last executing test programs: 20m41.163597999s ago: executing program 3 (id=697): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006d40)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{0x0}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2}, 0x289}], 0x1, 0x40000200, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) r6 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r6}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000000)={0x3, r6, 0x1}) r7 = dup(r2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r8, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) getsockopt$inet6_int(r8, 0x29, 0x18, 0x0, &(0x7f0000000080)) write$UHID_INPUT(r7, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b390736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) 20m38.149304209s ago: executing program 3 (id=710): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pselect6(0x40, &(0x7f0000000080)={0x9, 0x3, 0x7ff, 0x6, 0x8, 0x2, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4038fa, &(0x7f0000000200)={0x0, 0x109943, 0x20, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x0, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x8, 0x50d041) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000080)) 19m56.340643397s ago: executing program 0 (id=828): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x203ffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x2}, 0xfe}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20028091) r4 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 19m54.090221723s ago: executing program 0 (id=835): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/63, 0x3f}], 0x6}}], 0x1, 0x20, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) read(0xffffffffffffffff, &(0x7f0000000300)=""/3, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="0d5a7f1108000000000020000000", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000380)='GPL\x00', 0x80040, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x1000008]}, {0x3, 0x480, 0x861, 0x1}}, 0x80000000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xfffffffb}) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000002c0)) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) syz_io_uring_setup(0x1f88, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000034000)=""/102392, 0x18ff8) r7 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000240)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 19m54.054817118s ago: executing program 3 (id=710): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pselect6(0x40, &(0x7f0000000080)={0x9, 0x3, 0x7ff, 0x6, 0x8, 0x2, 0x5, 0x401}, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4038fa, &(0x7f0000000200)={0x0, 0x109943, 0x20, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x0, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x8, 0x50d041) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000080)) 19m52.893769421s ago: executing program 3 (id=840): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x6000189) r4 = fanotify_init(0x20, 0x2) fanotify_mark(r4, 0x2, 0x22, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) fcntl$setlease(r8, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 19m52.767159343s ago: executing program 0 (id=841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r3, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c8a0) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x1100}, 0x1, 0x7}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r3, &(0x7f0000000200)=ANY=[], 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4009}, 0x0) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x2000008}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000000040)=""/78, 0x4e}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x4}, 0xb0a}, {{0x0, 0x0, 0x0}, 0xd3a9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) 19m50.128559915s ago: executing program 0 (id=845): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 19m49.514352439s ago: executing program 0 (id=847): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x39c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x36c, 0x2, [@TCA_CGROUP_EMATCHES={0x1d8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x6b, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="00acf97a0cf26e3bbef9", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xf9}, {0x999, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x63}]}}, @TCF_EM_CONTAINER={0xec, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "3a1eecd3d5a02e6237f588d2c1f58124dc00010184f794e50b99bf71d533c2f8c8b2b3253eaa55ea723521a89d5e4119f9ef34277b3b2c044d9990ac537e090bef975e3dfb39950b793a56b20563c4f156e2d38b9729e87d917eb4e33b45ac5d6c0e8e31227cb0e642709fe828f00db8d89056cccd2c7858c381d295e190c0abea2e69a75b152d9c5ad05e5bba1fec0be4d4e0a17334e43bbb0e4162a220c6b8d3b6839f6d0120f51ec7cbcf398b2a65250b4013b93efdf34363f7349916b28388e00cdd4f56595d55dd260559d15e80c9472d4ecee339b230f2b4045a"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0xf14}, {{0x4, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x3, 0x1}, {0x1, 0x1}}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_INT=0x10000, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR='\x00'/10, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x200, 0x0, 0x2}, {0x6, 0x10, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc, 0x3, 0x9}, {0x80000000, 0x3, 0x4, 0x3}}}]}]}, @TCA_CGROUP_EMATCHES={0x190, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x80, 0x3, 0xd0}, {0x3, 0x3, 0x7, 0x9}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x4}, {0x6, 0x0, 0x800, 0x2, 0x9, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0xfffff510, 0x0, 0x522b, 0x0, 0x1}}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xc, 0x4, 0xed}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x3, 0x1}, {0x8, 0x3, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x30, 0x2}, {0xcdb2, 0x6, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0xaaaa, 0x0, 0xa0}, "20a753a87c6fbc96a06143367740fbf1f356146962bb95d028026be75a40b85cb1d7ec8ea24036b0c060f31c2f87e9b8dafc6cf5a4eb9517efaa"}}, @TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x9}, "c9c8c9f1041c0de8b05438f883529a4f1869b55dbba3351fcb87adff2e2b1641b00d67a9432af47669689bc3c408a8d8ea057fb007d74d7b570c28855affc9"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9}, {0x6, 0x9, 0x8, 0x5, 0x6}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x60, 0x2, 0x7e09}, {0x5d87, 0x0, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 19m49.340134628s ago: executing program 3 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001800010000000000fbdb5f250a280000ff040003002c000008001e000100000014000500fe8000000000000000000000000000aa"], 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x50) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) ioctl$TIOCMIWAIT(r1, 0x5453, 0x300fff2) r2 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="61c0"]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000001680)=""/220, 0xdc}}, 0x10) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)=0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000aed892ce205ff53e7e", @ANYRES32, @ANYBLOB="f000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f40000000000000002000000184300000600000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70302000c00000085000000060000009500000000000000749a0000040000001837000003000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001842000003000000000000000000000018400000f9ffffff00000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x70, &(0x7f0000001940)=""/112, 0x40f00, 0x25, '\x00', r5, 0x17, r3, 0x8, &(0x7f0000001a40)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2e949, r3, 0x0, &(0x7f0000001b00)=[r6, r4], 0x0, 0x10, 0xe}, 0x94) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000002200)=0xf1eb) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r7, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000080)="dc30", 0x2}], 0x1}, 0x367e58fa489136e5) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9}}, './file1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0xa00, 0x0, 0x0}, 0x58) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) 19m47.900947055s ago: executing program 0 (id=851): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/63, 0x3f}], 0x6}}], 0x1, 0x20, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) read(0xffffffffffffffff, &(0x7f0000000300)=""/3, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="0d5a7f1108000000000020000000", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000380)='GPL\x00', 0x80040, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x1000008]}, {0x3, 0x480, 0x861, 0x1}}, 0x80000000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xfffffffb}) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000002c0)) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) syz_io_uring_setup(0x1f88, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000034000)=""/102392, 0x18ff8) r7 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000240)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 19m47.575310859s ago: executing program 3 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x6, 0x0, 0xa, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x40, 0x10, 0x6, "0623b3c1087a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r2, 0x89ea, &(0x7f00000000c0)="6b060cf77425841b46c13d6b76aef856e5df2288d27117a63f7bd08c76d9b2c3603bdce239e1c42789c90934d23893947b7dbc853e052193928502bb3edab46f9a25d3862c091461feddbea3aa33c4b01dd354745b4692374e72aa7cbe1beaea0db38ca280344a1b") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x40801) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000000900020073797a3100000000050001000700000004000780fd35e4ea8bbd574f824a99141681b578d5"], 0x2c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 19m32.793624227s ago: executing program 32 (id=851): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/63, 0x3f}], 0x6}}], 0x1, 0x20, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) read(0xffffffffffffffff, &(0x7f0000000300)=""/3, 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="0d5a7f1108000000000020000000", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000380)='GPL\x00', 0x80040, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x1000008]}, {0x3, 0x480, 0x861, 0x1}}, 0x80000000, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xfffffffb}) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000002c0)) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) syz_io_uring_setup(0x1f88, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x112, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xc6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000034000)=""/102392, 0x18ff8) r7 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r7, 0x0, 0x0) r8 = fsopen(&(0x7f0000000240)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 19m32.387463138s ago: executing program 33 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, [@jmp={0x6, 0x0, 0xa, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000180)={0x40, 0x10, 0x6, "0623b3c1087a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r2, 0x89ea, &(0x7f00000000c0)="6b060cf77425841b46c13d6b76aef856e5df2288d27117a63f7bd08c76d9b2c3603bdce239e1c42789c90934d23893947b7dbc853e052193928502bb3edab46f9a25d3862c091461feddbea3aa33c4b01dd354745b4692374e72aa7cbe1beaea0db38ca280344a1b") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x40801) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000000900020073797a3100000000050001000700000004000780fd35e4ea8bbd574f824a99141681b578d5"], 0x2c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 11.115162963s ago: executing program 4 (id=4238): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x51) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r2, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e", @ANYRES8, @ANYRES8=r1, @ANYBLOB="14", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.024346064s ago: executing program 4 (id=4242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) unshare(0x22020400) recvmmsg(r0, 0x0, 0x0, 0x40012032, 0x0) 8.534818021s ago: executing program 4 (id=4244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000000)={0x7d, {{0x29, 0x0, 0x3000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}}, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) r3 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x2, @vbi={0x5, 0x1, 0x6b, 0x31364d59, [0x6, 0x5], [0xa, 0x7], 0x108}}) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000700)="ef3977c0585e6989e498deca6dcbb1d05921c2f84a60a92927972b5576ede8646cfe1cc61e0ebc934e9bb2ab3acf5685269f0cbffc535d4af2c41e", 0x3b}, {&(0x7f0000000840)="939aeaef59a774373ca1deafd713507864ecee17abe72c65139c7e16f5b112d04ed2bcd3f59a294d30c5ddedd0b7d224080235d8c6bfcb542a16bf1e99c94fd5c1b82f900bb4ecf894cb4d394b699629f952afdcb1163eae21fe2c5ecf80ed94ef16922ef44c25f1b2345f44c18be584b04770dac660eceae3cae2846918d1861e5afe15f2988c86c237633c30fa8188f340b4b32e6233cf407f2012670ef7d7cfad22de4ed75254098203a3488bdfda9a4978b071910b3a1f7d99727b5d61461dad6d95f742e6a9cc84116416b9", 0xce}, {&(0x7f0000000080)="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", 0xff}, {&(0x7f0000000a00)="c15201ce48174582a6e74500940b786edd674ba0efddd23bf0c57244c50a2b3b748a2142813808288e2ef136d6c94558bf43af94e6e1bb3993b1f946f8053970a413f224283a8392e5", 0x49}, {&(0x7f0000000a80)="91081551cc85c81e1d7605d6b7e9a2ad97e1e96558810a6bc9b527132dfd1033f78bdea2a0d8264d39131c1b9fb6fa3a668273eb991b17fee4fb5b604fc093782620753c7a366ccfd8c9a29e", 0x4c}, {&(0x7f0000002240)="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", 0xb93}], 0x6, 0x0, 0x0, 0x20040854}], 0x1, 0x4) recvmsg(r6, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x2}, 0x2100) 7.067751566s ago: executing program 4 (id=4249): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xf010003, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400f040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b00000038abe2392d0de8929f7b2d"], 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x9, 0x1) sendmmsg(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x2, 0x45) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r6 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000440)={0x2}) syz_usb_disconnect(r4) r7 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x20, 0x7, 0x1a, 0x3}, {0x9, 0x5, 0xa, 0x2, 0x10, 0x6, 0x7, 0x2}, {0x9, 0x5, 0xc, 0x3, 0x3ff, 0x0, 0xc, 0x9}}}}}}]}}, 0x0) r8 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_ep_read(r7, 0x4, 0x76, &(0x7f0000000480)=""/118) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030600"], 0x0, 0x0, 0x0}, 0x0) 6.549956772s ago: executing program 6 (id=4256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040091}, 0x24000000) 5.57117722s ago: executing program 6 (id=4260): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x29}, 0x1, 0x0, 0x0, 0x2000c821}, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f00000005c0), 0x10000000000003c6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r3 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000002800)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0xc1086201, &(0x7f0000002840)={0x0, 0xc0000000, 0x40, 0x1, 0x100}) 5.458005633s ago: executing program 2 (id=4261): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.313485769s ago: executing program 5 (id=4262): socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0xa8f, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x80002, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="b1164572621e312f4752424732de8c3125285c54f60a810e82111de9613ff69a8f9faf67812c848cb4e2d6c5da787e5c181547959c785def2ab1a3ce510101a0eea334fa4d4013bc45c1366dd48f8ef711150defab8a61874872bed1cc329f209701ce1535cea6955a36b47304a907000000000000005604bc8261f898252e4c29394fe7c73a8fe9bf9f230c84b660b98c5b79c55b6699c185958753a4bc019c8107476c053598bdd2b10f52034233b728c113bd6b1b0e7c7da7fc19f625db6f00"}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.226185322s ago: executing program 1 (id=4263): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 5.11826835s ago: executing program 6 (id=4264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x10}, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4096, 0x1000}, 0x9}], 0x1, 0x40010242, 0x0) r3 = memfd_create(&(0x7f00000010c0)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe9\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb4o\xec\x95\xccf\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5\x02\x00\xa8\x88\x01\x7fw9j\xdcy-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a\x85\xecfY\x0f\x81\xf2\x18(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6|\x19\x12\x1b\x9b \xcc\xd7\xe2!o\xa8\xaf\xf1\xfb\xe07\x15]%5\xa4\xee\xc3\xf6\xe2rc8\xbc=I\xe4\xc2\xb9\xb8~5J\xb2R\xfc\xcaB$m\x93\xden\x98\xaay\x05\xb2\xdd\xebRi\xbfP\xbc\xe6\x96\xe7\xe3p\xddN\xc0W\x8d\n\x81\x889, \xf6\xf8\xc4\xb1\x8b\x84\x97\x00\x1e\x00\x80\'\xc1\x91\xed\x8c<\x82^\x80\xb8 Ze\xa3\x8aw\x04\xfcL\xa5\x89\x96\xe5\x86p(S\xf2\xdfk\x14\xaa\xad\xd5\x1a)\x15\x02\xb1\xdcg\xd7^\xc9\xe6c\x96\x87\xcf\xde\xc3u\x84jKkH\x01H|n\xd3\xac\b\x10\xd7\xf1\xbe\\f6\x9cX\f\xe0\x05\xef\xfb\x91\xb9\xa7\x00\xb7\xe5\xf3\xdc\xeel\xea\xfe\x89\xb6\bwA\x8b\xef\xd6\x88\xa9k\xac\xc1SA\x7fk\xe0!0\xc2 \xaa\xb5\xbd\x1a\x89O\xac9\xd5\x9c\xf5Z\xccz\n\xcc\x18\x95\x1c\xd6\x9aJ\xea\v\xdb\xfb\xd9\xe9{\x1b\x16Y\xf0\x02\xa4b\xc7e]b;t\xd0\xd8\x8a\xd7Nj\xaa%\xeb\xaf\xb6\xba\xbc}\xf2\xac\x11\xb6E\x9e\x99\xff\xcb\x86\a\x0f\xfeQu\xf5\x85\xf5Wb\xb2\x88\xf9\xdb>\xae\xc6\x9ar\xbb\x85H\vR\x1a\x9b\xd7Oxb\x97/\xe4Q,k\xb0\xe7\xe8+,\xc1d\x1e-\x95\xf1\xd0\x80=<&_\x87\x99\xa6\xd5\xfdH(\x16Mel\xdb\xd5/+\x13\xb6\xe8&\x89\x17+\fsy\x8a$\xba\xe5\x9ef\x8eVF9.<\x9d\xbfGd\x1c?\xaak\xf9II\xd4w-\xe1}\x80\xb6\xcdK\xaa\xde\x19\xb0^\xd1\xf7\xb5\x92E\x97\x86\x92/\xec_\xd5j1\x1d\xb7\xa4:\xa2s\x1a\xa8ZK\xae\xb9\xc7\x97\xea\xc0\x17\'\xf4\x86\xac\x7f\xbb\xda\x85\xbd\x97\xb0\xe7D4\xf7[B\xe2\x87\x95%\xa0\xc0\xfe65\xa7\x7f\x81\xbf\x99\xef\xe3\x97\xb8\xf3\xc6\xceL}@\xd6\xf6\xfd7', 0x3) fcntl$addseals(r3, 0x409, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000200)={0x1f, 0x5, 0x2}) 4.827919291s ago: executing program 1 (id=4265): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x51) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r2, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e", @ANYRES8, @ANYRES8=r1, @ANYBLOB="14", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633a"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.274670693s ago: executing program 1 (id=4266): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000440)={0x0, 0x47b9}) 4.058361875s ago: executing program 2 (id=4267): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.021549086s ago: executing program 4 (id=4268): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r3, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x283}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000000)={0xffffffffffffff6c, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x94, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffefffffff, @default, 0x30c0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0x8, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x94}}, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) 3.997287697s ago: executing program 5 (id=4269): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2506000000080009000200000008"], 0x24}}, 0x80) 3.983656941s ago: executing program 1 (id=4270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0x1, 0xfffffffd, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 3.980423936s ago: executing program 6 (id=4271): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x51) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r2, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e", @ANYRES8, @ANYRES8=r1, @ANYBLOB="1400", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c605"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.57745055s ago: executing program 1 (id=4272): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(&(0x7f00000000c0)={0x19980330}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) epoll_create1(0x0) (async) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000202b}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000202b}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getuid() writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a4", 0xfb}], 0x1) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000100, 0x0, 0x2a}]}) (async) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc0000100, 0x0, 0x2a}]}) r6 = syz_open_dev$video(&(0x7f00000001c0), 0x10001, 0x0) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f00000005c0)={0x1, "1898efe126022600000000e7ffffffffffffff00000000000000000000000500", 0x0, 0x2, 0x3, 0xb700, 0x410, 0x2}) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000081e0440304000010203010902700003010500090904000000010100000a240106001a000201020924030302040105db07240505"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000540)=ANY=[@ANYBLOB="12011003000000081e0440304000010203010902700003010500090904000000010100000a240106001a000201020924030302040105db07240505"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 3.577133304s ago: executing program 5 (id=4273): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x10, @mcast1, 0x5}, 0x1c, 0x0}}], 0x1, 0x4009c00) sendmmsg$inet6(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) 3.576770297s ago: executing program 6 (id=4274): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000180)={0xf2, 0x0, &(0x7f0000001200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x23, &(0x7f0000000380)=ANY=[@ANYBLOB="200b98000000c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a008d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06", @ANYRESHEX=r1], 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000020205000000008c852ed300c00c964400000000000202000518000280140001670800f8000000000008000200e0000001"], 0x2c}, 0x1, 0x0, 0x0, 0x21fc4162903678c6}, 0x8880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x3, 0x4}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={0x100, 0x24, 0x4}, 0x18) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xf0, 0xc0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x9ba}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xff, 0x17, 0x3}}}}}]}}]}}, 0x0) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x707fffc, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x39, "6e5c1cba97"}], 0x18}}], 0x1, 0x4000000) 3.485035048s ago: executing program 2 (id=4275): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x40}}], 0x1, 0x0) 3.277080775s ago: executing program 5 (id=4276): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x51) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r2, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e", @ANYRES8, @ANYRES8=r1, @ANYBLOB="14", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633a"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.194154952s ago: executing program 2 (id=4277): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1) 2.980813381s ago: executing program 5 (id=4278): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000180)={0xf010003, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400f040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/11], 0x0, 0x0}) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406104724e00000000000109022d0001000000830904000001030001000921fcff0001220b0009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220b00000038abe2392d0de8929f7b2d"], 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609"], 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setxattr$security_evm(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x9, 0x1) sendmmsg(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x2, 0x45) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r6 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000440)={0x2}) syz_usb_disconnect(r4) r7 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x20, 0x7, 0x1a, 0x3}, {0x9, 0x5, 0xa, 0x2, 0x10, 0x6, 0x7, 0x2}, {0x9, 0x5, 0xc, 0x3, 0x3ff, 0x0, 0xc, 0x9}}}}}}]}}, 0x0) r8 = syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) syz_usb_ep_read(r7, 0x4, 0x76, &(0x7f0000000480)=""/118) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030600"], 0x0, 0x0, 0x0}, 0x0) 1.234700965s ago: executing program 4 (id=4279): syz_usb_connect(0x5, 0x7f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000044d6b2099042510f69c0000000109026d0001022440020904c20004a2f8ab000524060000052400f5ff0d240f01080000000700008036042402050524060000052400ec000d240f01030000000600050081052401000309050904100000050f090582e64103060c0309050a033006070082090508b2"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x8, 0x3, 0x300000, @vifc_lcl_addr=@multicast2, @private=0xa010101}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r5 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x3, 0x10001, 0x5, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @remote, 0x4}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0x9}, r1, 0x9dffffff}}, 0x48) 626.727178ms ago: executing program 2 (id=4280): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000440)={0x0, 0x47b9}) 314.947954ms ago: executing program 6 (id=4281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') getdents(r1, &(0x7f0000000040)=""/52, 0x34) getdents64(r1, 0xffffffffffffffff, 0x43) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x8000, 0xf208683}}) unshare(0x8000480) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, {}, 0x4, 0x0, 0x0, 0x0, 0x5ee76b3ce2b5fd32}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x8, 0x2, 0x0, 0xd1f}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x33}, 0x8, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}}, 0x816) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fchmod(r5, 0x50) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="81", 0x1}], 0x1}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback, 0xffffffffffffffff, 0x1c}, 0x20) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001c00)='E', 0x1}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="30000000000000008400000001000000f8"], 0x30}], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 314.508618ms ago: executing program 2 (id=4282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c0902120001000000000904"], 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r1, 0x1, 0xfffffffd, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 234.185359ms ago: executing program 1 (id=4283): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x800) (fail_nth: 3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) 0s ago: executing program 5 (id=4284): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x80, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x1) kernel console output (not intermixed with test programs): ity 0, space 0, times 0 [ 1275.335969][T17108] CPU: 1 UID: 0 PID: 17108 Comm: syz.2.3638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1275.335994][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1275.336007][T17108] Call Trace: [ 1275.336016][T17108] [ 1275.336025][T17108] dump_stack_lvl+0xe8/0x150 [ 1275.336056][T17108] should_fail_ex+0x46b/0x600 [ 1275.336093][T17108] should_failslab+0xa8/0x100 [ 1275.336123][T17108] __kmalloc_noprof+0xdf/0x7b0 [ 1275.336150][T17108] ? tomoyo_encode+0x28b/0x550 [ 1275.336183][T17108] tomoyo_encode+0x28b/0x550 [ 1275.336215][T17108] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1275.336243][T17108] ? tomoyo_domain+0xd7/0x130 [ 1275.336275][T17108] ? tomoyo_path_number_perm+0x219/0x630 [ 1275.336309][T17108] tomoyo_path_number_perm+0x246/0x630 [ 1275.336345][T17108] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1275.336402][T17108] ? __lock_acquire+0x6b5/0x2cf0 [ 1275.336436][T17108] ? do_raw_spin_lock+0x12b/0x2f0 [ 1275.336497][T17108] ? __fget_files+0x2a/0x420 [ 1275.336522][T17108] ? __fget_files+0x2a/0x420 [ 1275.336543][T17108] ? __fget_files+0x3a6/0x420 [ 1275.336562][T17108] ? __fget_files+0x2a/0x420 [ 1275.336589][T17108] security_file_ioctl+0xc3/0x2a0 [ 1275.336626][T17108] __se_sys_ioctl+0x47/0x170 [ 1275.336654][T17108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.336679][T17108] do_syscall_64+0x174/0x580 [ 1275.336710][T17108] ? trace_irq_disable+0x3b/0x140 [ 1275.336736][T17108] ? clear_bhb_loop+0x40/0x90 [ 1275.336764][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.336786][T17108] RIP: 0033:0x7f9c9b5ece59 [ 1275.336809][T17108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.336828][T17108] RSP: 002b:00007f9c9983e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.336853][T17108] RAX: ffffffffffffffda RBX: 00007f9c9b865fa0 RCX: 00007f9c9b5ece59 [ 1275.336870][T17108] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 1275.336885][T17108] RBP: 00007f9c9983e090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.336899][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.336912][T17108] R13: 00007f9c9b866038 R14: 00007f9c9b865fa0 R15: 00007ffff4879298 [ 1275.336948][T17108] [ 1275.337063][T17108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1275.337086][T17108] warning: `syz.2.3638' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1277.589330][ T5730] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1277.743129][ T5730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.743193][ T5730] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1277.743224][ T5730] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.743248][ T5730] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1277.743284][ T5730] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1277.743308][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.769288][ T5730] usb 6-1: config 0 descriptor?? [ 1277.796179][ T5730] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 1277.961964][T17124] netlink: 'syz.4.3636': attribute type 3 has an invalid length. [ 1277.961989][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1278.190370][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190412][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190450][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190476][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190501][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190528][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190554][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190581][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190606][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1278.190632][ T5730] sony 0003:054C:0268.000D: unknown main item tag 0x0 [ 1281.425292][ T5730] sony 0003:054C:0268.000D: hiddev0,hidraw0: USB HID v80.81 Device [HID 054c:0268] on usb-dummy_hcd.5-1/input0 [ 1281.425330][ T5730] sony 0003:054C:0268.000D: failed to claim input [ 1281.747770][ T5730] usb 6-1: USB disconnect, device number 34 [ 1283.409832][T17148] siw: device registration error -23 [ 1283.440221][T17148] 9pnet_virtio: no channels available for device syz [ 1287.718859][ T5609] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1287.801625][T17182] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3659'. [ 1287.912587][T17182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.913210][T17182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.049299][ T5614] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1289.401792][T17202] FAULT_INJECTION: forcing a failure. [ 1289.401792][T17202] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.401830][T17202] CPU: 1 UID: 0 PID: 17202 Comm: syz.5.3664 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1289.401852][T17202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1289.401862][T17202] Call Trace: [ 1289.401869][T17202] [ 1289.401877][T17202] dump_stack_lvl+0xe8/0x150 [ 1289.401914][T17202] should_fail_ex+0x46b/0x600 [ 1289.401943][T17202] should_failslab+0xa8/0x100 [ 1289.401966][T17202] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1289.401985][T17202] ? __alloc_skb+0x1d0/0x7d0 [ 1289.402006][T17202] ? lockdep_hardirqs_on+0x7a/0x110 [ 1289.402035][T17202] __alloc_skb+0x1d0/0x7d0 [ 1289.402060][T17202] netlink_sendmsg+0x5d4/0xb40 [ 1289.402092][T17202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.402116][T17202] ? unwind_get_return_address+0x4d/0x90 [ 1289.402142][T17202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1289.402164][T17202] ____sys_sendmsg+0x94c/0x9c0 [ 1289.402193][T17202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1289.402224][T17202] ? import_iovec+0x73/0xa0 [ 1289.402252][T17202] ___sys_sendmsg+0x2a5/0x360 [ 1289.402275][T17202] ? __lock_acquire+0x6b5/0x2cf0 [ 1289.402300][T17202] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.402352][T17202] ? __fget_files+0x2a/0x420 [ 1289.402369][T17202] ? __fget_files+0x3a6/0x420 [ 1289.402394][T17202] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1289.402421][T17202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1289.402453][T17202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.402478][T17202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.402495][T17202] do_syscall_64+0x174/0x580 [ 1289.402518][T17202] ? trace_irq_disable+0x3b/0x140 [ 1289.402538][T17202] ? clear_bhb_loop+0x40/0x90 [ 1289.402557][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.402573][T17202] RIP: 0033:0x7fe657adce59 [ 1289.402590][T17202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.402606][T17202] RSP: 002b:00007fe655d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.402625][T17202] RAX: ffffffffffffffda RBX: 00007fe657d55fa0 RCX: 00007fe657adce59 [ 1289.402637][T17202] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1289.402649][T17202] RBP: 00007fe655d36090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.402659][T17202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.402669][T17202] R13: 00007fe657d56038 R14: 00007fe657d55fa0 R15: 00007ffc3adb47d8 [ 1289.402695][T17202] [ 1290.612482][ T5614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.612513][ T5614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1290.616980][ T5614] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1290.617012][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1290.617025][ T5614] usb 5-1: SerialNumber: syz [ 1292.325006][T17215] siw: device registration error -23 [ 1293.047047][ T5614] usb 5-1: 0:2 : does not exist [ 1293.048661][ T5614] usb 5-1: unit 5 not found! [ 1293.112912][T17215] 9pnet_virtio: no channels available for device syz [ 1293.138667][T17215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1293.234403][ T5614] usb 5-1: USB disconnect, device number 75 [ 1293.524450][T16637] udevd[16637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1297.210296][T17247] netlink: 'syz.1.3679': attribute type 7 has an invalid length. [ 1297.713777][T17259] siw: device registration error -23 [ 1297.737899][T17259] 9pnet_virtio: no channels available for device syz [ 1297.751795][T17259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1299.615906][T15095] hid (null): global environment stack underflow [ 1301.160270][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.160352][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.170515][ T5614] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1301.363878][ T5614] usb 3-1: Using ep0 maxpacket: 16 [ 1301.368253][ T5614] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1301.368313][ T5614] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1301.368341][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1301.368369][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1301.378787][ T5614] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1301.378818][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.378837][ T5614] usb 3-1: Product: syz [ 1301.378851][ T5614] usb 3-1: Manufacturer: syz [ 1301.378865][ T5614] usb 3-1: SerialNumber: syz [ 1301.408839][ T5614] usb 3-1: config 0 descriptor?? [ 1302.420835][T15095] hid-generic 0002:0000:0000.000E: global environment stack underflow [ 1302.420862][T15095] hid-generic 0002:0000:0000.000E: item 0 2 1 11 parsing failed [ 1302.421755][T15095] hid-generic 0002:0000:0000.000E: probe with driver hid-generic failed with error -22 [ 1302.814227][ T5614] appledisplay 3-1:0.0: Error while getting initial brightness: -90 [ 1303.169940][ T5614] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -90 [ 1303.429462][T17293] netlink: 'syz.4.3694': attribute type 7 has an invalid length. [ 1303.479890][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1303.649403][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1303.652859][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1303.652895][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.652938][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1303.652963][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.718044][ T10] usb 2-1: config 0 descriptor?? [ 1303.736512][ T10] hub 2-1:0.0: USB hub found [ 1303.900304][T17306] FAULT_INJECTION: forcing a failure. [ 1303.900304][T17306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.900410][T17306] CPU: 1 UID: 0 PID: 17306 Comm: syz.4.3700 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1303.900436][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1303.900450][T17306] Call Trace: [ 1303.900459][T17306] [ 1303.900469][T17306] dump_stack_lvl+0xe8/0x150 [ 1303.900502][T17306] should_fail_ex+0x46b/0x600 [ 1303.900538][T17306] _copy_to_user+0x31/0xb0 [ 1303.900562][T17306] copy_siginfo_to_user+0x22/0xc0 [ 1303.900589][T17306] x64_setup_rt_frame+0x77b/0xcb0 [ 1303.900632][T17306] ? rt_spin_unlock+0x14f/0x200 [ 1303.900681][T17306] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1303.900724][T17306] arch_do_signal_or_restart+0x442/0x840 [ 1303.900759][T17306] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1303.900788][T17306] ? ksys_write+0x240/0x270 [ 1303.900820][T17306] ? ksys_write+0x248/0x270 [ 1303.900855][T17306] exit_to_user_mode_loop+0xa9/0x680 [ 1303.900883][T17306] ? rcu_is_watching+0x15/0xb0 [ 1303.900914][T17306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.900936][T17306] do_syscall_64+0x353/0x580 [ 1303.900965][T17306] ? trace_irq_disable+0x3b/0x140 [ 1303.900990][T17306] ? clear_bhb_loop+0x40/0x90 [ 1303.901016][T17306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.901037][T17306] RIP: 0033:0x7f9bc4b0d68e [ 1303.901057][T17306] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1303.901075][T17306] RSP: 002b:00007f9bc2da5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1303.901100][T17306] RAX: 0000000000000001 RBX: 00007f9bc2da66c0 RCX: 00007f9bc4b0d68e [ 1303.901115][T17306] RDX: 0000000000000001 RSI: 00007f9bc2da6090 RDI: 0000000000000005 [ 1303.901129][T17306] RBP: 00007f9bc2da6090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.901142][T17306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1303.901155][T17306] R13: 00007f9bc4dc6038 R14: 00007f9bc4dc5fa0 R15: 00007ffd0bc0b948 [ 1303.901189][T17306] [ 1303.939330][ T10] hub 2-1:0.0: 1 port detected [ 1304.435084][T15095] usb 3-1: USB disconnect, device number 116 [ 1304.552217][ T10] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1304.553041][ T5738] usb 2-1: USB disconnect, device number 70 [ 1304.789319][ T5614] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1304.944455][ T5614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.944487][ T5614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1304.944528][ T5614] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1304.947819][ T5614] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1304.947853][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1304.947874][ T5614] usb 5-1: SerialNumber: syz [ 1305.267009][ T5614] usb 5-1: 0:2 : does not exist [ 1305.267123][ T5614] usb 5-1: unit 5 not found! [ 1305.354134][ T5614] usb 5-1: USB disconnect, device number 76 [ 1305.799072][T16637] udevd[16637]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.248166][T17334] netlink: 'syz.5.3707': attribute type 7 has an invalid length. [ 1308.612259][T17349] FAULT_INJECTION: forcing a failure. [ 1308.612259][T17349] name failslab, interval 1, probability 0, space 0, times 0 [ 1308.612284][T17349] CPU: 1 UID: 0 PID: 17349 Comm: syz.5.3712 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1308.612299][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1308.612307][T17349] Call Trace: [ 1308.612312][T17349] [ 1308.612327][T17349] dump_stack_lvl+0xe8/0x150 [ 1308.612390][T17349] should_fail_ex+0x46b/0x600 [ 1308.612433][T17349] should_failslab+0xa8/0x100 [ 1308.612467][T17349] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1308.612485][T17349] ? __alloc_skb+0x1d0/0x7d0 [ 1308.612527][T17349] ? lockdep_hardirqs_on+0x7a/0x110 [ 1308.612575][T17349] __alloc_skb+0x1d0/0x7d0 [ 1308.612594][T17349] netlink_sendmsg+0x5d4/0xb40 [ 1308.612627][T17349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1308.612644][T17349] ? unwind_get_return_address+0x4d/0x90 [ 1308.612679][T17349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1308.612708][T17349] ____sys_sendmsg+0x94c/0x9c0 [ 1308.612729][T17349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1308.612751][T17349] ? import_iovec+0x73/0xa0 [ 1308.612775][T17349] ___sys_sendmsg+0x2a5/0x360 [ 1308.612791][T17349] ? __lock_acquire+0x6b5/0x2cf0 [ 1308.612817][T17349] ? __pfx____sys_sendmsg+0x10/0x10 [ 1308.612853][T17349] ? __fget_files+0x2a/0x420 [ 1308.612872][T17349] ? __fget_files+0x3a6/0x420 [ 1308.612889][T17349] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1308.612908][T17349] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1308.612930][T17349] ? __pfx_ksys_write+0x10/0x10 [ 1308.612954][T17349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.612977][T17349] do_syscall_64+0x174/0x580 [ 1308.612994][T17349] ? trace_irq_disable+0x3b/0x140 [ 1308.613018][T17349] ? clear_bhb_loop+0x40/0x90 [ 1308.613033][T17349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1308.613045][T17349] RIP: 0033:0x7fe657adce59 [ 1308.613058][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1308.613072][T17349] RSP: 002b:00007fe655d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1308.613087][T17349] RAX: ffffffffffffffda RBX: 00007fe657d55fa0 RCX: 00007fe657adce59 [ 1308.613097][T17349] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003 [ 1308.613105][T17349] RBP: 00007fe655d36090 R08: 0000000000000000 R09: 0000000000000000 [ 1308.613113][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1308.613121][T17349] R13: 00007fe657d56038 R14: 00007fe657d55fa0 R15: 00007ffc3adb47d8 [ 1308.613139][T17349] [ 1308.709370][ T5737] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1309.282624][ T5737] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1309.282660][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.282683][ T5737] usb 3-1: Product: syz [ 1309.282698][ T5737] usb 3-1: Manufacturer: syz [ 1309.282714][ T5737] usb 3-1: SerialNumber: syz [ 1309.299933][ T5737] usb 3-1: config 0 descriptor?? [ 1309.312696][ T5737] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1309.727065][T17343] [U] v3f"S/4:XTzWtlW= [ 1309.727198][T17343] [U] J"e:" [ 1309.750362][ T5737] usb 3-1: USB disconnect, device number 117 [ 1312.161822][T17371] ieee802154 phy0 wpan0: encryption failed: -90 [ 1312.328025][T17380] program syz.4.3718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1312.393614][T17376] netlink: 'syz.6.3722': attribute type 7 has an invalid length. [ 1312.557224][T17386] FAULT_INJECTION: forcing a failure. [ 1312.557224][T17386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.557263][T17386] CPU: 1 UID: 0 PID: 17386 Comm: syz.2.3725 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1312.557288][T17386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1312.557301][T17386] Call Trace: [ 1312.557320][T17386] [ 1312.557335][T17386] dump_stack_lvl+0xe8/0x150 [ 1312.557366][T17386] should_fail_ex+0x46b/0x600 [ 1312.557412][T17386] _copy_from_user+0x2d/0xb0 [ 1312.557441][T17386] ___sys_recvmsg+0x175/0x590 [ 1312.557477][T17386] ? ktime_get_ts64+0xa9/0x410 [ 1312.557525][T17386] ? __pfx____sys_recvmsg+0x10/0x10 [ 1312.557562][T17386] ? __fget_files+0x2a/0x420 [ 1312.557613][T17386] ? __fget_files+0x3a6/0x420 [ 1312.557646][T17386] do_recvmmsg+0x33a/0x800 [ 1312.557688][T17386] ? __pfx_do_recvmmsg+0x10/0x10 [ 1312.557735][T17386] ? _copy_from_user+0x94/0xb0 [ 1312.557773][T17386] __x64_sys_recvmmsg+0x1b7/0x250 [ 1312.557810][T17386] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1312.557852][T17386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.557883][T17386] do_syscall_64+0x174/0x580 [ 1312.557923][T17386] ? trace_irq_disable+0x3b/0x140 [ 1312.557955][T17386] ? clear_bhb_loop+0x40/0x90 [ 1312.557982][T17386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.558004][T17386] RIP: 0033:0x7f9c9b5ece59 [ 1312.558034][T17386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.558060][T17386] RSP: 002b:00007f9c9983e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1312.558090][T17386] RAX: ffffffffffffffda RBX: 00007f9c9b865fa0 RCX: 00007f9c9b5ece59 [ 1312.558106][T17386] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1312.558121][T17386] RBP: 00007f9c9983e090 R08: 0000200000003700 R09: 0000000000000000 [ 1312.558136][T17386] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.558150][T17386] R13: 00007f9c9b866038 R14: 00007f9c9b865fa0 R15: 00007ffff4879298 [ 1312.558185][T17386] [ 1312.959351][T17393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3728'. [ 1312.988152][T17393] xfrm1: entered allmulticast mode [ 1313.019291][ T5737] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1313.031741][T17395] FAULT_INJECTION: forcing a failure. [ 1313.031741][T17395] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.031774][T17395] CPU: 0 UID: 0 PID: 17395 Comm: syz.2.3729 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1313.031800][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1313.031810][T17395] Call Trace: [ 1313.031818][T17395] [ 1313.031827][T17395] dump_stack_lvl+0xe8/0x150 [ 1313.031854][T17395] should_fail_ex+0x46b/0x600 [ 1313.031885][T17395] should_failslab+0xa8/0x100 [ 1313.031910][T17395] __kmalloc_noprof+0xdf/0x7b0 [ 1313.031931][T17395] ? sock_kmalloc+0xd6/0x160 [ 1313.031947][T17395] ? __local_bh_enable+0x1e1/0x2f0 [ 1313.031982][T17395] sock_kmalloc+0xd6/0x160 [ 1313.032001][T17395] af_alg_alloc_areq+0x99/0x200 [ 1313.032036][T17395] skcipher_recvmsg+0x321/0x1140 [ 1313.032061][T17395] ? __lock_acquire+0x6b5/0x2cf0 [ 1313.032113][T17395] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1313.032131][T17395] ? __lock_acquire+0x6b5/0x2cf0 [ 1313.032156][T17395] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1313.032180][T17395] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1313.032198][T17395] ? security_socket_recvmsg+0x7e/0x2c0 [ 1313.032245][T17395] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1313.032264][T17395] sock_recvmsg+0x172/0x1b0 [ 1313.032288][T17395] ____sys_recvmsg+0x1f2/0x4b0 [ 1313.032325][T17395] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1313.032369][T17395] ? import_iovec+0x73/0xa0 [ 1313.032404][T17395] ___sys_recvmsg+0x215/0x590 [ 1313.032431][T17395] ? get_pid_task+0x20/0x1f0 [ 1313.032463][T17395] ? __pfx____sys_recvmsg+0x10/0x10 [ 1313.032497][T17395] ? __fget_files+0x2a/0x420 [ 1313.032536][T17395] ? __fget_files+0x3a6/0x420 [ 1313.032564][T17395] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1313.032594][T17395] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1313.032632][T17395] ? __pfx_ksys_write+0x10/0x10 [ 1313.032673][T17395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.032694][T17395] do_syscall_64+0x174/0x580 [ 1313.032721][T17395] ? trace_irq_disable+0x3b/0x140 [ 1313.032745][T17395] ? clear_bhb_loop+0x40/0x90 [ 1313.032769][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.032789][T17395] RIP: 0033:0x7f9c9b5ece59 [ 1313.032807][T17395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.032824][T17395] RSP: 002b:00007f9c9983e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1313.032846][T17395] RAX: ffffffffffffffda RBX: 00007f9c9b865fa0 RCX: 00007f9c9b5ece59 [ 1313.032861][T17395] RDX: 0000000020000253 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1313.032873][T17395] RBP: 00007f9c9983e090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.032886][T17395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.032897][T17395] R13: 00007f9c9b866038 R14: 00007f9c9b865fa0 R15: 00007ffff4879298 [ 1313.032929][T17395] [ 1313.179332][ T5737] usb 6-1: Using ep0 maxpacket: 32 [ 1313.184719][ T5737] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1313.186260][ T5737] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.190583][ T5737] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1313.190610][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.190629][ T5737] usb 6-1: Product: syz [ 1313.190643][ T5737] usb 6-1: Manufacturer: syz [ 1313.190657][ T5737] usb 6-1: SerialNumber: syz [ 1313.420745][ T5737] usb 6-1: Invalid number of CPorts: 0 [ 1313.420779][ T5737] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1313.629845][T17388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.630570][T17388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.637070][ T5614] usb 6-1: USB disconnect, device number 35 [ 1314.913429][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1314.932716][T17412] ipvlan0: entered allmulticast mode [ 1315.171887][T17419] netlink: 'syz.4.3737': attribute type 7 has an invalid length. [ 1315.410066][T17424] fuse: Bad value for 'fd' [ 1315.674189][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3740'. [ 1316.339303][T15095] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1316.489758][T15095] usb 5-1: Using ep0 maxpacket: 8 [ 1316.494061][T15095] usb 5-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1316.494093][T15095] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1316.527002][T15095] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1316.527045][T15095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.527067][T15095] usb 5-1: Product: syz [ 1316.527083][T15095] usb 5-1: Manufacturer: syz [ 1316.527098][T15095] usb 5-1: SerialNumber: syz [ 1316.583791][T15095] usb 5-1: config 0 descriptor?? [ 1316.593916][T17434] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1316.610621][T15095] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1316.840519][ T5614] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 1316.864355][T15095] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1316.864565][T15095] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1316.865955][T15095] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1316.969416][ T5614] usb 2-1: device descriptor read/64, error -71 [ 1317.174360][ T5826] usb 5-1: USB disconnect, device number 77 [ 1317.346765][ T5614] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 1318.249379][ T5614] usb 2-1: device descriptor read/64, error -71 [ 1318.359808][ T5614] usb usb2-port1: attempt power cycle [ 1318.699244][ T5614] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 1318.721250][ T5614] usb 2-1: device descriptor read/8, error -71 [ 1321.365936][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3757'. [ 1321.709260][T14910] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1321.862122][T14910] usb 6-1: Using ep0 maxpacket: 8 [ 1321.865359][T14910] usb 6-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1321.865390][T14910] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1321.869707][T14910] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1321.869736][T14910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.869756][T14910] usb 6-1: Product: syz [ 1321.869770][T14910] usb 6-1: Manufacturer: syz [ 1321.869784][T14910] usb 6-1: SerialNumber: syz [ 1321.894867][T14910] usb 6-1: config 0 descriptor?? [ 1321.925726][T14910] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1321.926292][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'. [ 1322.125352][T17493] hsr_slave_0 (unregistering): left promiscuous mode [ 1322.143220][T14910] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1322.143570][T14910] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1322.147975][T14910] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1322.237939][T17498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1322.335878][T14910] usb 6-1: USB disconnect, device number 36 [ 1325.614835][T17527] rdma_op ffff888024e55270 conn xmit_rdma 0000000000000000 [ 1326.019303][T14910] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1326.104194][T17536] fuse: Bad value for 'fd' [ 1326.181576][T14910] usb 6-1: Invalid ep0 maxpacket: 32 [ 1326.369225][T14910] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 1326.809224][T14910] usb 6-1: Invalid ep0 maxpacket: 32 [ 1326.809910][T14910] usb usb6-port1: attempt power cycle [ 1327.169344][T14910] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 1327.190103][T14910] usb 6-1: Invalid ep0 maxpacket: 32 [ 1327.329356][T14910] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 1327.350223][T14910] usb 6-1: Invalid ep0 maxpacket: 32 [ 1327.351885][T14910] usb usb6-port1: unable to enumerate USB device [ 1328.684047][T17561] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3784'. [ 1328.721778][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1328.816946][ T5738] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1329.110979][ T5738] usb 3-1: Using ep0 maxpacket: 32 [ 1329.183113][T17568] overlayfs: overlapping lowerdir path [ 1329.697694][ T5738] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 1329.697729][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.697751][ T5738] usb 3-1: Product: syz [ 1329.697767][ T5738] usb 3-1: Manufacturer: syz [ 1329.697782][ T5738] usb 3-1: SerialNumber: syz [ 1329.753968][T17565] team0: Port device team_slave_0 removed [ 1329.764746][ T5738] usb 3-1: config 0 descriptor?? [ 1329.780206][ T5738] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1330.045591][ T5738] usb 3-1: USB disconnect, device number 118 [ 1331.274375][T17592] binder: 17591:17592 unknown command 0 [ 1331.274393][T17592] binder: 17591:17592 ioctl c0306201 200000000080 returned -22 [ 1331.275770][T17592] binder: 17591:17592 ioctl c0306201 2000000003c0 returned -14 [ 1331.355553][T17596] binder: 17595:17596 ioctl 4018620d 0 returned -22 [ 1331.356187][T17596] binder: 17595:17596 ioctl c0306201 0 returned -14 [ 1331.528970][T17597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3796'. [ 1334.219264][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1334.392206][ T10] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 1334.392236][ T10] usb 3-1: config 2 has no interface number 0 [ 1334.392263][ T10] usb 3-1: config 2 interface 79 has no altsetting 0 [ 1334.395034][ T10] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1334.395064][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.395079][ T10] usb 3-1: Product: syz [ 1334.395087][ T10] usb 3-1: Manufacturer: syz [ 1334.395096][ T10] usb 3-1: SerialNumber: syz [ 1334.722547][ T10] usb 3-1: USB disconnect, device number 119 [ 1334.749251][ T5826] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1335.032999][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 1335.309442][ T5826] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1335.309476][ T5826] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1336.079591][ T5826] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1336.079627][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.079650][ T5826] usb 2-1: Product: syz [ 1336.079666][ T5826] usb 2-1: Manufacturer: syz [ 1336.079682][ T5826] usb 2-1: SerialNumber: syz [ 1336.126213][ T5826] usb 2-1: config 0 descriptor?? [ 1336.543571][ T5826] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 1337.189323][ T5826] rc_core: IR keymap rc-imon-pad not found [ 1337.189492][ T5826] Registered IR keymap rc-empty [ 1337.194888][ T5826] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1337.194915][ T5826] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1338.367819][ T5826] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1338.399452][ T5826] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 1338.430385][ T5826] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:75> initialized [ 1338.998089][T17645] FAULT_INJECTION: forcing a failure. [ 1338.998089][T17645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.998127][T17645] CPU: 0 UID: 0 PID: 17645 Comm: syz.5.3811 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1338.998152][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.998169][T17645] Call Trace: [ 1338.998176][T17645] [ 1338.998185][T17645] dump_stack_lvl+0xe8/0x150 [ 1338.998212][T17645] should_fail_ex+0x46b/0x600 [ 1338.998244][T17645] _copy_from_user+0x2d/0xb0 [ 1338.998263][T17645] __sys_bind+0x1cc/0x410 [ 1338.998287][T17645] ? __pfx___sys_bind+0x10/0x10 [ 1338.998320][T17645] ? __pfx_ksys_write+0x10/0x10 [ 1338.998345][T17645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.998364][T17645] __x64_sys_bind+0x7a/0x90 [ 1338.998386][T17645] do_syscall_64+0x174/0x580 [ 1338.998413][T17645] ? clear_bhb_loop+0x40/0x90 [ 1338.998434][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.998451][T17645] RIP: 0033:0x7fe657adce59 [ 1338.998468][T17645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.998483][T17645] RSP: 002b:00007fe655d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1338.998504][T17645] RAX: ffffffffffffffda RBX: 00007fe657d56090 RCX: 00007fe657adce59 [ 1338.998517][T17645] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1338.998541][T17645] RBP: 00007fe655d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.998553][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.998565][T17645] R13: 00007fe657d56128 R14: 00007fe657d56090 R15: 00007ffc3adb47d8 [ 1338.998595][T17645] [ 1339.277240][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1339.281740][ T9] usb 2-1: USB disconnect, device number 75 [ 1339.460301][T17646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1339.515790][T17646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1339.536469][T17646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1339.600295][T17646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1339.630608][T17646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1341.997614][ T5609] Bluetooth: hci1: command tx timeout [ 1344.009317][ T5609] Bluetooth: hci1: command tx timeout [ 1344.692309][T14642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.692351][T14642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.528173][ T5609] Bluetooth: hci1: command tx timeout [ 1347.459231][T15095] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1347.590590][T14642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1347.590631][T14642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.609241][T15095] usb 5-1: Using ep0 maxpacket: 8 [ 1347.659930][T15095] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1347.661526][T15095] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1347.661552][T15095] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.661572][T15095] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1347.732792][T15095] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1347.732813][T15095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.732826][T15095] usb 5-1: Product: 六ᓗ斬ɲ啩滨仾몕萩핞䡔无⑦⮙嗂겘ⶱ鑔芽ꂁ䢤踮펗⧸䏴홼뀢栂⬞폢̙Ɀ噊쭺꽫༘ [ 1347.732838][T15095] usb 5-1: Manufacturer: 猈ꍊ坵抗㮘㕰癊ࠪ霏 [ 1348.573502][ T5609] Bluetooth: hci1: command tx timeout [ 1348.596192][T15095] usb 5-1: USB disconnect, device number 78 [ 1348.838276][T17638] lo speed is unknown, defaulting to 1000 [ 1349.445721][T14642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.445762][T14642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.303891][T14642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.303918][T14642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.860871][T16013] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1352.055288][T16013] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1352.092575][T16013] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1352.092642][T16013] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1352.092674][T16013] usb 6-1: config 1 interface 0 has no altsetting 1 [ 1352.153910][T16013] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1352.153942][T16013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.153959][T16013] usb 6-1: Product: syz [ 1352.153968][T16013] usb 6-1: Manufacturer: syz [ 1352.153976][T16013] usb 6-1: SerialNumber: syz [ 1352.223487][T16013] smsusb:smsusb_probe: board id=8, interface number 0 [ 1352.446457][T16013] smsusb:smsusb_probe: Device initialized with return code -19 [ 1352.460710][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.461391][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.465805][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.466513][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.524109][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.524805][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.526564][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.527281][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.528738][T17732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.529610][T17732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.146038][ T5826] usb 6-1: USB disconnect, device number 41 [ 1355.339713][T14642] bridge_slave_1: left allmulticast mode [ 1355.339750][T14642] bridge_slave_1: left promiscuous mode [ 1355.340058][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.979217][T14642] bridge_slave_0: left allmulticast mode [ 1355.979258][T14642] bridge_slave_0: left promiscuous mode [ 1355.979548][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.102368][T14642] team0: Port device bridge0 removed [ 1361.259414][T17797] PKCS7: Unknown OID: [5] (bad) [ 1361.259434][T17797] PKCS7: Only support pkcs7_signedData type [ 1361.773491][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.773567][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.803956][T14642] bond0 (unregistering): (slave 30): Releasing backup interface [ 1361.843080][T14642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.862679][T14642] bond0 (unregistering): Released all slaves [ 1361.875277][T14642] bond1 (unregistering): Released all slaves [ 1362.143870][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1362.478459][T14642] : left promiscuous mode [ 1366.363643][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1367.462148][T17638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.463955][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.464207][T17638] bridge_slave_0: entered allmulticast mode [ 1367.467199][T17638] bridge_slave_0: entered promiscuous mode [ 1367.572025][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.572195][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.572447][T17638] bridge_slave_1: entered allmulticast mode [ 1367.575498][T17638] bridge_slave_1: entered promiscuous mode [ 1367.744287][T17857] netlink: 'syz.4.3859': attribute type 2 has an invalid length. [ 1368.533567][T17638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.645060][T17638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.827196][T17638] team0: Port device team_slave_0 added [ 1368.841352][T17638] team0: Port device team_slave_1 added [ 1372.099510][T14642] hsr_slave_0: left promiscuous mode [ 1372.191092][T14642] hsr_slave_1: left promiscuous mode [ 1372.192237][T14642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1372.192264][T14642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.431002][T14642] veth1_macvtap: left promiscuous mode [ 1372.431131][T14642] veth0_macvtap: left promiscuous mode [ 1375.055053][T14642] team0 (unregistering): Port device team_slave_1 removed [ 1375.171995][T14642] team0 (unregistering): Port device team_slave_0 removed [ 1376.023767][T17638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.023787][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.023818][T17638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.165476][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1376.180640][T17638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.180661][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.180690][T17638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.327425][T17638] hsr_slave_0: entered promiscuous mode [ 1376.328909][T17638] hsr_slave_1: entered promiscuous mode [ 1376.346632][T17638] debugfs: 'hsr0' already exists in 'hsr' [ 1376.346664][T17638] Cannot create hsr debugfs directory [ 1377.502120][T17916] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1381.927549][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3876'. [ 1381.927583][T17939] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 1393.489237][ T37] kauditd_printk_skb: 172 callbacks suppressed [ 1393.489253][ T37] audit: type=1326 audit(1393.179:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18002 comm="syz.5.3890" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe657adce59 code=0x0 [ 1396.110698][T18036] netlink: 'syz.5.3895': attribute type 1 has an invalid length. [ 1397.070862][T17638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1397.201076][T17638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.777544][T18046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1398.162998][T17646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1398.604036][T17646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1399.178840][T17646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1399.193217][T17646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1399.198793][T17646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1399.204762][T18056] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3898'. [ 1400.619345][T10168] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1400.779205][T10168] usb 2-1: Using ep0 maxpacket: 16 [ 1400.780286][T10168] usb 2-1: no configurations [ 1400.780305][T10168] usb 2-1: can't read configurations, error -22 [ 1400.939202][T10168] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1401.089321][T10168] usb 2-1: Using ep0 maxpacket: 16 [ 1401.090350][T10168] usb 2-1: no configurations [ 1401.090367][T10168] usb 2-1: can't read configurations, error -22 [ 1401.090944][T10168] usb usb2-port1: attempt power cycle [ 1401.502906][T10168] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1401.520559][T10168] usb 2-1: Using ep0 maxpacket: 16 [ 1401.521424][T10168] usb 2-1: no configurations [ 1401.521441][T10168] usb 2-1: can't read configurations, error -22 [ 1401.849178][ T5609] Bluetooth: hci2: command tx timeout [ 1401.907274][T10168] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1401.920079][T10168] usb 2-1: Using ep0 maxpacket: 16 [ 1401.920879][T10168] usb 2-1: no configurations [ 1401.920895][T10168] usb 2-1: can't read configurations, error -22 [ 1401.925379][T10168] usb usb2-port1: unable to enumerate USB device [ 1402.707081][T18048] lo speed is unknown, defaulting to 1000 [ 1403.929256][ T5609] Bluetooth: hci2: command tx timeout [ 1404.991771][T18126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.009213][ T5609] Bluetooth: hci2: command tx timeout [ 1406.306212][ T37] audit: type=1326 audit(1405.989:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.1.3911" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19102cce59 code=0x0 [ 1408.099261][ T5609] Bluetooth: hci2: command tx timeout [ 1408.849224][T16013] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1408.869172][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1408.888295][T18174] syzkaller1: entered promiscuous mode [ 1408.888323][T18174] syzkaller1: entered allmulticast mode [ 1409.009191][T16013] usb 6-1: Using ep0 maxpacket: 16 [ 1409.010032][T16013] usb 6-1: no configurations [ 1409.010051][T16013] usb 6-1: can't read configurations, error -22 [ 1409.039988][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1409.048219][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1409.048249][ T9] usb 5-1: config 0 has no interface number 0 [ 1409.082019][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1409.082054][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.082075][ T9] usb 5-1: Product: syz [ 1409.082090][ T9] usb 5-1: Manufacturer: syz [ 1409.082105][ T9] usb 5-1: SerialNumber: syz [ 1409.148620][ T9] usb 5-1: config 0 descriptor?? [ 1409.156906][T16013] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1409.161701][ T9] usb 5-1: selecting invalid altsetting 1 [ 1409.233589][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1409.233630][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1409.314413][T16013] usb 6-1: Using ep0 maxpacket: 16 [ 1409.324169][T16013] usb 6-1: no configurations [ 1409.324188][T16013] usb 6-1: can't read configurations, error -22 [ 1409.329427][T16013] usb usb6-port1: attempt power cycle [ 1409.679207][T16013] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1409.701480][T16013] usb 6-1: Using ep0 maxpacket: 16 [ 1409.702185][T16013] usb 6-1: no configurations [ 1409.702200][T16013] usb 6-1: can't read configurations, error -22 [ 1409.711456][T18048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.711624][T18048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.711849][T18048] bridge_slave_0: entered allmulticast mode [ 1409.782909][T18048] bridge_slave_0: entered promiscuous mode [ 1409.806372][T18048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.806495][T18048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.806701][T18048] bridge_slave_1: entered allmulticast mode [ 1409.832165][T16013] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1409.865365][T16013] usb 6-1: Using ep0 maxpacket: 16 [ 1409.869533][T16013] usb 6-1: no configurations [ 1409.869553][T16013] usb 6-1: can't read configurations, error -22 [ 1409.873326][T16013] usb usb6-port1: unable to enumerate USB device [ 1409.883250][T18048] bridge_slave_1: entered promiscuous mode [ 1410.004181][ T9] DVB: Unable to find symbol stv0299_attach() [ 1410.080716][ T9] DVB: Unable to find symbol tda8083_attach() [ 1410.080742][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1410.504590][T18048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.547404][T18048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.702091][ T43] bridge_slave_1: left allmulticast mode [ 1410.702131][ T43] bridge_slave_1: left promiscuous mode [ 1410.702448][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.863130][ T43] bridge_slave_0: left allmulticast mode [ 1410.863171][ T43] bridge_slave_0: left promiscuous mode [ 1410.863479][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.280706][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3921'. [ 1411.750972][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.870282][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.953628][ T43] bond0 (unregistering): Released all slaves [ 1412.268704][T18048] team0: Port device team_slave_0 added [ 1412.285461][T18048] team0: Port device team_slave_1 added [ 1412.915908][ T43] hsr_slave_0: left promiscuous mode [ 1412.954565][ T43] hsr_slave_1: left promiscuous mode [ 1412.955687][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.000244][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.002914][ T5614] usb 5-1: USB disconnect, device number 79 [ 1413.165521][ T37] audit: type=1326 audit(1412.859:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.166227][ T37] audit: type=1326 audit(1412.859:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.168250][ T37] audit: type=1326 audit(1412.859:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.168400][ T37] audit: type=1326 audit(1412.859:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.168995][ T37] audit: type=1326 audit(1412.859:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.306551][ T37] audit: type=1326 audit(1412.859:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.306616][ T37] audit: type=1326 audit(1412.889:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.306665][ T37] audit: type=1326 audit(1412.889:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.379959][ T37] audit: type=1326 audit(1412.889:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1413.380013][ T37] audit: type=1326 audit(1412.889:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18205 comm="syz.5.3923" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe657adce59 code=0x7ffc0000 [ 1414.926024][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1414.946456][T18221] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3927'. [ 1415.145560][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1416.032273][T18048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.032292][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.032322][T18048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.427015][T18048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.427035][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.427063][T18048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.895607][T18048] hsr_slave_0: entered promiscuous mode [ 1416.911101][T18048] hsr_slave_1: entered promiscuous mode [ 1416.914594][T18048] debugfs: 'hsr0' already exists in 'hsr' [ 1416.914624][T18048] Cannot create hsr debugfs directory [ 1421.574569][ T37] kauditd_printk_skb: 134 callbacks suppressed [ 1421.574589][ T37] audit: type=1326 audit(1421.269:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18269 comm="syz.4.3938" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bc4b4ce59 code=0x0 [ 1421.745313][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1422.430531][T18274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.617436][T18274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.828960][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1423.212724][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.212803][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.531282][T18300] PKCS7: Unknown OID: [4] 0.0 [ 1423.531338][T18300] PKCS7: Only support pkcs7_signedData type [ 1426.591133][T18322] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1429.851089][T15095] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1429.999957][T15095] usb 6-1: Using ep0 maxpacket: 8 [ 1430.002638][T15095] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1430.002669][T15095] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1430.006256][T15095] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1430.006311][T15095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.006333][T15095] usb 6-1: Product: syz [ 1430.006348][T15095] usb 6-1: Manufacturer: syz [ 1430.006364][T15095] usb 6-1: SerialNumber: syz [ 1430.079500][T15095] usb 6-1: config 0 descriptor?? [ 1430.112321][T15095] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 1430.324605][T15095] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 1430.324958][T15095] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 1430.356905][T15095] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1430.460955][T18048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1430.496601][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1430.497684][T18048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1430.531361][T18180] usb 6-1: USB disconnect, device number 46 [ 1430.688593][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1430.703392][T18048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1431.546533][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1431.547866][T18048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1431.990886][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1433.352807][T18048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.954094][T18048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.040009][T14642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.040167][T14642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.083470][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.083649][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.605075][T18048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.777661][T18048] veth0_vlan: entered promiscuous mode [ 1439.824126][T18048] veth1_vlan: entered promiscuous mode [ 1439.935928][T18048] veth0_macvtap: entered promiscuous mode [ 1439.956640][T18048] veth1_macvtap: entered promiscuous mode [ 1439.987320][T18048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.008046][T18048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.048661][ T9888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.048926][ T9888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.048969][ T9888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.049008][ T9888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.456237][T18474] erspan0: entered promiscuous mode [ 1440.457236][T18474] macsec1: entered promiscuous mode [ 1440.457435][T18474] macsec1: entered allmulticast mode [ 1440.457452][T18474] erspan0: entered allmulticast mode [ 1441.219615][T18474] erspan0: left allmulticast mode [ 1441.220066][T18474] erspan0: left promiscuous mode [ 1447.739166][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.739190][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.974411][ T9897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.974445][ T9897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.115421][T18498] FAULT_INJECTION: forcing a failure. [ 1448.115421][T18498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.115466][T18498] CPU: 1 UID: 0 PID: 18498 Comm: syz.1.3984 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1448.115492][T18498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1448.115506][T18498] Call Trace: [ 1448.115515][T18498] [ 1448.115526][T18498] dump_stack_lvl+0xe8/0x150 [ 1448.115562][T18498] should_fail_ex+0x46b/0x600 [ 1448.115603][T18498] _copy_to_user+0x31/0xb0 [ 1448.115627][T18498] simple_read_from_buffer+0xe1/0x170 [ 1448.115690][T18498] proc_fail_nth_read+0x1be/0x230 [ 1448.115735][T18498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1448.115763][T18498] ? rw_verify_area+0x2ac/0x4e0 [ 1448.115789][T18498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1448.115814][T18498] vfs_read+0x212/0xa80 [ 1448.115849][T18498] ? __pfx_vfs_read+0x10/0x10 [ 1448.115877][T18498] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1448.115927][T18498] ? lockdep_hardirqs_on+0x7a/0x110 [ 1448.115964][T18498] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1448.115995][T18498] ? mutex_lock_nested+0x152/0x1d0 [ 1448.116019][T18498] ? fdget_pos+0x252/0x320 [ 1448.116056][T18498] ksys_read+0x156/0x270 [ 1448.116085][T18498] ? __pfx_ksys_read+0x10/0x10 [ 1448.116109][T18498] ? __pfx_odev_ioctl+0x10/0x10 [ 1448.116202][T18498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.116228][T18498] do_syscall_64+0x174/0x580 [ 1448.116261][T18498] ? clear_bhb_loop+0x40/0x90 [ 1448.116289][T18498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.116311][T18498] RIP: 0033:0x7f191028d68e [ 1448.116332][T18498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1448.116351][T18498] RSP: 002b:00007f190e51dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1448.116376][T18498] RAX: ffffffffffffffda RBX: 00007f190e51e6c0 RCX: 00007f191028d68e [ 1448.116392][T18498] RDX: 000000000000000f RSI: 00007f190e51e0a0 RDI: 0000000000000006 [ 1448.116407][T18498] RBP: 00007f190e51e090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.116421][T18498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.116435][T18498] R13: 00007f1910546038 R14: 00007f1910545fa0 R15: 00007ffe57553228 [ 1448.116479][T18498] [ 1448.502030][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1449.289161][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1449.294866][T18508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3809'. [ 1449.295883][ T9] usb 5-1: config 12 has an invalid interface number: 141 but max is 0 [ 1449.295910][ T9] usb 5-1: config 12 has no interface number 0 [ 1449.298922][ T9] usb 5-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice=50.42 [ 1449.298978][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.299000][ T9] usb 5-1: Product: syz [ 1449.299137][ T9] usb 5-1: Manufacturer: 󘴴 [ 1449.299157][ T9] usb 5-1: SerialNumber: syz [ 1449.677646][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.681494][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.771575][T18512] PKCS7: Unknown OID: [4] 0.0 [ 1449.771621][T18512] PKCS7: Only support pkcs7_signedData type [ 1450.638964][ T9] gspca_main: pac207-2.14.0 probing 093a:2461 [ 1450.654133][ T9] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 1450.755665][ T9] usb 5-1: USB disconnect, device number 80 [ 1453.690839][T16013] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1455.484818][T16013] usb 6-1: Using ep0 maxpacket: 16 [ 1455.487348][T16013] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1080, setting to 1024 [ 1455.492393][T16013] usb 6-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 1455.492424][T16013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.492444][T16013] usb 6-1: Product: syz [ 1455.492459][T16013] usb 6-1: Manufacturer: syz [ 1455.492473][T16013] usb 6-1: SerialNumber: syz [ 1455.757712][T16013] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1455.803556][T16013] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1456.882799][T16013] usb 6-1: USB disconnect, device number 47 [ 1457.247201][T18562] FAULT_INJECTION: forcing a failure. [ 1457.247201][T18562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.247239][T18562] CPU: 1 UID: 0 PID: 18562 Comm: syz.1.4003 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1457.247264][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1457.247278][T18562] Call Trace: [ 1457.247287][T18562] [ 1457.247297][T18562] dump_stack_lvl+0xe8/0x150 [ 1457.247339][T18562] should_fail_ex+0x46b/0x600 [ 1457.247377][T18562] _copy_to_user+0x31/0xb0 [ 1457.247401][T18562] simple_read_from_buffer+0xe1/0x170 [ 1457.247439][T18562] proc_fail_nth_read+0x1be/0x230 [ 1457.247464][T18562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1457.247490][T18562] ? rw_verify_area+0x2ac/0x4e0 [ 1457.247515][T18562] ? __fget_files+0x2a/0x420 [ 1457.247534][T18562] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1457.247560][T18562] vfs_read+0x212/0xa80 [ 1457.247596][T18562] ? __pfx_vfs_read+0x10/0x10 [ 1457.247625][T18562] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1457.247659][T18562] ? lockdep_hardirqs_on+0x7a/0x110 [ 1457.247689][T18562] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1457.247718][T18562] ? mutex_lock_nested+0x152/0x1d0 [ 1457.247741][T18562] ? fdget_pos+0x252/0x320 [ 1457.247769][T18562] ksys_read+0x156/0x270 [ 1457.247800][T18562] ? __pfx_ksys_read+0x10/0x10 [ 1457.247832][T18562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.247855][T18562] do_syscall_64+0x174/0x580 [ 1457.247884][T18562] ? trace_irq_disable+0x3b/0x140 [ 1457.247911][T18562] ? clear_bhb_loop+0x40/0x90 [ 1457.247937][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.247959][T18562] RIP: 0033:0x7f191028d68e [ 1457.247991][T18562] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1457.248012][T18562] RSP: 002b:00007f190e51dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1457.248037][T18562] RAX: ffffffffffffffda RBX: 00007f190e51e6c0 RCX: 00007f191028d68e [ 1457.248053][T18562] RDX: 000000000000000f RSI: 00007f190e51e0a0 RDI: 0000000000000005 [ 1457.248068][T18562] RBP: 00007f190e51e090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.248083][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.248097][T18562] R13: 00007f1910546038 R14: 00007f1910545fa0 R15: 00007ffe57553228 [ 1457.248134][T18562] [ 1457.632150][T18565] PKCS7: Unknown OID: [4] 0.0 [ 1457.632206][T18565] PKCS7: Only support pkcs7_signedData type [ 1459.001246][T18569] FAULT_INJECTION: forcing a failure. [ 1459.001246][T18569] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.001271][T18569] CPU: 0 UID: 0 PID: 18569 Comm: syz.5.4006 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1459.001286][T18569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1459.001293][T18569] Call Trace: [ 1459.001298][T18569] [ 1459.001304][T18569] dump_stack_lvl+0xe8/0x150 [ 1459.001325][T18569] should_fail_ex+0x46b/0x600 [ 1459.001346][T18569] should_failslab+0xa8/0x100 [ 1459.001375][T18569] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1459.001391][T18569] ? __alloc_skb+0x1d0/0x7d0 [ 1459.001412][T18569] ? lockdep_hardirqs_on+0x7a/0x110 [ 1459.001433][T18569] __alloc_skb+0x1d0/0x7d0 [ 1459.001452][T18569] netlink_sendmsg+0x5d4/0xb40 [ 1459.001479][T18569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.001497][T18569] ? unwind_get_return_address+0x4d/0x90 [ 1459.001521][T18569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1459.001541][T18569] ____sys_sendmsg+0x94c/0x9c0 [ 1459.001563][T18569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1459.001586][T18569] ? import_iovec+0x73/0xa0 [ 1459.001613][T18569] ___sys_sendmsg+0x2a5/0x360 [ 1459.001630][T18569] ? __lock_acquire+0x6b5/0x2cf0 [ 1459.001656][T18569] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.001692][T18569] ? __fget_files+0x2a/0x420 [ 1459.001703][T18569] ? __fget_files+0x3a6/0x420 [ 1459.001720][T18569] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1459.001739][T18569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1459.001762][T18569] ? __pfx_ksys_write+0x10/0x10 [ 1459.001780][T18569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.001794][T18569] do_syscall_64+0x174/0x580 [ 1459.001810][T18569] ? trace_irq_disable+0x3b/0x140 [ 1459.001824][T18569] ? clear_bhb_loop+0x40/0x90 [ 1459.001839][T18569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.001851][T18569] RIP: 0033:0x7fe657adce59 [ 1459.001863][T18569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.001873][T18569] RSP: 002b:00007fe655d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.001888][T18569] RAX: ffffffffffffffda RBX: 00007fe657d55fa0 RCX: 00007fe657adce59 [ 1459.001897][T18569] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1459.001905][T18569] RBP: 00007fe655d36090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.001912][T18569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.001920][T18569] R13: 00007fe657d56038 R14: 00007fe657d55fa0 R15: 00007ffc3adb47d8 [ 1459.001938][T18569] [ 1459.796612][T18583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1460.026780][ T5609] Bluetooth: hci0: unexpected event for opcode 0x200a [ 1460.027992][ T5609] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1460.096201][T18589] PKCS7: Unknown OID: [4] 0.0 [ 1460.096258][T18589] PKCS7: Only support pkcs7_signedData type [ 1461.478468][T18595] FAULT_INJECTION: forcing a failure. [ 1461.478468][T18595] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.478493][T18595] CPU: 1 UID: 0 PID: 18595 Comm: syz.4.4014 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1461.478508][T18595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1461.478516][T18595] Call Trace: [ 1461.478521][T18595] [ 1461.478527][T18595] dump_stack_lvl+0xe8/0x150 [ 1461.478548][T18595] should_fail_ex+0x46b/0x600 [ 1461.478569][T18595] should_failslab+0xa8/0x100 [ 1461.478586][T18595] __kmalloc_cache_noprof+0x84/0x690 [ 1461.478602][T18595] ? llc_sap_open+0xf5/0x3f0 [ 1461.478702][T18595] ? llc_sap_open+0x2e/0x3f0 [ 1461.478721][T18595] llc_sap_open+0xf5/0x3f0 [ 1461.478743][T18595] llc_ui_autobind+0x217/0x530 [ 1461.478789][T18595] ? lockdep_hardirqs_on+0x7a/0x110 [ 1461.478813][T18595] llc_ui_sendmsg+0x1ff/0xea0 [ 1461.478836][T18595] ? __lock_acquire+0x6b5/0x2cf0 [ 1461.478857][T18595] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1461.478877][T18595] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 1461.478897][T18595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1461.478913][T18595] ____sys_sendmsg+0x94c/0x9c0 [ 1461.478935][T18595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1461.478958][T18595] ? import_iovec+0x73/0xa0 [ 1461.478978][T18595] ___sys_sendmsg+0x2a5/0x360 [ 1461.478995][T18595] ? __lock_acquire+0x6b5/0x2cf0 [ 1461.479020][T18595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1461.479055][T18595] ? kstrtouint+0x6e/0xe0 [ 1461.479104][T18595] ? __fget_files+0x2a/0x420 [ 1461.479117][T18595] ? __fget_files+0x3a6/0x420 [ 1461.479136][T18595] __sys_sendmmsg+0x282/0x4e0 [ 1461.479158][T18595] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1461.479182][T18595] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1461.479206][T18595] ? ksys_write+0x248/0x270 [ 1461.479223][T18595] ? __pfx_ksys_write+0x10/0x10 [ 1461.479241][T18595] __x64_sys_sendmmsg+0xa0/0xc0 [ 1461.479259][T18595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.479272][T18595] do_syscall_64+0x174/0x580 [ 1461.479289][T18595] ? trace_irq_disable+0x3b/0x140 [ 1461.479304][T18595] ? clear_bhb_loop+0x40/0x90 [ 1461.479328][T18595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.479341][T18595] RIP: 0033:0x7f9bc4b4ce59 [ 1461.479354][T18595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.479365][T18595] RSP: 002b:00007f9bc2da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1461.479381][T18595] RAX: ffffffffffffffda RBX: 00007f9bc4dc5fa0 RCX: 00007f9bc4b4ce59 [ 1461.479390][T18595] RDX: 0000000000000002 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 1461.479398][T18595] RBP: 00007f9bc2da6090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.479406][T18595] R10: 0000000004048055 R11: 0000000000000246 R12: 0000000000000001 [ 1461.479414][T18595] R13: 00007f9bc4dc6038 R14: 00007f9bc4dc5fa0 R15: 00007ffd0bc0b948 [ 1461.479434][T18595] [ 1462.499363][ T5614] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1463.173605][ T5614] usb 3-1: config index 0 descriptor too short (expected 12336, got 441) [ 1463.173636][ T5614] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1463.173657][ T5614] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.173676][ T5614] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1463.173717][ T5614] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1463.173742][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.518511][ T5614] usb 3-1: string descriptor 0 read error: -71 [ 1463.536660][ T5614] usb 3-1: USB disconnect, device number 120 [ 1463.611360][T18612] PKCS7: Unknown OID: [4] 0.0 [ 1463.611414][T18612] PKCS7: Only support pkcs7_signedData type [ 1467.273625][T18623] PKCS7: Unknown OID: [4] 0.0 [ 1467.273639][T18623] PKCS7: Only support pkcs7_signedData type [ 1468.869167][ T5737] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1469.019258][ T5737] usb 2-1: Using ep0 maxpacket: 32 [ 1469.039517][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.039556][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.039598][ T5737] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1469.039623][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.091167][ T5737] usb 2-1: config 0 descriptor?? [ 1469.289430][ T5737] hub 2-1:0.0: USB hub found [ 1469.293636][ T5737] hub 2-1:0.0: 1 port detected [ 1470.573971][ T5737] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1470.614879][ T5614] usb 2-1: USB disconnect, device number 80 [ 1470.817532][T15638] usb 2-1: Failed to suspend device, error -19 [ 1475.209482][ T5738] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1475.393624][ T5738] usb 5-1: config index 0 descriptor too short (expected 12336, got 441) [ 1475.393657][ T5738] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1475.393679][ T5738] usb 5-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.393701][ T5738] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1475.393741][ T5738] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1475.393765][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.604927][T18680] PKCS7: Unknown OID: [4] 0.0 [ 1475.604947][T18680] PKCS7: Only support pkcs7_signedData type [ 1475.697076][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 1475.697785][ T5738] usb 5-1: string descriptor 0 read error: -32 [ 1475.720777][ T5738] usb 5-1: USB disconnect, device number 81 [ 1477.509830][T18691] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[18048] was attempted by " [ 1478.332666][T18693] FAULT_INJECTION: forcing a failure. [ 1478.332666][T18693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.332706][T18693] CPU: 0 UID: 0 PID: 18693 Comm: syz.1.4046 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1478.332732][T18693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1478.332745][T18693] Call Trace: [ 1478.332754][T18693] [ 1478.332764][T18693] dump_stack_lvl+0xe8/0x150 [ 1478.332800][T18693] should_fail_ex+0x46b/0x600 [ 1478.332840][T18693] _copy_from_user+0x2d/0xb0 [ 1478.332862][T18693] dvb_usercopy+0x15c/0x2e0 [ 1478.332926][T18693] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1478.332955][T18693] ? __pfx_dvb_usercopy+0x10/0x10 [ 1478.332994][T18693] ? __fget_files+0x3a6/0x420 [ 1478.333018][T18693] ? __fget_files+0x2a/0x420 [ 1478.333041][T18693] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1478.333071][T18693] dvb_demux_ioctl+0x29/0x40 [ 1478.333101][T18693] __se_sys_ioctl+0xff/0x170 [ 1478.333135][T18693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.333166][T18693] do_syscall_64+0x174/0x580 [ 1478.333199][T18693] ? trace_irq_disable+0x3b/0x140 [ 1478.333227][T18693] ? clear_bhb_loop+0x40/0x90 [ 1478.333255][T18693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.333277][T18693] RIP: 0033:0x7f19102cce59 [ 1478.333299][T18693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1478.333318][T18693] RSP: 002b:00007f190e51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.333343][T18693] RAX: ffffffffffffffda RBX: 00007f1910545fa0 RCX: 00007f19102cce59 [ 1478.333360][T18693] RDX: 0000200000001e40 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 1478.333375][T18693] RBP: 00007f190e51e090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.333389][T18693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.333402][T18693] R13: 00007f1910546038 R14: 00007f1910545fa0 R15: 00007ffe57553228 [ 1478.333436][T18693] [ 1480.129174][T10168] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1480.279289][T10168] usb 6-1: Using ep0 maxpacket: 16 [ 1480.286196][T10168] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1480.287170][T10168] usb 6-1: config 9 has no interfaces? [ 1480.287636][T10168] usb 6-1: language id specifier not provided by device, defaulting to English [ 1480.288986][T10168] usb 6-1: New USB device found, idVendor=0b05, idProduct=1932, bcdDevice=13.5b [ 1480.289217][T10168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.289237][T10168] usb 6-1: Product: syz [ 1480.289250][T10168] usb 6-1: Manufacturer: 疤ᨒ﫩ዷ夏⧽ꉺ咲엄쯳쌅酹⮎㖿륋푣陪螭䰩涻l [ 1480.289267][T10168] usb 6-1: SerialNumber: syz [ 1482.482896][T18726] trusted_key: encrypted_key: key trusted:syz not found [ 1482.504397][T18726] FAULT_INJECTION: forcing a failure. [ 1482.504397][T18726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.504470][T18726] CPU: 0 UID: 0 PID: 18726 Comm: syz.4.4057 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1482.504495][T18726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1482.504506][T18726] Call Trace: [ 1482.504513][T18726] [ 1482.504522][T18726] dump_stack_lvl+0xe8/0x150 [ 1482.504553][T18726] should_fail_ex+0x46b/0x600 [ 1482.504588][T18726] _copy_from_user+0x2d/0xb0 [ 1482.504611][T18726] __sys_bpf+0x229/0x950 [ 1482.504669][T18726] ? __pfx___sys_bpf+0x10/0x10 [ 1482.504691][T18726] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1482.504731][T18726] ? ksys_write+0x248/0x270 [ 1482.504760][T18726] ? __pfx_ksys_write+0x10/0x10 [ 1482.504791][T18726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.504815][T18726] __x64_sys_bpf+0x7c/0x90 [ 1482.504840][T18726] do_syscall_64+0x174/0x580 [ 1482.504872][T18726] ? clear_bhb_loop+0x40/0x90 [ 1482.504897][T18726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.504919][T18726] RIP: 0033:0x7f9bc4b4ce59 [ 1482.504941][T18726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1482.504959][T18726] RSP: 002b:00007f9bc2d85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1482.504983][T18726] RAX: ffffffffffffffda RBX: 00007f9bc4dc6090 RCX: 00007f9bc4b4ce59 [ 1482.504999][T18726] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000012 [ 1482.505014][T18726] RBP: 00007f9bc2d85090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.505029][T18726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.505043][T18726] R13: 00007f9bc4dc6128 R14: 00007f9bc4dc6090 R15: 00007ffd0bc0b948 [ 1482.505076][T18726] [ 1482.775393][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 1483.667814][T10168] usb 6-1: USB disconnect, device number 48 [ 1483.812421][T18726] syz.4.4057 (18726): drop_caches: 2 [ 1484.208239][T18736] FAULT_INJECTION: forcing a failure. [ 1484.208239][T18736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.208276][T18736] CPU: 0 UID: 0 PID: 18736 Comm: syz.5.4060 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1484.208301][T18736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1484.208314][T18736] Call Trace: [ 1484.208323][T18736] [ 1484.208332][T18736] dump_stack_lvl+0xe8/0x150 [ 1484.208363][T18736] should_fail_ex+0x46b/0x600 [ 1484.208397][T18736] _copy_to_user+0x31/0xb0 [ 1484.208421][T18736] simple_read_from_buffer+0xe1/0x170 [ 1484.208458][T18736] proc_fail_nth_read+0x1be/0x230 [ 1484.208484][T18736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1484.208510][T18736] ? rw_verify_area+0x2ac/0x4e0 [ 1484.208536][T18736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1484.208560][T18736] vfs_read+0x212/0xa80 [ 1484.208596][T18736] ? __pfx_vfs_read+0x10/0x10 [ 1484.208625][T18736] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1484.208658][T18736] ? lockdep_hardirqs_on+0x7a/0x110 [ 1484.208699][T18736] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1484.208731][T18736] ? mutex_lock_nested+0x152/0x1d0 [ 1484.208755][T18736] ? fdget_pos+0x252/0x320 [ 1484.208787][T18736] ksys_read+0x156/0x270 [ 1484.208816][T18736] ? __pfx_ksys_read+0x10/0x10 [ 1484.208851][T18736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.208876][T18736] do_syscall_64+0x174/0x580 [ 1484.208907][T18736] ? trace_irq_disable+0x3b/0x140 [ 1484.208933][T18736] ? clear_bhb_loop+0x40/0x90 [ 1484.208961][T18736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.208983][T18736] RIP: 0033:0x7fe657a9d68e [ 1484.209007][T18736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1484.209024][T18736] RSP: 002b:00007fe655d14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1484.209048][T18736] RAX: ffffffffffffffda RBX: 00007fe655d156c0 RCX: 00007fe657a9d68e [ 1484.209064][T18736] RDX: 000000000000000f RSI: 00007fe655d150a0 RDI: 0000000000000006 [ 1484.209078][T18736] RBP: 00007fe655d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1484.209091][T18736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.209104][T18736] R13: 00007fe657d56128 R14: 00007fe657d56090 R15: 00007ffc3adb47d8 [ 1484.209137][T18736] [ 1484.479319][T10168] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1484.640019][T10168] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.640084][T10168] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1484.640111][T10168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.651933][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.652006][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.698801][T10168] usb 5-1: config 0 descriptor?? [ 1484.746076][T10168] pwc: Askey VC010 type 2 USB webcam detected. [ 1484.951878][T10168] pwc: send_video_command error -71 [ 1484.951915][T10168] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1484.952040][T10168] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1484.966912][T10168] usb 5-1: USB disconnect, device number 82 [ 1487.651423][T18760] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4068'. [ 1487.945210][T18763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4067'. [ 1488.142391][T18765] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4070'. [ 1488.549178][T18180] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1488.710129][T18180] usb 6-1: Using ep0 maxpacket: 8 [ 1488.713223][T18180] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1488.713249][T18180] usb 6-1: can't read configurations, error -61 [ 1488.839196][T18180] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1489.057386][T18784] PKCS7: Unknown OID: [4] 0.0 [ 1489.057429][T18784] PKCS7: Only support pkcs7_signedData type [ 1489.999449][T18180] usb 6-1: Using ep0 maxpacket: 8 [ 1490.022154][T18180] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1490.022195][T18180] usb 6-1: can't read configurations, error -61 [ 1490.132681][T18180] usb usb6-port1: attempt power cycle [ 1490.569233][T18180] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1490.589973][T18180] usb 6-1: Using ep0 maxpacket: 8 [ 1490.616300][T18180] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1490.616344][T18180] usb 6-1: can't read configurations, error -61 [ 1492.253299][T18180] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1492.601173][T18180] usb 6-1: device descriptor read/8, error -71 [ 1492.710292][T18180] usb usb6-port1: unable to enumerate USB device [ 1492.991632][T18805] FAULT_INJECTION: forcing a failure. [ 1492.991632][T18805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.991670][T18805] CPU: 0 UID: 0 PID: 18805 Comm: syz.5.4083 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1492.991695][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1492.991709][T18805] Call Trace: [ 1492.991722][T18805] [ 1492.991732][T18805] dump_stack_lvl+0xe8/0x150 [ 1492.991765][T18805] should_fail_ex+0x46b/0x600 [ 1492.991802][T18805] _copy_from_iter+0x1d3/0x1670 [ 1492.991858][T18805] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1492.991884][T18805] ? __alloc_skb+0x27d/0x7d0 [ 1492.991916][T18805] ? __pfx__copy_from_iter+0x10/0x10 [ 1492.991943][T18805] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1492.991967][T18805] ? __alloc_skb+0x27d/0x7d0 [ 1492.992001][T18805] ? netlink_sendmsg+0x650/0xb40 [ 1492.992031][T18805] ? skb_put+0x11b/0x210 [ 1492.992062][T18805] netlink_sendmsg+0x6c0/0xb40 [ 1492.992102][T18805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.992132][T18805] ? unwind_get_return_address+0x4d/0x90 [ 1492.992167][T18805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1492.992195][T18805] ____sys_sendmsg+0x94c/0x9c0 [ 1492.992233][T18805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1492.992275][T18805] ? import_iovec+0x73/0xa0 [ 1492.992311][T18805] ___sys_sendmsg+0x2a5/0x360 [ 1492.992341][T18805] ? __lock_acquire+0x6b5/0x2cf0 [ 1492.992373][T18805] ? __pfx____sys_sendmsg+0x10/0x10 [ 1492.992437][T18805] ? __fget_files+0x2a/0x420 [ 1492.992457][T18805] ? __fget_files+0x3a6/0x420 [ 1492.992489][T18805] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1492.992521][T18805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1492.992568][T18805] ? __pfx_ksys_write+0x10/0x10 [ 1492.992602][T18805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.992625][T18805] do_syscall_64+0x174/0x580 [ 1492.992655][T18805] ? trace_irq_disable+0x3b/0x140 [ 1492.992681][T18805] ? clear_bhb_loop+0x40/0x90 [ 1492.992707][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.992728][T18805] RIP: 0033:0x7fe657adce59 [ 1492.992749][T18805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.992767][T18805] RSP: 002b:00007fe655d36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1492.992788][T18805] RAX: ffffffffffffffda RBX: 00007fe657d55fa0 RCX: 00007fe657adce59 [ 1492.992803][T18805] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1492.992817][T18805] RBP: 00007fe655d36090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.992830][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.992843][T18805] R13: 00007fe657d56038 R14: 00007fe657d55fa0 R15: 00007ffc3adb47d8 [ 1492.992879][T18805] [ 1494.099087][T18817] PKCS7: Unknown OID: [4] 0.0 [ 1494.099108][T18817] PKCS7: Only support pkcs7_signedData type [ 1494.588689][T18815] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4085'. [ 1495.398544][T18829] netlink: 'syz.5.4090': attribute type 3 has an invalid length. [ 1495.398570][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4090'. [ 1495.441884][T18831] netlink: 'syz.2.4091': attribute type 3 has an invalid length. [ 1495.441910][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1495.521419][T10168] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1495.679195][T10168] usb 5-1: Using ep0 maxpacket: 8 [ 1495.685322][T10168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1495.685377][T10168] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1495.685404][T10168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.693955][T10168] usb 5-1: config 0 descriptor?? [ 1495.936291][T10168] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1496.459842][T18491] usb 5-1: USB disconnect, device number 83 [ 1497.001562][T18852] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4099'. [ 1497.307429][T18856] PKCS7: Unknown OID: [4] 0.0 [ 1497.307475][T18856] PKCS7: Only support pkcs7_signedData type [ 1498.663007][ T37] audit: type=1804 audit(1498.289:498): pid=18858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.4101" name="/newroot/20/cgroup.controllers" dev="tmpfs" ino=124 res=1 errno=0 [ 1498.680898][ T37] audit: type=1800 audit(1498.379:499): pid=18858 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4101" name="cgroup.controllers" dev="tmpfs" ino=124 res=0 errno=0 [ 1498.844560][T18867] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4105'. [ 1499.049334][T18180] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1499.213524][T18180] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1499.213554][T18180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.213575][T18180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.218494][T18180] usb 5-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 1499.218536][T18180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.218558][T18180] usb 5-1: Product: syz [ 1499.218574][T18180] usb 5-1: Manufacturer: syz [ 1499.218589][T18180] usb 5-1: SerialNumber: syz [ 1499.364523][T18877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.399437][T18877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.729482][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1499.893483][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.893522][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.895046][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1499.895076][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1499.895163][ T9] usb 3-1: SerialNumber: syz [ 1500.268536][ T9] usb 3-1: 0:2 : does not exist [ 1500.269166][ T9] usb 3-1: unit 5 not found! [ 1500.407569][ T9] usb 3-1: USB disconnect, device number 121 [ 1500.416701][T18180] usb 5-1: unit 5 not found! [ 1500.578921][T18180] usb 5-1: USB disconnect, device number 84 [ 1500.906636][T17834] udevd[17834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1500.963812][T18896] PKCS7: Unknown OID: [4] 0.0 [ 1500.963858][T18896] PKCS7: Only support pkcs7_signedData type [ 1502.486705][T18170] udevd[18170]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1502.593063][T18903] FAULT_INJECTION: forcing a failure. [ 1502.593063][T18903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.593098][T18903] CPU: 0 UID: 0 PID: 18903 Comm: syz.2.4117 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1502.593121][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1502.593134][T18903] Call Trace: [ 1502.593142][T18903] [ 1502.593152][T18903] dump_stack_lvl+0xe8/0x150 [ 1502.593183][T18903] should_fail_ex+0x46b/0x600 [ 1502.593220][T18903] _copy_from_iter+0x1d3/0x1670 [ 1502.593259][T18903] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1502.593284][T18903] ? __alloc_skb+0x27d/0x7d0 [ 1502.593313][T18903] ? __pfx__copy_from_iter+0x10/0x10 [ 1502.593339][T18903] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1502.593362][T18903] ? __alloc_skb+0x27d/0x7d0 [ 1502.593394][T18903] ? netlink_sendmsg+0x650/0xb40 [ 1502.593420][T18903] ? skb_put+0x11b/0x210 [ 1502.593452][T18903] netlink_sendmsg+0x6c0/0xb40 [ 1502.593501][T18903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.593533][T18903] ? unwind_get_return_address+0x4d/0x90 [ 1502.593565][T18903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1502.593590][T18903] ____sys_sendmsg+0x94c/0x9c0 [ 1502.593631][T18903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1502.593671][T18903] ? import_iovec+0x73/0xa0 [ 1502.593707][T18903] ___sys_sendmsg+0x2a5/0x360 [ 1502.593736][T18903] ? __lock_acquire+0x6b5/0x2cf0 [ 1502.593769][T18903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.593836][T18903] ? __fget_files+0x2a/0x420 [ 1502.593858][T18903] ? __fget_files+0x3a6/0x420 [ 1502.593889][T18903] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1502.593924][T18903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.593966][T18903] ? __pfx_ksys_write+0x10/0x10 [ 1502.594001][T18903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.594025][T18903] do_syscall_64+0x174/0x580 [ 1502.594054][T18903] ? trace_irq_disable+0x3b/0x140 [ 1502.594079][T18903] ? clear_bhb_loop+0x40/0x90 [ 1502.594105][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.594126][T18903] RIP: 0033:0x7f6d0910ce59 [ 1502.594148][T18903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.594165][T18903] RSP: 002b:00007f6d07366028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.594189][T18903] RAX: ffffffffffffffda RBX: 00007f6d09385fa0 RCX: 00007f6d0910ce59 [ 1502.594205][T18903] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1502.594219][T18903] RBP: 00007f6d07366090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.594232][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.594246][T18903] R13: 00007f6d09386038 R14: 00007f6d09385fa0 R15: 00007ffd1678c178 [ 1502.594280][T18903] [ 1502.855596][T10168] IPVS: starting estimator thread 0... [ 1502.941048][T18907] IPVS: using max 14 ests per chain, 33600 per kthread [ 1502.979194][T18491] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1503.129310][T18491] usb 6-1: Using ep0 maxpacket: 32 [ 1503.134401][T18491] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.134431][T18491] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.134456][T18491] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1503.134470][T18491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.137738][T18491] usb 6-1: config 0 descriptor?? [ 1503.169801][T18491] hub 6-1:0.0: USB hub found [ 1503.397602][T18491] hub 6-1:0.0: 1 port detected [ 1503.600331][T18491] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1503.600418][T18491] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1503.641550][T18491] usbhid 6-1:0.0: can't add hid device: -71 [ 1503.641682][T18491] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1503.700529][T18491] usb 6-1: USB disconnect, device number 53 [ 1504.159146][T18180] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1504.333310][T18180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.333342][T18180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1504.335054][T18180] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1504.335083][T18180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1504.335105][T18180] usb 5-1: SerialNumber: syz [ 1504.627321][T18930] PKCS7: Unknown OID: [4] 0.0 [ 1504.627342][T18930] PKCS7: Only support pkcs7_signedData type [ 1505.733056][T18180] usb 5-1: 0:2 : does not exist [ 1505.733154][T18180] usb 5-1: unit 5 not found! [ 1505.958229][T18180] usb 5-1: USB disconnect, device number 85 [ 1506.142483][T17834] udevd[17834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.323524][T18942] FAULT_INJECTION: forcing a failure. [ 1506.323524][T18942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.323578][T18942] CPU: 1 UID: 0 PID: 18942 Comm: syz.1.4133 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1506.323604][T18942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1506.323618][T18942] Call Trace: [ 1506.323629][T18942] [ 1506.323649][T18942] dump_stack_lvl+0xe8/0x150 [ 1506.323692][T18942] should_fail_ex+0x46b/0x600 [ 1506.323757][T18942] _copy_from_user+0x2d/0xb0 [ 1506.323788][T18942] __sys_bpf+0x229/0x950 [ 1506.323826][T18942] ? __pfx___sys_bpf+0x10/0x10 [ 1506.323893][T18942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.323917][T18942] __x64_sys_bpf+0x7c/0x90 [ 1506.323942][T18942] do_syscall_64+0x174/0x580 [ 1506.323974][T18942] ? clear_bhb_loop+0x40/0x90 [ 1506.324000][T18942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.324030][T18942] RIP: 0033:0x7f19102cce59 [ 1506.324059][T18942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.324078][T18942] RSP: 002b:00007f190e4fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1506.324103][T18942] RAX: ffffffffffffffda RBX: 00007f1910546090 RCX: 00007f19102cce59 [ 1506.324127][T18942] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1506.324140][T18942] RBP: 00007f190e4fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.324154][T18942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.324168][T18942] R13: 00007f1910546128 R14: 00007f1910546090 R15: 00007ffe57553228 [ 1506.324201][T18942] [ 1509.592801][T18974] PKCS7: Unknown OID: [4] 0.0 [ 1509.592847][T18974] PKCS7: Only support pkcs7_signedData type [ 1511.574019][ T37] audit: type=1326 audit(1511.149:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18981 comm="syz.2.4149" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d0910ce59 code=0xffff0000 [ 1511.874796][T18992] : entered promiscuous mode [ 1512.992496][T19013] PKCS7: Unknown OID: [4] 0.0 [ 1512.992560][T19013] PKCS7: Only support pkcs7_signedData type [ 1515.326324][T19032] vivid-004: disconnect [ 1515.328270][T19032] vivid-004: reconnect [ 1517.943616][T19059] PKCS7: Unknown OID: [4] 0.0 [ 1517.943660][T19059] PKCS7: Only support pkcs7_signedData type [ 1519.212339][T19065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1519.334572][T19070] FAULT_INJECTION: forcing a failure. [ 1519.334572][T19070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.334609][T19070] CPU: 1 UID: 0 PID: 19070 Comm: syz.6.4184 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1519.334634][T19070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1519.334647][T19070] Call Trace: [ 1519.334656][T19070] [ 1519.334665][T19070] dump_stack_lvl+0xe8/0x150 [ 1519.334698][T19070] should_fail_ex+0x46b/0x600 [ 1519.334735][T19070] _copy_from_user+0x2d/0xb0 [ 1519.334762][T19070] binder_ioctl_write_read+0x167/0xa490 [ 1519.334897][T19070] ? is_bpf_text_address+0x26/0x2b0 [ 1519.334940][T19070] ? try_to_take_rt_mutex+0x840/0xb00 [ 1519.334968][T19070] ? __kernel_text_address+0xd/0x30 [ 1519.335011][T19070] ? __lock_acquire+0x6b5/0x2cf0 [ 1519.335047][T19070] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1519.335081][T19070] ? stack_depot_save_flags+0x33/0x810 [ 1519.335123][T19070] ? do_raw_spin_lock+0x12b/0x2f0 [ 1519.335160][T19070] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1519.335190][T19070] ? lockdep_hardirqs_on+0x7a/0x110 [ 1519.335221][T19070] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1519.335252][T19070] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1519.335277][T19070] ? reacquire_held_locks+0x104/0x190 [ 1519.335307][T19070] ? rt_spin_lock+0x1e0/0x400 [ 1519.335335][T19070] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1519.335365][T19070] ? rt_spin_unlock+0x14f/0x200 [ 1519.335400][T19070] ? binder_get_thread+0x177/0x6d0 [ 1519.335435][T19070] binder_ioctl+0x426/0x1b10 [ 1519.335465][T19070] ? tomoyo_path_number_perm+0x219/0x630 [ 1519.335510][T19070] ? tomoyo_path_number_perm+0x219/0x630 [ 1519.335545][T19070] ? do_vfs_ioctl+0x117b/0x1540 [ 1519.335573][T19070] ? __pfx_binder_ioctl+0x10/0x10 [ 1519.335603][T19070] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1519.335630][T19070] ? __pfx_smack_log+0x10/0x10 [ 1519.335659][T19070] ? smk_access+0x14c/0x4e0 [ 1519.335692][T19070] ? smk_tskacc+0x311/0x3a0 [ 1519.335724][T19070] ? smack_file_ioctl+0x2c2/0x360 [ 1519.335757][T19070] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1519.335807][T19070] ? __fget_files+0x2a/0x420 [ 1519.335828][T19070] ? __fget_files+0x3a6/0x420 [ 1519.335848][T19070] ? __fget_files+0x2a/0x420 [ 1519.335872][T19070] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1519.335928][T19070] ? __pfx_binder_ioctl+0x10/0x10 [ 1519.335958][T19070] __se_sys_ioctl+0xff/0x170 [ 1519.335984][T19070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.336009][T19070] do_syscall_64+0x174/0x580 [ 1519.336039][T19070] ? trace_irq_disable+0x3b/0x140 [ 1519.336065][T19070] ? clear_bhb_loop+0x40/0x90 [ 1519.336093][T19070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.336115][T19070] RIP: 0033:0x7f896e74ce59 [ 1519.336136][T19070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.336156][T19070] RSP: 002b:00007f896c99e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1519.336180][T19070] RAX: ffffffffffffffda RBX: 00007f896e9c5fa0 RCX: 00007f896e74ce59 [ 1519.336197][T19070] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000006 [ 1519.336212][T19070] RBP: 00007f896c99e090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.336226][T19070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.336239][T19070] R13: 00007f896e9c6038 R14: 00007f896e9c5fa0 R15: 00007ffc63bb3938 [ 1519.336273][T19070] [ 1519.336426][T19070] binder: 19069:19070 ioctl c0306201 200000000480 returned -14 [ 1520.279320][ T5737] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1520.431733][ T5737] usb 6-1: not running at top speed; connect to a high speed hub [ 1520.433119][ T5737] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 560, setting to 64 [ 1520.433152][ T5737] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1520.437745][ T5737] usb 6-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40 [ 1520.437776][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.437796][ T5737] usb 6-1: Product: ⧾䦅꿈䒏키㯵펿쪳攫币鰥ᢝ혊눹膭룾濔⟄㇤ᄎ쥐랭ⷻ䥔櫧贆쬾΢壞昉햇왟䰷缞폍窻茔瞢뇵₲儔썦䋎氲ᷫ㛾မ벅疡凧⩁⻉ښ컂❾ᢗ贗䙾ꧨ꽦⩮隥孊銄댾揿扂ꑡ商펃삦ሻ絭련ڰ摗຦䪏ꮕ㤥缫␔琦헭｀췛뙿薓鷑翧ꬩㅽꧪ꫰쾲嬎﹗늉ຓ撑 [ 1520.437823][ T5737] usb 6-1: Manufacturer: ᠠ [ 1520.437831][ T5737] usb 6-1: SerialNumber: С [ 1520.446989][T19074] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1521.071924][ T5737] usbhid 6-1:1.0: can't add hid device: -71 [ 1521.072166][ T5737] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1521.107185][ T5737] usb 6-1: USB disconnect, device number 54 [ 1522.221850][T19104] PKCS7: Unknown OID: [4] 0.0 [ 1522.221895][T19104] PKCS7: Only support pkcs7_signedData type [ 1522.845294][T17646] Bluetooth: hci2: command 0x0406 tx timeout [ 1523.693585][T19109] FAULT_INJECTION: forcing a failure. [ 1523.693585][T19109] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.693623][T19109] CPU: 1 UID: 0 PID: 19109 Comm: syz.5.4196 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1523.693647][T19109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1523.693660][T19109] Call Trace: [ 1523.693669][T19109] [ 1523.693679][T19109] dump_stack_lvl+0xe8/0x150 [ 1523.693710][T19109] should_fail_ex+0x46b/0x600 [ 1523.693739][T19109] should_failslab+0xa8/0x100 [ 1523.693763][T19109] kmem_cache_alloc_noprof+0x87/0x680 [ 1523.693782][T19109] ? __send_signal_locked+0x22c/0xec0 [ 1523.693804][T19109] ? sig_get_ucounts+0x3e4/0x450 [ 1523.693823][T19109] __send_signal_locked+0x22c/0xec0 [ 1523.693853][T19109] force_sig_info_to_task+0x31e/0x4b0 [ 1523.693884][T19109] force_sig_fault+0xf0/0x150 [ 1523.693911][T19109] ? __pfx_force_sig_fault+0x10/0x10 [ 1523.693941][T19109] ? __bad_area_nosemaphore+0x31e/0x690 [ 1523.693962][T19109] ? trace_page_fault_user+0x84/0x1e0 [ 1523.693982][T19109] exc_page_fault+0x6a/0xc0 [ 1523.694007][T19109] asm_exc_page_fault+0x26/0x30 [ 1523.694024][T19109] RIP: 0033:0x7fe657991c79 [ 1523.694040][T19109] Code: e8 1c ff ff ff 48 83 ec 08 b9 01 00 00 00 31 c0 6a 08 41 b8 01 00 00 00 ba 01 00 00 00 44 89 d6 bf aa 01 00 00 e8 c7 b1 14 00 <48> 89 5d 00 8b 43 0c 48 83 c4 48 5b 5d c3 66 0f 1f 84 00 00 00 00 [ 1523.694054][T19109] RSP: 002b:00007fe655d35fc0 EFLAGS: 00010207 [ 1523.694071][T19109] RAX: 0000000000000001 RBX: 0000200000000300 RCX: 00007fe657adce59 [ 1523.694083][T19109] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000000a [ 1523.694093][T19109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000008 [ 1523.694103][T19109] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1523.694113][T19109] R13: 00007fe657d56038 R14: 00007fe657d55fa0 R15: 00007ffc3adb47d8 [ 1523.694141][T19109] [ 1526.627284][T19129] netlink: 'syz.5.4204': attribute type 3 has an invalid length. [ 1526.627300][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4204'. [ 1530.031133][T19157] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4216'. [ 1535.411783][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1535.865938][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1535.929782][ T9] usb 6-1: config 1 has an invalid interface number: 18 but max is 3 [ 1535.929815][ T9] usb 6-1: config 1 has an invalid interface number: 240 but max is 3 [ 1535.929838][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1535.929859][ T9] usb 6-1: config 1 has an invalid interface number: 39 but max is 3 [ 1535.929880][ T9] usb 6-1: config 1 has an invalid interface number: 223 but max is 3 [ 1535.929901][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1535.929921][ T9] usb 6-1: config 1 has no interface number 0 [ 1535.929938][ T9] usb 6-1: config 1 has no interface number 1 [ 1535.929955][ T9] usb 6-1: config 1 has no interface number 2 [ 1535.929972][ T9] usb 6-1: config 1 has no interface number 3 [ 1535.930065][ T9] usb 6-1: config 1 interface 18 altsetting 9 endpoint 0x5 has an invalid bInterval 240, changing to 7 [ 1535.930095][ T9] usb 6-1: config 1 interface 18 altsetting 9 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1535.930123][ T9] usb 6-1: config 1 interface 18 altsetting 9 endpoint 0x2 has an invalid bInterval 77, changing to 7 [ 1535.930160][ T9] usb 6-1: config 1 interface 18 altsetting 9 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 1535.930187][ T9] usb 6-1: config 1 interface 18 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1535.930211][ T9] usb 6-1: config 1 interface 18 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 1535.930236][ T9] usb 6-1: config 1 interface 18 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1535.930263][ T9] usb 6-1: config 1 interface 18 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 1535.930302][ T9] usb 6-1: config 1 interface 240 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1535.930326][ T9] usb 6-1: config 1 interface 240 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1535.930349][ T9] usb 6-1: config 1 interface 240 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1535.930372][ T9] usb 6-1: config 1 interface 240 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1535.930395][ T9] usb 6-1: config 1 interface 240 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1535.930421][ T9] usb 6-1: config 1 interface 240 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1535.930449][ T9] usb 6-1: config 1 interface 240 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1535.930489][ T9] usb 6-1: config 1 interface 39 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1535.930513][ T9] usb 6-1: config 1 interface 39 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1535.930571][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0xE, skipping [ 1535.930595][ T9] usb 6-1: config 1 interface 223 altsetting 194 has an invalid descriptor for endpoint zero, skipping [ 1535.930619][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0xB, skipping [ 1535.930643][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0xA, skipping [ 1535.930666][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0xF, skipping [ 1535.930691][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0x3, skipping [ 1535.930714][ T9] usb 6-1: config 1 interface 223 altsetting 194 has an invalid descriptor for endpoint zero, skipping [ 1535.930737][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0x2, skipping [ 1535.930761][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0x5, skipping [ 1535.930785][ T9] usb 6-1: config 1 interface 223 altsetting 194 has an invalid descriptor for endpoint zero, skipping [ 1535.930807][ T9] usb 6-1: config 1 interface 223 altsetting 194 has an invalid descriptor for endpoint zero, skipping [ 1535.930829][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0x7, skipping [ 1535.930853][ T9] usb 6-1: config 1 interface 223 altsetting 194 has a duplicate endpoint with address 0xF, skipping [ 1535.930877][ T9] usb 6-1: config 1 interface 223 altsetting 194 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 1535.930906][ T9] usb 6-1: config 1 interface 18 has no altsetting 0 [ 1535.930943][ T9] usb 6-1: config 1 interface 223 has no altsetting 0 [ 1535.935356][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=fb.a8 [ 1535.935385][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.935407][ T9] usb 6-1: Product: syz [ 1535.935423][ T9] usb 6-1: Manufacturer: 䈴櫿牤뵎﭅橍乍ⷞᝓﰷ誳방롿ꌲ팯㲷計涝傄㱸ᾌ࠰遝㱎谣򄟱쎦礪ι鄏셉읚䠟䒾ⶢ咃叺産Ჲ훅藂ೂ䭶ꑒ絨⌤ᯔ姒咕枲㛚鏃䯹냬焞᭞Λ鮆ƒ݌参烁激쒙Ꮸ㴷쎟 [ 1535.935450][ T9] usb 6-1: SerialNumber: syz [ 1536.718898][ T9] cdc_ether 6-1:1.39: skipping garbage [ 1536.718923][ T9] usb 6-1: No union descriptors [ 1536.759433][ T9] usb 6-1: USB disconnect, device number 55 [ 1537.376893][T19230] FAULT_INJECTION: forcing a failure. [ 1537.376893][T19230] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.376928][T19230] CPU: 1 UID: 0 PID: 19230 Comm: syz.1.4241 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1537.376953][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1537.376966][T19230] Call Trace: [ 1537.376974][T19230] [ 1537.376983][T19230] dump_stack_lvl+0xe8/0x150 [ 1537.377014][T19230] should_fail_ex+0x46b/0x600 [ 1537.377048][T19230] should_failslab+0xa8/0x100 [ 1537.377077][T19230] __kmalloc_noprof+0xdf/0x7b0 [ 1537.377101][T19230] ? tomoyo_encode+0x28b/0x550 [ 1537.377131][T19230] tomoyo_encode+0x28b/0x550 [ 1537.377160][T19230] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1537.377194][T19230] ? tomoyo_path_number_perm+0x219/0x630 [ 1537.377225][T19230] tomoyo_path_number_perm+0x246/0x630 [ 1537.377257][T19230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1537.377286][T19230] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.377316][T19230] ? do_raw_spin_lock+0x12b/0x2f0 [ 1537.377373][T19230] ? __fget_files+0x2a/0x420 [ 1537.377397][T19230] ? __fget_files+0x2a/0x420 [ 1537.377415][T19230] ? __fget_files+0x3a6/0x420 [ 1537.377434][T19230] ? __fget_files+0x2a/0x420 [ 1537.377459][T19230] security_file_ioctl+0xc3/0x2a0 [ 1537.377505][T19230] __se_sys_ioctl+0x47/0x170 [ 1537.377530][T19230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.377553][T19230] do_syscall_64+0x174/0x580 [ 1537.377581][T19230] ? trace_irq_disable+0x3b/0x140 [ 1537.377604][T19230] ? clear_bhb_loop+0x40/0x90 [ 1537.377629][T19230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.377649][T19230] RIP: 0033:0x7f19102cce59 [ 1537.377669][T19230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.377688][T19230] RSP: 002b:00007f190e51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1537.377711][T19230] RAX: ffffffffffffffda RBX: 00007f1910545fa0 RCX: 00007f19102cce59 [ 1537.377726][T19230] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000013 [ 1537.377740][T19230] RBP: 00007f190e51e090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.377756][T19230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.377769][T19230] R13: 00007f1910546038 R14: 00007f1910545fa0 R15: 00007ffe57553228 [ 1537.377802][T19230] [ 1537.380513][T19230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1537.945113][T19235] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1538.319780][T19243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1539.590922][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1539.739178][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1539.741220][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1539.741240][ T9] usb 5-1: config 0 has no interface number 0 [ 1539.743147][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1539.743166][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.743178][ T9] usb 5-1: Product: syz [ 1539.743187][ T9] usb 5-1: Manufacturer: syz [ 1539.743195][ T9] usb 5-1: SerialNumber: syz [ 1539.748661][ T9] usb 5-1: config 0 descriptor?? [ 1540.937223][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1540.937262][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1541.150217][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.150885][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.164129][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.164742][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.435593][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1541.436278][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.560822][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1541.561172][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1541.567665][ T9] usb 5-1: USB disconnect, device number 86 [ 1542.863147][T19311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.865503][T19311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.102979][T18180] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1543.239134][T18180] usb 2-1: device descriptor read/64, error -71 [ 1543.499278][T18180] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1543.639345][T18180] usb 2-1: device descriptor read/64, error -71 [ 1543.649331][T15095] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1543.759509][T18180] usb usb2-port1: attempt power cycle [ 1543.809147][T15095] usb 6-1: Using ep0 maxpacket: 32 [ 1543.811469][T15095] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1543.811501][T15095] usb 6-1: config 0 has no interface number 0 [ 1543.813938][T15095] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1543.813968][T15095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.813981][T15095] usb 6-1: Product: syz [ 1543.813989][T15095] usb 6-1: Manufacturer: syz [ 1543.813998][T15095] usb 6-1: SerialNumber: syz [ 1543.818182][T15095] usb 6-1: config 0 descriptor?? [ 1544.159177][T18180] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1544.179878][T18180] usb 2-1: device descriptor read/8, error -71 [ 1544.419196][T18180] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1544.439903][T18180] usb 2-1: device descriptor read/8, error -71 [ 1544.549581][T18180] usb usb2-port1: unable to enumerate USB device [ 1544.649371][ T5609] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1544.697080][T15095] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1544.697103][T15095] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1544.934522][T19324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.935840][T19324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.965071][T19324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.982138][T19324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.223200][T19324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.225141][T19324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.289257][ T5609] Bluetooth: hci5: command 0x1003 tx timeout [ 1545.289351][T17646] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1545.379500][T15095] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1545.380028][T15095] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1545.425606][T15095] usb 6-1: USB disconnect, device number 56 [ 1545.493817][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1545.649200][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1545.652181][ T9] usb 5-1: config 2 has an invalid interface number: 194 but max is 0 [ 1545.652210][ T9] usb 5-1: config 2 has no interface number 0 [ 1545.652281][ T9] usb 5-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 1545.652308][ T9] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 1545.652354][ T9] usb 5-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1545.652377][ T9] usb 5-1: config 2 interface 194 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1545.652418][ T9] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1545.652443][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.709999][T19326] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 1545.710181][T19326] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 1546.096504][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.096581][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.311586][T19338] FAULT_INJECTION: forcing a failure. [ 1546.311586][T19338] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.311615][T19338] CPU: 1 UID: 0 PID: 19338 Comm: syz.1.4283 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.311630][T19338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.311638][T19338] Call Trace: [ 1546.311645][T19338] [ 1546.311654][T19338] dump_stack_lvl+0xe8/0x150 [ 1546.311687][T19338] should_fail_ex+0x46b/0x600 [ 1546.311723][T19338] should_failslab+0xa8/0x100 [ 1546.311751][T19338] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1546.311782][T19338] ? __d_alloc+0x37/0x6f0 [ 1546.311799][T19338] __d_alloc+0x37/0x6f0 [ 1546.311812][T19338] ? rcu_is_watching+0x15/0xb0 [ 1546.311857][T19338] d_alloc_pseudo+0x21/0xc0 [ 1546.311883][T19338] alloc_file_pseudo+0xdd/0x240 [ 1546.311926][T19338] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1546.311958][T19338] ? evm_inode_alloc_security+0x40/0xb0 [ 1546.312027][T19338] ? security_inode_alloc+0xd5/0x310 [ 1546.312064][T19338] sock_alloc_file+0xb8/0x2f0 [ 1546.312092][T19338] do_accept+0x3ab/0x760 [ 1546.312123][T19338] ? __pfx_do_accept+0x10/0x10 [ 1546.312157][T19338] __sys_accept4+0x139/0x230 [ 1546.312174][T19338] ? __pfx___sys_accept4+0x10/0x10 [ 1546.312196][T19338] ? __pfx_ksys_write+0x10/0x10 [ 1546.312229][T19338] __x64_sys_accept4+0x9a/0xb0 [ 1546.312256][T19338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.312278][T19338] do_syscall_64+0x174/0x580 [ 1546.312306][T19338] ? trace_irq_disable+0x3b/0x140 [ 1546.312325][T19338] ? clear_bhb_loop+0x40/0x90 [ 1546.312339][T19338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.312352][T19338] RIP: 0033:0x7f19102cce59 [ 1546.312370][T19338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.312387][T19338] RSP: 002b:00007f190e51e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1546.312411][T19338] RAX: ffffffffffffffda RBX: 00007f1910545fa0 RCX: 00007f19102cce59 [ 1546.312428][T19338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1546.312441][T19338] RBP: 00007f190e51e090 R08: 0000000000000000 R09: 0000000000000000 [ 1546.312454][T19338] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1546.312466][T19338] R13: 00007f1910546038 R14: 00007f1910545fa0 R15: 00007ffe57553228 [ 1546.312497][T19338] [ 1546.315422][T17646] sysfs: cannot create dupl[ 1546.315422][T17646] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1546.315448][T17646] CPU: 1 UID: 0 PID: 17646 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.315473][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.315487][T17646] Workqueue: hci3 hci_rx_work [ 1546.315609][T17646] Call Trace: [ 1546.315618][T17646] [ 1546.315627][T17646] dump_stack_lvl+0xe8/0x150 [ 1546.315656][T17646] sysfs_create_dir_ns+0x271/0x2a0 [ 1546.315713][T17646] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1546.315742][T17646] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1546.315790][T17646] ? rt_spin_unlock+0x160/0x200 [ 1546.315818][T17646] kobject_add_internal+0x631/0xd10 [ 1546.315860][T17646] kobject_add+0x163/0x240 [ 1546.315887][T17646] ? __pfx_kobject_add+0x10/0x10 [ 1546.315917][T17646] ? get_device_parent+0x370/0x3a0 [ 1546.315988][T17646] device_add+0x408/0xbb0 [ 1546.316048][T17646] hci_conn_add_sysfs+0xd5/0x210 [ 1546.316100][T17646] le_conn_complete_evt+0x10e6/0x16b0 [ 1546.316154][T17646] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1546.316178][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.316210][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.316243][T17646] ? skb_pull_data+0xfb/0x200 [ 1546.316271][T17646] hci_le_conn_complete_evt+0x187/0x470 [ 1546.316302][T17646] hci_event_packet+0x659/0xef0 [ 1546.316360][T17646] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1546.316383][T17646] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1546.316403][T17646] ? __pfx_hci_event_packet+0x10/0x10 [ 1546.316430][T17646] ? rt_spin_unlock+0x14f/0x200 [ 1546.316463][T17646] ? hci_send_to_monitor+0xe2/0x590 [ 1546.316491][T17646] hci_rx_work+0x3ee/0x1040 [ 1546.316526][T17646] ? process_scheduled_works+0xa70/0x1860 [ 1546.316550][T17646] process_scheduled_works+0xb5d/0x1860 [ 1546.316604][T17646] ? __pfx_process_scheduled_works+0x10/0x10 [ 1546.316632][T17646] ? assign_work+0x3d5/0x5e0 [ 1546.316658][T17646] worker_thread+0xa53/0xfc0 [ 1546.316706][T17646] kthread+0x388/0x470 [ 1546.316731][T17646] ? __pfx_worker_thread+0x10/0x10 [ 1546.316752][T17646] ? __pfx_kthread+0x10/0x10 [ 1546.316793][T17646] ret_from_fork+0x514/0xb70 [ 1546.316834][T17646] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.316859][T17646] ? __switch_to+0xc79/0x1410 [ 1546.316894][T17646] ? __pfx_kthread+0x10/0x10 [ 1546.316924][T17646] ret_from_fork_asm+0x1a/0x30 [ 1546.316969][T17646] [ 1546.318263][T17646] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1546.318308][T17646] Bluetooth: hci3: failed to register connection device [ 1546.509247][ T5730] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1546.671975][T17646] ================================================================== [ 1546.671994][T17646] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 1546.672113][T17646] Read of size 8 at addr ffff88806b19e200 by task kworker/u9:0/17646 [ 1546.672133][T17646] [ 1546.672146][T17646] CPU: 1 UID: 0 PID: 17646 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.672172][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.672188][T17646] Workqueue: hci3 hci_rx_work [ 1546.672220][T17646] Call Trace: [ 1546.672228][T17646] [ 1546.672237][T17646] dump_stack_lvl+0xe8/0x150 [ 1546.672262][T17646] print_address_description+0x55/0x1e0 [ 1546.672298][T17646] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1546.672325][T17646] print_report+0x58/0x70 [ 1546.672346][T17646] kasan_report+0x117/0x150 [ 1546.672373][T17646] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1546.672403][T17646] l2cap_sock_ready_cb+0xe3/0x180 [ 1546.672431][T17646] l2cap_le_start+0x25b/0x1960 [ 1546.672455][T17646] ? __pfx_l2cap_le_start+0x10/0x10 [ 1546.672478][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.672510][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.672540][T17646] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1546.672566][T17646] ? mutex_lock_nested+0x152/0x1d0 [ 1546.672584][T17646] ? l2cap_connect_cfm+0x894/0x1560 [ 1546.672607][T17646] l2cap_connect_cfm+0x8d5/0x1560 [ 1546.672632][T17646] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1546.672650][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.672673][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.672696][T17646] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1546.672718][T17646] ? mutex_lock_nested+0x152/0x1d0 [ 1546.672736][T17646] ? hci_connect_cfm+0x2c/0x140 [ 1546.672751][T17646] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1546.672770][T17646] hci_connect_cfm+0x95/0x140 [ 1546.672787][T17646] le_conn_complete_evt+0x1134/0x16b0 [ 1546.672809][T17646] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1546.672827][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.672850][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.672873][T17646] ? skb_pull_data+0xfb/0x200 [ 1546.672891][T17646] hci_le_conn_complete_evt+0x187/0x470 [ 1546.672910][T17646] hci_event_packet+0x659/0xef0 [ 1546.672935][T17646] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1546.672954][T17646] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1546.672969][T17646] ? __pfx_hci_event_packet+0x10/0x10 [ 1546.672990][T17646] ? rt_spin_unlock+0x14f/0x200 [ 1546.673011][T17646] ? hci_send_to_monitor+0xe2/0x590 [ 1546.673030][T17646] hci_rx_work+0x3ee/0x1040 [ 1546.673055][T17646] ? process_scheduled_works+0xa70/0x1860 [ 1546.673073][T17646] process_scheduled_works+0xb5d/0x1860 [ 1546.673109][T17646] ? __pfx_process_scheduled_works+0x10/0x10 [ 1546.673128][T17646] ? assign_work+0x3d5/0x5e0 [ 1546.673145][T17646] worker_thread+0xa53/0xfc0 [ 1546.673172][T17646] kthread+0x388/0x470 [ 1546.673192][T17646] ? __pfx_worker_thread+0x10/0x10 [ 1546.673209][T17646] ? __pfx_kthread+0x10/0x10 [ 1546.673230][T17646] ret_from_fork+0x514/0xb70 [ 1546.673249][T17646] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.673267][T17646] ? __switch_to+0xc79/0x1410 [ 1546.673292][T17646] ? __pfx_kthread+0x10/0x10 [ 1546.673313][T17646] ret_from_fork_asm+0x1a/0x30 [ 1546.673339][T17646] [ 1546.673347][T17646] [ 1546.673352][T17646] Allocated by task 19338: [ 1546.673363][T17646] kasan_save_track+0x3e/0x80 [ 1546.673380][T17646] __kasan_kmalloc+0x93/0xb0 [ 1546.673396][T17646] __kmalloc_noprof+0x3e7/0x7b0 [ 1546.673416][T17646] sk_prot_alloc+0xe7/0x210 [ 1546.673437][T17646] sk_alloc+0x3a/0x390 [ 1546.673456][T17646] bt_sock_alloc+0x3b/0x340 [ 1546.673479][T17646] l2cap_sock_create+0x147/0x330 [ 1546.673497][T17646] bt_sock_create+0x163/0x240 [ 1546.673511][T17646] __sock_create+0x4b2/0x9d0 [ 1546.673530][T17646] __sys_socket+0xd6/0x1b0 [ 1546.673545][T17646] __x64_sys_socket+0x7a/0x90 [ 1546.673562][T17646] do_syscall_64+0x174/0x580 [ 1546.673583][T17646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.673599][T17646] [ 1546.673603][T17646] Freed by task 19336: [ 1546.673611][T17646] kasan_save_track+0x3e/0x80 [ 1546.673626][T17646] kasan_save_free_info+0x46/0x50 [ 1546.673646][T17646] __kasan_slab_free+0x5c/0x80 [ 1546.673662][T17646] kfree+0x1c5/0x6c0 [ 1546.673675][T17646] __sk_destruct+0x74b/0x9d0 [ 1546.673696][T17646] l2cap_sock_release+0x1c1/0x270 [ 1546.673713][T17646] sock_close+0xc3/0x240 [ 1546.673727][T17646] __fput+0x461/0xa70 [ 1546.673739][T17646] task_work_run+0x1d9/0x270 [ 1546.673759][T17646] exit_to_user_mode_loop+0x193/0x680 [ 1546.673778][T17646] do_syscall_64+0x353/0x580 [ 1546.673799][T17646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.673813][T17646] [ 1546.673817][T17646] The buggy address belongs to the object at ffff88806b19e000 [ 1546.673817][T17646] which belongs to the cache kmalloc-4k of size 4096 [ 1546.673869][T17646] The buggy address is located 512 bytes inside of [ 1546.673869][T17646] freed 4096-byte region [ffff88806b19e000, ffff88806b19f000) [ 1546.673887][T17646] [ 1546.673891][T17646] The buggy address belongs to the physical page: [ 1546.673902][T17646] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b198 [ 1546.673918][T17646] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1546.673932][T17646] flags: 0x80000000000040(head|node=0|zone=1) [ 1546.673947][T17646] page_type: f5(slab) [ 1546.673963][T17646] raw: 0080000000000040 ffff88801a00a140 dead000000000100 dead000000000122 [ 1546.673977][T17646] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1546.673992][T17646] head: 0080000000000040 ffff88801a00a140 dead000000000100 dead000000000122 [ 1546.674006][T17646] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1546.674020][T17646] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1546.674033][T17646] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1546.674042][T17646] page dumped because: kasan: bad access detected [ 1546.674051][T17646] page_owner tracks the page as allocated [ 1546.674057][T17646] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9888, tgid 9888 (kworker/u8:16), ts 492813928337, free_ts 492452785503 [ 1546.674086][T17646] post_alloc_hook+0x22d/0x280 [ 1546.674115][T17646] get_page_from_freelist+0x28b2/0x2930 [ 1546.674135][T17646] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1546.674154][T17646] allocate_slab+0x77/0x660 [ 1546.674176][T17646] refill_objects+0x33c/0x3d0 [ 1546.674197][T17646] __pcs_replace_empty_main+0x373/0x720 [ 1546.674220][T17646] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1546.674239][T17646] __alloc_skb+0x2c1/0x7d0 [ 1546.674257][T17646] nsim_dev_trap_report_work+0x29f/0xbd0 [ 1546.674319][T17646] process_scheduled_works+0xb5d/0x1860 [ 1546.674335][T17646] worker_thread+0xa53/0xfc0 [ 1546.674350][T17646] kthread+0x388/0x470 [ 1546.674369][T17646] ret_from_fork+0x514/0xb70 [ 1546.674385][T17646] ret_from_fork_asm+0x1a/0x30 [ 1546.674404][T17646] page last free pid 9997 tgid 9996 stack trace: [ 1546.674414][T17646] __free_frozen_pages+0xfe5/0x10d0 [ 1546.674432][T17646] __slab_free+0x252/0x2a0 [ 1546.674449][T17646] qlist_free_all+0x99/0x100 [ 1546.674463][T17646] kasan_quarantine_reduce+0x148/0x160 [ 1546.674478][T17646] __kasan_slab_alloc+0x22/0x80 [ 1546.674494][T17646] __kmalloc_noprof+0x399/0x7b0 [ 1546.674512][T17646] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1546.674530][T17646] tomoyo_path_number_perm+0x246/0x630 [ 1546.674551][T17646] security_file_ioctl+0xc3/0x2a0 [ 1546.674574][T17646] __se_sys_ioctl+0x47/0x170 [ 1546.674592][T17646] do_syscall_64+0x174/0x580 [ 1546.674614][T17646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.674630][T17646] [ 1546.674635][T17646] Memory state around the buggy address: [ 1546.674644][T17646] ffff88806b19e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1546.674656][T17646] ffff88806b19e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1546.674686][T17646] >ffff88806b19e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1546.674695][T17646] ^ [ 1546.674705][T17646] ffff88806b19e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1546.674716][T17646] ffff88806b19e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1546.674725][T17646] ================================================================== [ 1546.678514][T17646] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1546.678536][T17646] CPU: 1 UID: 0 PID: 17646 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1546.678563][T17646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1546.678577][T17646] Workqueue: hci3 hci_rx_work [ 1546.678610][T17646] Call Trace: [ 1546.678619][T17646] [ 1546.678629][T17646] vpanic+0x56c/0xa60 [ 1546.678656][T17646] ? rcu_is_watching+0x15/0xb0 [ 1546.678689][T17646] ? __pfx_vpanic+0x10/0x10 [ 1546.678720][T17646] panic+0xc5/0xd0 [ 1546.678745][T17646] ? __pfx_panic+0x10/0x10 [ 1546.678770][T17646] ? preempt_schedule_thunk+0x16/0x30 [ 1546.678804][T17646] ? preempt_schedule_thunk+0x16/0x30 [ 1546.678837][T17646] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1546.678865][T17646] check_panic_on_warn+0x89/0xb0 [ 1546.678896][T17646] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1546.678922][T17646] end_report+0x73/0x170 [ 1546.678947][T17646] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1546.678979][T17646] kasan_report+0x128/0x150 [ 1546.679003][T17646] ? l2cap_sock_ready_cb+0xe3/0x180 [ 1546.679033][T17646] l2cap_sock_ready_cb+0xe3/0x180 [ 1546.679063][T17646] l2cap_le_start+0x25b/0x1960 [ 1546.679091][T17646] ? __pfx_l2cap_le_start+0x10/0x10 [ 1546.679127][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.679160][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.679192][T17646] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1546.679223][T17646] ? mutex_lock_nested+0x152/0x1d0 [ 1546.679247][T17646] ? l2cap_connect_cfm+0x894/0x1560 [ 1546.679274][T17646] l2cap_connect_cfm+0x8d5/0x1560 [ 1546.679303][T17646] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1546.679329][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.679359][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.679388][T17646] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1546.679418][T17646] ? mutex_lock_nested+0x152/0x1d0 [ 1546.679441][T17646] ? hci_connect_cfm+0x2c/0x140 [ 1546.679462][T17646] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1546.679486][T17646] hci_connect_cfm+0x95/0x140 [ 1546.679509][T17646] le_conn_complete_evt+0x1134/0x16b0 [ 1546.679539][T17646] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1546.679563][T17646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1546.679592][T17646] ? lockdep_hardirqs_on+0x7a/0x110 [ 1546.679622][T17646] ? skb_pull_data+0xfb/0x200 [ 1546.679644][T17646] hci_le_conn_complete_evt+0x187/0x470 [ 1546.679670][T17646] hci_event_packet+0x659/0xef0 [ 1546.679703][T17646] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1546.679729][T17646] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1546.679748][T17646] ? __pfx_hci_event_packet+0x10/0x10 [ 1546.679776][T17646] ? rt_spin_unlock+0x14f/0x200 [ 1546.679806][T17646] ? hci_send_to_monitor+0xe2/0x590 [ 1546.679833][T17646] hci_rx_work+0x3ee/0x1040 [ 1546.679867][T17646] ? process_scheduled_works+0xa70/0x1860 [ 1546.679892][T17646] process_scheduled_works+0xb5d/0x1860 [ 1546.679928][T17646] ? __pfx_process_scheduled_works+0x10/0x10 [ 1546.679954][T17646] ? assign_work+0x3d5/0x5e0 [ 1546.679978][T17646] worker_thread+0xa53/0xfc0 [ 1546.680014][T17646] kthread+0x388/0x470 [ 1546.680043][T17646] ? __pfx_worker_thread+0x10/0x10 [ 1546.680066][T17646] ? __pfx_kthread+0x10/0x10 [ 1546.680092][T17646] ret_from_fork+0x514/0xb70 [ 1546.680126][T17646] ? __pfx_ret_from_fork+0x10/0x10 [ 1546.680149][T17646] ? __switch_to+0xc79/0x1410 [ 1546.680183][T17646] ? __pfx_kthread+0x10/0x10 [ 1546.680212][T17646] ret_from_fork_asm+0x1a/0x30 [ 1546.680246][T17646] [ 1546.680761][T17646] Kernel Offset: disabled