last executing test programs: 5m2.227177225s ago: executing program 2 (id=3859): setns(0xc9, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, 0x2, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x207f}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) 5m0.663320948s ago: executing program 2 (id=3861): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x200000008, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x5, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x48) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000002c0)={0x6, 0xffffffffffffffff, 0x1}) 4m55.853324321s ago: executing program 2 (id=3872): socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x4a, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRESHEX], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000001140)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x4042090}, 0x850) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000d3b000/0x3000)=nil, 0x3000}, 0x3}) syz_io_uring_setup(0x21c1, &(0x7f0000000340)={0x0, 0xca23, 0x200, 0x2, 0x182}, &(0x7f0000000300), &(0x7f0000ff4000), 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0xc95, 0x10000, 0x3d, 0xfd}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x4, 0xffffffffffffffff, &(0x7f00000011c0)="119c8dcfa6c5f8c96c3f6903d28f", &(0x7f0000001240)={&(0x7f0000001200)="e591bfcdf8958440371847881406e4ce4f66febe6438d3b5a63bcd8ba735a975dc24d54d9f4e8b86acedc63cf1e6", 0x2e}, 0x3, 0x40080, 0x0, {0x0, 0x0, 0xe}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000538000/0x3000)=nil, 0x3000}}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x4004044) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0a, &(0x7f0000001280)="0400000000000000060000007e01") mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x45) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x200700, 0x180) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000140)=0x6) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r8) 4m55.477226052s ago: executing program 2 (id=3874): socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) 4m55.459945165s ago: executing program 2 (id=3875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020) 4m54.390725124s ago: executing program 2 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa0086dd600a843500140600fe800000000000000000fc6b2828a70000000000bbfe8000000000f79865f1f70f9c2f9a8b95000000000000000000aa00004e22480a345000e2bed9557217dc72bd8e522b2e8dc6fc9ce59baed67ccedc4c77944b71c66092d229b26beab188a56cdffa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x10, "0900c7e2f68e08ddf7b27874d17b"}, @sack={0x5, 0xe, [0xd2d, 0x130c, 0x3]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xe, [0x1, 0xfffffffe, 0x3]}]}}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0xc800) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="20810e56"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000140)=@md0, 0x0, &(0x7f0000000180)='./file0\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c7d88bbb029f80551505cbf3f9906e1000700", @ANYRES16=r3, @ANYBLOB="00042dbd7000fcdbdf256600000008000300", @ANYRES32=r4, @ANYBLOB="0c009900070000001e00000008002700030000000800b700270000000400b800"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}], 0x30}}], 0x1, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) 4m38.722866159s ago: executing program 32 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f000018e000/0x3000)=nil, &(0x7f00000da000/0x4000)=nil, 0x3000}) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaa0086dd600a843500140600fe800000000000000000fc6b2828a70000000000bbfe8000000000f79865f1f70f9c2f9a8b95000000000000000000aa00004e22480a345000e2bed9557217dc72bd8e522b2e8dc6fc9ce59baed67ccedc4c77944b71c66092d229b26beab188a56cdffa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x10, "0900c7e2f68e08ddf7b27874d17b"}, @sack={0x5, 0xe, [0xd2d, 0x130c, 0x3]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xe, [0x1, 0xfffffffe, 0x3]}]}}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0xc800) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="20810e56"], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000140)=@md0, 0x0, &(0x7f0000000180)='./file0\x00') sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c7d88bbb029f80551505cbf3f9906e1000700", @ANYRES16=r3, @ANYBLOB="00042dbd7000fcdbdf256600000008000300", @ANYRES32=r4, @ANYBLOB="0c009900070000001e00000008002700030000000800b700270000000400b800"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}], 0x30}}], 0x1, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r10, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) 3m45.865433243s ago: executing program 3 (id=4080): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) 3m45.012429236s ago: executing program 3 (id=4082): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 6) 3m44.119653343s ago: executing program 3 (id=4087): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x400000, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, @in={0x2, 0x4000, @remote}}}, 0x118) 3m43.849372373s ago: executing program 3 (id=4088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x134, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "0ac1d939649355333b32bac70412e1f99963d9f046d12cc2d16097b693aa0749c0cc1ea133d0c347fabf92be38153b44000e76c9f1db64f9cc16989d9a37af279cc5045d9b42c2f5cbb40787ee6921f9098a5838402844d3e2a7dbff6dbb19b98a2e52ce67073ae28f63d9fc6bec3925e0892903bc864e06f94d720ea8ccda0f103beb940d6e55c66f8f774565aac42bc567649424ae3efb435cef38de27613fa90a7ba87a996bf775a26ce06db9c88b478b5531b99c0e79cddccdc6e83a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x21}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x200004}]}], {0x14}}, 0x1f8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300008000008000540000000162c0000000c0a010300000000000000000100000008000440000000000900010073797a30000000000400038014"], 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000880)=0xfffffe00, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f00000001c0)=ANY=[@ANYRES64=r3], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @local, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x40b1c8a, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) umount2(&(0x7f0000000040)='./file0/file0/..\x00', 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r9, 0x5, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44004) 3m42.932700848s ago: executing program 3 (id=4091): timer_create(0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setxattr$incfs_id(&(0x7f0000000180)='./cgroup/../file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'0000000000000000000000000000000', 0x33}, 0x20, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = semget$private(0x0, 0x3, 0x1e4) semtimedop(r1, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r1, 0x0, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000100), 0x1) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000400)=""/168) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xa808, 0x25, 0x1, 0xb5d, 0x8e1}, 0x18, 0x100) r3 = syz_open_procfs(0x0, 0x0) sendto$inet(r3, &(0x7f0000000040)="10e1ec745d99a654721e8d2bcc16f0d68921a8723069d17c18f76186e303bc78ef3dbac0cf146b790f7650aa302d63bbe8e31e84", 0x34, 0x20044081, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) fchdir(r3) r4 = signalfd(r3, &(0x7f0000000280)={[0x8]}, 0x8) r5 = socket(0x11, 0x3, 0x0) setsockopt(r5, 0x107, 0xf, &(0x7f0000000100)="000086", 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r5, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9", 0x19}], 0x2}, 0x44000) sendmmsg$inet6(r4, &(0x7f00000014c0)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x1, @private2, 0x5}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000380)="05e8fcdc52fe5f9ec01c9a97bf091c6cf088e9e2717122f357b76dfa3dc8afbd4cc5fab0458362b1e9be", 0x2a}, {&(0x7f0000000540)="fbb52f3bf45bbb06af74dab9213883462a873ed09aed52db4fc2127f13df1c530c6aec10cbcf43af277be2158de10e120b9c4a35802bf822f20b8b037c7a413361647b26e07eaffd5f611ea3efe2ba08930fef3427553bc7e405eb126c9a875a9f853c4edc896ab0335ad9c3df2aab46", 0x70}, {&(0x7f00000005c0)="ce1608d22325e27c5ef8b671a1d83a84b8f7b28a2093b38503d27410e9891dacb0125dbffa67f4c9d167583efdf704307b8acafbf5d7da5732634435376c0f5b3d93c211fe020943de642a247b1b2cb8782ede006de2bd99ab7d70f55e70ecd3ce4d9049f30758bc8b2743ceb1805b73e95a0c04bfc40050d8fa68ea5f5fce760abf6270205181ee78753f842fcaca6969bda608fd8041cd6ba5f209c0557e563753d222f6f22b6b2c7c4eb4fe77f6118d688c32efb3b6ea20c0474a29dae88574c345d5a0518b2c0bed975ea0a93382b9287ed1298e380922c384a7380a51632993b91be4bf64c385d3adadca993a26b85aa4", 0xf3}, {&(0x7f0000000740)="a083f56ab4c1151b67d1715fbd76de0dcd002e35feb8d713bc7bca5837b044538fb3f976ef17f885dcf6fda7346c4befa81fff1349c5ba19b6816899f67b44f49193dbc0cf4314d5120e9b4fa4147e7c9f1c2bf87d4cab9d28abb8137b3ac3ff8f6931df0c47547e5cefceee46bf9218c4fb9b6cc770e5c29af6f467df646a82003f578dda881e9e45d5370b037f1308ae378d3723a93d2c0fac6417f4d6658c22d80ba7721a3aeb2763fd41414dee39aeb5dd883c8dc527d36d93798ce132c044807f8ee7956a1da1fcf98a45df314f517607ba5706544647d80d5da6b647c344e3e479e8", 0xe5}], 0x4, &(0x7f0000000880)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r6}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xc, 0x2, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdr={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x2, 0x5, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast2]}}}, @hopopts_2292={{0x1e0, 0x29, 0x36, {0x2c, 0x38, '\x00', [@generic={0x9, 0x7f, "51ae9b5495db56f3e8ce5f8acd92de77e9b3b9718136dde4bb260b146d06c4e213fb000d602390bfc5ee0432c8563327285f421788414a71fc01392044cdc4a947f18bbf2d4c5e0619bd34372cd90a76be9e85f2301aceb8673e61efad4ecbf274ddeb2ad8f3602ab11aa6a6dae8077dde7bd23643752956dc9d97a12dbb07"}, @calipso={0x7, 0x10, {0x0, 0x2, 0xa, 0x9, [0x8000]}}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0xff, 0x7, [0xc766, 0x74, 0x3, 0x4, 0x80000001, 0x7, 0x8000000000000001]}}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x40}, @ra={0x5, 0x2, 0x6}, @generic={0xb, 0xd4, "c37dbbeace008470db01f96c852bb19a06692ae4a3306c03dd16637424a61908ccb4ea2670f8c1353b1562a545d2ab3c164b0be8efa9c8e60ba9218945548420201f082e7d93ebba6e307f9ad4c29d80fe080dcb248cd9588631b90a55e603cca768b6171717cbbc0d8b7f775be217afac5f76a15febfddbd1ea8e2b83d07aad7daf510f64b2ff07cdba3c73cca42c9d1f28b2509fab32d501d479fa91b3a43a21bdf8bd9b6c183f907490d1f4a2f4b65dac0a7f03936032a1a7e775c1a3b54a4df95d0d40f7655a5703d5435bf2cf853d6f3965"}, @pad1]}}}], 0x290}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b40)="6d10842467cd7418a9d2b731ed4f206bbd85e77a6c9a6ba23c3bb2f0265561d4bb3c3211e5ca42e66461e0cea48f882eb08279476ca688cb9b8fcd9170dcde21f6233ae1f51e8edc9af603550c69b3b073b69c43db682348f75d1827f495926a415e91ad2259c603d10937c428dfe7140bd9f07183505566fd180f1541fc87f6d9da47719c86ce2fa5926808482aa827e93cdad281b027ba65b36cada71300734ed6e6afaa8e23492a5ad06c33b8b6a6b537", 0xb2}, {&(0x7f0000000c00)="7160c34d10711223978c802b78fe6d83d046501293b634741f72d17a34b2f872fecb04ea495b99659d968e4d062ccfcec0d36aa805f5c37a015a0f26d6b05004163f6e3af96acf59bb81b5f0ea02ccb88cbb4db4378f816e01922d4f05b2b2e06faac403f91a031235c326503cd1eff21956bbcdbbe18dbc0c41b7378d7a93bd6e", 0x81}, {&(0x7f0000000cc0)="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", 0xfa}], 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x108}}, {{&(0x7f0000000f40)={0xa, 0x4e20, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000f80)="1570984b965ff1e519dc7b3f09b30677a750f63d28084bf0019b5fb1043abb83a3dda6b53964cdc3b90133b82ec6951a9787afbc2aa7646ce4d0dfc76b9f7762cf9aff35894b0c45bd2a35d2d02e77b55f44ff1d092a94236e7f029a70323151a0a394de85f514f4c170fb", 0x6b}, {&(0x7f0000001000)="a152b1bb0977f82916149b47c2fe482008ccdbb424961589731a8d292a47da2026067af1c10aa78e1a0908dd5ac291b2db6935e91f1dcb0a5d8bcc66407f2b60ad650caf1a89d278698dc493e24007df6a7c679384520f40458fffb8097d59bb1a1df3d1d24f9fea981de827cf70c004be2e5fc13e6e95b6746e676c9f5acc69c84290583b4ddba0d61ad455d7173dbc37c23687eeb1ecec7d6a6509c85fe0", 0x9f}], 0x2, &(0x7f0000001100)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x29, 0x6, 0x2, 0x1, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @rthdr={{0xb8, 0x29, 0x39, {0x6c, 0x14, 0x6b1161c6baea2415, 0x6, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dstopts_2292={{0x180, 0x29, 0x4, {0xff, 0x2c, '\x00', [@generic={0x4, 0x7f, "95d260dd84b9fca5100512de87f8fb426ff9f373635f1e9f839b9e1f7d46a3d1bfc8c99f4fa26045971c8e7653141d94c90ed51f09ad11980d8480f51b2edf2bb529dd84a7b4b603f7be6a417dea35263ca10ea4bddeb4b90973abf22bc5fe750218cc0f8bb69ed07d29fc072855432e7c5c5906f5f0911928990c214260c6"}, @jumbo={0xc2, 0x4, 0x7a39}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x2, 0xc1, "3f05502eb8e60c157edb117edd9900976584ab1f2523c75501274031946b5abf05fd766013a05751695b0a7031b670c121ce3ee7d70348a4d4cab8ec4879c165088c989989bc115385713502a7e1d2e68497c3ebb352222d3c87b21d628db91a450383fe58cc821cd123808fdea4e1646d60130d0408ebcd3048b0582772f8cf3ef3906c89b3c2f11aa0b9ee78d5225f6c5d7ed497743a588c89933db3bee67ac9df9601d727aca8cc42f4644fe8f890dd011abd3d291e85e89489580b5c2cb692"}]}}}, @dstopts={{0x78, 0x29, 0x37, {0x2c, 0xb, '\x00', [@pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x81, 0x0, [0x8000000000000000, 0xffffffffffffffff, 0x7, 0x7, 0xfffffffffffffff7]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0xa, 0x8, [0x2000000000000]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x62, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @enc_lim={0x4, 0x1, 0xe6}, @calipso={0x7, 0x10, {0x2, 0x2, 0xc1, 0x0, [0x800]}}, @hao={0xc9, 0x10, @local}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x388}}], 0x3, 0xc802) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) 3m41.649553357s ago: executing program 3 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x834e) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x10000000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x6b, &(0x7f00000002c0)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) listen(r2, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x4e4cf756ff801b53, "7994694298a501cdf0750f5b800bffe73421d2f187b48d74ba43ccc209ffd57c0c82687ab550223ac6365152f749cb2f477f1142aec0ea9dade2794b553ae53efad68b7a1a22fadaf2dc3e858f1fcc97b44b7bebd1b866d0bb8e2c2610f4226ba9668bfa1744ff34008c1a6fe36f2d4659cb16374c7a06db1f84066998d98ba24e106580ba7c0dfd022795e2c1cd3249cd894636fa5587ddff8f44032310b9dae37edd8c25a7f31ea0d0774280f45fd91f964695c907f19daef6b417f338ec57174ae69966343eeafa34a89d2cf6dd58a203ffe7411bb18a9f78490b00"/233}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x12, 0x4) 3m40.933290093s ago: executing program 33 (id=4096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x834e) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x10000000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x9, 0x6b, &(0x7f00000002c0)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) listen(r2, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x4e4cf756ff801b53, "7994694298a501cdf0750f5b800bffe73421d2f187b48d74ba43ccc209ffd57c0c82687ab550223ac6365152f749cb2f477f1142aec0ea9dade2794b553ae53efad68b7a1a22fadaf2dc3e858f1fcc97b44b7bebd1b866d0bb8e2c2610f4226ba9668bfa1744ff34008c1a6fe36f2d4659cb16374c7a06db1f84066998d98ba24e106580ba7c0dfd022795e2c1cd3249cd894636fa5587ddff8f44032310b9dae37edd8c25a7f31ea0d0774280f45fd91f964695c907f19daef6b417f338ec57174ae69966343eeafa34a89d2cf6dd58a203ffe7411bb18a9f78490b00"/233}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x12, 0x4) 8.811471566s ago: executing program 6 (id=4848): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa00, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB='@']) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="c8ea36399fdc7aac06a33fb0091a6580eae8e85397f3797a9ede38a6f6f268a1bec8c149033340549b356132e4f273a38dfb75116aa09bee7bcb0e9ab5ff6f15aeb4fe1d85ebe9b7", 0x48}], 0x1}, 0x4000) ioctl$BLKRRPART(r4, 0x125f, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x4040894) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r7, 0x4, 0x4002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000024000000000024001200140001006272"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r6, 0x0, 0x10d00, 0xf) 8.1411964s ago: executing program 6 (id=4854): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="8ab5dff03bb3650cb76ecb7d50a79dd81b61f7641331fb95af01f0318c0566fa7bbecddff373066b560722a3dd963ed09f5ccbd2734a20544903f32930016a1371e93a6b22dea23af9c526a2d2d1cd654231d49275d0146fdaf58cdc472fc17f9c3c6e8c4fa5a6a8bcb52446f31084c6a7ecb957c85422f5452afa07085bec8cfccb7a5afaa8a5ade933ea6362b6755765fc4c066ab4840067ea8f68"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f0000000040)={'veth1_to_batadv\x00', @random="008765000020"}) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003e040"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003e040"], 0x0, 0x0}, 0x0) 8.054035919s ago: executing program 1 (id=4855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000308000a40000000030900020073797a31000000000900010073797a3000000000080005400000000608000340000000080800fc34000000290800064000000000480000000c0a01010000000000000000070040041c0003801800008008000340000000020c00028005000100cc0000000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.739631646s ago: executing program 1 (id=4857): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x58, 0x4855}, 0x24000052) 7.553877455s ago: executing program 5 (id=4858): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000c000000000aec8000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x5, &(0x7f0000001880)=[{0x2, 0xf9, 0x6, 0x2}, {0xdd, 0x7, 0x1, 0x1}, {0x8, 0x3, 0x8, 0x9}, {0xfff8, 0x8d, 0x29, 0x7}, {0xf031, 0x2, 0x4f, 0x954a}]}) membarrier(0x10, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x14, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100007f87093166d83a205cad83", @ANYRES32, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$loop(0x0, 0x47dfffa, 0x1e0b82) socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000880)={{r2}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000740)={0x1, 0x8, 0x5, 0xc, {0xb, 0xaf, 0x2, 0x8, 0x7f}, [0x3, 0x4, 0x5, 0xfffffffffffffffb, 0xfffffffffffffe00, 0x0, 0x7ff, 0x2]}}, @devid}) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005"], 0x17) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 7.347852789s ago: executing program 1 (id=4859): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 7.231845455s ago: executing program 1 (id=4860): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000c000000000aec8000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32=r1, @ANYRES16=r0], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="97", 0x1a000, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000800)={0x5, &(0x7f0000001880)=[{0x2, 0xf9, 0x6, 0x2}, {0xdd, 0x7, 0x1, 0x1}, {0x8, 0x3, 0x8, 0x9}, {0xfff8, 0x8d, 0x29, 0x7}, {0xf031, 0x2, 0x4f, 0x954a}]}) membarrier(0x10, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x14, 0x14, &(0x7f00000018c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100007f87093166d83a205cad83", @ANYRES32, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$loop(0x0, 0x47dfffa, 0x1e0b82) socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000880)={{r2}, 0x0, 0x8, @inherit={0x88, &(0x7f0000000740)={0x1, 0x8, 0x5, 0xc, {0xb, 0xaf, 0x2, 0x8, 0x7f}, [0x3, 0x4, 0x5, 0xfffffffffffffffb, 0xfffffffffffffe00, 0x0, 0x7ff, 0x2]}}, @devid}) syz_emit_vhci(&(0x7f0000004e40)=ANY=[@ANYBLOB="02c92012000e0005"], 0x17) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 6.287874261s ago: executing program 0 (id=4867): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r2, 0x8001, 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x11, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xc, 0x1, 0x0, r0}, @generic={0xb2, 0x4, 0x8, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @call={0x85, 0x0, 0x0, 0x74}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x6d, '\x00', r1}, 0x94) 6.142637106s ago: executing program 4 (id=4868): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000600)="0100000002000800ffffff050000000000112233ff07000000000000eeff0011", 0x20, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000000c0)=""/113, 0x71, 0x0, &(0x7f00000002c0)=""/94, 0x5e}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10044004}, 0xc010) 5.943446639s ago: executing program 0 (id=4869): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x58, 0x4855}, 0x24000052) 5.858077804s ago: executing program 0 (id=4870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 5.828531428s ago: executing program 0 (id=4871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x3c1ef5685f8d0157, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd000c}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf2501000000060006000200000008000400ac1414bb080009000000000005000d40450000006f95903757b4541298fe2a5b551690af49ff5eef6b296b3719d49df3a69be544d4db8ef2b6fcedb3f5da4c8d54db070f87cea8a45ef3b0d238c9a181c381376192c57a7a607df61c1754d521c1aab1e2eb83b396816e2a99937a106782b5155fff6ea5ff372424aff9c9e8d0015094a8eecc199d5b4472711342e656fb2b7d9b51cd42776e1ab489cd1fd2e24c1505c8d9d2ae069b7b0679f0bea4aefc8d42bcebf7526d32957e2e41b3bc8844e8b5c34c7a4429f7d49734a6e03f5a9e90000000000000000000da5d6071c9ee815b7b49bba99280810f6ed532901707c2373630929353359df750d4c8486f30d4b6241c2f89a3bb2b3b98a69aabc8f2a8d5c9acc746d194d4efcc3829e886b5661a4becbfc143b7badabdfc88ac2515"], 0x34}}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000"], 0xe0}}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@datasec={0x1, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}, {0x4, 0x3, 0x254}], "44942d"}, @datasec={0x400005, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x5f]}}, 0x0, 0x4f, 0x0, 0x1}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f6, 0x300, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000011) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) close_range(r4, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904000003ff01690005"], 0x0) r9 = creat(&(0x7f0000000780)='./dev/kmsg\x00', 0x149) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) timer_create(0x5, &(0x7f0000000380)={0x0, 0x10, 0x4}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) 5.698974636s ago: executing program 5 (id=4872): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x435d, 0xff6d}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xfe, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0x2b, 0x1, {0x1, 0x471}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000006) sendto$inet6(r0, 0x0, 0x0, 0x20044048, &(0x7f00000001c0)={0xa, 0x4a20, 0x80000, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='securityfs\x00', 0xa00000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x0, {{0x2, 0x3}, 0x2}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="f3aa5d2d66a7ef6774673f3d7e8d98e9d43ca454781f5f3fd118a0d32b450393ca277dbbf54243030a1f72e6dda2b4cd6bb25c7baa00bfa9f94f4cb726196340f536f394b2c68de53941d1dbbbae3f80b487b3a9a52223912e9f9e9af1004bb4df91812169c5a69604e7030000002e512769f98f51564fc52754283cd99e0a9879ceba563148a495664c0923f33c5272da4b2560dece6fbc64f226b261edd8c665d79d04c808d29577086c74821e878267dd6a99989f3298e9b42a3d2c3d0332d5ae9c3fa683b5849bdbe2414653918c65b53dad2da187439d76a1c3a1a063", 0xdf}], 0x1, 0x0, 0x0, 0x24064005}, 0x4008880) 5.357225092s ago: executing program 5 (id=4873): r0 = socket$inet6(0xa, 0x3, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 5.240066136s ago: executing program 5 (id=4874): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000d080b3a7eff6283c1b62797f51eda58dec0186e0af69f43717f3ff1329f60397dcc007d8c66157d06eabd469ab1ff0e55d", @ANYRES16=r2, @ANYBLOB="10002abd7000fddbdf251000000005000f00fc0000000500100001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5434, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000500006804c00040067"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601040000000000004a0000000000140007800800064000000009080008400000009e0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000d0000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000058020010c3aaf0fff1000000bf8600000000000f07080000f8ffffffbfa4040000f0ffffffb7020000080000001822000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x58}}, 0x0) (async) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) userfaultfd(0x1800) (async) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r12, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8970, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) syz_usb_control_io(r11, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.179828474s ago: executing program 4 (id=4875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 5.099926267s ago: executing program 1 (id=4876): syz_emit_ethernet(0x5e, &(0x7f0000000980)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x28, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}}}}}}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sysfs$3(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x74}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1, 0x4}}, './proc/sys/net/ipv4/conf/all/forwarding\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110e0000006a00000f0007000000", @ANYRES32=r8, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf, 0x1ff, 0x8, 0x100, 0x1, 0x80000, r8}) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_virt_wifi\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) write(r11, 0x0, 0x0) sendmsg$802154_raw(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f00000000c0)={&(0x7f0000000080)="f10ce56a87", 0x5}, 0x1, 0x0, 0x0, 0x2000c000}, 0x48004) 5.01182468s ago: executing program 5 (id=4877): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close_range(r4, r6, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) syz_clone(0x80000, &(0x7f00000001c0)="d9999d16c948230e338fcbb445c9823212b9771679177a17435f003d0213ec762ca1afdfa713d93c9eea4460c2403033dd497598706893f4c70bec1592d4d515f3f90678b7f85c44a76f3df148b0956bf11a5730ca54b6ec7692dbbe9723ac14aca69e2e4dc41ea75a23d247d5aeaae0b09ca9fcc6b460a0d39f77b89788e68a1cb83a255fdbedc0fd5f62b164d88edb705523d97f9ad198caf45774c08973298c2cc5caa0b5bd3f6bf4d91106fc48", 0xaf, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="26ab4c2862ef16f2e81cd622c8dd3a083eeafe51b2f9395e") write(r8, &(0x7f0000000180)='0fc5:1227:b\nk,', 0xe) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CLR_FD(r9, 0x4c01) fsmount(0xffffffffffffffff, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r10 = syz_open_dev$vcsa(&(0x7f0000000340), 0x8, 0x20401) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r10, 0x4020565b, &(0x7f0000000380)={0x4, 0x4, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000000400)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000004c0)=0x28) 4.925972136s ago: executing program 6 (id=4878): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x8, 0x1}}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'dummy0\x00', 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0x9, 0xad, {0xad, 0x23, "679bcf7f933a52a46f25896d07cce6006b1f4577455192fa53cd94ccbd5a5a0f9ad0c08abc638798f31e731b336aa2f330e19991a74cf4934b266af0ecc1117dbe959b8db075314cacb036bd84afae591816dea95be92cd180c9369be11224cff087e088f68cc04d5b292b3c2501ecb07f3f8337cf45171a39d988bbab451c312771d71fc9f88c1fe764ae71113f2e180c970bdf63f1387715002b451df1cdc90fc1b31b156ab1866b963e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.745697705s ago: executing program 4 (id=4879): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x100800) socket$unix(0x1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.877842153s ago: executing program 4 (id=4880): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6dd7, @mcast1}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x1, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r9, @ANYBLOB="1000018004", @ANYRESOCT=r3], 0x28}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x401}, 0x8) 3.204220671s ago: executing program 5 (id=4881): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x4001, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2005, 0x17, 0x1004003}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40840) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0x10e, 0x12, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0xa8, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc5c5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x88292dbfc6105e23, 0x7, 0x80, 0x9, {0x7, 0x25, 0x1, 0xc, 0xfa, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x218, 0x1c, 0x14, 0x2, {0x7, 0x25, 0x1, 0xc, 0x61, 0x8}}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) shutdown(r1, 0x1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0xfffffff9, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.166664362s ago: executing program 0 (id=4882): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x26000, 0x303000}) clock_adjtime(0x4, &(0x7f00000001c0)={0x7fff, 0x9, 0x9, 0x5, 0xc9, 0x2, 0xfffffffffffffffb, 0x8000000000000000, 0x10000a9, 0x0, 0xffffffffffffffff, 0x5, 0xd, 0x7, 0x4a, 0x400, 0x8, 0x94, 0x1, 0x7, 0x0, 0x4, 0x5, 0x6, 0xa6c, 0x1}) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./nfs_mnt\x00', &(0x7f0000000100)='nfs\x00', 0x400, &(0x7f0000000140)='addr=127.0.0.1-proto=tcp,port=2049,mountport=2049,mountproto=tcp,mountvers=3,vers=3,clientaddr=127.0.0.1\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc59063033de259c2996817bb959ebab028deda525e19bdeffafde25"}) syz_usb_connect(0x2, 0xbc2, &(0x7f0000001880)={{0x12, 0x1, 0x300, 0xd5, 0x98, 0x99, 0x40, 0xf11, 0x1040, 0xf7a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb0, 0x3, 0xff, 0xb, 0x80, 0x5, "", [{{0x9, 0x4, 0xea, 0xa, 0x10, 0x80, 0x33, 0x11, 0x2, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "87d225ac25"}, {0x5, 0x24, 0x0, 0xaf}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x41eb, 0x9}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x1, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x5, 0x8}]}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x10, 0x0, 0x8}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xbd, 0x6, 0x4, "1cfdc2df6828a7cc"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0xb, 0xd9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4dfae2c659704692, 0x5, 0xe849}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x7, 0x4c, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x8, 0x6}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x6, 0xec, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x96, 0x5}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x80, 0xc, 0xc}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0xff, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x44, 0x890c}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x3, 0x9a, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x3}, @generic={0x31, 0x23, "d2b2c49e125cef3b25bb4a1af0e774fe93cd1fb9faf4202755614f7e88f297d138091632fa22437a2dae0f594b6781"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x92, 0x10, 0x4, [@generic={0x62, 0x4, "50094be9f1f0d8a2484d4be8631149653c44a19f5663a6f15830bf8685bf690d118ee66ad60cafbfa3d524c4a6df16ef8d9af604641310a6088e3450b79b7b3fce3f4dcd974834d5b2e995dcc6e52c79d1f0ed0085e1d35b566600b6c24f891a"}, @generic={0xaf, 0x4, "da0b9622f78618e0b33e9af8c7cfd212a0637b2a461a5697ea71f13bfa6dd5d482f75c325e6673c0a49e512a8f9e54e60a714cf06247617ee7cb036197703d2645b3283e64e3a96d7323fca925c52f1ce374e7b1ccedcbd6b90662a5712be18f86c0b66ea051db3da53c93d025209a5932cedd541a63cfd81ba6b6728e70d287dbf12c97246590a5af8af00ccc89e8d9e1b07ef2bc66b6d23d5a84a99e33cc38325d8441bab5da715e9871e5bf"}]}}, {{0x9, 0x5, 0xf, 0x1c, 0x40, 0x8, 0xb, 0x5}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0xc0, 0x9, 0x10}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0x3, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe8, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x0, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xed, 0x8}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x85, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x2}, @generic={0x54, 0x1, "ebee1050c99bcf6a42f8aaab5c09f8581e410f86b43ff5ab8f7169a210b4634291cfc3a60e6216cfc48e1a4137c62ba3fbb5aafa98b4fac164470594e3ee67e8adc91abebc9c4dc5ea122ff0f92bfa9bafdb"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x7f, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa9, 0x7}, @generic={0x1d, 0xc, "bb6d38824bf791fcaf29fc17ea5ff41b771202bc063552d63c1f40"}]}}, {{0x9, 0x5, 0x65932d9216993ee2, 0x1, 0x400, 0x3, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x8}]}}]}}, {{0x9, 0x4, 0x40, 0x84, 0x10, 0x94, 0xac, 0x20, 0x5, [], [{{0x9, 0x5, 0x6, 0x4, 0xcd873923899144f7, 0x9, 0x41, 0x6, [@generic={0x62, 0x10, "66da7f1fef5e85485d3cc8af83aab1e81a70be8d4c17f7652f305ca57dad710787faa51ea101ed35cbf5d7f250372b8420e1fea13862c043824b7ca13664730edb35bd9a0ae125c31f0040801fa3f58405973fe06a2e86ca13f61c99f8d205db"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7, 0x5, 0x6, [@generic={0x102, 0x8, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0xa, 0x5, 0x1}}, {{0x9, 0x5, 0xa, 0x4, 0x0, 0x80, 0x16, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x200}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x8, 0x1, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xfffe}, @generic={0xea, 0x9, "d2f2b31828f133b023bde24cafd619c774dac920f11c0bf558b8859f65251b603822f5c6846392e88eb31912825a16cd2875451ab7d9797bde54ea37ce99b7d0f3d0c87d5d37b9a9109371e647b211d1054dfae884c1f9b8883770196271cf45ea0de01d4535ce4f262a810e5f5e78a19c5ee59dc7b3858f7c2c8a99cb32df2267e3fb95bf4d266c68cde1fb2372fdc95dd43ce049bb0198906894a1cabc169b93614227648686c6ed75fb294140d188b57a728bc5f818082db13057461d615e0c4951b518cc7e9e2a6be722be8ced68211e1b415c0adcaaf01474f2f4144a52e58445b347c8765c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x9c, 0x5, 0x7b}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x1, 0x3, 0xd}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x8, 0x4}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x3, 0x0, 0x0, [@generic={0x2b, 0x0, "66e49ed770dc863978f0320adc282be71c172e87e32a9a825078007e0260de0f1e8a535dd196f624e2"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x3, 0x7, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x7, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0xe}, @generic={0xcc, 0x30, "31095388490957767c9dc34cd8014c6c8b03f4b8f3af6156d76b4e0abf6cc4145a4f8817257b30ce5a637ff235d0f5984ecacac541b018eeec99a20566bfd88ae3f3416310dbc3b00c2a532a9eb55e98b3fc5eb718a945226e1f70330f89c244f374d34a4fb06eb3431e486aa65401580e9636de11829e5c049f6482ffa199f59b939666f44b3da2185d73e54afe2a9a428ce024fc7de640adbfc88de87b923075d16f02438b1f3e0cf40c47bc8311039213005d76ac3893cf6e15aa10710237461fcc582eecf98f54dc"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0x0, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x3, 0x1, 0xfa}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x8, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x10}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x6, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x9, 0x1, 0x6, [@generic={0xa7, 0x22, "20f2caa2b3da91211c1b9a52ed4e675fbfaf75e4901f15bfb3ef7e3baec9ac2515783ab7e204715d15f2e4ca2c2159144811eea1a31e2fb06107317f0afba6c07fd53a92c4df513eda49f3a314a9abfffbf267299e13ec8d231712fdca1c4d5afda87a50d663c7a0173d0a526420a3e108953e8fa857102bb3c2c7bd7a2dc33739786456c1a05ab0164a24a77b38e4ba2739c963b083bfb41e81068c1e0acdc9787fa33839"}, @generic={0x8e, 0x11, "f0962b8b4b447603e0b9c3aae3ab004b196d511550a7bbd2601839a7bf7cf723b1e11c4dc68efbd8a8ef797f8f9a605e53b53177015ee42264c16735b62c26a66e80eb5ec872250ec7432bd6ccede925c5b17eca88e0e40196d13134e0cff5bbed629df56256db7d768b9e4c6f4638074be71a5b1e678e8dd54283df23238dc5700e9f9ae9c2896750b8b57c"}]}}]}}, {{0x9, 0x4, 0x94, 0x7, 0xc, 0x3f, 0x2d, 0xc, 0x1, [@hid_hid={0x9, 0x21, 0x80, 0x5, 0x1, {0x22, 0x63d}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "8c"}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x22, 0x200, 0x10}, {0x6, 0x24, 0x1a, 0x4, 0x65e34af2f7259c1a}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15}, @mdlm_detail={0x19, 0x24, 0x13, 0x3, "3f9a66776c9fcf65ea9411aae945fd991b9d6eeae7"}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4, 0x40}]}], [{{0x9, 0x5, 0x8, 0x8, 0x40, 0x6, 0x9, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xd, 0x40, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x5, 0xc0, 0x7, [@generic={0x33, 0x10, "2ca44e2e38834fd06ee367dcb9fddec09f08daa511341eb9ef0970239e8535a01c8d089e039e01c0a784bb44068acb2753"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x230, 0x10, 0x5, 0x1}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x0, 0x5, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0xef}]}}, {{0x9, 0x5, 0x83, 0x10, 0x8, 0x1, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff}, @generic={0xc3, 0x22, "9ad29d1ad9f156ccf9c06333d204b498119acdd47c8d6a779b748af93765950e6f0dcb6ea7687523fa22058f4d7dc63f232aad59ecc3d1c51c4cfdef8cdd7b03d01622050ddf629736eb37e3cdd74e9ee21271fc691cc41791fa1cc07697f4fd945928beb0abdf8dc6d9920b6a8adef37adf22f60b3914facb68ed53cb3bef82e01d23b8150015b1478cb1fe066ec1eca0b1da925d32883428947136e8875993600230604843b9143a6d3f8b4adc6733de873587dc72f139d51ea4ec659762dc52"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xe, 0xff, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x67, 0xbef}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0xf, 0x0, 0x0, [@generic={0x8c, 0x22, "c46bf9e920ce21be3f1b44a4314db2bdecfa43da17f055276ae446b46f896a1c70e56a877b52424220bfb7c956eec4a181b301ca4eaa5b0e9a1a85bba5c635b4089cc1d3100444c2d64bafb40ccae6bb9282caf9444bb949e32cc899398f26cee57e460675ba30bb7835318c7a151990a7485a0bd5a0448a81f82b3647d271000dd46cfa526632706c14"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x5, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x408, 0xc, 0xe, 0xe, [@generic={0xca, 0x1b, "9aa6a9d872df9bbc6a72d254889b94bcd75c25aae43dd94ce8ad8191a694d3817706b726335e610477693e45eff0d1b9d78bb7cd821e362b76547630283b53511ba4400028075b7db88da97bcec6a26a954f9e6fbc5d4ad6a9eb715ff42a9f4d38a1adc0dc43053257e7b75666f20f2c9ff2388cf5d8c432201858911c60bd6a6019b403dcc16d2f0f031f2010e2204668646e2a4a0267307aa39e9c7a15bdb49dc347da75439121ec9ccef4978439d2d1244b630ddd5469bdd8262996c4799ffba04e3eb42539dd"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb9, 0x400}]}}]}}]}}]}}, &(0x7f00000027c0)={0xa, &(0x7f0000002480)={0xa, 0x6, 0x200, 0x5, 0x1, 0x65, 0x40, 0x10}, 0x5e, &(0x7f00000024c0)={0x5, 0xf, 0x5e, 0x5}, 0x8, [{0x4, &(0x7f0000002540)=@lang_id={0xfffffffffffffdd2, 0x3, 0x429}}, {0x63, &(0x7f0000002580)=ANY=[@ANYBLOB="63037c20a6405c1555b06572118e761c29c6b4156d16d5e6c5f89d021fccf774fa26ba96cd07f37e28148c8e1237827c8a540e70bd5b7b110c656d1d31bb811501ea5425f88836afd2a222390a880f2d53c2894dc1b6c3961d17f526ebb925cf6f1190"]}, {0x4, &(0x7f0000002600)=@lang_id={0x4, 0x3, 0x3009}}, {0x2c, &(0x7f0000002640)=@string={0x2c, 0x3, "d4f697e8b10d559a88238a9c898743c31e70e6801c5029338cc50223df2641c4980533225ebfb899e2e1"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x7c, &(0x7f0000002700)=@string={0x7c, 0x3, "b77e51079acb173942f5dc658e4c6c5a07aea37f84cf4a1858a7a959d5c3d4631312d1298fe9426a3281184adfa0752ff93b640e178d497f9d299fc19a2ddc60744470c39ff675eb6a3ed597fa330d585b74d456c0f7da175617e7486886d9b5c0a7b75bcfd638c8db9cdf2d8395c6d22dd68e09d5071618c915"}}, {0x22, &(0x7f0000002780)=@string={0x22, 0x3, "6307b5655e35d875b915ae185ef192c30c873f6226acb8b68d75fb4c97a64d0f"}}]}) 1.737610325s ago: executing program 4 (id=4883): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20000080) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) write(0xffffffffffffffff, &(0x7f0000000300)="ae47533cc89ef87d058e64b97624ed35e53f271e532ee5dbe4846888f661f217d2cc29c9b796ebe13e69cec7ec6c35f70ed872c225a72bd59b58847f5bbc", 0x3e) writev(r4, &(0x7f0000003dc0)=[{&(0x7f0000000b80)='|', 0x1}], 0x1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x80000003, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xe0d, 0x0, 0x5, 0x2f, 0x10, 0x80000000, 0xd, 0x8, 0xffffffff, 0x4, 0x6, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x4000006, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xff6, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x4, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000006, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b5d693, 0x5, 0x1f40, 0x7, 0x1, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004099044e104000010203010902690003010b680e080b0101010a20760904000000010120000924010000030900de090401000001022000090401010101022000090501094000050400082501010909020009040200000102200009040201010102200009058209ff03090402082501033c0a0200"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0xb) memfd_secret(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 1.169574141s ago: executing program 6 (id=4884): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x3}, [@initr0, @generic={0x66}, @alu={0x7, 0x0, 0x5, 0x3}]}, 0x0}, 0x94) 763.696535ms ago: executing program 1 (id=4885): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000600)="0100000002000800ffffff050000000000112233ff07000000000000eeff0011", 0x20, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f00000000c0)=""/113, 0x71, 0x0, &(0x7f00000002c0)=""/94, 0x5e}}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000002d0007012bbd7000fedbdf25077c1000080001800400dd80040003803f0002"], 0x60}, 0x1, 0x0, 0x0, 0x10044004}, 0xc010) 728.445736ms ago: executing program 6 (id=4886): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) 375.486074ms ago: executing program 6 (id=4887): syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff, 0x0, r2}}], 0x1, 0x0, 0x0) 244.556125ms ago: executing program 4 (id=4888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_open_dev$media(&(0x7f0000000080), 0x7, 0x40001) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 0 (id=4889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) kernel console output (not intermixed with test programs): T18253] do_syscall_64+0x174/0x580 [ 855.882320][T18253] ? trace_irq_disable+0x3b/0x140 [ 855.882350][T18253] ? clear_bhb_loop+0x70/0xc0 [ 855.882375][T18253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.882394][T18253] RIP: 0033:0x7f7bfe7ee0d9 [ 855.882413][T18253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.882430][T18253] RSP: 002b:00007f7bfca46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 855.882451][T18253] RAX: ffffffffffffffda RBX: 00007f7bfea75fa0 RCX: 00007f7bfe7ee0d9 [ 855.882467][T18253] RDX: 0000000000000002 RSI: 00002000000040c0 RDI: 0000000000000003 [ 855.882480][T18253] RBP: 00007f7bfca46090 R08: 0000000000000000 R09: 0000000000000000 [ 855.882492][T18253] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 855.882504][T18253] R13: 00007f7bfea76038 R14: 00007f7bfea75fa0 R15: 00007ffdb6dfd468 [ 855.882537][T18253] [ 856.017527][ T5840] usb 6-1: device descriptor read/64, error -71 [ 856.272441][ T5840] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 856.318132][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4486'. [ 856.417425][ T5840] usb 6-1: device descriptor read/64, error -71 [ 856.527645][ T5840] usb usb6-port1: attempt power cycle [ 856.887409][ T5840] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 856.911243][ T5840] usb 6-1: device descriptor read/8, error -71 [ 856.979024][T18275] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4492'. [ 857.157444][ T5840] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 857.158957][ T5692] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 857.178206][ T5840] usb 6-1: device descriptor read/8, error -71 [ 857.287804][ T5840] usb usb6-port1: unable to enumerate USB device [ 857.330447][ T5692] usb 5-1: Using ep0 maxpacket: 8 [ 857.331267][ T5692] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 857.333040][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.333088][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.333130][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.396893][ T5692] usb 5-1: config 0 descriptor?? [ 857.441198][ T5692] qmi_wwan 5-1:0.0: skipping garbage [ 857.445540][ T5692] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 857.668116][ T5714] usb 5-1: USB disconnect, device number 54 [ 859.747339][ T5714] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 859.897358][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 859.898272][ T5714] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 859.899601][ T5714] usb 5-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 859.899631][ T5714] usb 5-1: config 0 interface 0 has no altsetting 0 [ 859.899664][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.964962][ T5714] usb 5-1: config 0 descriptor?? [ 860.288707][T18306] FAULT_INJECTION: forcing a failure. [ 860.288707][T18306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.288753][T18306] CPU: 1 UID: 0 PID: 18306 Comm: syz.6.4502 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 860.288781][T18306] Tainted: [L]=SOFTLOCKUP [ 860.288788][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 860.288800][T18306] Call Trace: [ 860.288809][T18306] [ 860.288817][T18306] dump_stack_lvl+0xe8/0x150 [ 860.288850][T18306] should_fail_ex+0x467/0x600 [ 860.288882][T18306] _copy_to_user+0x31/0xb0 [ 860.288907][T18306] i2cdev_read+0x13e/0x250 [ 860.288939][T18306] ? __pfx_i2cdev_read+0x10/0x10 [ 860.288966][T18306] vfs_read+0x219/0xa90 [ 860.288998][T18306] ? __pfx_vfs_read+0x10/0x10 [ 860.289021][T18306] ? __fget_files+0x2a/0x420 [ 860.289043][T18306] ? __fget_files+0x2a/0x420 [ 860.289060][T18306] ? __fget_files+0x3a8/0x420 [ 860.289078][T18306] ? __fget_files+0x2a/0x420 [ 860.289104][T18306] __x64_sys_pread64+0x199/0x230 [ 860.289134][T18306] ? __pfx___x64_sys_pread64+0x10/0x10 [ 860.289166][T18306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.289187][T18306] do_syscall_64+0x174/0x580 [ 860.289211][T18306] ? trace_irq_disable+0x3b/0x140 [ 860.289239][T18306] ? clear_bhb_loop+0x70/0xc0 [ 860.289263][T18306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.289282][T18306] RIP: 0033:0x7fdb8407e0d9 [ 860.289300][T18306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.289316][T18306] RSP: 002b:00007fdb822d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 860.289338][T18306] RAX: ffffffffffffffda RBX: 00007fdb84305fa0 RCX: 00007fdb8407e0d9 [ 860.289352][T18306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 860.289364][T18306] RBP: 00007fdb822d6090 R08: 0000000000000000 R09: 0000000000000000 [ 860.289377][T18306] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 860.289388][T18306] R13: 00007fdb84306038 R14: 00007fdb84305fa0 R15: 00007ffcd56257d8 [ 860.289419][T18306] [ 860.307974][ T36] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 860.399219][ T5714] usbhid 5-1:0.0: can't add hid device: -71 [ 860.399321][ T5714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 860.477455][ T36] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 860.482760][ T36] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 860.482795][ T36] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 860.482832][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.616400][ T5714] usb 5-1: USB disconnect, device number 55 [ 860.629879][T18312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4498'. [ 860.629908][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4498'. [ 860.631468][T18312] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4498'. [ 860.985422][T18303] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 861.152645][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4505'. [ 861.152662][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4505'. [ 861.248295][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 861.737349][ T5692] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 861.874574][T18316] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4505'. [ 861.887341][ T5692] usb 2-1: Using ep0 maxpacket: 8 [ 861.888252][ T5692] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 861.890654][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.890703][ T5692] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.890745][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.907311][T18300] Bluetooth: hci5: command 0x0406 tx timeout [ 861.926810][T18300] Bluetooth: hci2: command 0x0406 tx timeout [ 861.973260][ T36] usb 1-1: USB disconnect, device number 68 [ 861.993492][ T5692] usb 2-1: config 0 descriptor?? [ 862.063881][ T5692] qmi_wwan 2-1:0.0: skipping garbage [ 862.064153][ T5692] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 862.236186][ T5715] usb 2-1: USB disconnect, device number 58 [ 862.963485][T18328] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4505'. [ 862.978306][T18328] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.4505:18328 [ 863.216957][T18339] FAULT_INJECTION: forcing a failure. [ 863.216957][T18339] name failslab, interval 1, probability 0, space 0, times 0 [ 863.216980][T18339] CPU: 1 UID: 0 PID: 18339 Comm: syz.4.4511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 863.216996][T18339] Tainted: [L]=SOFTLOCKUP [ 863.217000][T18339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.217006][T18339] Call Trace: [ 863.217011][T18339] [ 863.217016][T18339] dump_stack_lvl+0xe8/0x150 [ 863.217036][T18339] should_fail_ex+0x467/0x600 [ 863.217054][T18339] should_failslab+0xa8/0x100 [ 863.217068][T18339] __kmalloc_cache_noprof+0xa0/0x6b0 [ 863.217079][T18339] ? dev_ethtool+0x13f/0x29c0 [ 863.217094][T18339] ? dev_ethtool+0x13f/0x29c0 [ 863.217112][T18339] dev_ethtool+0x13f/0x29c0 [ 863.217126][T18339] ? __lock_acquire+0x683/0x2ce0 [ 863.217143][T18339] ? __pfx_dev_ethtool+0x10/0x10 [ 863.217158][T18339] ? kasan_quarantine_put+0xbb/0x1f0 [ 863.217185][T18339] ? dev_load+0x21/0x1f0 [ 863.217210][T18339] ? dev_load+0x21/0x1f0 [ 863.217228][T18339] ? dev_load+0x21/0x1f0 [ 863.217247][T18339] dev_ioctl+0x392/0x1150 [ 863.217269][T18339] sock_do_ioctl+0x23e/0x320 [ 863.217297][T18339] ? __pfx_sock_do_ioctl+0x10/0x10 [ 863.217321][T18339] ? hook_file_ioctl+0x1f3/0x600 [ 863.217358][T18339] ? __asan_memset+0x22/0x50 [ 863.217383][T18339] ? smack_file_ioctl+0x263/0x360 [ 863.217416][T18339] sock_ioctl+0x57d/0x7f0 [ 863.217445][T18339] ? __pfx_sock_ioctl+0x10/0x10 [ 863.217473][T18339] ? __fget_files+0x2a/0x420 [ 863.217491][T18339] ? __fget_files+0x3a8/0x420 [ 863.217508][T18339] ? __fget_files+0x2a/0x420 [ 863.217529][T18339] ? bpf_lsm_file_ioctl+0x9/0x20 [ 863.217555][T18339] ? __pfx_sock_ioctl+0x10/0x10 [ 863.217582][T18339] __se_sys_ioctl+0xff/0x170 [ 863.217607][T18339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.217623][T18339] do_syscall_64+0x174/0x580 [ 863.217636][T18339] ? trace_irq_disable+0x3b/0x140 [ 863.217652][T18339] ? clear_bhb_loop+0x70/0xc0 [ 863.217664][T18339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.217674][T18339] RIP: 0033:0x7f7bfe7ee0d9 [ 863.217685][T18339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.217693][T18339] RSP: 002b:00007f7bfca46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.217705][T18339] RAX: ffffffffffffffda RBX: 00007f7bfea75fa0 RCX: 00007f7bfe7ee0d9 [ 863.217713][T18339] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000009 [ 863.217719][T18339] RBP: 00007f7bfca46090 R08: 0000000000000000 R09: 0000000000000000 [ 863.217725][T18339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.217731][T18339] R13: 00007f7bfea76038 R14: 00007f7bfea75fa0 R15: 00007ffdb6dfd468 [ 863.217747][T18339] [ 863.683771][T18345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4512'. [ 863.783141][ T36] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 863.920676][ T36] usb 1-1: device descriptor read/64, error -71 [ 864.159207][ T36] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 864.290373][ T36] usb 1-1: device descriptor read/64, error -71 [ 864.409813][ T36] usb usb1-port1: attempt power cycle [ 864.524997][T18354] binder: Unknown parameter 'dont_appraise' [ 865.316115][T18357] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4515'. [ 865.789424][T18359] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 865.789450][T18359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 865.791344][T18359] vhci_hcd vhci_hcd.0: Device attached [ 865.806118][T18361] usbip_core: unknown command [ 865.806133][T18361] vhci_hcd: unknown pdu 369098752 [ 865.806144][T18361] usbip_core: unknown command [ 865.808522][ T1494] vhci_hcd vhci_hcd.1: stop threads [ 865.808538][ T1494] vhci_hcd vhci_hcd.1: release socket [ 865.808573][ T1494] vhci_hcd vhci_hcd.1: disconnect device [ 866.057307][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 866.057324][ T37] audit: type=1326 audit(1786779181.235:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.057366][ T37] audit: type=1326 audit(1786779181.235:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.077348][ T5692] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 866.118319][ T37] audit: type=1326 audit(1786779181.305:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.121529][ T37] audit: type=1326 audit(1786779181.305:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.121580][ T37] audit: type=1326 audit(1786779181.305:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.121620][ T37] audit: type=1326 audit(1786779181.305:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.121660][ T37] audit: type=1326 audit(1786779181.305:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 866.122246][ T37] audit: type=1326 audit(1786779181.305:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2f31bf947 code=0x7ffc0000 [ 866.125035][ T37] audit: type=1326 audit(1786779181.305:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc2f317e90e code=0x7ffc0000 [ 866.125083][ T37] audit: type=1326 audit(1786779181.305:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18364 comm="syz.0.4517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc2f317e90e code=0x7ffc0000 [ 866.237406][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 866.238370][ T5692] usb 2-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 866.243232][ T5692] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 866.243260][ T5692] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 866.243282][ T5692] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 866.246307][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.246329][ T5692] usb 2-1: Product: Ї [ 866.246343][ T5692] usb 2-1: Manufacturer: 筟䇥䒝෎큜혰ꈎ봇᪼猵炗㺻䍏擢꺍僃ₜ嚘﷢匎᱇⼈䩪짗圲ﺷ捧ധ鮪贮戙ꃉ⃘ኖ࠮뿧唩쉻힌軔醣蚆蛊鼥蜤䲀蟵相⾛ᵫ士杂ี⸈嗩媀븕덱솺᧏宆塭寣ꇬ潱ꨈ녒型恊ꉧ챜됅谵㡾⛷씮誽ᶮ땣ሌ㺰畊欄쁃孰䜼؎ [ 866.246375][ T5692] usb 2-1: SerialNumber: ࠬ [ 866.285904][T18359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 866.451180][T18369] FAULT_INJECTION: forcing a failure. [ 866.451180][T18369] name failslab, interval 1, probability 0, space 0, times 0 [ 866.451214][T18369] CPU: 0 UID: 0 PID: 18369 Comm: syz.4.4519 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 866.451243][T18369] Tainted: [L]=SOFTLOCKUP [ 866.451250][T18369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.451261][T18369] Call Trace: [ 866.451269][T18369] [ 866.451277][T18369] dump_stack_lvl+0xe8/0x150 [ 866.451310][T18369] should_fail_ex+0x467/0x600 [ 866.451344][T18369] should_failslab+0xa8/0x100 [ 866.451368][T18369] kmem_cache_alloc_node_noprof+0xae/0x670 [ 866.451400][T18369] ? __alloc_skb+0x1d7/0x7a0 [ 866.451419][T18369] ? __alloc_skb+0x1d7/0x7a0 [ 866.451445][T18369] __alloc_skb+0x1d7/0x7a0 [ 866.451471][T18369] netlink_sendmsg+0x5d4/0xb40 [ 866.451506][T18369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.451533][T18369] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 866.451561][T18369] ? __kernel_text_address+0xd/0x30 [ 866.451589][T18369] ? unwind_get_return_address+0x4d/0x90 [ 866.451613][T18369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.451636][T18369] sock_sendmsg_nosec+0x13a/0x180 [ 866.451667][T18369] ____sys_sendmsg+0x565/0x870 [ 866.451691][T18369] ? __might_fault+0xaf/0x130 [ 866.451718][T18369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.451750][T18369] ? import_iovec+0x73/0xa0 [ 866.451776][T18369] ___sys_sendmsg+0x2a5/0x360 [ 866.451798][T18369] ? __lock_acquire+0x683/0x2ce0 [ 866.451820][T18369] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.451877][T18369] ? __fget_files+0x2a/0x420 [ 866.451895][T18369] ? __fget_files+0x3a8/0x420 [ 866.451923][T18369] __x64_sys_sendmsg+0x1b7/0x290 [ 866.451949][T18369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.451987][T18369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.452008][T18369] do_syscall_64+0x174/0x580 [ 866.452032][T18369] ? trace_irq_disable+0x3b/0x140 [ 866.452070][T18369] ? clear_bhb_loop+0x70/0xc0 [ 866.452093][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.452114][T18369] RIP: 0033:0x7f7bfe7ee0d9 [ 866.452133][T18369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.452156][T18369] RSP: 002b:00007f7bfca46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.452178][T18369] RAX: ffffffffffffffda RBX: 00007f7bfea75fa0 RCX: 00007f7bfe7ee0d9 [ 866.452192][T18369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 866.452205][T18369] RBP: 00007f7bfca46090 R08: 0000000000000000 R09: 0000000000000000 [ 866.452218][T18369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.452230][T18369] R13: 00007f7bfea76038 R14: 00007f7bfea75fa0 R15: 00007ffdb6dfd468 [ 866.452261][T18369] [ 866.619372][ T5692] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 867.108440][ T5692] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 867.160923][ T5692] usb 2-1: USB disconnect, device number 59 [ 867.325679][T18377] FAULT_INJECTION: forcing a failure. [ 867.325679][T18377] name failslab, interval 1, probability 0, space 0, times 0 [ 867.325713][T18377] CPU: 0 UID: 0 PID: 18377 Comm: syz.1.4523 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 867.325740][T18377] Tainted: [L]=SOFTLOCKUP [ 867.325748][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.325760][T18377] Call Trace: [ 867.325769][T18377] [ 867.325777][T18377] dump_stack_lvl+0xe8/0x150 [ 867.325810][T18377] should_fail_ex+0x467/0x600 [ 867.325845][T18377] should_failslab+0xa8/0x100 [ 867.325869][T18377] __kmalloc_noprof+0xfe/0x780 [ 867.325887][T18377] ? rcu_is_watching+0x15/0xb0 [ 867.325910][T18377] ? tomoyo_realpath_from_path+0xef/0x640 [ 867.325933][T18377] ? tomoyo_realpath_from_path+0xef/0x640 [ 867.325964][T18377] tomoyo_realpath_from_path+0xef/0x640 [ 867.326006][T18377] ? tomoyo_path_number_perm+0x219/0x5f0 [ 867.326037][T18377] tomoyo_path_number_perm+0x246/0x5f0 [ 867.326070][T18377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 867.326099][T18377] ? __lock_acquire+0x683/0x2ce0 [ 867.326133][T18377] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 867.326156][T18377] ? hook_file_ioctl+0x1f3/0x600 [ 867.326182][T18377] ? lockdep_hardirqs_on+0x7a/0x110 [ 867.326224][T18377] ? __fget_files+0x2a/0x420 [ 867.326248][T18377] ? __fget_files+0x2a/0x420 [ 867.326266][T18377] ? __fget_files+0x3a8/0x420 [ 867.326284][T18377] ? __fget_files+0x2a/0x420 [ 867.326308][T18377] security_file_ioctl+0xc3/0x2a0 [ 867.326331][T18377] __se_sys_ioctl+0x47/0x170 [ 867.326356][T18377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.326379][T18377] do_syscall_64+0x174/0x580 [ 867.326401][T18377] ? trace_irq_disable+0x3b/0x140 [ 867.326432][T18377] ? clear_bhb_loop+0x70/0xc0 [ 867.326456][T18377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.326476][T18377] RIP: 0033:0x7f0989bfe0d9 [ 867.326495][T18377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.326516][T18377] RSP: 002b:00007f0987e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.326537][T18377] RAX: ffffffffffffffda RBX: 00007f0989e85fa0 RCX: 00007f0989bfe0d9 [ 867.326552][T18377] RDX: 0000200000000f40 RSI: 0000000080f86406 RDI: 0000000000000003 [ 867.326565][T18377] RBP: 00007f0987e56090 R08: 0000000000000000 R09: 0000000000000000 [ 867.326578][T18377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.326591][T18377] R13: 00007f0989e86038 R14: 00007f0989e85fa0 R15: 00007ffdb29d66b8 [ 867.326624][T18377] [ 867.428443][T18377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 867.434777][T15134] udevd[15134]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 868.097361][ T5707] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 868.348367][ T5707] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 868.348433][ T5707] usb 1-1: no configurations [ 868.348446][ T5707] usb 1-1: can't read configurations, error -22 [ 868.387481][ T5714] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 868.507410][ T5707] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 868.552434][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 868.553242][ T5714] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 868.580543][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.580569][ T5714] usb 5-1: Product: syz [ 868.580583][ T5714] usb 5-1: Manufacturer: syz [ 868.580596][ T5714] usb 5-1: SerialNumber: syz [ 868.617758][ T5714] usb 5-1: config 0 descriptor?? [ 868.641250][ T5714] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 868.660556][ T5707] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 868.660658][ T5707] usb 1-1: no configurations [ 868.660671][ T5707] usb 1-1: can't read configurations, error -22 [ 868.661035][ T5707] usb usb1-port1: attempt power cycle [ 868.973337][T18410] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 868.991898][T18410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 869.019427][T18410] vhci_hcd vhci_hcd.0: Device attached [ 869.047640][ T5707] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 869.089205][ T5707] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 869.089318][ T5707] usb 1-1: no configurations [ 869.089331][ T5707] usb 1-1: can't read configurations, error -22 [ 869.217362][ T5707] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 869.239747][ T5707] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 869.239846][ T5707] usb 1-1: no configurations [ 869.239860][ T5707] usb 1-1: can't read configurations, error -22 [ 869.240342][ T5707] usb usb1-port1: unable to enumerate USB device [ 869.278414][ T5714] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 869.312022][ T5714] usb 5-1: USB disconnect, device number 56 [ 869.323361][ T10] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 869.327359][ T5692] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 869.488070][ T5692] usb 6-1: Using ep0 maxpacket: 16 [ 869.488864][ T5692] usb 6-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 869.490332][ T5692] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 869.490358][ T5692] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 869.490381][ T5692] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 869.499540][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.499565][ T5692] usb 6-1: Product: Ї [ 869.499579][ T5692] usb 6-1: Manufacturer: 筟䇥䒝෎큜혰ꈎ봇᪼猵炗㺻䍏擢꺍僃ₜ嚘﷢匎᱇⼈䩪짗圲ﺷ捧ധ鮪贮戙ꃉ⃘ኖ࠮뿧唩쉻힌軔醣蚆蛊鼥蜤䲀蟵相⾛ᵫ士杂ี⸈嗩媀븕덱솺᧏宆塭寣ꇬ潱ꨈ녒型恊ꉧ챜됅谵㡾⛷씮誽ᶮ땣ሌ㺰畊欄쁃孰䜼؎ [ 869.499611][ T5692] usb 6-1: SerialNumber: ࠬ [ 870.174811][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.174882][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.770666][T18410] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 872.016784][T18412] vhci_hcd: connection reset by peer [ 872.020922][T18433] FAULT_INJECTION: forcing a failure. [ 872.020922][T18433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.020957][T18433] CPU: 0 UID: 0 PID: 18433 Comm: syz.0.4539 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 872.020984][T18433] Tainted: [L]=SOFTLOCKUP [ 872.020990][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.021002][T18433] Call Trace: [ 872.021010][T18433] [ 872.021019][T18433] dump_stack_lvl+0xe8/0x150 [ 872.021053][T18433] should_fail_ex+0x467/0x600 [ 872.021088][T18433] _copy_from_user+0x2d/0xb0 [ 872.021112][T18433] snd_pcm_oss_write2+0x227/0x440 [ 872.021137][T18433] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 872.021169][T18433] ? up_read+0x34/0x180 [ 872.021203][T18433] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 872.021229][T18433] snd_pcm_oss_write+0x664/0xb40 [ 872.021273][T18433] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 872.021299][T18433] vfs_write+0x29f/0xbb0 [ 872.021330][T18433] ? __pfx_vfs_write+0x10/0x10 [ 872.021354][T18433] ? __fget_files+0x2a/0x420 [ 872.021376][T18433] ? __fget_files+0x2a/0x420 [ 872.021392][T18433] ? __fget_files+0x3a8/0x420 [ 872.021410][T18433] ? __fget_files+0x2a/0x420 [ 872.021437][T18433] ksys_write+0x156/0x270 [ 872.021463][T18433] ? __pfx_ksys_write+0x10/0x10 [ 872.021494][T18433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.021532][T18433] do_syscall_64+0x174/0x580 [ 872.021556][T18433] ? trace_irq_disable+0x3b/0x140 [ 872.021586][T18433] ? clear_bhb_loop+0x70/0xc0 [ 872.021610][T18433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.021628][T18433] RIP: 0033:0x7fc2f31be0d9 [ 872.021647][T18433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.021664][T18433] RSP: 002b:00007fc2f13f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 872.021684][T18433] RAX: ffffffffffffffda RBX: 00007fc2f3446090 RCX: 00007fc2f31be0d9 [ 872.021700][T18433] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 872.021713][T18433] RBP: 00007fc2f13f5090 R08: 0000000000000000 R09: 0000000000000000 [ 872.021726][T18433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.021738][T18433] R13: 00007fc2f3446128 R14: 00007fc2f3446090 R15: 00007ffcb9339dd8 [ 872.021770][T18433] [ 872.139213][ T13] vhci_hcd vhci_hcd.5: stop threads [ 872.139242][ T13] vhci_hcd vhci_hcd.5: release socket [ 872.139309][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 872.150711][ T5692] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.774841][T18439] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4542'. [ 873.006612][ T5692] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 873.034660][T18444] binder: 18443:18444 ioctl 541b 0 returned -22 [ 873.079299][ T5692] usb 6-1: USB disconnect, device number 19 [ 873.237380][T15134] udevd[15134]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.817976][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 873.817996][ T37] audit: type=1326 audit(1786779188.965:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818046][ T37] audit: type=1326 audit(1786779188.995:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818090][ T37] audit: type=1326 audit(1786779188.995:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818132][ T37] audit: type=1326 audit(1786779188.995:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818175][ T37] audit: type=1326 audit(1786779188.995:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818218][ T37] audit: type=1326 audit(1786779188.995:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818261][ T37] audit: type=1326 audit(1786779188.995:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818303][ T37] audit: type=1326 audit(1786779188.995:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818415][ T37] audit: type=1326 audit(1786779188.995:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 873.818461][ T37] audit: type=1326 audit(1786779188.995:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18456 comm="syz.5.4549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 874.587405][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 875.090793][T18465] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 875.090820][T18465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 875.093124][T18465] vhci_hcd vhci_hcd.0: Device attached [ 875.517442][ T5707] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 875.517663][ T5714] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 875.787322][ T5707] usb 5-1: Using ep0 maxpacket: 16 [ 875.788240][ T5707] usb 5-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 875.791472][ T5707] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 875.791501][ T5707] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 875.791524][ T5707] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 875.795638][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.795663][ T5707] usb 5-1: Product: Ї [ 875.795678][ T5707] usb 5-1: Manufacturer: 筟䇥䒝෎큜혰ꈎ봇᪼猵炗㺻䍏擢꺍僃ₜ嚘﷢匎᱇⼈䩪짗圲ﺷ捧ധ鮪贮戙ꃉ⃘ኖ࠮뿧唩쉻힌軔醣蚆蛊鼥蜤䲀蟵相⾛ᵫ士杂ี⸈嗩媀븕덱솺᧏宆塭寣ꇬ潱ꨈ녒型恊ꉧ챜됅谵㡾⛷씮誽ᶮ땣ሌ㺰畊欄쁃孰䜼؎ [ 875.795709][ T5707] usb 5-1: SerialNumber: ࠬ [ 875.907410][T18466] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 876.172380][T18467] vhci_hcd: connection reset by peer [ 876.183852][ T90] vhci_hcd vhci_hcd.4: stop threads [ 876.183880][ T90] vhci_hcd vhci_hcd.4: release socket [ 876.183961][ T90] vhci_hcd vhci_hcd.4: disconnect device [ 876.206722][ T5707] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 876.333679][ T36] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 876.364963][ T5707] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 876.399540][ T5707] usb 5-1: USB disconnect, device number 57 [ 876.492247][T15134] udevd[15134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.543225][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 876.544026][ T36] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 876.545288][ T36] usb 2-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.545318][ T36] usb 2-1: config 0 interface 0 has no altsetting 0 [ 876.545350][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.569164][ T36] usb 2-1: config 0 descriptor?? [ 876.940510][T18489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4558'. [ 877.006399][T18489] afs: Unknown parameter 'dyC' [ 877.025051][ T36] usbhid 2-1:0.0: can't add hid device: -71 [ 877.025177][ T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 877.054114][ T36] usb 2-1: USB disconnect, device number 60 [ 878.891951][T18514] netlink: 'syz.0.4567': attribute type 1 has an invalid length. [ 879.067862][ T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 879.164427][T18514] Config c/1 of g1 needs at least one function. [ 879.196201][T18514] udc dummy_udc.0: failed to start g1: -22 [ 879.196232][T18514] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 879.219750][ T10] usb 5-1: descriptor type invalid, skip [ 879.219769][ T10] usb 5-1: descriptor type invalid, skip [ 879.219781][ T10] usb 5-1: descriptor type invalid, skip [ 879.219793][ T10] usb 5-1: descriptor type invalid, skip [ 879.219805][ T10] usb 5-1: descriptor type invalid, skip [ 879.220874][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 879.220906][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=f7.a7 [ 879.224169][ T10] usb 5-1: config 255 has an invalid interface number: 234 but max is 2 [ 879.224195][ T10] usb 5-1: config 255 has an invalid interface number: 80 but max is 2 [ 879.224214][ T10] usb 5-1: config 255 has an invalid interface number: 218 but max is 2 [ 879.224233][ T10] usb 5-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 879.224251][ T10] usb 5-1: config 255 has an invalid interface number: 64 but max is 2 [ 879.224270][ T10] usb 5-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 879.224289][ T10] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 879.224308][ T10] usb 5-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 879.224329][ T10] usb 5-1: config 255 has no interface number 0 [ 879.224346][ T10] usb 5-1: config 255 has no interface number 1 [ 879.224361][ T10] usb 5-1: config 255 has no interface number 2 [ 879.224375][ T10] usb 5-1: config 255 has no interface number 3 [ 879.225131][ T10] usb 5-1: config 255 interface 234 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 879.225160][ T10] usb 5-1: config 255 interface 234 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 879.225183][ T10] usb 5-1: config 255 interface 234 altsetting 10 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 879.225211][ T10] usb 5-1: config 255 interface 234 altsetting 10 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 879.225239][ T10] usb 5-1: too many endpoints for config 255 interface 80 altsetting 9: 75, using maximum allowed: 30 [ 879.225280][ T10] usb 5-1: config 255 interface 80 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 879.225306][ T10] usb 5-1: too many endpoints for config 255 interface 218 altsetting 11: 150, using maximum allowed: 30 [ 879.225340][ T10] usb 5-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 879.225363][ T10] usb 5-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 879.225385][ T10] usb 5-1: config 255 interface 218 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 879.225412][ T10] usb 5-1: config 255 interface 218 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 879.225441][ T10] usb 5-1: config 255 interface 218 altsetting 11 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 879.225467][ T10] usb 5-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0x82, skipping [ 879.225503][ T10] usb 5-1: config 255 interface 218 altsetting 11 has 7 endpoint descriptors, different from the interface descriptor's value: 150 [ 879.225987][ T10] usb 5-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x6, skipping [ 879.226011][ T10] usb 5-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x5, skipping [ 879.226031][ T10] usb 5-1: config 255 interface 64 altsetting 132 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 879.226057][ T10] usb 5-1: config 255 interface 234 has no altsetting 0 [ 879.226074][ T10] usb 5-1: config 255 interface 80 has no altsetting 0 [ 879.226091][ T10] usb 5-1: config 255 interface 218 has no altsetting 0 [ 879.226107][ T10] usb 5-1: config 255 interface 64 has no altsetting 0 [ 879.364320][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.364347][ T10] usb 5-1: Product: 〉 [ 879.364362][ T10] usb 5-1: Manufacturer: ⁼䂦ᕜ끕牥踑ᱶ옩ᖴ᙭ʝ찟瓷⛺隺ߍ绳ᐨ躌㜒粂咊瀎宽ᅻ攌ᵭ묱ᖁ╔裸꼶ꋒ㤢蠊ⴏ쉓䶉뛁雃᜝⛵맫켥ᅯ [ 879.364385][ T10] usb 5-1: SerialNumber: න驕⎈鲊螉썃瀞胦倜㌩얌⌂⛟쑁֘∳뽞馸 [ 879.935799][ T10] ldusb 5-1:255.234: Interrupt in endpoint not found [ 879.978342][ T5707] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 880.061561][T18514] UDC core: g1: couldn't find an available UDC or it's busy [ 880.066348][ T10] ldusb 5-1:255.80: Interrupt in endpoint not found [ 880.100593][ T10] ldusb 5-1:255.218: Interrupt in endpoint not found [ 880.145963][ T10] ldusb 5-1:255.64: Interrupt in endpoint not found [ 880.171166][ T5707] usb 6-1: not running at top speed; connect to a high speed hub [ 880.171207][ T5707] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 880.173028][ T5707] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 880.173055][ T5707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 880.173081][ T5707] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 880.173107][ T5707] usb 6-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 880.175558][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.175581][ T5707] usb 6-1: Product: ୔텩ᩅㄕｭԿ荋䶟഻샯껭飂툇腇挻ࣶᅠی颢Еภᅈ⠨荔谼炢뾉킙鯀V愎揨㬩鰂띪䂽㏤찘ｖ촺ᕎ硍㟴₌ම蹹퇵ꧠቩꬁﬧᒱⷻ [ 880.175605][ T5707] usb 6-1: Manufacturer: 徖㒰㓊Ӕ笶鲫곎ꊏ㒾》烩뗯䛸嶡쁡﵁کᘵ̭㨍璅䇼䜀잰⥁ጁ棔ᇗ易叝ʨἅᙄﱣ냔瀋柺䮧袛ัꓹ [ 880.175626][ T5707] usb 6-1: SerialNumber: 乤ढ़疒﹎耢宱妊㇜⺌ᔩ燙燎墴嶖ꒄⱖ댮㫔꩒쨉ᆷ㡗ꆓ㿥缝垾ᬺ⇔ [ 880.295128][ T10] usb 5-1: USB disconnect, device number 58 [ 880.443269][T18535] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4570'. [ 880.617916][ T5714] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 880.807086][T18530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.820527][T18530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.856832][ T5707] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.052168][ T10] usb 6-1: USB disconnect, device number 20 [ 881.342808][T17258] udevd[17258]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.758229][T18561] mmap: syz.5.4579 (18561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 882.303245][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 882.303263][ T37] audit: type=1326 audit(1786779197.485:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.303312][ T37] audit: type=1326 audit(1786779197.485:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.303953][ T37] audit: type=1326 audit(1786779197.485:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.304000][ T37] audit: type=1326 audit(1786779197.485:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.304263][ T37] audit: type=1326 audit(1786779197.485:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.306432][ T37] audit: type=1326 audit(1786779197.485:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.306481][ T37] audit: type=1326 audit(1786779197.485:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.339801][ T37] audit: type=1326 audit(1786779197.495:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.339910][ T37] audit: type=1326 audit(1786779197.495:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 882.353267][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4583'. [ 882.353939][ T37] audit: type=1326 audit(1786779197.535:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18574 comm="syz.4.4583" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7bfe7ee0d9 code=0x7ffc0000 [ 883.157086][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4585'. [ 883.263859][T18586] FAULT_INJECTION: forcing a failure. [ 883.263859][T18586] name failslab, interval 1, probability 0, space 0, times 0 [ 883.263896][T18586] CPU: 0 UID: 0 PID: 18586 Comm: syz.5.4586 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 883.263925][T18586] Tainted: [L]=SOFTLOCKUP [ 883.263933][T18586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.263946][T18586] Call Trace: [ 883.263953][T18586] [ 883.263962][T18586] dump_stack_lvl+0xe8/0x150 [ 883.263995][T18586] should_fail_ex+0x467/0x600 [ 883.264023][T18586] should_failslab+0xa8/0x100 [ 883.264043][T18586] kmem_cache_alloc_noprof+0xa4/0x650 [ 883.264074][T18586] ? security_inode_alloc+0x39/0x310 [ 883.264095][T18586] ? security_inode_alloc+0x39/0x310 [ 883.264120][T18586] security_inode_alloc+0x39/0x310 [ 883.264142][T18586] inode_init_always_gfp+0x983/0xd40 [ 883.264170][T18586] ? __pfx_sock_alloc_inode+0x10/0x10 [ 883.264194][T18586] alloc_inode+0x82/0x1b0 [ 883.264218][T18586] do_accept+0x144/0x760 [ 883.264238][T18586] ? __pfx_do_accept+0x10/0x10 [ 883.264271][T18586] __sys_accept4+0x139/0x230 [ 883.264289][T18586] ? __pfx___sys_accept4+0x10/0x10 [ 883.264306][T18586] ? __pfx_ksys_write+0x10/0x10 [ 883.264330][T18586] __x64_sys_accept4+0x9a/0xb0 [ 883.264347][T18586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.264363][T18586] do_syscall_64+0x174/0x580 [ 883.264383][T18586] ? trace_irq_disable+0x3b/0x140 [ 883.264407][T18586] ? clear_bhb_loop+0x70/0xc0 [ 883.264427][T18586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.264443][T18586] RIP: 0033:0x7f6c6666e0d9 [ 883.264458][T18586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.264471][T18586] RSP: 002b:00007f6c64884028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 883.264488][T18586] RAX: ffffffffffffffda RBX: 00007f6c668f6180 RCX: 00007f6c6666e0d9 [ 883.264500][T18586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 883.264510][T18586] RBP: 00007f6c64884090 R08: 0000000000000000 R09: 0000000000000000 [ 883.264520][T18586] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 883.264531][T18586] R13: 00007f6c668f6218 R14: 00007f6c668f6180 R15: 00007fff34a1b6c8 [ 883.264556][T18586] [ 884.477512][T18593] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.478039][T18593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4589'. [ 885.672360][T18605] FAULT_INJECTION: forcing a failure. [ 885.672360][T18605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.672416][T18605] CPU: 0 UID: 0 PID: 18605 Comm: syz.6.4594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.672445][T18605] Tainted: [L]=SOFTLOCKUP [ 885.672451][T18605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.672464][T18605] Call Trace: [ 885.672472][T18605] [ 885.672479][T18605] dump_stack_lvl+0xe8/0x150 [ 885.672502][T18605] should_fail_ex+0x467/0x600 [ 885.672521][T18605] _copy_to_user+0x31/0xb0 [ 885.672535][T18605] simple_read_from_buffer+0xe1/0x170 [ 885.672548][T18605] proc_fail_nth_read+0x1be/0x230 [ 885.672562][T18605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 885.672577][T18605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 885.672587][T18605] vfs_read+0x219/0xa90 [ 885.672601][T18605] ? preempt_schedule_thunk+0x16/0x40 [ 885.672614][T18605] ? __pfx_vfs_read+0x10/0x10 [ 885.672624][T18605] ? preempt_schedule_thunk+0x16/0x40 [ 885.672639][T18605] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 885.672652][T18605] ? mutex_lock_nested+0x152/0x1d0 [ 885.672667][T18605] ? fdget_pos+0x252/0x320 [ 885.672681][T18605] ksys_read+0x156/0x270 [ 885.672694][T18605] ? __pfx_ksys_read+0x10/0x10 [ 885.672704][T18605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.672719][T18605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.672730][T18605] do_syscall_64+0x174/0x580 [ 885.672743][T18605] ? clear_bhb_loop+0x70/0xc0 [ 885.672756][T18605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.672766][T18605] RIP: 0033:0x7fdb8403e90e [ 885.672776][T18605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 885.672785][T18605] RSP: 002b:00007fdb822b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 885.672797][T18605] RAX: ffffffffffffffda RBX: 00007fdb822b56c0 RCX: 00007fdb8403e90e [ 885.672804][T18605] RDX: 000000000000000f RSI: 00007fdb822b50a0 RDI: 0000000000000007 [ 885.672811][T18605] RBP: 00007fdb822b5090 R08: 0000000000000000 R09: 0000000000000000 [ 885.672817][T18605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.672824][T18605] R13: 00007fdb84306128 R14: 00007fdb84306090 R15: 00007ffcd56257d8 [ 885.672840][T18605] [ 886.063497][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 886.414623][T18608] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4596'. [ 886.414648][T18608] nbd: must specify at least one socket [ 886.433777][T18610] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4597'. [ 887.096839][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4590'. [ 887.096874][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4590'. [ 887.104784][T18600] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4590'. [ 887.104839][T18600] batadv0: entered promiscuous mode [ 887.855720][T18638] FAULT_INJECTION: forcing a failure. [ 887.855720][T18638] name failslab, interval 1, probability 0, space 0, times 0 [ 887.855757][T18638] CPU: 1 UID: 0 PID: 18638 Comm: syz.1.4602 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 887.855785][T18638] Tainted: [L]=SOFTLOCKUP [ 887.855792][T18638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.855805][T18638] Call Trace: [ 887.855813][T18638] [ 887.855825][T18638] dump_stack_lvl+0xe8/0x150 [ 887.855858][T18638] should_fail_ex+0x467/0x600 [ 887.855892][T18638] should_failslab+0xa8/0x100 [ 887.855916][T18638] __kmalloc_noprof+0xfe/0x780 [ 887.855934][T18638] ? rcu_is_watching+0x15/0xb0 [ 887.855957][T18638] ? tomoyo_realpath_from_path+0xef/0x640 [ 887.855981][T18638] ? tomoyo_realpath_from_path+0xef/0x640 [ 887.856012][T18638] tomoyo_realpath_from_path+0xef/0x640 [ 887.856044][T18638] ? tomoyo_path_number_perm+0x219/0x5f0 [ 887.856073][T18638] tomoyo_path_number_perm+0x246/0x5f0 [ 887.856104][T18638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 887.856131][T18638] ? __lock_acquire+0x683/0x2ce0 [ 887.856164][T18638] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 887.856188][T18638] ? hook_file_ioctl+0x1f3/0x600 [ 887.856212][T18638] ? lockdep_hardirqs_on+0x7a/0x110 [ 887.856255][T18638] ? __fget_files+0x2a/0x420 [ 887.856277][T18638] ? __fget_files+0x2a/0x420 [ 887.856295][T18638] ? __fget_files+0x3a8/0x420 [ 887.856312][T18638] ? __fget_files+0x2a/0x420 [ 887.856335][T18638] security_file_ioctl+0xc3/0x2a0 [ 887.856357][T18638] __se_sys_ioctl+0x47/0x170 [ 887.856382][T18638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.856404][T18638] do_syscall_64+0x174/0x580 [ 887.856427][T18638] ? trace_irq_disable+0x3b/0x140 [ 887.856456][T18638] ? clear_bhb_loop+0x70/0xc0 [ 887.856481][T18638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.856500][T18638] RIP: 0033:0x7f0989bfe0d9 [ 887.856519][T18638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.856535][T18638] RSP: 002b:00007f0987e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.856555][T18638] RAX: ffffffffffffffda RBX: 00007f0989e85fa0 RCX: 00007f0989bfe0d9 [ 887.856570][T18638] RDX: 0000000000000000 RSI: 0000000000004161 RDI: 0000000000000003 [ 887.856582][T18638] RBP: 00007f0987e56090 R08: 0000000000000000 R09: 0000000000000000 [ 887.856595][T18638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.856607][T18638] R13: 00007f0989e86038 R14: 00007f0989e85fa0 R15: 00007ffdb29d66b8 [ 887.856639][T18638] [ 887.868203][T18638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 888.015810][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 888.197312][ T10] usb 5-1: device descriptor read/64, error -71 [ 888.251494][T18640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 888.294107][T18640] usb usb2: usbfs: process 18640 (syz.6.4595) did not claim interface 7 before use [ 888.438828][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 888.577334][ T10] usb 5-1: device descriptor read/64, error -71 [ 888.687622][ T10] usb usb5-port1: attempt power cycle [ 888.792491][T18656] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 888.792527][T18656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 888.792702][T18656] vhci_hcd vhci_hcd.0: Device attached [ 888.807886][T18657] usbip_core: unknown command [ 888.807899][T18657] vhci_hcd: unknown pdu 369098752 [ 888.807910][T18657] usbip_core: unknown command [ 888.837346][ T1494] vhci_hcd vhci_hcd.0: stop threads [ 888.837366][ T1494] vhci_hcd vhci_hcd.0: release socket [ 888.837401][ T1494] vhci_hcd vhci_hcd.0: disconnect device [ 889.037473][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 889.061838][ T10] usb 5-1: device descriptor read/8, error -71 [ 889.107330][ T36] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 889.174278][T18662] FAULT_INJECTION: forcing a failure. [ 889.174278][T18662] name failslab, interval 1, probability 0, space 0, times 0 [ 889.174312][T18662] CPU: 1 UID: 0 PID: 18662 Comm: syz.6.4613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 889.174340][T18662] Tainted: [L]=SOFTLOCKUP [ 889.174347][T18662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 889.174359][T18662] Call Trace: [ 889.174367][T18662] [ 889.174375][T18662] dump_stack_lvl+0xe8/0x150 [ 889.174408][T18662] should_fail_ex+0x467/0x600 [ 889.174445][T18662] should_failslab+0xa8/0x100 [ 889.174470][T18662] __kmalloc_noprof+0xfe/0x780 [ 889.174489][T18662] ? rcu_is_watching+0x15/0xb0 [ 889.174512][T18662] ? tomoyo_realpath_from_path+0xef/0x640 [ 889.174536][T18662] ? tomoyo_realpath_from_path+0xef/0x640 [ 889.174567][T18662] tomoyo_realpath_from_path+0xef/0x640 [ 889.174600][T18662] ? tomoyo_path_number_perm+0x219/0x5f0 [ 889.174632][T18662] tomoyo_path_number_perm+0x246/0x5f0 [ 889.174665][T18662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 889.174694][T18662] ? __lock_acquire+0x683/0x2ce0 [ 889.174728][T18662] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 889.174751][T18662] ? hook_file_ioctl+0x1f3/0x600 [ 889.174777][T18662] ? lockdep_hardirqs_on+0x7a/0x110 [ 889.174820][T18662] ? __fget_files+0x2a/0x420 [ 889.174843][T18662] ? __fget_files+0x2a/0x420 [ 889.174860][T18662] ? __fget_files+0x3a8/0x420 [ 889.174878][T18662] ? __fget_files+0x2a/0x420 [ 889.174902][T18662] security_file_ioctl+0xc3/0x2a0 [ 889.174925][T18662] __se_sys_ioctl+0x47/0x170 [ 889.174950][T18662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.174972][T18662] do_syscall_64+0x174/0x580 [ 889.174995][T18662] ? trace_irq_disable+0x3b/0x140 [ 889.175024][T18662] ? clear_bhb_loop+0x70/0xc0 [ 889.175049][T18662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.175068][T18662] RIP: 0033:0x7fdb8407e0d9 [ 889.175093][T18662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.175110][T18662] RSP: 002b:00007fdb822d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.175131][T18662] RAX: ffffffffffffffda RBX: 00007fdb84305fa0 RCX: 00007fdb8407e0d9 [ 889.175147][T18662] RDX: 0000000000000000 RSI: 0000000000004b47 RDI: 0000000000000003 [ 889.175160][T18662] RBP: 00007fdb822d6090 R08: 0000000000000000 R09: 0000000000000000 [ 889.175172][T18662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.175184][T18662] R13: 00007fdb84306038 R14: 00007fdb84305fa0 R15: 00007ffcd56257d8 [ 889.175217][T18662] [ 889.182503][T18662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 889.259473][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 889.260695][ T36] usb 1-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 889.262380][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 889.262406][ T36] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 889.262429][ T36] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 889.273825][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.273851][ T36] usb 1-1: Product: Ї [ 889.273865][ T36] usb 1-1: Manufacturer: 筟䇥䒝෎큜혰ꈎ봇᪼猵炗㺻䍏擢꺍僃ₜ嚘﷢匎᱇⼈䩪짗圲ﺷ捧ധ鮪贮戙ꃉ⃘ኖ࠮뿧唩쉻힌軔醣蚆蛊鼥蜤䲀蟵相⾛ᵫ士杂ี⸈嗩媀븕덱솺᧏宆塭寣ꇬ潱ꨈ녒型恊ꉧ챜됅谵㡾⛷씮誽ᶮ땣ሌ㺰畊欄쁃孰䜼؎ [ 889.273895][ T36] usb 1-1: SerialNumber: ࠬ [ 889.309158][T18656] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 889.344256][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 889.368243][ T10] usb 5-1: device descriptor read/8, error -71 [ 889.504497][ T10] usb usb5-port1: unable to enumerate USB device [ 889.586783][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 889.900984][T18669] CacheFiles: No cache directory specified [ 891.450413][T18675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4616'. [ 891.458990][T18675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4616'. [ 891.540827][T18675] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.575874][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4612'. [ 891.575903][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4612'. [ 891.579605][T18675] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.580868][T18675] bridge0: entered allmulticast mode [ 891.590496][T18678] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4612'. [ 891.590554][T18678] batadv0: entered promiscuous mode [ 891.656424][ T36] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 891.669329][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 891.669356][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 891.669429][T18680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4619'. [ 891.686641][T18677] bridge_slave_1: left allmulticast mode [ 891.686888][T18677] bridge_slave_1: left promiscuous mode [ 891.710201][T18677] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.754589][ T36] usb 1-1: USB disconnect, device number 76 [ 891.813214][T15134] udevd[15134]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.057606][T18677] bridge_slave_0: left allmulticast mode [ 892.057643][T18677] bridge_slave_0: left promiscuous mode [ 892.057877][T18677] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.217519][T18703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 893.217546][T18703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 893.217635][T18703] vhci_hcd vhci_hcd.0: Device attached [ 893.219885][T18704] usbip_core: unknown command [ 893.219897][T18704] vhci_hcd: unknown pdu 369098752 [ 893.219909][T18704] usbip_core: unknown command [ 893.222777][ T1421] vhci_hcd vhci_hcd.4: stop threads [ 893.222794][ T1421] vhci_hcd vhci_hcd.4: release socket [ 893.222830][ T1421] vhci_hcd vhci_hcd.4: disconnect device [ 893.500331][T18711] CacheFiles: No cache directory specified [ 894.047347][ T5585] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 894.417446][ T5585] usb 5-1: Using ep0 maxpacket: 16 [ 894.419202][ T5585] usb 5-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 894.421200][ T5585] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 894.421228][ T5585] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 894.421250][ T5585] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 894.424808][ T5585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.424832][ T5585] usb 5-1: Product: Ї [ 894.424847][ T5585] usb 5-1: Manufacturer: 筟䇥䒝෎큜혰ꈎ봇᪼猵炗㺻䍏擢꺍僃ₜ嚘﷢匎᱇⼈䩪짗圲ﺷ捧ധ鮪贮戙ꃉ⃘ኖ࠮뿧唩쉻힌軔醣蚆蛊鼥蜤䲀蟵相⾛ᵫ士杂ี⸈嗩媀븕덱솺᧏宆塭寣ꇬ潱ꨈ녒型恊ꉧ챜됅谵㡾⛷씮誽ᶮ땣ሌ㺰畊欄쁃孰䜼؎ [ 894.424876][ T5585] usb 5-1: SerialNumber: ࠬ [ 895.182833][T18703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 895.530101][ T5585] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 895.698626][ T5585] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 895.736198][ T5585] usb 5-1: USB disconnect, device number 63 [ 895.795904][T15134] udevd[15134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 897.312859][T18743] macsec1: entered promiscuous mode [ 897.312882][T18743] bridge0: entered promiscuous mode [ 897.684301][T18758] netlink: 'syz.4.4640': attribute type 2 has an invalid length. [ 899.168325][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 899.247548][T18775] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4647'. [ 899.251260][T18775] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4647'. [ 899.317316][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 899.318565][ T10] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 899.326328][ T10] usb 5-1: config 251 has an invalid interface number: 48 but max is 0 [ 899.326356][ T10] usb 5-1: config 251 has no interface number 0 [ 899.326402][ T10] usb 5-1: config 251 interface 48 has no altsetting 0 [ 899.359348][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.359374][ T10] usb 5-1: Product: syz [ 899.359389][ T10] usb 5-1: Manufacturer: syz [ 899.359402][ T10] usb 5-1: SerialNumber: syz [ 899.601368][T18786] FAULT_INJECTION: forcing a failure. [ 899.601368][T18786] name failslab, interval 1, probability 0, space 0, times 0 [ 899.601419][T18786] CPU: 1 UID: 0 PID: 18786 Comm: syz.6.4649 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 899.601446][T18786] Tainted: [L]=SOFTLOCKUP [ 899.601453][T18786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.601468][T18786] Call Trace: [ 899.601476][T18786] [ 899.601486][T18786] dump_stack_lvl+0xe8/0x150 [ 899.601528][T18786] should_fail_ex+0x467/0x600 [ 899.601563][T18786] should_failslab+0xa8/0x100 [ 899.601587][T18786] kmem_cache_alloc_node_noprof+0xae/0x670 [ 899.601618][T18786] ? __alloc_skb+0x1d7/0x7a0 [ 899.601638][T18786] ? __alloc_skb+0x1d7/0x7a0 [ 899.601665][T18786] __alloc_skb+0x1d7/0x7a0 [ 899.601691][T18786] alloc_skb_with_frags+0xc6/0x760 [ 899.601720][T18786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 899.601750][T18786] virtio_transport_alloc_skb+0xf6/0x13e0 [ 899.601783][T18786] ? __local_bh_enable+0x1e1/0x2f0 [ 899.601808][T18786] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 899.601831][T18786] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 899.601853][T18786] ? lockdep_hardirqs_on+0x7a/0x110 [ 899.601903][T18786] virtio_transport_send_pkt_info+0x7ac/0x1060 [ 899.601954][T18786] virtio_transport_stream_enqueue+0xf1/0x150 [ 899.601985][T18786] ? __pfx_virtio_transport_stream_enqueue+0x10/0x10 [ 899.602018][T18786] ? rt_spin_unlock+0x157/0x200 [ 899.602042][T18786] ? rt_spin_unlock+0x163/0x200 [ 899.602063][T18786] vsock_connectible_sendmsg+0xb05/0x1070 [ 899.602100][T18786] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 899.602128][T18786] ? __pfx_woken_wake_function+0x10/0x10 [ 899.602159][T18786] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 899.602185][T18786] ? __fget_files+0x3a8/0x420 [ 899.602204][T18786] ? __fget_files+0x2a/0x420 [ 899.602225][T18786] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 899.602248][T18786] sock_sendmsg_nosec+0x13a/0x180 [ 899.602280][T18786] __sys_sendto+0x41e/0x5d0 [ 899.602309][T18786] ? __pfx___sys_sendto+0x10/0x10 [ 899.602359][T18786] ? __pfx_ksys_write+0x10/0x10 [ 899.602388][T18786] __x64_sys_sendto+0xde/0x100 [ 899.602411][T18786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.602432][T18786] do_syscall_64+0x174/0x580 [ 899.602456][T18786] ? trace_irq_disable+0x3b/0x140 [ 899.602486][T18786] ? clear_bhb_loop+0x70/0xc0 [ 899.602516][T18786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.602536][T18786] RIP: 0033:0x7fdb8407e0d9 [ 899.602556][T18786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.602573][T18786] RSP: 002b:00007fdb822d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 899.602594][T18786] RAX: ffffffffffffffda RBX: 00007fdb84305fa0 RCX: 00007fdb8407e0d9 [ 899.602610][T18786] RDX: 000000000000feb5 RSI: 0000200000000000 RDI: 0000000000000005 [ 899.602624][T18786] RBP: 00007fdb822d6090 R08: 0000000000000000 R09: 0000000000000000 [ 899.602637][T18786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.602649][T18786] R13: 00007fdb84306038 R14: 00007fdb84305fa0 R15: 00007ffcd56257d8 [ 899.602682][T18786] [ 902.654048][T18809] input: syz1 as /devices/virtual/input/input15 [ 906.011577][T18826] FAULT_INJECTION: forcing a failure. [ 906.011577][T18826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.011613][T18826] CPU: 0 UID: 0 PID: 18826 Comm: syz.5.4659 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 906.011644][T18826] Tainted: [L]=SOFTLOCKUP [ 906.011652][T18826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.011663][T18826] Call Trace: [ 906.011671][T18826] [ 906.011680][T18826] dump_stack_lvl+0xe8/0x150 [ 906.011713][T18826] should_fail_ex+0x467/0x600 [ 906.011749][T18826] _copy_to_user+0x31/0xb0 [ 906.011773][T18826] simple_read_from_buffer+0xe1/0x170 [ 906.011799][T18826] proc_fail_nth_read+0x1be/0x230 [ 906.011824][T18826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.011849][T18826] ? rw_verify_area+0x250/0x4d0 [ 906.011873][T18826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.011894][T18826] vfs_read+0x219/0xa90 [ 906.011924][T18826] ? __pfx_vfs_read+0x10/0x10 [ 906.011949][T18826] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 906.011980][T18826] ? lockdep_hardirqs_on+0x7a/0x110 [ 906.012004][T18826] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 906.012028][T18826] ? mutex_lock_nested+0x152/0x1d0 [ 906.012056][T18826] ? fdget_pos+0x252/0x320 [ 906.012083][T18826] ksys_read+0x156/0x270 [ 906.012107][T18826] ? __pfx_ksys_read+0x10/0x10 [ 906.012129][T18826] ? __pfx_v4l2_ioctl+0x10/0x10 [ 906.012162][T18826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.012183][T18826] do_syscall_64+0x174/0x580 [ 906.012206][T18826] ? trace_irq_disable+0x3b/0x140 [ 906.012234][T18826] ? clear_bhb_loop+0x70/0xc0 [ 906.012258][T18826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.012277][T18826] RIP: 0033:0x7f6c6662e90e [ 906.012295][T18826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 906.012310][T18826] RSP: 002b:00007f6c648c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 906.012330][T18826] RAX: ffffffffffffffda RBX: 00007f6c648c66c0 RCX: 00007f6c6662e90e [ 906.012345][T18826] RDX: 000000000000000f RSI: 00007f6c648c60a0 RDI: 0000000000000004 [ 906.012358][T18826] RBP: 00007f6c648c6090 R08: 0000000000000000 R09: 0000000000000000 [ 906.012370][T18826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.012381][T18826] R13: 00007f6c668f6038 R14: 00007f6c668f5fa0 R15: 00007fff34a1b6c8 [ 906.012413][T18826] [ 906.034019][ T10] qmi_wwan 5-1:251.48: probe with driver qmi_wwan failed with error -22 [ 906.162790][ T10] usb 5-1: USB disconnect, device number 64 [ 906.351378][T18096] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 908.192403][T18860] IPv6: Can't replace route, no match found [ 909.227403][ T5692] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 909.367359][ T5707] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 909.519427][ T5707] usb 1-1: descriptor type invalid, skip [ 909.519449][ T5707] usb 1-1: descriptor type invalid, skip [ 909.519462][ T5707] usb 1-1: descriptor type invalid, skip [ 909.519474][ T5707] usb 1-1: descriptor type invalid, skip [ 909.519488][ T5707] usb 1-1: descriptor type invalid, skip [ 909.520231][ T5707] usb 1-1: not running at top speed; connect to a high speed hub [ 909.520269][ T5707] usb 1-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=f7.a7 [ 909.521749][ T5707] usb 1-1: config 255 has an invalid interface number: 234 but max is 2 [ 909.521775][ T5707] usb 1-1: config 255 has an invalid interface number: 80 but max is 2 [ 909.521796][ T5707] usb 1-1: config 255 has an invalid interface number: 218 but max is 2 [ 909.521816][ T5707] usb 1-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 909.521835][ T5707] usb 1-1: config 255 has an invalid interface number: 64 but max is 2 [ 909.521855][ T5707] usb 1-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 909.521873][ T5707] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 909.521893][ T5707] usb 1-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 909.521913][ T5707] usb 1-1: config 255 has no interface number 0 [ 909.521930][ T5707] usb 1-1: config 255 has no interface number 1 [ 909.521946][ T5707] usb 1-1: config 255 has no interface number 2 [ 909.521962][ T5707] usb 1-1: config 255 has no interface number 3 [ 909.522041][ T5707] usb 1-1: config 255 interface 234 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 909.522068][ T5707] usb 1-1: config 255 interface 234 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 909.522092][ T5707] usb 1-1: config 255 interface 234 altsetting 10 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 909.522132][ T5707] usb 1-1: config 255 interface 234 altsetting 10 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 909.522159][ T5707] usb 1-1: too many endpoints for config 255 interface 80 altsetting 9: 75, using maximum allowed: 30 [ 909.522196][ T5707] usb 1-1: config 255 interface 80 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 909.522223][ T5707] usb 1-1: too many endpoints for config 255 interface 218 altsetting 11: 150, using maximum allowed: 30 [ 909.522268][ T5707] usb 1-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 909.522291][ T5707] usb 1-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 909.522314][ T5707] usb 1-1: config 255 interface 218 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 909.522347][ T5707] usb 1-1: config 255 interface 218 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 909.522376][ T5707] usb 1-1: config 255 interface 218 altsetting 11 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 909.522402][ T5707] usb 1-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0x82, skipping [ 909.522424][ T5707] usb 1-1: config 255 interface 218 altsetting 11 has 7 endpoint descriptors, different from the interface descriptor's value: 150 [ 909.522474][ T5707] usb 1-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x6, skipping [ 909.522497][ T5707] usb 1-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x5, skipping [ 909.522519][ T5707] usb 1-1: config 255 interface 64 altsetting 132 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 909.522546][ T5707] usb 1-1: config 255 interface 234 has no altsetting 0 [ 909.522564][ T5707] usb 1-1: config 255 interface 80 has no altsetting 0 [ 909.522582][ T5707] usb 1-1: config 255 interface 218 has no altsetting 0 [ 909.522599][ T5707] usb 1-1: config 255 interface 64 has no altsetting 0 [ 909.525382][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.525406][ T5707] usb 1-1: Product: 〉 [ 909.525421][ T5707] usb 1-1: Manufacturer: ⁼䂦ᕜ끕牥踑ᱶ옩ᖴ᙭ʝ찟瓷⛺隺ߍ绳ᐨ躌㜒粂咊瀎宽ᅻ攌ᵭ묱ᖁ╔裸꼶ꋒ㤢蠊ⴏ쉓䶉뛁雃᜝⛵맫켥ᅯ [ 909.525445][ T5707] usb 1-1: SerialNumber: න驕⎈鲊螉썃瀞胦倜㌩얌⌂⛟쑁֘∳뽞馸 [ 909.527410][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 909.713310][ T5692] usb 2-1: descriptor type invalid, skip [ 909.713332][ T5692] usb 2-1: descriptor type invalid, skip [ 909.713345][ T5692] usb 2-1: descriptor type invalid, skip [ 909.713357][ T5692] usb 2-1: descriptor type invalid, skip [ 909.713368][ T5692] usb 2-1: descriptor type invalid, skip [ 909.714396][ T5692] usb 2-1: not running at top speed; connect to a high speed hub [ 909.714430][ T5692] usb 2-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=f7.a7 [ 909.716203][ T5692] usb 2-1: config 255 has an invalid interface number: 234 but max is 2 [ 909.716235][ T5692] usb 2-1: config 255 has an invalid interface number: 80 but max is 2 [ 909.716255][ T5692] usb 2-1: config 255 has an invalid interface number: 218 but max is 2 [ 909.716273][ T5692] usb 2-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 909.716291][ T5692] usb 2-1: config 255 has an invalid interface number: 64 but max is 2 [ 909.716311][ T5692] usb 2-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 909.716330][ T5692] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 909.716348][ T5692] usb 2-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 909.716368][ T5692] usb 2-1: config 255 has no interface number 0 [ 909.716383][ T5692] usb 2-1: config 255 has no interface number 1 [ 909.716399][ T5692] usb 2-1: config 255 has no interface number 2 [ 909.716415][ T5692] usb 2-1: config 255 has no interface number 3 [ 909.716488][ T5692] usb 2-1: config 255 interface 234 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 909.716514][ T5692] usb 2-1: config 255 interface 234 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 909.716536][ T5692] usb 2-1: config 255 interface 234 altsetting 10 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 909.716563][ T5692] usb 2-1: config 255 interface 234 altsetting 10 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 909.716589][ T5692] usb 2-1: too many endpoints for config 255 interface 80 altsetting 9: 75, using maximum allowed: 30 [ 909.718750][ T5692] usb 2-1: config 255 interface 80 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 909.718785][ T5692] usb 2-1: too many endpoints for config 255 interface 218 altsetting 11: 150, using maximum allowed: 30 [ 909.718823][ T5692] usb 2-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 909.718845][ T5692] usb 2-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 909.718869][ T5692] usb 2-1: config 255 interface 218 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 909.718895][ T5692] usb 2-1: config 255 interface 218 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 909.718921][ T5692] usb 2-1: config 255 interface 218 altsetting 11 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 909.718946][ T5692] usb 2-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0x82, skipping [ 909.718967][ T5692] usb 2-1: config 255 interface 218 altsetting 11 has 7 endpoint descriptors, different from the interface descriptor's value: 150 [ 909.719005][ T5692] usb 2-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x6, skipping [ 909.719028][ T5692] usb 2-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x5, skipping [ 909.719049][ T5692] usb 2-1: config 255 interface 64 altsetting 132 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 909.719143][ T5692] usb 2-1: config 255 interface 234 has no altsetting 0 [ 909.719161][ T5692] usb 2-1: config 255 interface 80 has no altsetting 0 [ 909.719180][ T5692] usb 2-1: config 255 interface 218 has no altsetting 0 [ 909.719198][ T5692] usb 2-1: config 255 interface 64 has no altsetting 0 [ 909.723245][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.723271][ T5692] usb 2-1: Product: 〉 [ 909.723285][ T5692] usb 2-1: Manufacturer: ⁼䂦ᕜ끕牥踑ᱶ옩ᖴ᙭ʝ찟瓷⛺隺ߍ绳ᐨ躌㜒粂咊瀎宽ᅻ攌ᵭ묱ᖁ╔裸꼶ꋒ㤢蠊ⴏ쉓䶉뛁雃᜝⛵맫켥ᅯ [ 909.723324][ T5692] usb 2-1: SerialNumber: න驕⎈鲊螉썃瀞胦倜㌩얌⌂⛟쑁֘∳뽞馸 [ 910.025708][ T5692] ldusb 2-1:255.234: Interrupt in endpoint not found [ 910.168588][ T5692] ldusb 2-1:255.80: Interrupt in endpoint not found [ 910.257839][ T10] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 910.293222][ T5692] ldusb 2-1:255.218: Interrupt in endpoint not found [ 910.474910][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 910.474943][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 910.502343][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.502369][ T10] usb 7-1: Product: syz [ 910.502382][ T10] usb 7-1: Manufacturer: syz [ 910.502395][ T10] usb 7-1: SerialNumber: syz [ 910.676656][ T5692] ldusb 2-1:255.64: Interrupt in endpoint not found [ 910.782590][ T5707] ldusb 1-1:255.234: Interrupt in endpoint not found [ 910.785424][ T10] usb 7-1: config 0 descriptor?? [ 910.802585][ T5692] usb 2-1: USB disconnect, device number 61 [ 910.836826][ T10] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 911.000006][ T5707] ldusb 1-1:255.80: Interrupt in endpoint not found [ 911.052282][T18715] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 911.073742][ T5707] ldusb 1-1:255.218: Interrupt in endpoint not found [ 911.124703][ T5707] ldusb 1-1:255.64: Interrupt in endpoint not found [ 911.132481][ T5707] usb 1-1: USB disconnect, device number 77 [ 911.152159][T14283] usb 7-1: USB disconnect, device number 19 [ 911.209059][T18715] usb 5-1: Using ep0 maxpacket: 8 [ 911.212834][T18715] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 911.214033][T18715] usb 5-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.214062][T18715] usb 5-1: config 0 interface 0 has no altsetting 0 [ 911.214094][T18715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.355936][T18715] usb 5-1: config 0 descriptor?? [ 911.807984][T18715] arvo 0003:1E7D:30D4.0009: unknown global tag 0xe [ 911.808016][T18715] arvo 0003:1E7D:30D4.0009: item 0 2 1 14 parsing failed [ 911.808670][T18715] arvo 0003:1E7D:30D4.0009: parse failed [ 911.808739][T18715] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -22 [ 911.999730][ T5692] usb 5-1: USB disconnect, device number 65 [ 913.433405][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4694'. [ 913.974574][T18959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4691'. [ 913.974604][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4691'. [ 913.976575][T18959] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4691'. [ 914.101820][T18954] netlink: Failed to add helper -22 [ 914.101879][T18954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 914.262521][T18962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4701'. [ 914.720795][T18975] netlink: 'syz.5.4706': attribute type 29 has an invalid length. [ 914.956100][T18973] ip6gretap0: refused to change device tx_queue_len [ 915.960446][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4714'. [ 916.702071][T19013] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4720'. [ 916.883718][T19012] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 916.883746][T19012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 916.887110][T19012] vhci_hcd vhci_hcd.0: Device attached [ 916.957342][ T5692] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 917.121812][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4716'. [ 917.121843][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4716'. [ 917.127419][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 917.128324][ T5692] usb 2-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice= 0.40 [ 917.129935][ T5692] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 917.129962][ T5692] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 917.129993][ T5692] usb 2-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 917.132503][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.132526][ T5692] usb 2-1: Product: Ї [ 917.132541][ T5692] usb 2-1: Manufacturer: 筟䇥䒝෎큜혰ꈎ봇᪼猵炗㺻䍏擢꺍僃ₜ嚘﷢匎᱇⼈䩪짗圲ﺷ捧ധ鮪贮戙ꃉ⃘ኖ࠮뿧唩쉻힌軔醣蚆蛊鼥蜤䲀蟵相⾛ᵫ士杂ี⸈嗩媀븕덱솺᧏宆塭寣ꇬ潱ꨈ녒型恊ꉧ챜됅谵㡾⛷씮誽ᶮ땣ሌ㺰畊欄쁃孰䜼؎ [ 917.132573][ T5692] usb 2-1: SerialNumber: ࠬ [ 917.571643][ T5873] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 917.592859][T19017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 917.618724][T19021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4716'. [ 917.618779][T19021] batadv0: entered promiscuous mode [ 917.811101][T19014] vhci_hcd: connection reset by peer [ 917.811642][ T90] vhci_hcd vhci_hcd.1: stop threads [ 917.811667][ T90] vhci_hcd vhci_hcd.1: release socket [ 917.862483][ T5692] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 917.874529][ T90] vhci_hcd vhci_hcd.1: disconnect device [ 918.238987][ T5692] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 918.267610][T15134] udevd[15134]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.270604][ T5692] usb 2-1: USB disconnect, device number 62 [ 919.352200][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 919.934914][T19059] syzkaller0: entered promiscuous mode [ 919.934940][T19059] syzkaller0: entered allmulticast mode [ 920.419576][T19075] FAULT_INJECTION: forcing a failure. [ 920.419576][T19075] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 920.419613][T19075] CPU: 0 UID: 0 PID: 19075 Comm: syz.0.4740 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 920.419641][T19075] Tainted: [L]=SOFTLOCKUP [ 920.419648][T19075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 920.419660][T19075] Call Trace: [ 920.419668][T19075] [ 920.419677][T19075] dump_stack_lvl+0xe8/0x150 [ 920.419710][T19075] should_fail_ex+0x467/0x600 [ 920.419745][T19075] prepare_alloc_pages+0x223/0x690 [ 920.419774][T19075] __alloc_frozen_pages_noprof+0x12f/0x380 [ 920.419800][T19075] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 920.419827][T19075] ? __pfx_policy_nodemask+0x10/0x10 [ 920.419861][T19075] alloc_pages_mpol+0xce/0x280 [ 920.419888][T19075] alloc_pages_noprof+0xd2/0x2f0 [ 920.419913][T19075] pte_alloc_one+0x22/0x380 [ 920.419937][T19075] __pte_alloc+0x25/0x1a0 [ 920.419965][T19075] do_pte_missing+0x1bda/0x28f0 [ 920.419994][T19075] ? mt_find+0x481/0x630 [ 920.420033][T19075] handle_mm_fault+0xd28/0x13f0 [ 920.420071][T19075] ? handle_mm_fault+0xe8/0x13f0 [ 920.420101][T19075] ? __pfx_handle_mm_fault+0x10/0x10 [ 920.420140][T19075] ? __lock_acquire+0x683/0x2ce0 [ 920.420161][T19075] ? lock_mm_and_find_vma+0xa7/0x340 [ 920.420184][T19075] do_user_addr_fault+0x744/0x1340 [ 920.420229][T19075] exc_page_fault+0x6a/0xc0 [ 920.420253][T19075] asm_exc_page_fault+0x26/0x30 [ 920.420273][T19075] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 920.420303][T19075] Code: c4 10 e9 04 2c 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 2b 05 00 66 2e [ 920.420320][T19075] RSP: 0018:ffffc90006b9fa38 EFLAGS: 00050202 [ 920.420338][T19075] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 920.420352][T19075] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90006b9fae0 [ 920.420367][T19075] RBP: ffffc90006b9fd58 R08: 0000000000000003 R09: 0000000000000004 [ 920.420380][T19075] R10: dffffc0000000000 R11: fffff52000d73f5c R12: 0000000000000016 [ 920.420394][T19075] R13: 0000000000000004 R14: ffffc90006b9fae0 R15: 0000200000000000 [ 920.420425][T19075] _copy_from_user+0x7a/0xb0 [ 920.420448][T19075] do_ipv6_setsockopt+0x249/0x3180 [ 920.420481][T19075] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 920.420506][T19075] ? get_pid_task+0x20/0x1f0 [ 920.420536][T19075] ? __lock_acquire+0x683/0x2ce0 [ 920.420560][T19075] ? get_pid_task+0x20/0x1f0 [ 920.420585][T19075] ? get_pid_task+0x20/0x1f0 [ 920.420610][T19075] ? get_pid_task+0x20/0x1f0 [ 920.420646][T19075] ? __lock_acquire+0x683/0x2ce0 [ 920.420681][T19075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 920.420706][T19075] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.420735][T19075] ipv6_setsockopt+0x59/0x170 [ 920.420762][T19075] rawv6_setsockopt+0x276/0x5e0 [ 920.420795][T19075] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 920.420822][T19075] ? sock_common_setsockopt+0x36/0xc0 [ 920.420852][T19075] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 920.420885][T19075] do_sock_setsockopt+0x17c/0x1b0 [ 920.420913][T19075] __x64_sys_setsockopt+0x143/0x1b0 [ 920.420939][T19075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.420961][T19075] do_syscall_64+0x174/0x580 [ 920.420984][T19075] ? trace_irq_disable+0x3b/0x140 [ 920.421014][T19075] ? clear_bhb_loop+0x70/0xc0 [ 920.421054][T19075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.421074][T19075] RIP: 0033:0x7fc2f31be0d9 [ 920.421092][T19075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.421108][T19075] RSP: 002b:00007fc2f1416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 920.421127][T19075] RAX: ffffffffffffffda RBX: 00007fc2f3445fa0 RCX: 00007fc2f31be0d9 [ 920.421142][T19075] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000003 [ 920.421155][T19075] RBP: 00007fc2f1416090 R08: 0000000000000004 R09: 0000000000000000 [ 920.421167][T19075] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.421181][T19075] R13: 00007fc2f3446038 R14: 00007fc2f3445fa0 R15: 00007ffcb9339dd8 [ 920.421213][T19075] [ 920.480790][T19077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4732'. [ 920.480821][T19077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4732'. [ 920.989461][T19077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4732'. [ 921.037415][ T5692] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 921.278875][ T5692] usb 7-1: Using ep0 maxpacket: 16 [ 921.293404][ T5692] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 921.408602][ T5692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.408629][ T5692] usb 7-1: Product: syz [ 921.408644][ T5692] usb 7-1: Manufacturer: syz [ 921.408659][ T5692] usb 7-1: SerialNumber: syz [ 921.439492][ T5692] usb 7-1: config 0 descriptor?? [ 921.453871][ T5692] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 921.649074][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4743'. [ 921.985535][T19096] CacheFiles: No cache directory specified [ 922.475066][ T5692] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 923.312624][ T5692] usb 7-1: USB disconnect, device number 20 [ 923.348226][ T5873] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 924.252066][T19114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.675227][T19116] syzkaller0: entered promiscuous mode [ 924.676427][T19116] syzkaller0: entered allmulticast mode [ 925.547841][T19133] CacheFiles: No cache directory specified [ 926.467898][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'. [ 928.189928][T19153] FAULT_INJECTION: forcing a failure. [ 928.189928][T19153] name failslab, interval 1, probability 0, space 0, times 0 [ 928.189967][T19153] CPU: 0 UID: 0 PID: 19153 Comm: syz.0.4767 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 928.189996][T19153] Tainted: [L]=SOFTLOCKUP [ 928.190003][T19153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.190017][T19153] Call Trace: [ 928.190026][T19153] [ 928.190035][T19153] dump_stack_lvl+0xe8/0x150 [ 928.190069][T19153] should_fail_ex+0x467/0x600 [ 928.190104][T19153] should_failslab+0xa8/0x100 [ 928.190129][T19153] kmem_cache_alloc_node_noprof+0xae/0x670 [ 928.190161][T19153] ? __alloc_skb+0x1d7/0x7a0 [ 928.190181][T19153] ? __alloc_skb+0x1d7/0x7a0 [ 928.190206][T19153] __alloc_skb+0x1d7/0x7a0 [ 928.190229][T19153] netlink_ack+0x136/0xb30 [ 928.190251][T19153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 928.190269][T19153] ? ref_tracker_free+0x668/0x820 [ 928.190299][T19153] ? __pfx_ref_tracker_free+0x10/0x10 [ 928.190324][T19153] ? __asan_memcpy+0x40/0x70 [ 928.190356][T19153] netlink_rcv_skb+0x2a4/0x4a0 [ 928.190382][T19153] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 928.190405][T19153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 928.190441][T19153] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.190465][T19153] ? netlink_deliver_tap+0x2e/0x1b0 [ 928.190495][T19153] netlink_unicast+0x7f5/0x990 [ 928.190527][T19153] netlink_sendmsg+0x813/0xb40 [ 928.190560][T19153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.190588][T19153] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 928.190615][T19153] ? __kernel_text_address+0xd/0x30 [ 928.190644][T19153] ? unwind_get_return_address+0x4d/0x90 [ 928.190668][T19153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.190691][T19153] sock_sendmsg_nosec+0x13a/0x180 [ 928.190724][T19153] ____sys_sendmsg+0x565/0x870 [ 928.190748][T19153] ? __might_fault+0xaf/0x130 [ 928.190781][T19153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.190814][T19153] ? import_iovec+0x73/0xa0 [ 928.190839][T19153] ___sys_sendmsg+0x2a5/0x360 [ 928.190863][T19153] ? __lock_acquire+0x683/0x2ce0 [ 928.190887][T19153] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.190944][T19153] ? __fget_files+0x2a/0x420 [ 928.190963][T19153] ? __fget_files+0x3a8/0x420 [ 928.190992][T19153] __x64_sys_sendmsg+0x1b7/0x290 [ 928.191019][T19153] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.191062][T19153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.191083][T19153] do_syscall_64+0x174/0x580 [ 928.191107][T19153] ? trace_irq_disable+0x3b/0x140 [ 928.191137][T19153] ? clear_bhb_loop+0x70/0xc0 [ 928.191161][T19153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.191180][T19153] RIP: 0033:0x7fc2f31be0d9 [ 928.191200][T19153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.191217][T19153] RSP: 002b:00007fc2f1416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.191239][T19153] RAX: ffffffffffffffda RBX: 00007fc2f3445fa0 RCX: 00007fc2f31be0d9 [ 928.191254][T19153] RDX: 0000000004008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 928.191267][T19153] RBP: 00007fc2f1416090 R08: 0000000000000000 R09: 0000000000000000 [ 928.191282][T19153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.191293][T19153] R13: 00007fc2f3446038 R14: 00007fc2f3445fa0 R15: 00007ffcb9339dd8 [ 928.191322][T19153] [ 928.716625][T19156] syzkaller0: entered promiscuous mode [ 928.716651][T19156] syzkaller0: entered allmulticast mode [ 929.506050][T18715] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 929.816251][T18715] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 930.376680][T18715] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 930.376709][T18715] usb 6-1: config 1 has no interface number 0 [ 930.376752][T18715] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 930.376778][T18715] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 930.376802][T18715] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 64, changing to 10 [ 930.429797][T18715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.429825][T18715] usb 6-1: Product: syz [ 930.429839][T18715] usb 6-1: Manufacturer: syz [ 930.429854][T18715] usb 6-1: SerialNumber: syz [ 930.463751][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4770'. [ 930.495091][T19160] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 930.567496][T19170] FAULT_INJECTION: forcing a failure. [ 930.567496][T19170] name failslab, interval 1, probability 0, space 0, times 0 [ 930.570940][T19170] CPU: 0 UID: 0 PID: 19170 Comm: syz.1.4771 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 930.570973][T19170] Tainted: [L]=SOFTLOCKUP [ 930.570980][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 930.570992][T19170] Call Trace: [ 930.571001][T19170] [ 930.571010][T19170] dump_stack_lvl+0xe8/0x150 [ 930.571046][T19170] should_fail_ex+0x467/0x600 [ 930.571081][T19170] should_failslab+0xa8/0x100 [ 930.571103][T19170] kmem_cache_alloc_noprof+0xa4/0x650 [ 930.571131][T19170] ? prepare_kernel_cred+0x31/0x650 [ 930.571157][T19170] ? prepare_kernel_cred+0x31/0x650 [ 930.571190][T19170] prepare_kernel_cred+0x31/0x650 [ 930.571218][T19170] ? cachefiles_get_security_ID+0x14/0x130 [ 930.571243][T19170] cachefiles_get_security_ID+0x21/0x130 [ 930.571267][T19170] cachefiles_add_cache+0x1d0/0xde0 [ 930.571297][T19170] ? __pfx_cachefiles_add_cache+0x10/0x10 [ 930.571336][T19170] ? __asan_memcpy+0x40/0x70 [ 930.571365][T19170] ? kstrdup+0x81/0x100 [ 930.571390][T19170] ? cachefiles_daemon_bind+0x277/0x3b0 [ 930.571417][T19170] cachefiles_daemon_write+0x608/0x6c0 [ 930.571444][T19170] ? __pfx_cachefiles_daemon_write+0x10/0x10 [ 930.571469][T19170] vfs_write+0x29f/0xbb0 [ 930.571502][T19170] ? __pfx_vfs_write+0x10/0x10 [ 930.571535][T19170] ? __fget_files+0x2a/0x420 [ 930.571557][T19170] ? __fget_files+0x2a/0x420 [ 930.571574][T19170] ? __fget_files+0x3a8/0x420 [ 930.571591][T19170] ? __fget_files+0x2a/0x420 [ 930.571617][T19170] ksys_write+0x156/0x270 [ 930.571642][T19170] ? __pfx_ksys_write+0x10/0x10 [ 930.571674][T19170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.571697][T19170] do_syscall_64+0x174/0x580 [ 930.571722][T19170] ? trace_irq_disable+0x3b/0x140 [ 930.571752][T19170] ? clear_bhb_loop+0x70/0xc0 [ 930.571777][T19170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.571798][T19170] RIP: 0033:0x7f0989bfe0d9 [ 930.571817][T19170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.571834][T19170] RSP: 002b:00007f0987e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 930.571856][T19170] RAX: ffffffffffffffda RBX: 00007f0989e85fa0 RCX: 00007f0989bfe0d9 [ 930.571872][T19170] RDX: 0000000000000004 RSI: 0000200000000700 RDI: 0000000000000003 [ 930.571886][T19170] RBP: 00007f0987e56090 R08: 0000000000000000 R09: 0000000000000000 [ 930.571899][T19170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.571912][T19170] R13: 00007f0989e86038 R14: 00007f0989e85fa0 R15: 00007ffdb29d66b8 [ 930.571944][T19170] [ 930.572765][T19170] CacheFiles: Failed to register: -12 [ 930.710503][T19160] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 930.910585][T18715] usb 6-1: No status endpoint found [ 930.939919][T18715] usb 6-1: USB disconnect, device number 21 [ 931.371871][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 931.371889][ T37] audit: type=1326 audit(1786779246.545:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.371933][ T37] audit: type=1326 audit(1786779246.545:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.438192][ T37] audit: type=1326 audit(1786779246.555:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.438249][ T37] audit: type=1326 audit(1786779246.555:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.438293][ T37] audit: type=1326 audit(1786779246.555:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.438336][ T37] audit: type=1326 audit(1786779246.555:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.438378][ T37] audit: type=1326 audit(1786779246.555:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.438421][ T37] audit: type=1326 audit(1786779246.575:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19171 comm="syz.6.4772" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb8407e0d9 code=0x0 [ 931.438629][ T37] audit: type=1326 audit(1786779246.555:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.439150][ T37] audit: type=1326 audit(1786779246.625:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19190 comm="syz.0.4778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f31be0d9 code=0x7ffc0000 [ 931.548734][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.548805][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.232567][T19211] openvswitch: netlink: IPv4 tunnel dst address is zero [ 933.626744][T19220] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4787'. [ 934.413584][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4790'. [ 934.466233][T19233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 934.829945][T19241] loop8: detected capacity change from 0 to 7 [ 934.920853][T19241] Dev loop8: unable to read RDB block 7 [ 934.920906][T19241] loop8: unable to read partition table [ 934.921757][T19241] loop8: partition table beyond EOD, truncated [ 934.921792][T19241] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 935.173302][T19249] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4799'. [ 935.423866][T19251] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4800'. [ 935.750318][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4791'. [ 936.191382][T19259] bridge5: entered promiscuous mode [ 936.191409][T19259] bridge5: entered allmulticast mode [ 936.642028][T19269] syzkaller0: entered promiscuous mode [ 936.642055][T19269] syzkaller0: entered allmulticast mode [ 936.702195][T19273] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4806'. [ 937.461887][T19286] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4811'. [ 939.390947][ T5692] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 939.705415][ T5692] usb 1-1: Using ep0 maxpacket: 16 [ 940.790265][T19295] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4813'. [ 941.240390][ T5692] usb 1-1: device descriptor read/all, error -71 [ 941.378838][T19300] tipc: Started in network mode [ 941.378869][T19300] tipc: Node identity b22c938d91c4, cluster identity 4711 [ 941.379459][T19300] tipc: Enabled bearer , priority 0 [ 941.385686][T19302] tipc: Resetting bearer [ 941.654162][T19293] tipc: Disabling bearer [ 942.081298][T19325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4820'. [ 942.392468][T19329] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4822'. [ 942.780869][T19343] Invalid argument reading file caps for ./file0 [ 943.755456][T19347] FAULT_INJECTION: forcing a failure. [ 943.755456][T19347] name failslab, interval 1, probability 0, space 0, times 0 [ 943.755492][T19347] CPU: 0 UID: 0 PID: 19347 Comm: syz.0.4827 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 943.755520][T19347] Tainted: [L]=SOFTLOCKUP [ 943.755528][T19347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.755540][T19347] Call Trace: [ 943.755548][T19347] [ 943.755557][T19347] dump_stack_lvl+0xe8/0x150 [ 943.755590][T19347] should_fail_ex+0x467/0x600 [ 943.755624][T19347] should_failslab+0xa8/0x100 [ 943.755649][T19347] __kmalloc_noprof+0xfe/0x780 [ 943.755669][T19347] ? tomoyo_encode+0x2ad/0x570 [ 943.755691][T19347] ? tomoyo_encode+0x2ad/0x570 [ 943.755720][T19347] tomoyo_encode+0x2ad/0x570 [ 943.755749][T19347] tomoyo_realpath_from_path+0x5fa/0x640 [ 943.755783][T19347] ? tomoyo_path_number_perm+0x219/0x5f0 [ 943.755814][T19347] tomoyo_path_number_perm+0x246/0x5f0 [ 943.755847][T19347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 943.755884][T19347] ? __lock_acquire+0x683/0x2ce0 [ 943.755918][T19347] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 943.755942][T19347] ? hook_file_ioctl+0x1f3/0x600 [ 943.755968][T19347] ? lockdep_hardirqs_on+0x7a/0x110 [ 943.756008][T19347] ? __fget_files+0x2a/0x420 [ 943.756029][T19347] ? __fget_files+0x2a/0x420 [ 943.756046][T19347] ? __fget_files+0x3a8/0x420 [ 943.756061][T19347] ? __fget_files+0x2a/0x420 [ 943.756083][T19347] security_file_ioctl+0xc3/0x2a0 [ 943.756104][T19347] __se_sys_ioctl+0x47/0x170 [ 943.756126][T19347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.756147][T19347] do_syscall_64+0x174/0x580 [ 943.756169][T19347] ? trace_irq_disable+0x3b/0x140 [ 943.756196][T19347] ? clear_bhb_loop+0x70/0xc0 [ 943.756219][T19347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.756237][T19347] RIP: 0033:0x7fc2f31be0d9 [ 943.756254][T19347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.756270][T19347] RSP: 002b:00007fc2f1416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 943.756292][T19347] RAX: ffffffffffffffda RBX: 00007fc2f3445fa0 RCX: 00007fc2f31be0d9 [ 943.756307][T19347] RDX: 0000000000000006 RSI: 0000000000007040 RDI: 0000000000000003 [ 943.756320][T19347] RBP: 00007fc2f1416090 R08: 0000000000000000 R09: 0000000000000000 [ 943.756333][T19347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.756345][T19347] R13: 00007fc2f3446038 R14: 00007fc2f3445fa0 R15: 00007ffcb9339dd8 [ 943.756377][T19347] [ 943.756398][T19347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 944.101827][T19351] blktrace: Concurrent blktraces are not allowed on sg0 [ 944.683915][T19368] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4836'. [ 944.847611][ T5715] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 945.011325][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 945.015061][ T5715] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 945.042097][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.042124][ T5715] usb 5-1: Product: syz [ 945.042139][ T5715] usb 5-1: Manufacturer: syz [ 945.042154][ T5715] usb 5-1: SerialNumber: syz [ 945.089555][ T5715] usb 5-1: config 0 descriptor?? [ 945.107662][ T5715] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 945.315581][T19390] RDS: rds_bind could not find a transport for ::ffff:10.1.0.254, load rds_tcp or rds_rdma? [ 945.404516][T19384] ntfs3(nullb0): Primary boot signature is not NTFS. [ 945.458841][T19384] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 945.605205][T19383] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 945.724194][ T5715] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 945.757428][ T5715] usb 5-1: USB disconnect, device number 66 [ 946.215231][T19405] nullb0: [POWERTEC] p1 [ 946.250132][T19405] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 946.266646][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4848'. [ 946.281030][ T5715] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 946.497329][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 946.498510][ T5715] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 946.500692][ T5715] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 946.500718][ T5715] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 946.500738][ T5715] usb 1-1: config 166 has no interface number 0 [ 946.500754][ T5715] usb 1-1: config 166 has no interface number 1 [ 946.500809][ T5715] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 946.500830][ T5715] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 946.500867][ T5715] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 946.500892][ T5715] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 946.500918][ T5715] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 946.500944][ T5715] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 946.500967][ T5715] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 946.500992][ T5715] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 946.501014][ T5715] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 946.501039][ T5715] usb 1-1: config 166 interface 177 has no altsetting 0 [ 946.501057][ T5715] usb 1-1: config 166 interface 34 has no altsetting 0 [ 946.582137][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.582155][ T5715] usb 1-1: Product: syz [ 946.582162][ T5715] usb 1-1: Manufacturer: syz [ 946.582170][ T5715] usb 1-1: SerialNumber: syz [ 946.611854][T19413] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4851'. [ 946.960837][ T5715] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 947.167387][ T5692] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 947.307420][ T5692] usb 7-1: device descriptor read/64, error -71 [ 947.543239][ T5715] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 947.559110][ T5692] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 947.722114][ T5692] usb 7-1: device descriptor read/64, error -71 [ 947.726650][ T5715] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 947.768617][ T5715] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 947.768746][ T5715] uvcvideo 1-1:166.34: No valid video chain found. [ 947.787296][ T5707] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 947.813899][ T5715] usb 1-1: USB disconnect, device number 80 [ 947.827842][ T5692] usb usb7-port1: attempt power cycle [ 947.940141][ T5707] usb 6-1: Using ep0 maxpacket: 16 [ 947.941083][ T5707] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 947.945057][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.945080][ T5707] usb 6-1: Product: syz [ 947.945094][ T5707] usb 6-1: Manufacturer: syz [ 947.945108][ T5707] usb 6-1: SerialNumber: syz [ 947.956173][ T5707] usb 6-1: config 0 descriptor?? [ 947.961821][ T5707] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 948.129221][T19449] FAULT_INJECTION: forcing a failure. [ 948.129221][T19449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.129257][T19449] CPU: 1 UID: 0 PID: 19449 Comm: syz.0.4864 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 948.129282][T19449] Tainted: [L]=SOFTLOCKUP [ 948.129289][T19449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.129301][T19449] Call Trace: [ 948.129308][T19449] [ 948.129316][T19449] dump_stack_lvl+0xe8/0x150 [ 948.129349][T19449] should_fail_ex+0x467/0x600 [ 948.129382][T19449] _copy_from_user+0x2d/0xb0 [ 948.129405][T19449] __se_sys_add_key+0x2af/0x420 [ 948.129437][T19449] ? __pfx___se_sys_add_key+0x10/0x10 [ 948.129473][T19449] ? __x64_sys_add_key+0x20/0xc0 [ 948.129499][T19449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.129521][T19449] do_syscall_64+0x174/0x580 [ 948.129545][T19449] ? trace_irq_disable+0x3b/0x140 [ 948.129571][T19449] ? clear_bhb_loop+0x70/0xc0 [ 948.129593][T19449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.129611][T19449] RIP: 0033:0x7fc2f31be0d9 [ 948.129628][T19449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.129645][T19449] RSP: 002b:00007fc2f1416028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 948.129665][T19449] RAX: ffffffffffffffda RBX: 00007fc2f3445fa0 RCX: 00007fc2f31be0d9 [ 948.129680][T19449] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000080 [ 948.129697][T19449] RBP: 00007fc2f1416090 R08: ffffffffffffffff R09: 0000000000000000 [ 948.129711][T19449] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 948.129723][T19449] R13: 00007fc2f3446038 R14: 00007fc2f3445fa0 R15: 00007ffcb9339dd8 [ 948.129752][T19449] [ 948.129870][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 948.188586][ T5692] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 948.222295][ T5692] usb 7-1: device descriptor read/8, error -71 [ 948.312572][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 948.313760][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 948.371610][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.371639][ T10] usb 2-1: Product: syz [ 948.371655][ T10] usb 2-1: Manufacturer: syz [ 948.371725][ T10] usb 2-1: SerialNumber: syz [ 948.446216][ T10] usb 2-1: config 0 descriptor?? [ 948.466855][ T10] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 948.477318][ T5692] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 948.498015][ T5692] usb 7-1: device descriptor read/8, error -71 [ 948.585357][ T5707] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 948.607735][ T5692] usb usb7-port1: unable to enumerate USB device [ 948.675937][ T5707] usb 6-1: USB disconnect, device number 22 [ 948.976914][T19461] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4868'. [ 949.125819][ T10] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 949.143824][ T10] usb 2-1: USB disconnect, device number 63 [ 949.233694][ T37] kauditd_printk_skb: 193 callbacks suppressed [ 949.233713][ T37] audit: type=1326 audit(1786779264.415:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.235285][ T37] audit: type=1326 audit(1786779264.415:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.235512][ T37] audit: type=1326 audit(1786779264.415:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.235642][ T37] audit: type=1326 audit(1786779264.415:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.235896][ T37] audit: type=1326 audit(1786779264.415:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.236006][ T37] audit: type=1326 audit(1786779264.415:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.236147][ T37] audit: type=1326 audit(1786779264.415:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.236478][ T37] audit: type=1326 audit(1786779264.415:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.236625][ T37] audit: type=1326 audit(1786779264.415:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.236862][ T37] audit: type=1326 audit(1786779264.415:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19469 comm="syz.5.4872" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6666e0d9 code=0x7ffc0000 [ 949.239941][T19470] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4872'. [ 949.263374][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4872'. [ 949.297495][T19470] vlan2: entered promiscuous mode [ 949.297520][T19470] syz_tun: entered promiscuous mode [ 949.299123][T19470] vlan2: entered allmulticast mode [ 949.299157][T19470] syz_tun: entered allmulticast mode [ 949.657889][T18715] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 949.809545][T18715] usb 1-1: Using ep0 maxpacket: 8 [ 949.810396][T18715] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 949.814144][T18715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.814193][T18715] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.814222][T18715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.844330][T18715] usb 1-1: config 0 descriptor?? [ 949.888154][T18715] qmi_wwan 1-1:0.0: skipping garbage [ 949.888338][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 949.890865][T18715] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22 [ 950.084816][T18715] usb 1-1: USB disconnect, device number 81 [ 951.217346][ T5714] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 951.293894][T19497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4876'. [ 951.293924][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4876'. [ 951.295477][T19497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4876'. [ 951.367405][ T5714] usb 7-1: Using ep0 maxpacket: 8 [ 951.369093][ T5714] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 951.372716][ T5714] usb 7-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.373085][ T5714] usb 7-1: config 0 interface 0 has no altsetting 0 [ 951.373122][ T5714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.435661][ T5714] usb 7-1: config 0 descriptor?? [ 952.071199][T19503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4880'. [ 952.782693][ T5714] arvo 0003:1E7D:30D4.000A: unknown global tag 0xe [ 952.782718][ T5714] arvo 0003:1E7D:30D4.000A: item 0 2 1 14 parsing failed [ 952.783384][ T5714] arvo 0003:1E7D:30D4.000A: parse failed [ 952.783451][ T5714] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 953.042599][ T10] usb 7-1: USB disconnect, device number 25 [ 953.221778][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'. [ 953.277398][ T5714] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 953.440313][ T5714] usb 1-1: descriptor type invalid, skip [ 953.440334][ T5714] usb 1-1: descriptor type invalid, skip [ 953.440347][ T5714] usb 1-1: descriptor type invalid, skip [ 953.440359][ T5714] usb 1-1: descriptor type invalid, skip [ 953.440372][ T5714] usb 1-1: descriptor type invalid, skip [ 953.440935][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 953.440970][ T5714] usb 1-1: New USB device found, idVendor=0f11, idProduct=1040, bcdDevice=f7.a7 [ 953.442447][ T5714] usb 1-1: config 255 has an invalid interface number: 234 but max is 2 [ 953.442472][ T5714] usb 1-1: config 255 has an invalid interface number: 80 but max is 2 [ 953.442491][ T5714] usb 1-1: config 255 has an invalid interface number: 218 but max is 2 [ 953.442512][ T5714] usb 1-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 953.442530][ T5714] usb 1-1: config 255 has an invalid interface number: 64 but max is 2 [ 953.442550][ T5714] usb 1-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 953.442568][ T5714] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 953.442591][ T5714] usb 1-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 953.442612][ T5714] usb 1-1: config 255 has no interface number 0 [ 953.442628][ T5714] usb 1-1: config 255 has no interface number 1 [ 953.442644][ T5714] usb 1-1: config 255 has no interface number 2 [ 953.442660][ T5714] usb 1-1: config 255 has no interface number 3 [ 953.442746][ T5714] usb 1-1: config 255 interface 234 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 953.442773][ T5714] usb 1-1: config 255 interface 234 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 953.442796][ T5714] usb 1-1: config 255 interface 234 altsetting 10 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 953.442822][ T5714] usb 1-1: config 255 interface 234 altsetting 10 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 953.442854][ T5714] usb 1-1: too many endpoints for config 255 interface 80 altsetting 9: 75, using maximum allowed: 30 [ 953.442924][ T5714] usb 1-1: config 255 interface 80 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 953.442950][ T5714] usb 1-1: too many endpoints for config 255 interface 218 altsetting 11: 150, using maximum allowed: 30 [ 953.443006][ T5714] usb 1-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 953.443028][ T5714] usb 1-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 953.443065][ T5714] usb 1-1: config 255 interface 218 altsetting 11 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 953.443091][ T5714] usb 1-1: config 255 interface 218 altsetting 11 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 953.443118][ T5714] usb 1-1: config 255 interface 218 altsetting 11 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 953.443143][ T5714] usb 1-1: config 255 interface 218 altsetting 11 has a duplicate endpoint with address 0x82, skipping [ 953.443165][ T5714] usb 1-1: config 255 interface 218 altsetting 11 has 7 endpoint descriptors, different from the interface descriptor's value: 150 [ 953.443204][ T5714] usb 1-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x6, skipping [ 953.443226][ T5714] usb 1-1: config 255 interface 64 altsetting 132 has a duplicate endpoint with address 0x5, skipping [ 953.443249][ T5714] usb 1-1: config 255 interface 64 altsetting 132 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 953.443283][ T5714] usb 1-1: config 255 interface 234 has no altsetting 0 [ 953.443301][ T5714] usb 1-1: config 255 interface 80 has no altsetting 0 [ 953.443319][ T5714] usb 1-1: config 255 interface 218 has no altsetting 0 [ 953.443337][ T5714] usb 1-1: config 255 interface 64 has no altsetting 0 [ 953.445643][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.445666][ T5714] usb 1-1: Product: 〉 [ 953.445681][ T5714] usb 1-1: Manufacturer: ⁼䂦ᕜ끕牥踑ᱶ옩ᖴ᙭ʝ찟瓷⛺隺ߍ绳ᐨ躌㜒粂咊瀎宽ᅻ攌ᵭ묱ᖁ╔裸꼶ꋒ㤢蠊ⴏ쉓䶉뛁雃᜝⛵맫켥ᅯ [ 953.445703][ T5714] usb 1-1: SerialNumber: න驕⎈鲊螉썃瀞胦倜㌩얌⌂⛟쑁֘∳뽞馸 [ 953.669857][ T5707] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 953.820234][ T5707] usb 5-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 953.826983][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.827008][ T5707] usb 5-1: Product: syz [ 953.827023][ T5707] usb 5-1: Manufacturer: syz [ 953.827037][ T5707] usb 5-1: SerialNumber: syz [ 953.858391][ T5714] ldusb 1-1:255.234: Interrupt in endpoint not found [ 953.976922][ T5714] ldusb 1-1:255.80: Interrupt in endpoint not found [ 954.043338][ T5714] ldusb 1-1:255.218: Interrupt in endpoint not found [ 954.112588][ T5714] ldusb 1-1:255.64: Interrupt in endpoint not found [ 954.313849][ T5707] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 954.345827][T19515] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4885'. [ 954.350003][ T5714] usb 1-1: USB disconnect, device number 82 [ 954.396603][T19517] ntfs3(nullb0): Primary boot signature is not NTFS. [ 954.438077][T19517] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 954.726146][T19526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4888'. [ 954.849438][ T5707] usb 5-1: USB disconnect, device number 67 [ 954.928211][ T5715] usb 6-1: [ 954.928211][ T5715] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 954.947007][T16023] ------------[ cut here ]------------ [ 954.947022][T16023] in_task() && kcov_mode_enabled(mode) [ 954.947041][T16023] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#0: kworker/u8:19/16023 [ 954.947095][T16023] Modules linked in: [ 954.947123][T16023] CPU: 0 UID: 0 PID: 16023 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 954.947153][T16023] Tainted: [L]=SOFTLOCKUP [ 954.947162][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.947215][T16023] Workqueue: events_unbound cfg80211_wiphy_work [ 954.947252][T16023] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 954.947282][T16023] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c b7 fc 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 f7 69 7f 09 89 c0 48 c7 c7 c0 f2 9e [ 954.947300][T16023] RSP: 0018:ffffc9000689f9f8 EFLAGS: 00010202 [ 954.947318][T16023] RAX: 0000000000000000 RBX: ffff88802cf85d00 RCX: 0000000080000001 [ 954.947334][T16023] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8bca5920 [ 954.947349][T16023] RBP: ffff888038cb13c0 R08: ffffffff8b477b80 R09: 0000000000000000 [ 954.947364][T16023] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 954.947379][T16023] R13: ffff888063059ef8 R14: 0000000000000000 R15: ffff8880500d1180 [ 954.947395][T16023] FS: 0000000000000000(0000) GS:ffff888125c3a000(0000) knlGS:0000000000000000 [ 954.947412][T16023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.947427][T16023] CR2: 00007f63f58d9274 CR3: 000000006145e000 CR4: 00000000003526f0 [ 954.947446][T16023] Call Trace: [ 954.947455][T16023] [ 954.947469][T16023] ieee80211_iface_work+0x20c/0x1010 [ 954.947522][T16023] cfg80211_wiphy_work+0x29e/0x420 [ 954.947558][T16023] ? process_scheduled_works+0xa20/0x14e0 [ 954.947584][T16023] process_scheduled_works+0xa8e/0x14e0 [ 954.947640][T16023] ? __pfx_process_scheduled_works+0x10/0x10 [ 954.947673][T16023] ? assign_work+0x3cf/0x5d0 [ 954.947702][T16023] worker_thread+0xa47/0xfb0 [ 954.947758][T16023] kthread+0x388/0x470 [ 954.947787][T16023] ? __pfx_worker_thread+0x10/0x10 [ 954.947810][T16023] ? __pfx_kthread+0x10/0x10 [ 954.947841][T16023] ret_from_fork+0x514/0xb70 [ 954.947874][T16023] ? __pfx_ret_from_fork+0x10/0x10 [ 954.947904][T16023] ? __switch_to+0xc89/0x1420 [ 954.947934][T16023] ? __pfx_kthread+0x10/0x10 [ 954.947965][T16023] ret_from_fork_asm+0x1a/0x30 [ 954.948015][T16023] [ 954.948035][T16023] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 954.948053][T16023] CPU: 0 UID: 0 PID: 16023 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 954.948084][T16023] Tainted: [L]=SOFTLOCKUP [ 954.948092][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.948106][T16023] Workqueue: events_unbound cfg80211_wiphy_work [ 954.948137][T16023] Call Trace: [ 954.948146][T16023] [ 954.948154][T16023] vpanic+0x56c/0xa60 [ 954.948186][T16023] ? __pfx__printk+0x10/0x10 [ 954.948209][T16023] ? __pfx_vpanic+0x10/0x10 [ 954.948237][T16023] ? is_bpf_text_address+0x292/0x2b0 [ 954.948260][T16023] ? is_bpf_text_address+0x26/0x2b0 [ 954.948292][T16023] panic+0xc5/0xd0 [ 954.948325][T16023] ? __pfx_panic+0x10/0x10 [ 954.948365][T16023] ? ret_from_fork_asm+0x1a/0x30 [ 954.948401][T16023] __warn+0x315/0x4c0 [ 954.948430][T16023] ? kcov_remote_start+0x5bb/0x6f0 [ 954.948462][T16023] ? kcov_remote_start+0x5bb/0x6f0 [ 954.948497][T16023] __report_bug+0x276/0x570 [ 954.948527][T16023] ? kcov_remote_start+0x5bb/0x6f0 [ 954.948560][T16023] ? __pfx___report_bug+0x10/0x10 [ 954.948590][T16023] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 954.948617][T16023] ? rt_spin_lock+0x1e0/0x400 [ 954.948650][T16023] ? rt_spin_lock+0x1e0/0x400 [ 954.948682][T16023] ? kcov_remote_start+0x5bb/0x6f0 [ 954.948710][T16023] report_bug+0x16a/0x220 [ 954.948736][T16023] ? kcov_remote_start+0x5bb/0x6f0 [ 954.948763][T16023] ? kcov_remote_start+0x5bd/0x6f0 [ 954.948790][T16023] handle_bug+0x9c/0x200 [ 954.948819][T16023] exc_invalid_op+0x1a/0x50 [ 954.948847][T16023] asm_exc_invalid_op+0x1a/0x20 [ 954.948868][T16023] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 954.948897][T16023] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c b7 fc 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 f7 69 7f 09 89 c0 48 c7 c7 c0 f2 9e [ 954.948914][T16023] RSP: 0018:ffffc9000689f9f8 EFLAGS: 00010202 [ 954.948932][T16023] RAX: 0000000000000000 RBX: ffff88802cf85d00 RCX: 0000000080000001 [ 954.948947][T16023] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8bca5920 [ 954.948962][T16023] RBP: ffff888038cb13c0 R08: ffffffff8b477b80 R09: 0000000000000000 [ 954.948977][T16023] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 954.948991][T16023] R13: ffff888063059ef8 R14: 0000000000000000 R15: ffff8880500d1180 [ 954.949014][T16023] ? rt_spin_lock+0x1e0/0x400 [ 954.949052][T16023] ? kcov_remote_start+0xda/0x6f0 [ 954.949084][T16023] ieee80211_iface_work+0x20c/0x1010 [ 954.949123][T16023] cfg80211_wiphy_work+0x29e/0x420 [ 954.949159][T16023] ? process_scheduled_works+0xa20/0x14e0 [ 954.949183][T16023] process_scheduled_works+0xa8e/0x14e0 [ 954.949237][T16023] ? __pfx_process_scheduled_works+0x10/0x10 [ 954.949279][T16023] ? assign_work+0x3cf/0x5d0 [ 954.949310][T16023] worker_thread+0xa47/0xfb0 [ 954.949366][T16023] kthread+0x388/0x470 [ 954.949395][T16023] ? __pfx_worker_thread+0x10/0x10 [ 954.949418][T16023] ? __pfx_kthread+0x10/0x10 [ 954.949448][T16023] ret_from_fork+0x514/0xb70 [ 954.949481][T16023] ? __pfx_ret_from_fork+0x10/0x10 [ 954.949518][T16023] ? __switch_to+0xc89/0x1420 [ 954.949547][T16023] ? __pfx_kthread+0x10/0x10 [ 954.949578][T16023] ret_from_fork_asm+0x1a/0x30 [ 954.949628][T16023] [ 954.949948][T16023] Kernel Offset: disabled