6775] ? __fget_files+0x2a/0x420 [ 287.765712][ T6775] ? __fget_files+0x3a6/0x420 [ 287.765741][ T6775] __x64_sys_sendmsg+0x1c3/0x2a0 [ 287.765778][ T6775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.765821][ T6775] ? __pfx_ksys_write+0x10/0x10 [ 287.765865][ T6775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.765891][ T6775] do_syscall_64+0x15f/0xf80 [ 287.765926][ T6775] ? clear_bhb_loop+0x40/0x90 [ 287.765952][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.765975][ T6775] RIP: 0033:0x7f4ae2b2ce59 [ 287.765996][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.766014][ T6775] RSP: 002b:00007f4ae0d65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.766038][ T6775] RAX: ffffffffffffffda RBX: 00007f4ae2da6090 RCX: 00007f4ae2b2ce59 [ 287.766054][ T6775] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000008 [ 287.766068][ T6775] RBP: 00007f4ae0d65090 R08: 0000000000000000 R09: 0000000000000000 [ 287.766082][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.766095][ T6775] R13: 00007f4ae2da6128 R14: 00007f4ae2da6090 R15: 00007ffe54df9a58 [ 287.766130][ T6775] [ 291.667577][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.269'. [ 293.693950][ T6799] FAULT_INJECTION: forcing a failure. [ 293.693950][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.693988][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.694013][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.694026][ T6799] Call Trace: [ 293.694035][ T6799] [ 293.694043][ T6799] dump_stack_lvl+0xe8/0x150 [ 293.694074][ T6799] should_fail_ex+0x46b/0x600 [ 293.694102][ T6799] _copy_from_user+0x2d/0xb0 [ 293.694129][ T6799] do_sock_getsockopt+0x200/0x7e0 [ 293.694145][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 293.694167][ T6799] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 293.694213][ T6799] ? __fget_files+0x3a6/0x420 [ 293.694233][ T6799] ? __fget_files+0x2a/0x420 [ 293.694259][ T6799] __x64_sys_getsockopt+0x1aa/0x250 [ 293.694296][ T6799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.694320][ T6799] do_syscall_64+0x15f/0xf80 [ 293.694379][ T6799] ? trace_irq_disable+0x3b/0x140 [ 293.694405][ T6799] ? clear_bhb_loop+0x40/0x90 [ 293.694431][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.694456][ T6799] RIP: 0033:0x7fcf88f6ce59 [ 293.694476][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.694494][ T6799] RSP: 002b:00007fcf871c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 293.694517][ T6799] RAX: ffffffffffffffda RBX: 00007fcf891e5fa0 RCX: 00007fcf88f6ce59 [ 293.694533][ T6799] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003 [ 293.694545][ T6799] RBP: 00007fcf871c6090 R08: 0000200000000100 R09: 0000000000000000 [ 293.694560][ T6799] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000001 [ 293.694574][ T6799] R13: 00007fcf891e6038 R14: 00007fcf891e5fa0 R15: 00007ffd7d989368 [ 293.694608][ T6799] [ 293.938131][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024ab5c00: rx timeout, send abort [ 294.436121][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c07b000: rx timeout, send abort [ 294.439461][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024ab5c00: abort rx timeout. Force session deactivation [ 294.937874][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803c07b000: abort rx timeout. Force session deactivation [ 298.358978][ T5698] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 298.503064][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 298.517052][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.517088][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.517113][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.517159][ T5698] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.517183][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.576450][ T5698] usb 4-1: config 0 descriptor?? [ 300.037914][ T37] kauditd_printk_skb: 65 callbacks suppressed [ 300.037934][ T37] audit: type=1326 audit(1779626659.766:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6827 comm="syz.1.279" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae2b2ce59 code=0x0 [ 303.269654][ T5611] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.870383][ T5698] usbhid 4-1:0.0: can't add hid device: -71 [ 304.871317][ T5698] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 305.348340][ T5698] usb 4-1: USB disconnect, device number 14 [ 307.624424][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 308.980079][ T6855] FAULT_INJECTION: forcing a failure. [ 308.980079][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.980117][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.4.285 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.980141][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.980154][ T6855] Call Trace: [ 308.980163][ T6855] [ 308.980172][ T6855] dump_stack_lvl+0xe8/0x150 [ 308.980204][ T6855] should_fail_ex+0x46b/0x600 [ 308.980234][ T6855] _copy_from_user+0x2d/0xb0 [ 308.980263][ T6855] ___sys_sendmsg+0x1c6/0x360 [ 308.980296][ T6855] ? __lock_acquire+0x6b5/0x2cf0 [ 308.980339][ T6855] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.980409][ T6855] ? __fget_files+0x2a/0x420 [ 308.980429][ T6855] ? __fget_files+0x3a6/0x420 [ 308.980461][ T6855] __x64_sys_sendmsg+0x1c3/0x2a0 [ 308.980496][ T6855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.980537][ T6855] ? __pfx_ksys_write+0x10/0x10 [ 308.980571][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.980596][ T6855] do_syscall_64+0x15f/0xf80 [ 308.980626][ T6855] ? trace_irq_disable+0x3b/0x140 [ 308.980652][ T6855] ? clear_bhb_loop+0x40/0x90 [ 308.980679][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.980702][ T6855] RIP: 0033:0x7fcf88f6ce59 [ 308.980726][ T6855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.980744][ T6855] RSP: 002b:00007fcf871c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.980769][ T6855] RAX: ffffffffffffffda RBX: 00007fcf891e5fa0 RCX: 00007fcf88f6ce59 [ 308.980785][ T6855] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 308.980800][ T6855] RBP: 00007fcf871c6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.980814][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.980827][ T6855] R13: 00007fcf891e6038 R14: 00007fcf891e5fa0 R15: 00007ffd7d989368 [ 308.980862][ T6855] [ 309.198299][ T1983] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 309.411810][ T6854] fuse: Bad value for 'fd' [ 309.446369][ T1983] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.446421][ T1983] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 309.446446][ T1983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.523731][ T1983] usb 2-1: config 0 descriptor?? [ 309.564267][ T1983] smsusb:smsusb_probe: board id=8, interface number 0 [ 309.564327][ T1983] smsusb:smsusb_probe: Device initialized with return code -19 [ 309.673073][ T36] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 309.786296][ T1983] usb 2-1: USB disconnect, device number 10 [ 309.863650][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 309.910379][ T36] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 309.910414][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.910435][ T36] usb 1-1: Product: syz [ 309.910450][ T36] usb 1-1: Manufacturer: syz [ 309.910463][ T36] usb 1-1: SerialNumber: syz [ 309.970418][ T36] usb 1-1: config 0 descriptor?? [ 310.181512][ T36] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 310.207157][ T36] usb 1-1: USB disconnect, device number 11 [ 312.025471][ T6878] netlink: 84 bytes leftover after parsing attributes in process `syz.4.292'. [ 312.246015][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 312.246043][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 312.246071][ T6879] netlink: 'syz.3.291': attribute type 14 has an invalid length. [ 312.246094][ T6879] netlink: 'syz.3.291': attribute type 12 has an invalid length. [ 313.915389][ T6888] FAULT_INJECTION: forcing a failure. [ 313.915389][ T6888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.915428][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.3.295 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.915453][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.915468][ T6888] Call Trace: [ 313.915476][ T6888] [ 313.915486][ T6888] dump_stack_lvl+0xe8/0x150 [ 313.915518][ T6888] should_fail_ex+0x46b/0x600 [ 313.915549][ T6888] _copy_from_user+0x2d/0xb0 [ 313.915577][ T6888] do_sys_poll+0x2a0/0xf50 [ 313.915628][ T6888] ? __pfx_do_sys_poll+0x10/0x10 [ 313.915658][ T6888] ? is_bpf_text_address+0x26/0x2b0 [ 313.915691][ T6888] ? kernel_text_address+0xa5/0xe0 [ 313.915727][ T6888] ? __kernel_text_address+0xd/0x30 [ 313.915832][ T6888] ? ktime_get_ts64+0xa9/0x410 [ 313.915886][ T6888] ? __pfx_timespec64_add_safe+0x10/0x10 [ 313.915937][ T6888] __x64_sys_poll+0x190/0x350 [ 313.915973][ T6888] ? __pfx___x64_sys_poll+0x10/0x10 [ 313.916013][ T6888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.916037][ T6888] do_syscall_64+0x15f/0xf80 [ 313.916068][ T6888] ? trace_irq_disable+0x3b/0x140 [ 313.916093][ T6888] ? clear_bhb_loop+0x40/0x90 [ 313.916120][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.916143][ T6888] RIP: 0033:0x7f501e7fce59 [ 313.916163][ T6888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.916181][ T6888] RSP: 002b:00007f501ca56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 313.916205][ T6888] RAX: ffffffffffffffda RBX: 00007f501ea75fa0 RCX: 00007f501e7fce59 [ 313.916221][ T6888] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 313.916236][ T6888] RBP: 00007f501ca56090 R08: 0000000000000000 R09: 0000000000000000 [ 313.916250][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.916263][ T6888] R13: 00007f501ea76038 R14: 00007f501ea75fa0 R15: 00007ffc8fc18b28 [ 313.916298][ T6888] [ 314.195843][ T6889] FAULT_INJECTION: forcing a failure. [ 314.195843][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 314.195871][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 314.195888][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.195898][ T6889] Call Trace: [ 314.195904][ T6889] [ 314.195911][ T6889] dump_stack_lvl+0xe8/0x150 [ 314.195935][ T6889] should_fail_ex+0x46b/0x600 [ 314.195956][ T6889] should_failslab+0xa8/0x100 [ 314.195977][ T6889] kmem_cache_alloc_noprof+0x87/0x680 [ 314.195993][ T6889] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.196016][ T6889] ? do_getname+0x2e/0x250 [ 314.196040][ T6889] do_getname+0x2e/0x250 [ 314.196060][ T6889] ? getname_flags+0x11/0x20 [ 314.196083][ T6889] do_sys_openat2+0xca/0x200 [ 314.196109][ T6889] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.196134][ T6889] ? ksys_write+0x248/0x270 [ 314.196153][ T6889] ? __pfx_ksys_write+0x10/0x10 [ 314.196173][ T6889] __x64_sys_openat+0x138/0x170 [ 314.196199][ T6889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.196215][ T6889] do_syscall_64+0x15f/0xf80 [ 314.196236][ T6889] ? trace_irq_disable+0x3b/0x140 [ 314.196255][ T6889] ? clear_bhb_loop+0x40/0x90 [ 314.196274][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.196289][ T6889] RIP: 0033:0x7f8842cfce59 [ 314.196308][ T6889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.196321][ T6889] RSP: 002b:00007f8840f56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.196337][ T6889] RAX: ffffffffffffffda RBX: 00007f8842f75fa0 RCX: 00007f8842cfce59 [ 314.196348][ T6889] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 314.196359][ T6889] RBP: 00007f8840f56090 R08: 0000000000000000 R09: 0000000000000000 [ 314.196368][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.196377][ T6889] R13: 00007f8842f76038 R14: 00007f8842f75fa0 R15: 00007ffcca869448 [ 314.196401][ T6889] [ 318.793545][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 319.793359][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.793427][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.063077][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 320.225495][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 320.225542][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 320.225569][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.230245][ T9] usb 3-1: config 0 descriptor?? [ 320.357794][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 320.357874][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 320.460434][ T9] usb 3-1: USB disconnect, device number 7 [ 322.513441][ T6924] fuse: Bad value for 'fd' [ 322.633957][ T36] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 322.729593][ T6927] comedi comedi1: adq12b: I/O base address or length out of range [ 322.796186][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.796223][ T36] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.796260][ T36] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 322.796279][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.802389][ T36] usb 1-1: config 0 descriptor?? [ 322.835449][ T1983] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 323.021144][ T37] audit: type=1326 audit(1779626682.746:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6926 comm="syz.4.305" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf88f6ce59 code=0x0 [ 323.025287][ T1983] usb 2-1: Using ep0 maxpacket: 16 [ 323.063866][ T1983] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 323.063901][ T1983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.063916][ T1983] usb 2-1: Product: syz [ 323.063927][ T1983] usb 2-1: Manufacturer: syz [ 323.063937][ T1983] usb 2-1: SerialNumber: syz [ 323.308965][ T1983] usb 2-1: config 0 descriptor?? [ 323.529109][ T1983] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 323.604835][ T1983] usb 2-1: USB disconnect, device number 11 [ 324.297039][ T6935] netlink: 68 bytes leftover after parsing attributes in process `syz.2.304'. [ 326.040374][ T9] usb 1-1: USB disconnect, device number 12 [ 326.345928][ T5840] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 326.451246][ T6945] netlink: 84 bytes leftover after parsing attributes in process `syz.3.306'. [ 326.672462][ T5840] usb 5-1: Using ep0 maxpacket: 8 [ 326.681215][ T5840] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 326.681245][ T5840] usb 5-1: config 0 has no interface number 0 [ 326.681292][ T5840] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.681318][ T5840] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 326.681345][ T5840] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.681374][ T5840] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 326.681417][ T5840] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 326.681442][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.697577][ T5840] usb 5-1: config 0 descriptor?? [ 327.976934][ T5840] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 328.006531][ T5840] usb 5-1: USB disconnect, device number 15 [ 329.530620][ T5840] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 330.303694][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 331.623025][ T5840] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 331.791536][ T5840] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.791584][ T5840] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 331.791610][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.587605][ T5840] usb 5-1: config 0 descriptor?? [ 333.727575][ T5840] smsusb:smsusb_probe: board id=8, interface number 0 [ 333.727663][ T5840] smsusb:smsusb_probe: Device initialized with return code -19 [ 333.970775][ T6976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 334.015352][ T5840] usb 5-1: USB disconnect, device number 16 [ 334.903483][ T6983] fuse: Bad value for 'fd' [ 335.190309][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 335.342961][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 335.372661][ T9] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 335.372695][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.372717][ T9] usb 2-1: Product: syz [ 335.372733][ T9] usb 2-1: Manufacturer: syz [ 335.372748][ T9] usb 2-1: SerialNumber: syz [ 335.412748][ T9] usb 2-1: config 0 descriptor?? [ 335.631826][ T9] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 335.678489][ T9] usb 2-1: USB disconnect, device number 12 [ 335.729697][ T6994] netlink: 68 bytes leftover after parsing attributes in process `syz.0.318'. [ 338.034439][ T7006] netlink: 84 bytes leftover after parsing attributes in process `syz.2.326'. [ 338.940247][ T7001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.873105][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.786294][ T7023] capability: warning: `syz.4.329' uses deprecated v2 capabilities in a way that may be insecure [ 344.367278][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 344.732610][ T5838] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 344.864608][ T7037] netlink: 68 bytes leftover after parsing attributes in process `syz.2.334'. [ 346.577901][ T5838] usb 2-1: device descriptor read/all, error -71 [ 346.651521][ T7038] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.333'. [ 347.229964][ T7042] netlink: 60 bytes leftover after parsing attributes in process `syz.0.324'. [ 347.485016][ T7042] bridge1: entered promiscuous mode [ 347.745400][ T7046] fuse: Bad value for 'fd' [ 348.003174][ T5838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 348.163430][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 348.385365][ T5838] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 348.385398][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.385420][ T5838] usb 5-1: Product: syz [ 348.385435][ T5838] usb 5-1: Manufacturer: syz [ 348.385450][ T5838] usb 5-1: SerialNumber: syz [ 349.267256][ T5838] usb 5-1: config 0 descriptor?? [ 349.468249][ T7055] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.332'. [ 349.484635][ T5838] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 349.517931][ T5838] usb 5-1: USB disconnect, device number 17 [ 350.103034][ T821] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 350.255596][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 350.259834][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10168, setting to 1024 [ 350.259891][ T821] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 350.259917][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.319920][ T821] usb 1-1: config 0 descriptor?? [ 350.321164][ T7061] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.400993][ T821] hub 1-1:0.0: USB hub found [ 350.565842][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.621819][ T7067] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.052998][ T821] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 351.120149][ T821] usbhid 1-1:0.0: can't add hid device: -71 [ 351.120283][ T821] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 351.164016][ T821] usb 1-1: USB disconnect, device number 13 [ 353.392791][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 353.438974][ T5840] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 353.535556][ T7086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.346'. [ 355.795611][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.795649][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.795675][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.795722][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.795748][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.850765][ T5840] usb 2-1: config 0 descriptor?? [ 356.194844][ T5840] usbhid 2-1:0.0: can't add hid device: -71 [ 356.194954][ T5840] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 356.225070][ T5840] usb 2-1: USB disconnect, device number 15 [ 357.985277][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.2.348'. [ 358.182489][ T7095] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 358.413346][ T7095] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 360.783409][ T37] audit: type=1326 audit(1779626720.506:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.1.349" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ae2b2ce59 code=0x0 [ 360.855225][ T7108] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.350'. [ 360.973187][ T7110] program syz.3.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.079482][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 365.300012][ T5840] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 368.263067][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 368.565049][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.565071][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.565101][ T10] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 368.565118][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.569656][ T10] usb 3-1: config 0 descriptor?? [ 368.976135][ T7143] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 368.976162][ T7143] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 369.436865][ T7147] netlink: 68 bytes leftover after parsing attributes in process `syz.4.357'. [ 371.377485][ T5840] usb 3-1: USB disconnect, device number 8 [ 372.812163][ T7155] netlink: 84 bytes leftover after parsing attributes in process `syz.0.363'. [ 377.774834][ T7186] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.370'. [ 378.572136][ T7189] netlink: 84 bytes leftover after parsing attributes in process `syz.0.371'. [ 380.088699][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.088768][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.662581][ T7192] futex_wake_op: syz.1.373 tries to shift op by 144; fix this program [ 382.176517][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 382.317152][ T7207] netlink: 68 bytes leftover after parsing attributes in process `syz.3.372'. [ 384.020093][ T7204] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 384.053909][ T7198] FAULT_INJECTION: forcing a failure. [ 384.053909][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.053970][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.053994][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.054012][ T7198] Call Trace: [ 384.054021][ T7198] [ 384.054030][ T7198] dump_stack_lvl+0xe8/0x150 [ 384.054062][ T7198] should_fail_ex+0x46b/0x600 [ 384.054091][ T7198] _copy_from_user+0x2d/0xb0 [ 384.054120][ T7198] ___sys_sendmsg+0x1c6/0x360 [ 384.054152][ T7198] ? __lock_acquire+0x6b5/0x2cf0 [ 384.054187][ T7198] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.054265][ T7198] ? __fget_files+0x2a/0x420 [ 384.054286][ T7198] ? __fget_files+0x3a6/0x420 [ 384.054315][ T7198] __x64_sys_sendmsg+0x1c3/0x2a0 [ 384.054356][ T7198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.054400][ T7198] ? __pfx_ksys_write+0x10/0x10 [ 384.054433][ T7198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.054457][ T7198] do_syscall_64+0x15f/0xf80 [ 384.054487][ T7198] ? trace_irq_disable+0x3b/0x140 [ 384.054513][ T7198] ? clear_bhb_loop+0x40/0x90 [ 384.054540][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.054569][ T7198] RIP: 0033:0x7f8842cfce59 [ 384.054589][ T7198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.054608][ T7198] RSP: 002b:00007f8840f56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.054632][ T7198] RAX: ffffffffffffffda RBX: 00007f8842f75fa0 RCX: 00007f8842cfce59 [ 384.054648][ T7198] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 384.054663][ T7198] RBP: 00007f8840f56090 R08: 0000000000000000 R09: 0000000000000000 [ 384.054677][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.054690][ T7198] R13: 00007f8842f76038 R14: 00007f8842f75fa0 R15: 00007ffcca869448 [ 384.054726][ T7198] [ 384.066384][ T6840] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.616726][ T1564] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.655908][ T1564] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.656071][ T1564] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.953089][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 384.983015][ T821] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 385.111990][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 386.233861][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 386.233906][ T9] usb 2-1: can't read configurations, error -71 [ 386.357085][ T821] usb 3-1: device descriptor read/all, error -71 [ 388.642483][ T7226] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 388.850930][ T7242] FAULT_INJECTION: forcing a failure. [ 388.850930][ T7242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.850967][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.0.384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.850993][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.851007][ T7242] Call Trace: [ 388.851016][ T7242] [ 388.851025][ T7242] dump_stack_lvl+0xe8/0x150 [ 388.851057][ T7242] should_fail_ex+0x46b/0x600 [ 388.851087][ T7242] _copy_to_user+0x31/0xb0 [ 388.851118][ T7242] simple_read_from_buffer+0xe1/0x170 [ 388.851159][ T7242] proc_fail_nth_read+0x1be/0x230 [ 388.851185][ T7242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.851211][ T7242] ? rw_verify_area+0x2ac/0x4e0 [ 388.851237][ T7242] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.851261][ T7242] vfs_read+0x212/0xa80 [ 388.851295][ T7242] ? __pfx_vfs_read+0x10/0x10 [ 388.851324][ T7242] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 388.851356][ T7242] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.851386][ T7242] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.851418][ T7242] ? mutex_lock_nested+0x152/0x1d0 [ 388.851441][ T7242] ? fdget_pos+0x252/0x320 [ 388.851472][ T7242] ksys_read+0x156/0x270 [ 388.851499][ T7242] ? __pfx_ksys_read+0x10/0x10 [ 388.851534][ T7242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.851559][ T7242] do_syscall_64+0x15f/0xf80 [ 388.851596][ T7242] ? trace_irq_disable+0x3b/0x140 [ 388.851623][ T7242] ? clear_bhb_loop+0x40/0x90 [ 388.851651][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.851673][ T7242] RIP: 0033:0x7f8842cbd68e [ 388.851698][ T7242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.851716][ T7242] RSP: 002b:00007f8840f13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.851738][ T7242] RAX: ffffffffffffffda RBX: 00007f8840f146c0 RCX: 00007f8842cbd68e [ 388.851755][ T7242] RDX: 000000000000000f RSI: 00007f8840f140a0 RDI: 0000000000000005 [ 388.851769][ T7242] RBP: 00007f8840f14090 R08: 0000000000000000 R09: 0000000000000000 [ 388.851783][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.851795][ T7242] R13: 00007f8842f76218 R14: 00007f8842f76180 R15: 00007ffcca869448 [ 388.851830][ T7242] [ 388.922943][ T10] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 389.103861][ T10] usb 4-1: device descriptor read/64, error -71 [ 389.383115][ T10] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 389.417292][ T7246] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 389.421764][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.386'. [ 389.523003][ T10] usb 4-1: device descriptor read/64, error -71 [ 389.633924][ T10] usb usb4-port1: attempt power cycle [ 389.805409][ T7250] netlink: 68 bytes leftover after parsing attributes in process `syz.0.388'. [ 390.065912][ T7252] netlink: 68 bytes leftover after parsing attributes in process `syz.0.388'. [ 391.301885][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 391.340823][ T10] usb 4-1: device descriptor read/8, error -71 [ 391.623157][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 391.684118][ T10] usb 4-1: device descriptor read/8, error -71 [ 392.772022][ T10] usb usb4-port1: unable to enumerate USB device [ 395.296360][ T7266] comedi comedi0: 8255: I/O base address not correctly aligned [ 395.780211][ T7272] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 395.943026][ T5698] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 396.102261][ T5698] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 396.102295][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.130313][ T5698] usb 5-1: config 0 descriptor?? [ 396.142421][ T5698] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 396.207652][ T7277] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 396.211625][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 396.471380][ T7283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 397.013297][ T7284] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 398.058546][ T5698] gspca_cpia1: usb_control_msg 03, error -110 [ 398.129177][ T7290] FAULT_INJECTION: forcing a failure. [ 398.129177][ T7290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.129214][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.1.392 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.129240][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.129255][ T7290] Call Trace: [ 398.129263][ T7290] [ 398.129273][ T7290] dump_stack_lvl+0xe8/0x150 [ 398.129305][ T7290] should_fail_ex+0x46b/0x600 [ 398.129341][ T7290] _copy_to_user+0x31/0xb0 [ 398.129372][ T7290] simple_read_from_buffer+0xe1/0x170 [ 398.129415][ T7290] proc_fail_nth_read+0x1be/0x230 [ 398.129441][ T7290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.129467][ T7290] ? rw_verify_area+0x2ac/0x4e0 [ 398.129493][ T7290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.129518][ T7290] vfs_read+0x212/0xa80 [ 398.129552][ T7290] ? __pfx_vfs_read+0x10/0x10 [ 398.129582][ T7290] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 398.129615][ T7290] ? lockdep_hardirqs_on+0x7a/0x110 [ 398.129647][ T7290] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 398.129680][ T7290] ? mutex_lock_nested+0x152/0x1d0 [ 398.129705][ T7290] ? fdget_pos+0x252/0x320 [ 398.129736][ T7290] ksys_read+0x156/0x270 [ 398.129764][ T7290] ? __pfx_ksys_read+0x10/0x10 [ 398.129799][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.129825][ T7290] do_syscall_64+0x15f/0xf80 [ 398.129857][ T7290] ? trace_irq_disable+0x3b/0x140 [ 398.129884][ T7290] ? clear_bhb_loop+0x40/0x90 [ 398.129912][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.129933][ T7290] RIP: 0033:0x7f4ae2aed68e [ 398.129954][ T7290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.129974][ T7290] RSP: 002b:00007f4ae0d64fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.130005][ T7290] RAX: ffffffffffffffda RBX: 00007f4ae0d656c0 RCX: 00007f4ae2aed68e [ 398.130022][ T7290] RDX: 000000000000000f RSI: 00007f4ae0d650a0 RDI: 0000000000000005 [ 398.130037][ T7290] RBP: 00007f4ae0d65090 R08: 0000000000000000 R09: 0000000000000000 [ 398.130051][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.130065][ T7290] R13: 00007f4ae2da6128 R14: 00007f4ae2da6090 R15: 00007ffe54df9a58 [ 398.130103][ T7290] [ 398.213831][ T7282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.283550][ T5698] gspca_cpia1: usb_control_msg 02, error -71 [ 398.283570][ T5698] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 398.445594][ T5698] usb 5-1: USB disconnect, device number 19 [ 400.555929][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 401.306963][ T7303] netlink: 84 bytes leftover after parsing attributes in process `syz.1.405'. [ 402.779266][ T821] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 402.888520][ T7315] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 402.923030][ T821] usb 5-1: Using ep0 maxpacket: 8 [ 402.928769][ T821] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 402.928833][ T821] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.928858][ T821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.928885][ T821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.928911][ T821] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.928957][ T821] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.928983][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.963058][ T5840] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 403.040148][ T7310] cgroup: fork rejected by pids controller in /syz2 [ 403.123827][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 403.130516][ T5840] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 403.130582][ T5840] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.130607][ T5840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.130633][ T5840] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.130659][ T5840] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.130705][ T5840] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.130731][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.231279][ T821] usb 5-1: GET_CAPABILITIES returned 0 [ 403.231331][ T821] usbtmc 5-1:16.0: can't read capabilities [ 403.399430][ T5840] usb 1-1: GET_CAPABILITIES returned 0 [ 403.399482][ T5840] usbtmc 1-1:16.0: can't read capabilities [ 403.460176][ T7361] FAULT_INJECTION: forcing a failure. [ 403.460176][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.460206][ T7361] CPU: 0 UID: 0 PID: 7361 Comm: syz.1.410 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.460232][ T7361] Tainted: [L]=SOFTLOCKUP [ 403.460272][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.460285][ T7361] Call Trace: [ 403.460294][ T7361] [ 403.460303][ T7361] dump_stack_lvl+0xe8/0x150 [ 403.460344][ T7361] should_fail_ex+0x46b/0x600 [ 403.460374][ T7361] _copy_from_user+0x2d/0xb0 [ 403.460410][ T7361] __sys_bpf+0x229/0x950 [ 403.460432][ T7361] ? __pfx___sys_bpf+0x10/0x10 [ 403.460449][ T7361] ? rt_mutex_slowunlock+0x1cb/0x300 [ 403.460480][ T7361] ? ksys_write+0x248/0x270 [ 403.460500][ T7361] ? __pfx_ksys_write+0x10/0x10 [ 403.460522][ T7361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.460539][ T7361] __x64_sys_bpf+0x7c/0x90 [ 403.460558][ T7361] do_syscall_64+0x15f/0xf80 [ 403.460583][ T7361] ? trace_irq_disable+0x3b/0x140 [ 403.460602][ T7361] ? clear_bhb_loop+0x40/0x90 [ 403.460621][ T7361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.460636][ T7361] RIP: 0033:0x7f4ae2b2ce59 [ 403.460651][ T7361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.460665][ T7361] RSP: 002b:00007f4ae0d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.460682][ T7361] RAX: ffffffffffffffda RBX: 00007f4ae2da5fa0 RCX: 00007f4ae2b2ce59 [ 403.460693][ T7361] RDX: 0000000000000050 RSI: 0000200000000ac0 RDI: 0000000000000000 [ 403.460703][ T7361] RBP: 00007f4ae0d86090 R08: 0000000000000000 R09: 0000000000000000 [ 403.460713][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.460723][ T7361] R13: 00007f4ae2da6038 R14: 00007f4ae2da5fa0 R15: 00007ffe54df9a58 [ 403.460747][ T7361] [ 403.668022][ T7366] FAULT_INJECTION: forcing a failure. [ 403.668022][ T7366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.668061][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.0.408 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.668091][ T7366] Tainted: [L]=SOFTLOCKUP [ 403.668099][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.668113][ T7366] Call Trace: [ 403.668121][ T7366] [ 403.668131][ T7366] dump_stack_lvl+0xe8/0x150 [ 403.668163][ T7366] should_fail_ex+0x46b/0x600 [ 403.668194][ T7366] _copy_from_user+0x2d/0xb0 [ 403.668222][ T7366] do_sys_poll+0x2a0/0xf50 [ 403.668285][ T7366] ? __lock_acquire+0x6b5/0x2cf0 [ 403.668315][ T7366] ? __pfx_do_sys_poll+0x10/0x10 [ 403.668348][ T7366] ? is_bpf_text_address+0x292/0x2b0 [ 403.668388][ T7366] ? is_bpf_text_address+0x26/0x2b0 [ 403.668522][ T7366] ? set_user_sigmask+0xcd/0x1c0 [ 403.668546][ T7366] ? __pfx_set_user_sigmask+0x10/0x10 [ 403.668569][ T7366] ? rt_mutex_slowunlock+0x1cb/0x300 [ 403.668595][ T7366] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.668629][ T7366] __se_sys_ppoll+0x209/0x2b0 [ 403.668660][ T7366] ? fput+0xa0/0xd0 [ 403.668695][ T7366] ? __pfx___se_sys_ppoll+0x10/0x10 [ 403.668726][ T7366] ? __pfx_ksys_write+0x10/0x10 [ 403.668758][ T7366] ? __x64_sys_ppoll+0x20/0xc0 [ 403.668787][ T7366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.668813][ T7366] do_syscall_64+0x15f/0xf80 [ 403.668844][ T7366] ? trace_irq_disable+0x3b/0x140 [ 403.668871][ T7366] ? clear_bhb_loop+0x40/0x90 [ 403.668897][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.668919][ T7366] RIP: 0033:0x7f8842cfce59 [ 403.668940][ T7366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.668959][ T7366] RSP: 002b:00007f8840f35028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 403.668982][ T7366] RAX: ffffffffffffffda RBX: 00007f8842f76090 RCX: 00007f8842cfce59 [ 403.668999][ T7366] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 403.669014][ T7366] RBP: 00007f8840f35090 R08: 0000000000000000 R09: 0000000000000000 [ 403.669029][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.669042][ T7366] R13: 00007f8842f76128 R14: 00007f8842f76090 R15: 00007ffcca869448 [ 403.669077][ T7366] [ 404.022330][ T5698] usb 1-1: USB disconnect, device number 15 [ 404.234390][ T7368] netlink: 68 bytes leftover after parsing attributes in process `syz.1.411'. [ 404.773010][ T7369] netlink: 68 bytes leftover after parsing attributes in process `syz.1.411'. [ 406.294951][ T5840] usb 5-1: USB disconnect, device number 20 [ 406.501643][ T7374] comedi comedi3: comedi_parport: I/O base address not correctly aligned [ 406.524729][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.413'. [ 406.852964][ T5698] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 408.003759][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 408.036425][ T5698] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.036463][ T5698] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.036492][ T5698] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.036518][ T5698] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.036565][ T5698] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.036590][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.344660][ T7387] netlink: 84 bytes leftover after parsing attributes in process `syz.1.419'. [ 409.595803][ T5698] usb 1-1: GET_CAPABILITIES returned 0 [ 409.595856][ T5698] usbtmc 1-1:16.0: can't read capabilities [ 409.898318][ T5698] usb 1-1: USB disconnect, device number 16 [ 409.915632][ T7399] FAULT_INJECTION: forcing a failure. [ 409.915632][ T7399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.915672][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.2.421 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.915703][ T7399] Tainted: [L]=SOFTLOCKUP [ 409.915711][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.915725][ T7399] Call Trace: [ 409.915734][ T7399] [ 409.915743][ T7399] dump_stack_lvl+0xe8/0x150 [ 409.915774][ T7399] should_fail_ex+0x46b/0x600 [ 409.915809][ T7399] _copy_from_user+0x2d/0xb0 [ 409.915838][ T7399] ucma_write+0x166/0x2f0 [ 409.915869][ T7399] ? __pfx_ucma_write+0x10/0x10 [ 409.915901][ T7399] ? rw_verify_area+0x25b/0x4e0 [ 409.915931][ T7399] vfs_writev+0x4c6/0x9a0 [ 409.915964][ T7399] ? __pfx_ucma_write+0x10/0x10 [ 409.915997][ T7399] ? __pfx_vfs_writev+0x10/0x10 [ 409.916026][ T7399] ? vfs_write+0x9ce/0xba0 [ 409.916074][ T7399] ? do_sys_openat2+0x14c/0x200 [ 409.916106][ T7399] ? kmem_cache_free+0x187/0x6c0 [ 409.916150][ T7399] do_writev+0x15a/0x2e0 [ 409.916185][ T7399] ? __pfx_do_writev+0x10/0x10 [ 409.916225][ T7399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.916250][ T7399] do_syscall_64+0x15f/0xf80 [ 409.916280][ T7399] ? trace_irq_disable+0x3b/0x140 [ 409.916307][ T7399] ? clear_bhb_loop+0x40/0x90 [ 409.916335][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.916357][ T7399] RIP: 0033:0x7f3c7da4ce59 [ 409.916378][ T7399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.916398][ T7399] RSP: 002b:00007f3c7bc9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 409.916422][ T7399] RAX: ffffffffffffffda RBX: 00007f3c7dcc5fa0 RCX: 00007f3c7da4ce59 [ 409.916438][ T7399] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 409.916453][ T7399] RBP: 00007f3c7bc9e090 R08: 0000000000000000 R09: 0000000000000000 [ 409.916467][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.916481][ T7399] R13: 00007f3c7dcc6038 R14: 00007f3c7dcc5fa0 R15: 00007ffeb62b9d98 [ 409.916516][ T7399] [ 410.246529][ T7402] netlink: 68 bytes leftover after parsing attributes in process `syz.1.422'. [ 411.013066][ T7404] netlink: 68 bytes leftover after parsing attributes in process `syz.1.422'. [ 414.043017][ T5698] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 414.196195][ T5698] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.196225][ T5698] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 414.196266][ T5698] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 414.196292][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.254879][ T5698] usb 1-1: config 0 descriptor?? [ 414.287637][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'. [ 414.495683][ T7409] FAULT_INJECTION: forcing a failure. [ 414.495683][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.495732][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.0.425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.495764][ T7409] Tainted: [L]=SOFTLOCKUP [ 414.495772][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.495786][ T7409] Call Trace: [ 414.495795][ T7409] [ 414.495805][ T7409] dump_stack_lvl+0xe8/0x150 [ 414.495837][ T7409] should_fail_ex+0x46b/0x600 [ 414.495867][ T7409] _copy_to_user+0x31/0xb0 [ 414.495899][ T7409] simple_read_from_buffer+0xe1/0x170 [ 414.495941][ T7409] proc_fail_nth_read+0x1be/0x230 [ 414.495969][ T7409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.495996][ T7409] ? rw_verify_area+0x2ac/0x4e0 [ 414.496021][ T7409] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 414.496046][ T7409] vfs_read+0x212/0xa80 [ 414.496081][ T7409] ? __pfx_vfs_read+0x10/0x10 [ 414.496109][ T7409] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 414.496143][ T7409] ? lockdep_hardirqs_on+0x7a/0x110 [ 414.496176][ T7409] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 414.496207][ T7409] ? mutex_lock_nested+0x152/0x1d0 [ 414.496231][ T7409] ? fdget_pos+0x252/0x320 [ 414.496260][ T7409] ksys_read+0x156/0x270 [ 414.496287][ T7409] ? __pfx_ksys_read+0x10/0x10 [ 414.496320][ T7409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.496348][ T7409] do_syscall_64+0x15f/0xf80 [ 414.496378][ T7409] ? trace_irq_disable+0x3b/0x140 [ 414.496403][ T7409] ? clear_bhb_loop+0x40/0x90 [ 414.496429][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.496450][ T7409] RIP: 0033:0x7f8842cbd68e [ 414.496471][ T7409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.496490][ T7409] RSP: 002b:00007f8840f55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.496512][ T7409] RAX: ffffffffffffffda RBX: 00007f8840f566c0 RCX: 00007f8842cbd68e [ 414.496527][ T7409] RDX: 000000000000000f RSI: 00007f8840f560a0 RDI: 0000000000000004 [ 414.496539][ T7409] RBP: 00007f8840f56090 R08: 0000000000000000 R09: 0000000000000000 [ 414.496553][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.496567][ T7409] R13: 00007f8842f76038 R14: 00007f8842f75fa0 R15: 00007ffcca869448 [ 414.496600][ T7409] [ 414.793031][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 414.810225][ T5328] usb 1-1: USB disconnect, device number 17 [ 414.945892][ T31] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 414.945924][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.945947][ T31] usb 5-1: config 0 has no interface number 0 [ 414.945999][ T31] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 414.946029][ T31] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 414.946055][ T31] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.949922][ T31] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 414.949955][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.949977][ T31] usb 5-1: Product: syz [ 414.949993][ T31] usb 5-1: Manufacturer: syz [ 414.950008][ T31] usb 5-1: SerialNumber: syz [ 415.055663][ T31] usb 5-1: config 0 descriptor?? [ 415.271877][ T31] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 415.325897][ T31] usb 5-1: USB disconnect, device number 21 [ 416.948806][ T7434] loop8: detected capacity change from 0 to 7 [ 416.950909][ T7434] Dev loop8: unable to read RDB block 7 [ 416.950989][ T7434] loop8: unable to read partition table [ 416.951223][ T7434] loop8: partition table beyond EOD, truncated [ 416.951242][ T7434] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 417.786693][ T7445] netlink: 68 bytes leftover after parsing attributes in process `syz.0.433'. [ 418.413769][ T7447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.433'. [ 420.330714][ T7455] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 427.261905][ T7480] netlink: 68 bytes leftover after parsing attributes in process `syz.0.447'. [ 427.803959][ T7481] netlink: 68 bytes leftover after parsing attributes in process `syz.0.447'. [ 429.755419][ T7484] tipc: Started in network mode [ 429.755451][ T7484] tipc: Node identity b6ea9b5cfbbf, cluster identity 4711 [ 429.835618][ T7484] tipc: Enabled bearer , priority 0 [ 430.058138][ T5614] Bluetooth: hci0: unexpected event for opcode 0x007f [ 430.764771][ T7483] tipc: Disabling bearer [ 431.142872][ T5328] tipc: Node number set to 1297455964 [ 431.502742][ T7499] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 433.787085][ T7506] netlink: 84 bytes leftover after parsing attributes in process `syz.2.454'. [ 437.073881][ T6519] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 438.963410][ T7523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.455'. [ 438.989433][ T6519] usb 2-1: Using ep0 maxpacket: 8 [ 439.486298][ T6519] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 439.486331][ T6519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.486356][ T6519] usb 2-1: Product: syz [ 439.486367][ T6519] usb 2-1: Manufacturer: syz [ 439.486378][ T6519] usb 2-1: SerialNumber: syz [ 439.561561][ T6519] usb 2-1: config 0 descriptor?? [ 439.611863][ T6519] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 439.611903][ T6519] pctv452e: pctv452e_power_ctrl: 1 [ 439.611903][ T6519] [ 439.611939][ T6519] usb 2-1: selecting invalid altsetting 3 [ 439.611949][ T6519] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 439.611949][ T6519] [ 439.612295][ T6519] dvb-usb: bulk message failed: -22 (5/0) [ 440.257543][ T7527] netlink: 68 bytes leftover after parsing attributes in process `syz.2.460'. [ 440.360821][ T7527] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 441.485976][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.486030][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.672727][ T7530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.461'. [ 442.232814][ T7531] netlink: 68 bytes leftover after parsing attributes in process `syz.3.461'. [ 443.982464][ T6519] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.996311][ T6519] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 443.996362][ T6519] usb 2-1: media controller created [ 443.996955][ T6519] dvb-usb: bulk message failed: -22 (8/0) [ 443.996969][ T6519] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 443.997029][ T6519] dvb-usb: MAC address reading failed. [ 444.380734][ T6519] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.534212][ T7535] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 444.816495][ T6519] DVB: Unable to find symbol stb0899_attach() [ 444.816528][ T6519] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 444.947607][ T5840] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 445.044653][ T6519] rc_core: IR keymap rc-tt-1500 not found [ 445.044677][ T6519] Registered IR keymap rc-empty [ 445.088963][ T6519] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 445.151816][ T5840] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 445.151850][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.151873][ T5840] usb 4-1: Product: syz [ 445.151902][ T5840] usb 4-1: Manufacturer: syz [ 445.151918][ T5840] usb 4-1: SerialNumber: syz [ 445.155989][ T6519] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input9 [ 445.595076][ T6519] dvb-usb: schedule remote query interval to 100 msecs. [ 445.595106][ T6519] pctv452e: pctv452e_power_ctrl: 0 [ 445.595106][ T6519] [ 445.595119][ T6519] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 445.602111][ T6519] usb 2-1: USB disconnect, device number 18 [ 445.682610][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 445.682681][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 449.078629][ T6519] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 449.105478][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 449.105556][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 449.217589][ T5840] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 449.244965][ T5840] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 449.320432][ T5840] usb 4-1: USB disconnect, device number 19 [ 453.297616][ T5328] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 456.268879][ T7589] netlink: 68 bytes leftover after parsing attributes in process `syz.3.473'. [ 456.805720][ T7590] netlink: 68 bytes leftover after parsing attributes in process `syz.3.473'. [ 458.713196][ T7596] fuse: Bad value for 'fd' [ 459.075934][ T5698] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 461.312974][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 461.323418][ T5698] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 461.323450][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.323472][ T5698] usb 1-1: Product: syz [ 461.323487][ T5698] usb 1-1: Manufacturer: syz [ 461.323503][ T5698] usb 1-1: SerialNumber: syz [ 461.421535][ T5698] usb 1-1: config 0 descriptor?? [ 461.670374][ T5698] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 461.693715][ T5698] usb 1-1: USB disconnect, device number 18 [ 462.043252][ T5698] ================================================================== [ 462.043268][ T5698] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 462.043307][ T5698] Read of size 8 at addr ffffc90007a91008 by task kworker/1:3/5698 [ 462.043322][ T5698] [ 462.043335][ T5698] CPU: 1 UID: 0 PID: 5698 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.043359][ T5698] Tainted: [L]=SOFTLOCKUP [ 462.043364][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.043376][ T5698] Workqueue: usb_hub_wq hub_event [ 462.043400][ T5698] Call Trace: [ 462.043407][ T5698] [ 462.043415][ T5698] dump_stack_lvl+0xe8/0x150 [ 462.043436][ T5698] print_address_description+0x55/0x1e0 [ 462.043456][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.043484][ T5698] print_report+0x58/0x70 [ 462.043502][ T5698] kasan_report+0x117/0x150 [ 462.043525][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.043556][ T5698] __list_add_valid_or_report+0x4e/0x130 [ 462.043587][ T5698] kcov_remote_stop+0x457/0x680 [ 462.043621][ T5698] hub_event+0x49d8/0x4f60 [ 462.043649][ T5698] ? __lock_acquire+0x6b5/0x2cf0 [ 462.043692][ T5698] ? __pfx_hub_event+0x10/0x10 [ 462.043713][ T5698] ? process_scheduled_works+0xa70/0x1860 [ 462.043737][ T5698] ? process_scheduled_works+0xa70/0x1860 [ 462.043756][ T5698] ? process_scheduled_works+0xa70/0x1860 [ 462.043775][ T5698] process_scheduled_works+0xb5d/0x1860 [ 462.043813][ T5698] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.043836][ T5698] ? assign_work+0x3d5/0x5e0 [ 462.043860][ T5698] worker_thread+0xa53/0xfc0 [ 462.043898][ T5698] kthread+0x388/0x470 [ 462.043926][ T5698] ? __pfx_worker_thread+0x10/0x10 [ 462.043948][ T5698] ? __pfx_kthread+0x10/0x10 [ 462.043977][ T5698] ret_from_fork+0x514/0xb70 [ 462.044000][ T5698] ? __pfx_ret_from_fork+0x10/0x10 [ 462.044025][ T5698] ? __switch_to+0xc79/0x1410 [ 462.044059][ T5698] ? __pfx_kthread+0x10/0x10 [ 462.044087][ T5698] ret_from_fork_asm+0x1a/0x30 [ 462.044123][ T5698] [ 462.044131][ T5698] [ 462.044137][ T5698] The buggy address belongs to a vmalloc virtual mapping [ 462.044154][ T5698] Memory state around the buggy address: [ 462.044163][ T5698] ffffc90007a90f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 462.044176][ T5698] ffffc90007a90f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 462.044188][ T5698] >ffffc90007a91000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 462.044197][ T5698] ^ [ 462.044205][ T5698] ffffc90007a91080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 462.044217][ T5698] ffffc90007a91100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 462.044226][ T5698] ================================================================== [ 462.044262][ T5698] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 462.044282][ T5698] CPU: 1 UID: 0 PID: 5698 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 462.044314][ T5698] Tainted: [L]=SOFTLOCKUP [ 462.044322][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.044336][ T5698] Workqueue: usb_hub_wq hub_event [ 462.044358][ T5698] Call Trace: [ 462.044364][ T5698] [ 462.044371][ T5698] vpanic+0x56c/0xa60 [ 462.044394][ T5698] ? __pfx_vpanic+0x10/0x10 [ 462.044416][ T5698] ? irqentry_exit+0x218/0x760 [ 462.044443][ T5698] panic+0xc5/0xd0 [ 462.044463][ T5698] ? __pfx_panic+0x10/0x10 [ 462.044483][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.044516][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.044542][ T5698] check_panic_on_warn+0x89/0xb0 [ 462.044568][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.044595][ T5698] end_report+0x73/0x170 [ 462.044625][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.044651][ T5698] kasan_report+0x128/0x150 [ 462.044672][ T5698] ? __list_add_valid_or_report+0x4e/0x130 [ 462.044702][ T5698] __list_add_valid_or_report+0x4e/0x130 [ 462.044731][ T5698] kcov_remote_stop+0x457/0x680 [ 462.044753][ T5698] hub_event+0x49d8/0x4f60 [ 462.044778][ T5698] ? __lock_acquire+0x6b5/0x2cf0 [ 462.044817][ T5698] ? __pfx_hub_event+0x10/0x10 [ 462.044838][ T5698] ? process_scheduled_works+0xa70/0x1860 [ 462.044860][ T5698] ? process_scheduled_works+0xa70/0x1860 [ 462.044878][ T5698] ? process_scheduled_works+0xa70/0x1860 [ 462.044897][ T5698] process_scheduled_works+0xb5d/0x1860 [ 462.044927][ T5698] ? __pfx_process_scheduled_works+0x10/0x10 [ 462.044949][ T5698] ? assign_work+0x3d5/0x5e0 [ 462.044968][ T5698] worker_thread+0xa53/0xfc0 [ 462.044998][ T5698] kthread+0x388/0x470 [ 462.045020][ T5698] ? __pfx_worker_thread+0x10/0x10 [ 462.045038][ T5698] ? __pfx_kthread+0x10/0x10 [ 462.045061][ T5698] ret_from_fork+0x514/0xb70 [ 462.045081][ T5698] ? __pfx_ret_from_fork+0x10/0x10 [ 462.045100][ T5698] ? __switch_to+0xc79/0x1410 [ 462.045126][ T5698] ? __pfx_kthread+0x10/0x10 [ 462.045149][ T5698] ret_from_fork_asm+0x1a/0x30 [ 462.045177][ T5698] [ 462.046067][ T5698] Kernel Offset: disabled