last executing test programs: 1m3.654721446s ago: executing program 3 (id=111): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 1m3.50806586s ago: executing program 3 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb0}}, 0x8000000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {}, 0xb}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x4}, 0x805}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) close(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) 1m1.87236163s ago: executing program 3 (id=115): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) 1m0.111414663s ago: executing program 3 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r0, 0xc7d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', @random="18faff000020"}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x81, 0xc3}}}}}]}}]}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008081) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}]}, &(0x7f0000000100)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e23, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}}, 0x90) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_EMULATED_CPUID(r6, 0x4018aee2, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r5, 0x80, 0x200, 0x8, 0x9aa, 0x9}, 0x14) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000280)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB='@\a(\x00'], 0x0}, 0x0) 57.678170959s ago: executing program 3 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f00000010c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x24, r1, 0x1, 0x4070bd28, 0x2, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x18) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x80000000, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1000, 0xfd, 0x0, 0x8, 0x40003, 0x80000000, 0x8, 0x2, 0x0, 0x20001e58, 0x1, 0x0, 0x7, 0xffffffff, 0xa6b5, 0x24a05ffd, 0xffffffff]}) ioctl$COMEDI_DEVINFO(r4, 0x80b06401, &(0x7f00000003c0)) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2f, &(0x7f00000000c0)=0xffffffff, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d3, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) inotify_rm_watch(r7, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904"], 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x10, 0x5381}, 0xc) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xfffffc24) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f00000006c0)=""/207, 0xcf}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f00000009c0)=""/184, 0xb8}, {&(0x7f00000002c0)=""/180, 0xb4}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000a80)=""/136, 0x88}], 0x9}, 0x10102) recvmsg$kcm(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 56.20208556s ago: executing program 3 (id=132): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x301}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x82, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x10000}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x10) 55.159012071s ago: executing program 32 (id=132): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x301}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x82, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x10000}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x10) 10.193298701s ago: executing program 4 (id=263): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000540)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000540)={0x6, 'bridge0\x00', {0x1}, 0xdd3c}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) (async) 7.746077936s ago: executing program 4 (id=272): set_mempolicy(0x8001, 0x0, 0xd2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) 5.689555011s ago: executing program 4 (id=279): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000240)=0x7, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000003c0)={'veth1_virt_wifi\x00', {0x2, 0x4e1f, @local}}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r1, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xbd, 0x6, 0x5, 0x80, 0x3, 0x6, 0x2, 0x169, 0x38, 0x3b0, 0x10000, 0x8, 0x20, 0x1, 0x101, 0x9, 0x6}, [{0x4, 0x54de, 0x0, 0x4, 0x4, 0x8000, 0x7, 0x80000001}], "71bc20051af0dce8b1257428a704e1481a2aebf0da4be197dc9499a13fde5a3a591ed1f91221f23e7df169ea241da871e50cca33dbb0f1f4b2f20d210d", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x595) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x9f, 0x4e23, 0x1000, 0xa, 0xe0, 0x20, 0x5c}, {0x40f7, 0xb1, 0xe042, 0x2, 0x4, 0x9, 0x8, 0x2}, {0x3b, 0x3, 0x2, 0x81d}, 0xfffffffd, 0x6e6bc0, 0x3, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010102, 0x3503, 0x4, 0x1, 0x3, 0xe85, 0x81, 0xa}}, 0xe8) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0) 5.353723648s ago: executing program 2 (id=281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) (fail_nth: 4) 5.316723218s ago: executing program 0 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000ffdbdf25120000001c000f80080002000800000008000200f900000008000100470b00000c0007800800010000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x814) connect$unix(r2, &(0x7f0000000540)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'pim6reg0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x7, 0x83, "94c056dc696074d0766f601057eb96e0bd48dced601c5e41d77ea1d94f61b18bc68cead6a3d7689325b2d0691ded0141ea6e46de2774a35e6c9dfdfe34dbda44fc79210679d4b93526384e8c39feb319f2148b98d72ff3d434992bc1d0f239fe461e7898c1c7c2c8977a43381a8f106c72118c98a2ee4f7d33767b4fcb07323623cc41"}}) close_range(0xffffffffffffffff, r2, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0) 4.836489176s ago: executing program 2 (id=283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000005601"], 0x0}, 0x0) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000005e0090008"], 0x4a) 4.398399558s ago: executing program 1 (id=284): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x48000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x49, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (fail_nth: 5) 4.015702624s ago: executing program 1 (id=285): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100000000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) read$ublk_bdev(r1, &(0x7f0000000180)=""/8, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r6, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000a0000e9130000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000043000701feffffff017c00000400458000000000eeccbedd8891caad258f51acc3dc30bf9662dc20d836f1891326"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 3.929994697s ago: executing program 4 (id=286): syz_usb_connect$cdc_ecm(0x1, 0x137, &(0x7f0000001e00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x125, 0x1, 0x1, 0xec, 0x60, 0x4, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x86, {{0xa, 0x24, 0x6, 0x0, 0x0, "98064891dc"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x4, 0x1, 0x7e}, [@mdlm_detail={0xdc, 0x24, 0x13, 0x2, "ae7436233d2ece209b8f0977add0905e57520df2ac99e157f0c9750a8e9269b2cc370b68bd090c00ec108ab4d44c8a3e2484584d122c5d7037327e26141eef4945320533711a630ac3aec131dac7592c62586b4f6cc6b2535e0213346f0effef0bad0e6d26fcab238760e03f4864e64018c5319fddf104e0b7ed070d2ec3ccdf1bdd658fd64f14dc2887d33c46ccc10d3581bfcd1f4976dba4e7c3d12c7502f57b104785ea5d0d34a9fdf1ddc8a0ae41d2e27cefd4c5e237ee65e74f4d231faaaa94791f0a9c7a4a372e014cf5819f14c9c6a78ebf12f0f2"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xe, 0x3c, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x8, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x8e, 0xb}}}}}]}}]}}, &(0x7f0000002200)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x201, 0x1, 0x4, 0x6, 0xdf, 0x2}, 0x21, &(0x7f0000001f80)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0x2, 0xfffd}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x0, 0xc000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x3, 0x8, 0x7, 0x7}]}, 0x6, [{0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xc3, &(0x7f0000002000)=@string={0xc3, 0x3, "e4d201da36a031054bbc203293a468b79728bc29e3c5a21a96e8f29d66b3b62544f338b6f7d520e6866bebd3955e67e113bf6b92ebd6d96772bfa3cf776cb65f18f60f4226abe18ade888a06fa2b06667d81c8884dd6a015eb7075a6e0ed0dc4b2b7b26e932403ef6b59347e2d34ec3bb84f1bbcf19118c86952d3d6acbd0f417019c8fd2981d80258c0f7377ca827a44dbd85126258083fd4633c3bf215d0ebb394203102f91263b510246d03dd7f196cb77e2b7a59c3e8661b4ca3b5ea866f8d"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x41d}}, {0x3d, &(0x7f0000002140)=@string={0x3d, 0x3, "4e8a53fe4f35c4690859eb6cd5d0608890dc17412d3ea1351135a7be8d1f3d5584ab258ec002bcd3aad620eb7bc67a7ae22fb89601362964b3bf0f"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x407}}, {0x9, &(0x7f00000021c0)=@string={0x9, 0x3, "f30a9991e16f01"}}]}) 2.674023322s ago: executing program 1 (id=287): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x1a000) 2.572733112s ago: executing program 1 (id=288): set_mempolicy(0x8001, 0x0, 0xd2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) 2.22893656s ago: executing program 4 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(r0, 0x406, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 2.102071285s ago: executing program 0 (id=290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x88be}, @val={0x2, 0x4, 0x1, 0x1, 0x7, 0xfff3}, @eth={@empty, @empty, @void, {@generic={0x883e, "b83150aba1d54c462216568711f923f6d40dec4829d1421090c3979820c51cf5dcf43995e13c1943dcc56e2838bbd9b0eb27211fe2721124baee0b3a8740c6ac"}}}}, 0x5c) 2.101682285s ago: executing program 4 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00', 0x127) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.usb0/num_buffers\x00', 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000003c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) write(r0, &(0x7f0000000500)='4\x00', 0x1) close(r0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00') 1.909234929s ago: executing program 2 (id=292): openat(0xffffffffffffffff, 0x0, 0x40042, 0x1) r0 = userfaultfd(0x801) r1 = getpid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000100)) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000180)=""/91, 0x5b}], 0x3, &(0x7f0000008640)=[{&(0x7f0000008480)=""/93, 0x5d}], 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000200)) 1.648909581s ago: executing program 2 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200000000fcdbdf250a"], 0x18}}, 0x8000) (async) epoll_create1(0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c7082, 0x1) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) (async) r5 = dup3(r2, r3, 0x0) r6 = userfaultfd(0x1) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0xf8, 0x8000000000001, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000b, 0x11, r8, 0x180000000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040), 0x2100801, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616edbfb2603df555a6a3aabf9", @ANYBLOB="c6f59f4504e37f50fa00cd1d5dee2817b7c2e81f93f40d912a0a7c772c0bcbabfbfe875259d52ebd0aa0df00987b22ce3d1ffde3170f4eb304eab7969ba3a1607451926ce71c177bd78da41261478960ad27686845b78b83e5e86390b6b694575d255e630be69fa20e20b492d04ba7e94b4b6ce878015ca0db89b906375a1b9bc57553d82b8a4f62ffd9754cc5e0959cba4eaae38a0498fa8596022903", @ANYBLOB=',wfdno=', @ANYRES64=r6, @ANYRESHEX=r5]) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) listen(r5, 0x80000000) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r11]) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@rand_addr=0x64010100, 0x4e20, 0x8c, 0x4e22, 0x4, 0xa, 0xa0, 0xa0, 0x2f, r9, r11}, {0x64, 0x2, 0x8, 0xfffffffffffff003, 0x2, 0x9, 0x5, 0x101}, {0x8, 0x7fffffff, 0x449f, 0xd62}, 0x0, 0x6e6bb3, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x6c}, 0xa, @in6=@private0, 0x34ff, 0x2, 0x1, 0x4, 0x9, 0xe7, 0xff}}, 0xe8) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) 1.341527195s ago: executing program 2 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 1.265952424s ago: executing program 0 (id=295): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$inet(r2, &(0x7f0000001280)={&(0x7f00000001c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000240)="af330e5826f694258337c482bff8a41417426f", 0x13}, {&(0x7f0000000280)="c220472f52297d0c4a9c4ab7cd94bbda7078c175c69ca09090845e08bb3b732b604f33f9db8b0a26b530483407", 0x2d}, {&(0x7f00000002c0)="0196e2b833c63e15c856b5b9b05bfc815966ddf68e2cb430a5cc9834e2920b5255f0c0b4d09e0088efc5b5d74fb5f9a7903d81dd09827efab398d53fb75cc541e4cc0402ed3a", 0x46}, {&(0x7f0000000340)="35ff58864f4788f487839fefe03f0b215fba6d6a5f5c2a2876", 0x19}, {&(0x7f0000000380)="c6ec4f85af6c8c49d40537813cdaebde53228ebe76f558c72fd1bac774961ec328ec19f70a0f4f9827068d25fa", 0x2d}, {&(0x7f00000003c0)="c68a2b608430c73c10aea9b55154ddb9aab9a44fd5d9286942536257eac9bb064d33f69e0ecac577cd2e83e473c80e0abb37d215e914423467b5e100ae5ef7cf5c3f9c7cf7bebaaf1408d16c99c8437bf50eb603c2467f13c3bd9a7135658782edf086d1e30a4771e1d7ba013f8ded312f95e0f1870abc68b544bdfc574ff2bb753db1d1431fbf7e7b8fbbf0bd72a50cb40541e1bf066229756e255a3298bae83fcb15fa4c1f5edd67be5fb7f52f96010ac7bcb405010250726857fda2e0142d5c919309df081a8dcb12669676aad8405b576f25c730a6e628039477286e14828ca12eb80cfc902da0945ea5c50c73b7b1", 0xf1}], 0x6, &(0x7f0000001200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x50}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRES64=r1], 0x14}, 0x2, 0x34005, 0x0, 0x480}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xca8}}, 0x0) 1.179314184s ago: executing program 2 (id=296): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000340)={0x79, 0x0, 0xae1}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a00000008000200030000000800040003000000140006"], 0x78}, 0x1, 0x2000000}, 0x50) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x5, 0x20000000, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x9}}, 0x20) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, 0x0, 0x200) fchdir(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001980), 0x181000, 0x0) ppoll(&(0x7f0000001a00)=[{r8, 0x100}], 0x1, &(0x7f0000001a40)={0x0, 0x3938700}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0xa2080, 0x80) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r10, r11, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x49, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1.077981486s ago: executing program 1 (id=297): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x8, &(0x7f00000001c0)="11000000", 0x4) prctl$PR_SET_MM_MAP(0x23, 0xf, 0x0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) 922.050428ms ago: executing program 0 (id=298): syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, &(0x7f0000002200)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x201, 0x1, 0x4, 0x6, 0xdf, 0x2}, 0x21, &(0x7f0000001f80)={0x5, 0xf, 0x21, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0x2, 0xfffd}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x0, 0xc000}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x3, 0x8, 0x7, 0x7}]}, 0x6, [{0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xc3, &(0x7f0000002000)=@string={0xc3, 0x3, "e4d201da36a031054bbc203293a468b79728bc29e3c5a21a96e8f29d66b3b62544f338b6f7d520e6866bebd3955e67e113bf6b92ebd6d96772bfa3cf776cb65f18f60f4226abe18ade888a06fa2b06667d81c8884dd6a015eb7075a6e0ed0dc4b2b7b26e932403ef6b59347e2d34ec3bb84f1bbcf19118c86952d3d6acbd0f417019c8fd2981d80258c0f7377ca827a44dbd85126258083fd4633c3bf215d0ebb394203102f91263b510246d03dd7f196cb77e2b7a59c3e8661b4ca3b5ea866f8d"}}, {0x4, &(0x7f0000002100)=@lang_id={0x4, 0x3, 0x41d}}, {0x3d, &(0x7f0000002140)=@string={0x3d, 0x3, "4e8a53fe4f35c4690859eb6cd5d0608890dc17412d3ea1351135a7be8d1f3d5584ab258ec002bcd3aad620eb7bc67a7ae22fb89601362964b3bf0f"}}, {0x4, &(0x7f0000002180)=@lang_id={0x4, 0x3, 0x407}}, {0x9, &(0x7f00000021c0)=@string={0x9, 0x3, "f30a9991e16f01"}}]}) 908.497936ms ago: executing program 1 (id=299): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000003e"], 0x18}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x1000000000, 0x0, 0x200000000000043, 0x2000005, 0x0, 0x2004cb, 0x0, 0x7, 0x68ff, 0x7529, 0x8000000009, 0x803, 0x0, 0x9, 0x2], 0xeeee8000, 0x306780}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xf, 0xb, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0xa, 0x9, 0x1, 0x5, 0x75, 0x6, 0x36, 0xe, 0x2, 0x87}, {0x3000, 0xdddd0000, 0x4, 0x5, 0x3, 0x6, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x54000, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x6, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x6, 0x2, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x9, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0xdddd0000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x8, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0x10, 0x7, 0x9, 0x9, 0x7, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x10000, 0x7}, 0x1, 0x0, 0x3000, 0x2020b4, 0xffffffffffffffff, 0x0, 0x50000, [0x6800000000000000, 0xa4a, 0x3, 0x8]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x9, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x80000000, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e7ea6ff0100000000000000000010e200", [0x0, 0x2]}}) r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000001c00)=@vmx={0x106, 0x0, 0x2080, {0xeeee0000, 0xfe000, {0x3}, 0x1, 0x6}, {"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", "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"}}) 389.963223ms ago: executing program 0 (id=300): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xb28, 0x0, 0x3, 0x7, 0x4, "9f899f070af5f9d2de4f18311b5986a650fa5d"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 0s ago: executing program 0 (id=301): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0xc01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0xc01) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) (async) kernel console output (not intermixed with test programs): : 000000000000002e [ 123.655173][ T6004] RAX: ffffffffffffffda RBX: 00007f8f21ed5fa0 RCX: 00007f8f21c4de99 [ 123.655189][ T6004] RDX: 0000000000004054 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 123.655203][ T6004] RBP: 00007f8f1fea6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.655216][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.655228][ T6004] R13: 00007f8f21ed6038 R14: 00007f8f21ed5fa0 R15: 00007ffd97302bd8 [ 123.655262][ T6004] [ 124.366437][ T5748] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.535769][ T6014] FAULT_INJECTION: forcing a failure. [ 124.535769][ T6014] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 124.535801][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.535821][ T6014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 124.535835][ T6014] Call Trace: [ 124.535843][ T6014] [ 124.535850][ T6014] dump_stack_lvl+0xe8/0x150 [ 124.535881][ T6014] should_fail_ex+0x467/0x600 [ 124.535911][ T6014] _copy_from_user+0x2d/0xb0 [ 124.535930][ T6014] kstrtouint_from_user+0xd6/0x180 [ 124.535958][ T6014] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 124.535981][ T6014] ? __lock_acquire+0x6df/0x2e40 [ 124.536000][ T6014] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 124.536034][ T6014] ? lock_acquire+0x115/0x350 [ 124.536068][ T6014] proc_fail_nth_write+0x8e/0x210 [ 124.536089][ T6014] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.536117][ T6014] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.536137][ T6014] vfs_write+0x29f/0xbb0 [ 124.536169][ T6014] ? __pfx_vfs_write+0x10/0x10 [ 124.536192][ T6014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.536212][ T6014] ? lockdep_hardirqs_on+0x7a/0x110 [ 124.536230][ T6014] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 124.536272][ T6014] ? mutex_lock_nested+0x152/0x1d0 [ 124.536297][ T6014] ? fdget_pos+0x252/0x320 [ 124.536326][ T6014] ksys_write+0x156/0x270 [ 124.536352][ T6014] ? __pfx_ksys_write+0x10/0x10 [ 124.536384][ T6014] do_syscall_64+0x17b/0x530 [ 124.536403][ T6014] ? irqentry_exit+0x10f/0x8f0 [ 124.536422][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.536450][ T6014] ? clear_bhb_loop+0x40/0x90 [ 124.536475][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.536495][ T6014] RIP: 0033:0x7f8f21c0e6ce [ 124.536514][ T6014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.536529][ T6014] RSP: 002b:00007f8f1fe84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.536549][ T6014] RAX: ffffffffffffffda RBX: 00007f8f1fe856c0 RCX: 00007f8f21c0e6ce [ 124.536564][ T6014] RDX: 0000000000000001 RSI: 00007f8f1fe850a0 RDI: 0000000000000006 [ 124.536576][ T6014] RBP: 00007f8f1fe85090 R08: 0000000000000000 R09: 0000000000000000 [ 124.536588][ T6014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.536599][ T6014] R13: 00007f8f21ed6128 R14: 00007f8f21ed6090 R15: 00007ffd97302bd8 [ 124.536630][ T6014] [ 124.575209][ T49] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 124.793207][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.823362][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 124.893026][ T5748] usb 4-1: config 3 has an invalid interface number: 73 but max is 1 [ 124.893056][ T5748] usb 4-1: config 3 has no interface number 1 [ 124.893182][ T5748] usb 4-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 124.893213][ T5748] usb 4-1: config 3 interface 0 has no altsetting 0 [ 124.893233][ T5748] usb 4-1: config 3 interface 73 has no altsetting 0 [ 124.967903][ T49] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.967933][ T49] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 124.967954][ T49] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 124.967975][ T49] usb 3-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.968000][ T49] usb 3-1: config 1 interface 0 has no altsetting 0 [ 124.973287][ T49] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.973311][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.973330][ T49] usb 3-1: Product: Н [ 124.973343][ T49] usb 3-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 124.973370][ T49] usb 3-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 125.112898][ T6010] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 125.125063][ T5748] usb 4-1: string descriptor 0 read error: -22 [ 125.125437][ T5748] usb 4-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 125.125460][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.364828][ T49] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 125.405736][ T49] usb 3-1: USB disconnect, device number 9 [ 125.642600][ T5748] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 125.651494][ T5748] dvb_usb_af9035 4-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 125.675073][ T6002] tmpfs: Bad value for 'mpol' [ 126.188207][ T835] usb 4-1: USB disconnect, device number 9 [ 126.626046][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 126.627260][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 126.627319][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 126.732948][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.786039][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 126.849946][ T9] usb 2-1: USB disconnect, device number 7 [ 127.296375][ T5748] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 127.447358][ T5748] usb 4-1: Using ep0 maxpacket: 16 [ 127.494927][ T5748] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.494960][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.494981][ T5748] usb 4-1: Product: syz [ 127.494996][ T5748] usb 4-1: Manufacturer: syz [ 127.495012][ T5748] usb 4-1: SerialNumber: syz [ 127.546162][ T5748] r8152-cfgselector 4-1: Unknown version 0x0000 [ 127.546190][ T5748] r8152-cfgselector 4-1: config 0 descriptor?? [ 127.568277][ T5782] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 127.725952][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 127.753925][ T5782] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.753971][ T5782] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.754911][ T5782] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.816993][ T5782] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 127.817024][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.817055][ T5782] usb 3-1: Product: syz [ 127.817069][ T5782] usb 3-1: Manufacturer: syz [ 127.818727][ T5782] usb 3-1: SerialNumber: syz [ 127.896552][ T5748] r8152-cfgselector 4-1: Unknown version 0x0000 [ 127.897457][ T5748] r8152-cfgselector 4-1: No union descriptors [ 127.961435][ T5782] usb 3-1: config 0 descriptor?? [ 128.026090][ T5748] r8152-cfgselector 4-1: USB disconnect, device number 10 [ 128.465705][ T5610] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.615581][ T5610] usb 1-1: Using ep0 maxpacket: 32 [ 128.618061][ T5610] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 128.618086][ T5610] usb 1-1: config 0 has no interface number 0 [ 128.618128][ T5610] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 128.618151][ T5610] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.618172][ T5610] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 128.618195][ T5610] usb 1-1: config 0 interface 196 has no altsetting 0 [ 128.676734][ T5610] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 128.676760][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.676778][ T5610] usb 1-1: Product: syz [ 128.676791][ T5610] usb 1-1: Manufacturer: syz [ 128.676805][ T5610] usb 1-1: SerialNumber: syz [ 128.769370][ T5610] usb 1-1: config 0 descriptor?? [ 128.771240][ T6045] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.772446][ T5782] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 128.772495][ T5782] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 128.878507][ T5782] usb 3-1: USB disconnect, device number 10 [ 129.115237][ T5748] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 129.193788][ T5610] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 129.194110][ T5610] ipheth 1-1:0.196: probe with driver ipheth failed with error -22 [ 129.280081][ T5748] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.280104][ T5748] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 129.280119][ T5748] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.280134][ T5748] usb 2-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.280153][ T5748] usb 2-1: config 1 interface 0 has no altsetting 0 [ 129.282846][ T5748] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.282873][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.282897][ T5748] usb 2-1: Product: Н [ 129.282907][ T5748] usb 2-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 129.282929][ T5748] usb 2-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 129.429752][ T6051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.474640][ T5782] usb 1-1: USB disconnect, device number 8 [ 129.700854][ T5748] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 129.801703][ T5748] usb 2-1: USB disconnect, device number 8 [ 130.048747][ T6063] FAULT_INJECTION: forcing a failure. [ 130.048747][ T6063] name failslab, interval 1, probability 0, space 0, times 0 [ 130.048783][ T6063] CPU: 1 UID: 0 PID: 6063 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.048808][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.048821][ T6063] Call Trace: [ 130.048829][ T6063] [ 130.048838][ T6063] dump_stack_lvl+0xe8/0x150 [ 130.048871][ T6063] should_fail_ex+0x467/0x600 [ 130.048905][ T6063] should_failslab+0xa8/0x100 [ 130.048926][ T6063] ? sctp_chunkify+0x5a/0x260 [ 130.048957][ T6063] kmem_cache_alloc_noprof+0x9e/0x680 [ 130.048988][ T6063] ? __alloc_skb+0x276/0x7a0 [ 130.049016][ T6063] ? __alloc_skb+0x276/0x7a0 [ 130.049044][ T6063] ? sctp_chunkify+0x5a/0x260 [ 130.049081][ T6063] sctp_chunkify+0x5a/0x260 [ 130.049115][ T6063] _sctp_make_chunk+0x122/0x290 [ 130.049150][ T6063] sctp_make_strreset_tsnreq+0x8d/0x3d0 [ 130.049188][ T6063] ? __pfx_sctp_make_strreset_tsnreq+0x10/0x10 [ 130.049228][ T6063] ? __local_bh_enable+0x1e1/0x2f0 [ 130.049258][ T6063] sctp_send_reset_assoc+0x10c/0x510 [ 130.049283][ T6063] ? sctp_id2assoc+0x81/0x260 [ 130.049319][ T6063] sctp_setsockopt+0x560/0x12c0 [ 130.049352][ T6063] ? sock_common_setsockopt+0x36/0xc0 [ 130.049378][ T6063] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.049412][ T6063] do_sock_setsockopt+0x17c/0x1b0 [ 130.049449][ T6063] __x64_sys_setsockopt+0x143/0x1b0 [ 130.049495][ T6063] do_syscall_64+0x17b/0x530 [ 130.049517][ T6063] ? irqentry_exit+0x10f/0x8f0 [ 130.049539][ T6063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.049562][ T6063] ? clear_bhb_loop+0x40/0x90 [ 130.049590][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.049613][ T6063] RIP: 0033:0x7efceb1cde99 [ 130.049633][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.049651][ T6063] RSP: 002b:00007efce9426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.049674][ T6063] RAX: ffffffffffffffda RBX: 00007efceb455fa0 RCX: 00007efceb1cde99 [ 130.049690][ T6063] RDX: 0000000000000078 RSI: 0000000000000084 RDI: 0000000000000003 [ 130.049703][ T6063] RBP: 00007efce9426090 R08: 0000000000000004 R09: 0000000000000000 [ 130.049717][ T6063] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 130.049731][ T6063] R13: 00007efceb456038 R14: 00007efceb455fa0 R15: 00007ffd93b6f538 [ 130.049766][ T6063] [ 130.105398][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 130.375257][ T10] usb 3-1: device descriptor read/64, error -71 [ 130.563760][ T6068] netlink: 216 bytes leftover after parsing attributes in process `syz.3.94'. [ 130.563785][ T6068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.94'. [ 130.615354][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 130.748765][ T10] usb 3-1: device descriptor read/64, error -71 [ 130.861513][ T10] usb usb3-port1: attempt power cycle [ 131.205405][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 131.226132][ T10] usb 3-1: device descriptor read/8, error -71 [ 131.505235][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 131.531690][ T10] usb 3-1: device descriptor read/8, error -71 [ 131.595364][ T5610] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.653331][ T10] usb usb3-port1: unable to enumerate USB device [ 131.723005][ T6081] FAULT_INJECTION: forcing a failure. [ 131.723005][ T6081] name failslab, interval 1, probability 0, space 0, times 0 [ 131.723054][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 131.723078][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 131.723091][ T6081] Call Trace: [ 131.723098][ T6081] [ 131.723107][ T6081] dump_stack_lvl+0xe8/0x150 [ 131.723137][ T6081] should_fail_ex+0x467/0x600 [ 131.723170][ T6081] should_failslab+0xa8/0x100 [ 131.723191][ T6081] ? skb_clone+0x212/0x3a0 [ 131.723223][ T6081] kmem_cache_alloc_noprof+0x9e/0x680 [ 131.723254][ T6081] ? skb_clone+0x212/0x3a0 [ 131.723294][ T6081] skb_clone+0x212/0x3a0 [ 131.723329][ T6081] __netlink_deliver_tap+0x410/0x880 [ 131.723372][ T6081] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.723407][ T6081] netlink_deliver_tap+0x19c/0x1b0 [ 131.723442][ T6081] netlink_unicast+0x7b8/0x990 [ 131.723484][ T6081] netlink_sendmsg+0x813/0xb40 [ 131.723532][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.723567][ T6081] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 131.723605][ T6081] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 131.723639][ T6081] ? arch_stack_walk+0xfb/0x150 [ 131.723674][ T6081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.723705][ T6081] sock_sendmsg_nosec+0x13a/0x180 [ 131.723732][ T6081] ____sys_sendmsg+0x565/0x870 [ 131.723772][ T6081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.723821][ T6081] ? import_iovec+0x73/0xa0 [ 131.723858][ T6081] ___sys_sendmsg+0x2a5/0x360 [ 131.723889][ T6081] ? __lock_acquire+0x6df/0x2e40 [ 131.723914][ T6081] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.724003][ T6081] ? __fget_files+0x2a/0x420 [ 131.724025][ T6081] ? __fget_files+0x3a8/0x420 [ 131.724059][ T6081] __x64_sys_sendmsg+0x1b7/0x290 [ 131.724097][ T6081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.724152][ T6081] do_syscall_64+0x17b/0x530 [ 131.724175][ T6081] ? irqentry_exit+0x10f/0x8f0 [ 131.724196][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.724220][ T6081] ? clear_bhb_loop+0x40/0x90 [ 131.724247][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.724269][ T6081] RIP: 0033:0x7fa035e6de99 [ 131.724290][ T6081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.724309][ T6081] RSP: 002b:00007fa0340c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.724332][ T6081] RAX: ffffffffffffffda RBX: 00007fa0360f5fa0 RCX: 00007fa035e6de99 [ 131.724354][ T6081] RDX: 0000000000048000 RSI: 0000200000000280 RDI: 0000000000000003 [ 131.724369][ T6081] RBP: 00007fa0340c6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.724382][ T6081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.724396][ T6081] R13: 00007fa0360f6038 R14: 00007fa0360f5fa0 R15: 00007ffcd77bfc88 [ 131.724430][ T6081] [ 131.810638][ T5610] usb 1-1: Using ep0 maxpacket: 16 [ 131.975304][ T5610] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 131.975337][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.975358][ T5610] usb 1-1: Product: syz [ 131.975373][ T5610] usb 1-1: Manufacturer: syz [ 131.975387][ T5610] usb 1-1: SerialNumber: syz [ 132.083285][ T5610] r8152-cfgselector 1-1: Unknown version 0x0000 [ 132.083312][ T5610] r8152-cfgselector 1-1: config 0 descriptor?? [ 132.314354][ T5610] r8152-cfgselector 1-1: Unknown version 0x0000 [ 132.314892][ T5610] r8152-cfgselector 1-1: No union descriptors [ 132.355413][ T5610] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 132.900527][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900934][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.095391][ T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 133.286432][ T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.286467][ T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 133.286491][ T9] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.286515][ T9] usb 4-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.286551][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 133.311577][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.311658][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.311686][ T9] usb 4-1: Product: Н [ 133.311738][ T9] usb 4-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 133.311823][ T9] usb 4-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 133.579649][ T6093] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 133.821694][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 133.858306][ T9] usb 4-1: USB disconnect, device number 11 [ 134.315420][ T5610] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 134.468467][ T5610] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 134.468512][ T5610] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.468537][ T5610] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 134.468562][ T5610] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.468592][ T5610] usb 2-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.00 [ 134.468626][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.554233][ T5610] usb 2-1: config 0 descriptor?? [ 134.615300][ T49] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 134.771577][ T49] usb 3-1: unable to get BOS descriptor or descriptor too short [ 134.783375][ T49] usb 3-1: config 3 has an invalid interface number: 73 but max is 1 [ 134.783406][ T49] usb 3-1: config 3 has no interface number 1 [ 134.783756][ T49] usb 3-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 134.783790][ T49] usb 3-1: config 3 interface 0 has no altsetting 0 [ 134.784056][ T49] usb 3-1: config 3 interface 73 has no altsetting 0 [ 134.853176][ T49] usb 3-1: string descriptor 0 read error: -22 [ 134.853403][ T49] usb 3-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 134.853428][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.930607][ T49] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 134.930762][ T49] dvb_usb_af9035 3-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 135.042483][ T5610] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0 [ 135.042531][ T5610] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0 [ 135.042559][ T5610] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0 [ 135.042588][ T5610] logitech-hidpp-device 0003:046D:C088.0001: unknown main item tag 0x0 [ 135.155507][ T6120] tmpfs: Bad value for 'mpol' [ 135.253338][ T5610] logitech-hidpp-device 0003:046D:C088.0001: hidraw0: USB HID v0.00 Device [HID 046d:c088] on usb-dummy_hcd.1-1/input0 [ 135.386759][ T5605] IPVS: starting estimator thread 0... [ 135.510097][ T6133] IPVS: using max 8 ests per chain, 19200 per kthread [ 135.841858][ T5782] usb 2-1: USB disconnect, device number 9 [ 135.857151][ T9] usb 3-1: USB disconnect, device number 15 [ 136.515269][ T5748] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.606249][ T6151] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 136.665213][ T5748] usb 4-1: Using ep0 maxpacket: 16 [ 136.674746][ T5748] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 136.674777][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.674799][ T5748] usb 4-1: Product: syz [ 136.674814][ T5748] usb 4-1: Manufacturer: syz [ 136.674829][ T5748] usb 4-1: SerialNumber: syz [ 136.745283][ T5610] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.752181][ T5748] r8152-cfgselector 4-1: Unknown version 0x0000 [ 136.752208][ T5748] r8152-cfgselector 4-1: config 0 descriptor?? [ 136.905305][ T5610] usb 3-1: Using ep0 maxpacket: 8 [ 136.908383][ T5610] usb 3-1: unable to get BOS descriptor or descriptor too short [ 136.910020][ T5610] usb 3-1: config 2 has an invalid interface number: 99 but max is 0 [ 136.910043][ T5610] usb 3-1: config 2 has no interface number 0 [ 136.910086][ T5610] usb 3-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 136.910112][ T5610] usb 3-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 136.910135][ T5610] usb 3-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.910158][ T5610] usb 3-1: config 2 interface 99 has no altsetting 0 [ 136.913368][ T5610] usb 3-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 136.913397][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.913418][ T5610] usb 3-1: Product: syz [ 136.913434][ T5610] usb 3-1: Manufacturer: syz [ 136.913450][ T5610] usb 3-1: SerialNumber: syz [ 137.043982][ T5748] r8152-cfgselector 4-1: Unknown version 0x0000 [ 137.044577][ T5748] r8152-cfgselector 4-1: No union descriptors [ 137.214417][ T5748] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 137.603424][ T5610] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.99/input/input5 [ 137.869681][ T5748] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 138.059431][ T5748] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.059466][ T5748] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 138.059490][ T5748] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.059514][ T5748] usb 1-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.059542][ T5748] usb 1-1: config 1 interface 0 has no altsetting 0 [ 138.076937][ T5610] usb 3-1: USB disconnect, device number 16 [ 138.124137][ T5748] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.124167][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.124188][ T5748] usb 1-1: Product: Н [ 138.124202][ T5748] usb 1-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 138.124231][ T5748] usb 1-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 138.223367][ T6158] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.282377][ T6164] do_umount: task=syz.3.122[6164] propagate_mount_busy()!=0 [ 138.418853][ T6166] FAULT_INJECTION: forcing a failure. [ 138.418853][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 138.418886][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.2.123 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.418908][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 138.418919][ T6166] Call Trace: [ 138.418927][ T6166] [ 138.418935][ T6166] dump_stack_lvl+0xe8/0x150 [ 138.418965][ T6166] should_fail_ex+0x467/0x600 [ 138.418996][ T6166] should_failslab+0xa8/0x100 [ 138.419018][ T6166] ? skb_clone+0x212/0x3a0 [ 138.419049][ T6166] kmem_cache_alloc_noprof+0x9e/0x680 [ 138.419089][ T6166] ? skb_clone+0x212/0x3a0 [ 138.419123][ T6166] skb_clone+0x212/0x3a0 [ 138.419156][ T6166] __netlink_deliver_tap+0x410/0x880 [ 138.419196][ T6166] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.419226][ T6166] netlink_deliver_tap+0x19c/0x1b0 [ 138.419257][ T6166] netlink_unicast+0x7b8/0x990 [ 138.419293][ T6166] netlink_sendmsg+0x813/0xb40 [ 138.419332][ T6166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.419363][ T6166] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 138.419395][ T6166] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 138.419424][ T6166] ? arch_stack_walk+0xfb/0x150 [ 138.419458][ T6166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.419487][ T6166] sock_sendmsg_nosec+0x13a/0x180 [ 138.419511][ T6166] ____sys_sendmsg+0x565/0x870 [ 138.419548][ T6166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.419585][ T6166] ? import_iovec+0x73/0xa0 [ 138.419618][ T6166] ___sys_sendmsg+0x2a5/0x360 [ 138.419646][ T6166] ? __lock_acquire+0x6df/0x2e40 [ 138.419667][ T6166] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.419734][ T6166] ? __fget_files+0x2a/0x420 [ 138.419753][ T6166] ? __fget_files+0x3a8/0x420 [ 138.419783][ T6166] __x64_sys_sendmsg+0x1b7/0x290 [ 138.419814][ T6166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.419860][ T6166] do_syscall_64+0x17b/0x530 [ 138.419879][ T6166] ? irqentry_exit+0x10f/0x8f0 [ 138.419897][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.419917][ T6166] ? clear_bhb_loop+0x40/0x90 [ 138.419941][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.419960][ T6166] RIP: 0033:0x7f1cb777de99 [ 138.419977][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.419992][ T6166] RSP: 002b:00007f1cb59d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.420013][ T6166] RAX: ffffffffffffffda RBX: 00007f1cb7a05fa0 RCX: 00007f1cb777de99 [ 138.420026][ T6166] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 138.420038][ T6166] RBP: 00007f1cb59d6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.420049][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.420060][ T6166] R13: 00007f1cb7a06038 R14: 00007f1cb7a05fa0 R15: 00007ffee7338ba8 [ 138.420089][ T6166] [ 138.767955][ T5748] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 138.797280][ T5748] usb 1-1: USB disconnect, device number 10 [ 138.845238][ T5782] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 138.997491][ T5782] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 138.997541][ T5782] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.997570][ T5782] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 138.997598][ T5782] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.997631][ T5782] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.00 [ 138.997654][ T5782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.074459][ T5782] usb 4-1: config 0 descriptor?? [ 139.081336][ T6164] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 139.529528][ T6173] pimreg: entered allmulticast mode [ 139.637151][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 139.637563][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 139.640552][ T5782] usbhid 4-1:0.0: can't add hid device: -71 [ 139.640678][ T5782] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.702098][ T5782] usb 4-1: USB disconnect, device number 13 [ 139.841615][ T6180] netlink: 'syz.1.127': attribute type 29 has an invalid length. [ 139.844512][ T6180] netlink: 'syz.1.127': attribute type 29 has an invalid length. [ 139.853009][ T6180] netlink: 'syz.1.127': attribute type 29 has an invalid length. [ 139.879256][ T6180] FAULT_INJECTION: forcing a failure. [ 139.879256][ T6180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.879290][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 139.879314][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 139.879326][ T6180] Call Trace: [ 139.879334][ T6180] [ 139.879343][ T6180] dump_stack_lvl+0xe8/0x150 [ 139.879374][ T6180] should_fail_ex+0x467/0x600 [ 139.879407][ T6180] _copy_to_user+0x31/0xb0 [ 139.879441][ T6180] simple_read_from_buffer+0xe1/0x170 [ 139.879467][ T6180] proc_fail_nth_read+0x1be/0x230 [ 139.879493][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.879518][ T6180] ? rw_verify_area+0x250/0x4d0 [ 139.879544][ T6180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.879565][ T6180] vfs_read+0x219/0xa90 [ 139.879596][ T6180] ? __pfx_vfs_read+0x10/0x10 [ 139.879622][ T6180] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.879643][ T6180] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.879663][ T6180] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 139.879682][ T6180] ? mutex_lock_nested+0x152/0x1d0 [ 139.879710][ T6180] ? fdget_pos+0x252/0x320 [ 139.879739][ T6180] ksys_read+0x156/0x270 [ 139.879765][ T6180] ? __pfx_ksys_read+0x10/0x10 [ 139.879797][ T6180] do_syscall_64+0x17b/0x530 [ 139.879817][ T6180] ? irqentry_exit+0x10f/0x8f0 [ 139.879836][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.879856][ T6180] ? clear_bhb_loop+0x40/0x90 [ 139.879899][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.879920][ T6180] RIP: 0033:0x7fa035e2e6ce [ 139.879939][ T6180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.879958][ T6180] RSP: 002b:00007fa0340c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.879980][ T6180] RAX: ffffffffffffffda RBX: 00007fa0340c66c0 RCX: 00007fa035e2e6ce [ 139.879996][ T6180] RDX: 000000000000000f RSI: 00007fa0340c60a0 RDI: 0000000000000004 [ 139.880010][ T6180] RBP: 00007fa0340c6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.880023][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.880036][ T6180] R13: 00007fa0360f6038 R14: 00007fa0360f5fa0 R15: 00007ffcd77bfc88 [ 139.880069][ T6180] [ 140.074952][ T5748] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 140.297628][ T5599] do_umount: task=syz-executor[5599] propagate_mount_busy()!=0 [ 140.297972][ T5599] do_umount: task=syz-executor[5599] propagate_mount_busy()!=0 [ 140.341870][ T5748] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.344277][ T5748] usb 1-1: config 3 has an invalid interface number: 73 but max is 1 [ 140.344304][ T5748] usb 1-1: config 3 has no interface number 1 [ 140.344365][ T5748] usb 1-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 140.344394][ T5748] usb 1-1: config 3 interface 0 has no altsetting 0 [ 140.344413][ T5748] usb 1-1: config 3 interface 73 has no altsetting 0 [ 140.413981][ T5748] usb 1-1: string descriptor 0 read error: -22 [ 140.414134][ T5748] usb 1-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 140.414161][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.469712][ T5748] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 140.469801][ T5748] dvb_usb_af9035 1-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 140.681345][ T6175] tmpfs: Bad value for 'mpol' [ 140.955350][ T5610] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 141.027849][ T5757] usb 1-1: USB disconnect, device number 11 [ 141.133136][ T5610] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 141.133166][ T5610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.153668][ T5610] usb 3-1: config 0 descriptor?? [ 141.184877][ T5605] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.223705][ T5610] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 141.356389][ T5605] usb 2-1: Using ep0 maxpacket: 16 [ 141.382447][ T5605] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.382479][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.382501][ T5605] usb 2-1: Product: syz [ 141.382578][ T5605] usb 2-1: Manufacturer: syz [ 141.382595][ T5605] usb 2-1: SerialNumber: syz [ 141.475547][ T5605] r8152-cfgselector 2-1: Unknown version 0x0000 [ 141.475575][ T5605] r8152-cfgselector 2-1: config 0 descriptor?? [ 141.691368][ T5605] r8152-cfgselector 2-1: Unknown version 0x0000 [ 141.731672][ T5605] r8152-cfgselector 2-1: No union descriptors [ 141.858352][ T5605] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 143.087523][ T6203] FAULT_INJECTION: forcing a failure. [ 143.087523][ T6203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.087560][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.087587][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.087600][ T6203] Call Trace: [ 143.087608][ T6203] [ 143.087617][ T6203] dump_stack_lvl+0xe8/0x150 [ 143.087650][ T6203] should_fail_ex+0x467/0x600 [ 143.087685][ T6203] _copy_from_user+0x2d/0xb0 [ 143.087708][ T6203] kstrtouint_from_user+0xd6/0x180 [ 143.087741][ T6203] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 143.087768][ T6203] ? __lock_acquire+0x6df/0x2e40 [ 143.087790][ T6203] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 143.087837][ T6203] ? lock_acquire+0x115/0x350 [ 143.087876][ T6203] proc_fail_nth_write+0x8e/0x210 [ 143.087901][ T6203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.087934][ T6203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.087958][ T6203] vfs_write+0x29f/0xbb0 [ 143.087994][ T6203] ? __pfx_vfs_write+0x10/0x10 [ 143.088022][ T6203] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.088045][ T6203] ? lockdep_hardirqs_on+0x7a/0x110 [ 143.088066][ T6203] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 143.088087][ T6203] ? mutex_lock_nested+0x152/0x1d0 [ 143.088115][ T6203] ? fdget_pos+0x252/0x320 [ 143.088147][ T6203] ksys_write+0x156/0x270 [ 143.088177][ T6203] ? __pfx_ksys_write+0x10/0x10 [ 143.088214][ T6203] do_syscall_64+0x17b/0x530 [ 143.088236][ T6203] ? irqentry_exit+0x10f/0x8f0 [ 143.088254][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.088273][ T6203] ? clear_bhb_loop+0x40/0x90 [ 143.088296][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.088329][ T6203] RIP: 0033:0x7fa035e2e6ce [ 143.088349][ T6203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.088368][ T6203] RSP: 002b:00007fa0340a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.088390][ T6203] RAX: ffffffffffffffda RBX: 00007fa0340a56c0 RCX: 00007fa035e2e6ce [ 143.088406][ T6203] RDX: 0000000000000001 RSI: 00007fa0340a50a0 RDI: 0000000000000005 [ 143.088420][ T6203] RBP: 00007fa0340a5090 R08: 0000000000000000 R09: 0000000000000000 [ 143.088433][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.088445][ T6203] R13: 00007fa0360f6128 R14: 00007fa0360f6090 R15: 00007ffcd77bfc88 [ 143.088479][ T6203] [ 143.460528][ T5610] gp8psk: usb out operation failed. [ 143.460564][ T5610] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 143.460605][ T5610] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 143.640662][ T4914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.672080][ T4914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.690755][ T4914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.693521][ T4914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.718905][ T4914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.986641][ T5748] usb 3-1: USB disconnect, device number 17 [ 144.075058][ T3387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.740640][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.138'. [ 144.898263][ T6210] syz.2.136 (6210) used greatest stack depth: 17080 bytes left [ 144.986618][ T5798] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 145.156046][ T5798] usb 2-1: Using ep0 maxpacket: 32 [ 145.166638][ T5798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.166748][ T5798] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 145.166807][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.174217][ T5798] usb 2-1: config 0 descriptor?? [ 145.228691][ T3387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.385992][ T6236] FAULT_INJECTION: forcing a failure. [ 145.385992][ T6236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.386024][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.386057][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.386067][ T6236] Call Trace: [ 145.386073][ T6236] [ 145.386081][ T6236] dump_stack_lvl+0xe8/0x150 [ 145.386108][ T6236] should_fail_ex+0x467/0x600 [ 145.386133][ T6236] _copy_to_iter+0x59c/0x1810 [ 145.386168][ T6236] ? __pfx__copy_to_iter+0x10/0x10 [ 145.386197][ T6236] ? rt_spin_unlock+0x157/0x200 [ 145.386223][ T6236] __skb_datagram_iter+0xf8/0x980 [ 145.386252][ T6236] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 145.386281][ T6236] skb_copy_datagram_iter+0xb5/0x240 [ 145.386308][ T6236] netlink_recvmsg+0x2b9/0xa50 [ 145.386339][ T6236] ? __pfx_netlink_recvmsg+0x10/0x10 [ 145.386367][ T6236] ? __lock_acquire+0x6df/0x2e40 [ 145.386388][ T6236] ? __pfx_netlink_recvmsg+0x10/0x10 [ 145.386415][ T6236] sock_recvmsg_nosec+0x130/0x170 [ 145.386437][ T6236] ____sys_recvmsg+0x242/0x4f0 [ 145.386468][ T6236] ? __pfx_____sys_recvmsg+0x10/0x10 [ 145.386503][ T6236] ? import_iovec+0x73/0xa0 [ 145.386530][ T6236] ___sys_recvmsg+0x213/0x5a0 [ 145.386559][ T6236] ? __pfx____sys_recvmsg+0x10/0x10 [ 145.386587][ T6236] ? lock_acquire+0x115/0x350 [ 145.386637][ T6236] ? __fget_files+0x3a8/0x420 [ 145.386662][ T6236] do_recvmmsg+0x320/0x7f0 [ 145.386694][ T6236] ? __pfx_do_recvmmsg+0x10/0x10 [ 145.386720][ T6236] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.386744][ T6236] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 145.386777][ T6236] __x64_sys_recvmmsg+0x198/0x250 [ 145.386805][ T6236] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 145.386840][ T6236] do_syscall_64+0x17b/0x530 [ 145.386856][ T6236] ? irqentry_exit+0x10f/0x8f0 [ 145.386870][ T6236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.386885][ T6236] ? clear_bhb_loop+0x40/0x90 [ 145.386904][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.386919][ T6236] RIP: 0033:0x7f1cb777de99 [ 145.386934][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.386946][ T6236] RSP: 002b:00007f1cb59b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 145.386963][ T6236] RAX: ffffffffffffffda RBX: 00007f1cb7a06090 RCX: 00007f1cb777de99 [ 145.386975][ T6236] RDX: 0000000000000003 RSI: 0000200000004680 RDI: 0000000000000003 [ 145.386984][ T6236] RBP: 00007f1cb59b5090 R08: 0000000000000000 R09: 0000000000000000 [ 145.386994][ T6236] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 145.387003][ T6236] R13: 00007f1cb7a06128 R14: 00007f1cb7a06090 R15: 00007ffee7338ba8 [ 145.387029][ T6236] [ 145.813327][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813364][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813390][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813417][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813456][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813484][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813511][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813538][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813564][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.813591][ T5798] hid-picolcd 0003:04D8:C002.0002: unknown main item tag 0x0 [ 145.935556][ T60] Bluetooth: hci1: command tx timeout [ 146.105749][ T5798] hid-picolcd 0003:04D8:C002.0002: No report with id 0x11 found [ 146.182927][ T5798] usb 2-1: USB disconnect, device number 11 [ 146.250073][ T3387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.405287][ T5748] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 146.515320][ T5610] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.536095][ T3387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.558983][ T5748] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 146.559018][ T5748] usb 3-1: can't read configurations, error -22 [ 146.675363][ T5610] usb 1-1: Using ep0 maxpacket: 16 [ 146.681901][ T5610] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 146.681922][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.681936][ T5610] usb 1-1: Product: syz [ 146.681947][ T5610] usb 1-1: Manufacturer: syz [ 146.681957][ T5610] usb 1-1: SerialNumber: syz [ 146.685347][ T5748] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.740221][ T5610] r8152-cfgselector 1-1: Unknown version 0x0000 [ 146.740244][ T5610] r8152-cfgselector 1-1: config 0 descriptor?? [ 146.867867][ T5748] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 146.867902][ T5748] usb 3-1: can't read configurations, error -22 [ 146.868459][ T5748] usb usb3-port1: attempt power cycle [ 146.962447][ T5610] r8152-cfgselector 1-1: Unknown version 0x0000 [ 146.963030][ T5610] r8152-cfgselector 1-1: No union descriptors [ 147.007761][ T5610] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 147.206725][ T5748] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 147.228912][ T5748] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 147.228945][ T5748] usb 3-1: can't read configurations, error -22 [ 147.367354][ T5748] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 147.393007][ T5748] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 147.393045][ T5748] usb 3-1: can't read configurations, error -22 [ 147.403062][ T5748] usb usb3-port1: unable to enumerate USB device [ 147.656576][ T6262] netlink: 100 bytes leftover after parsing attributes in process `syz.0.145'. [ 147.927217][ T5610] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 148.007027][ T60] Bluetooth: hci1: command tx timeout [ 148.079675][ T5610] usb 1-1: Using ep0 maxpacket: 8 [ 148.091946][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.092000][ T5610] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.092025][ T5610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.163217][ T5610] usb 1-1: config 0 descriptor?? [ 148.466927][ T5610] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 148.468445][ T3387] bridge_slave_1: left allmulticast mode [ 148.468610][ T3387] bridge_slave_1: left promiscuous mode [ 148.516291][ T3387] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.645831][ T6262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.646462][ T6262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.840899][ T3387] bridge_slave_0: left allmulticast mode [ 148.841148][ T3387] bridge_slave_0: left promiscuous mode [ 148.890427][ T3387] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.079416][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 149.079820][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 149.153641][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 149.154123][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 149.213168][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 149.213363][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 149.235476][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 149.235913][ T6262] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 149.235938][ T6262] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 149.392385][ T10] usb 1-1: USB disconnect, device number 13 [ 150.085492][ T60] Bluetooth: hci1: command tx timeout [ 151.188125][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.266855][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.308861][ T3387] bond0 (unregistering): Released all slaves [ 151.368840][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.369247][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.369583][ T6205] bridge_slave_0: entered allmulticast mode [ 151.373201][ T6205] bridge_slave_0: entered promiscuous mode [ 151.471825][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.531708][ T6302] FAULT_INJECTION: forcing a failure. [ 151.531708][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 151.531742][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.1.150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.531765][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.531778][ T6302] Call Trace: [ 151.531787][ T6302] [ 151.531796][ T6302] dump_stack_lvl+0xe8/0x150 [ 151.531829][ T6302] should_fail_ex+0x467/0x600 [ 151.531861][ T6302] should_failslab+0xa8/0x100 [ 151.531884][ T6302] __kmalloc_noprof+0xfb/0x790 [ 151.531924][ T6302] ? tomoyo_encode+0x2ad/0x570 [ 151.531951][ T6302] ? tomoyo_encode+0x2ad/0x570 [ 151.531986][ T6302] tomoyo_encode+0x2ad/0x570 [ 151.532021][ T6302] tomoyo_realpath_from_path+0x5fa/0x640 [ 151.532060][ T6302] ? tomoyo_path_number_perm+0x219/0x5f0 [ 151.532086][ T6302] tomoyo_path_number_perm+0x246/0x5f0 [ 151.532114][ T6302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.532140][ T6302] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.532198][ T6302] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.532220][ T6302] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.532257][ T6302] ? __fget_files+0x2a/0x420 [ 151.532283][ T6302] ? __fget_files+0x3a8/0x420 [ 151.532304][ T6302] ? __fget_files+0x2a/0x420 [ 151.532329][ T6302] security_file_ioctl+0xb9/0x260 [ 151.532356][ T6302] __se_sys_ioctl+0x47/0x170 [ 151.532386][ T6302] do_syscall_64+0x17b/0x530 [ 151.532406][ T6302] ? irqentry_exit+0x10f/0x8f0 [ 151.532425][ T6302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.532447][ T6302] ? clear_bhb_loop+0x40/0x90 [ 151.532473][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.532494][ T6302] RIP: 0033:0x7fa035e6de99 [ 151.532513][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.532531][ T6302] RSP: 002b:00007fa0340c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.532557][ T6302] RAX: ffffffffffffffda RBX: 00007fa0360f5fa0 RCX: 00007fa035e6de99 [ 151.532572][ T6302] RDX: 0000200000000040 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 151.532586][ T6302] RBP: 00007fa0340c6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.532606][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.532618][ T6302] R13: 00007fa0360f6038 R14: 00007fa0360f5fa0 R15: 00007ffcd77bfc88 [ 151.532652][ T6302] [ 151.532697][ T6302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.839087][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.839396][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.839629][ T6205] bridge_slave_1: entered allmulticast mode [ 151.842126][ T6205] bridge_slave_1: entered promiscuous mode [ 152.165769][ T60] Bluetooth: hci1: command tx timeout [ 152.505270][ T5798] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 152.675299][ T5798] usb 3-1: Using ep0 maxpacket: 16 [ 152.679632][ T5798] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 152.679661][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.679683][ T5798] usb 3-1: Product: syz [ 152.679696][ T5798] usb 3-1: Manufacturer: syz [ 152.679711][ T5798] usb 3-1: SerialNumber: syz [ 152.725621][ T5798] r8152-cfgselector 3-1: Unknown version 0x0000 [ 152.725646][ T5798] r8152-cfgselector 3-1: config 0 descriptor?? [ 152.952349][ T5798] r8152-cfgselector 3-1: Unknown version 0x0000 [ 152.952875][ T5798] r8152-cfgselector 3-1: No union descriptors [ 152.985496][ T5798] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 153.205937][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.289858][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.630859][ T6327] FAULT_INJECTION: forcing a failure. [ 153.630859][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 153.630893][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.2.157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.630923][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.630935][ T6327] Call Trace: [ 153.630942][ T6327] [ 153.630951][ T6327] dump_stack_lvl+0xe8/0x150 [ 153.630981][ T6327] should_fail_ex+0x467/0x600 [ 153.631011][ T6327] should_failslab+0xa8/0x100 [ 153.631033][ T6327] __kvmalloc_node_noprof+0x176/0x880 [ 153.631064][ T6327] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 153.631095][ T6327] ? io_alloc_cache_init+0x42/0x140 [ 153.631119][ T6327] ? io_alloc_cache_init+0x42/0x140 [ 153.631152][ T6327] io_alloc_cache_init+0x42/0x140 [ 153.631181][ T6327] io_ring_ctx_alloc+0x518/0xba0 [ 153.631211][ T6327] io_uring_create+0x50/0x990 [ 153.631236][ T6327] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 153.631268][ T6327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 153.631295][ T6327] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 153.631338][ T6327] ? __pfx_ksys_write+0x10/0x10 [ 153.631364][ T6327] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 153.631392][ T6327] do_syscall_64+0x17b/0x530 [ 153.631411][ T6327] ? irqentry_exit+0x10f/0x8f0 [ 153.631431][ T6327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.631450][ T6327] ? clear_bhb_loop+0x40/0x90 [ 153.631475][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.631495][ T6327] RIP: 0033:0x7f1cb777de99 [ 153.631513][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.631528][ T6327] RSP: 002b:00007f1cb59d5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 153.631549][ T6327] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f1cb777de99 [ 153.631564][ T6327] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 00000000000003cd [ 153.631577][ T6327] RBP: 0000200000000500 R08: 0000000000000000 R09: 0000000000000000 [ 153.631589][ T6327] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 153.631602][ T6327] R13: 0000200000000590 R14: 00007f1cb59d5fd8 R15: 0000000000000000 [ 153.631631][ T6327] [ 153.708791][ T6328] Device name not specified. [ 153.708791][ T6328] [ 154.219214][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 154.286141][ T6205] team0: Port device team_slave_0 added [ 154.480418][ T6205] team0: Port device team_slave_1 added [ 154.554303][ T6361] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd32 [ 154.554329][ T6361] FAULT_INJECTION: forcing a failure. [ 154.554329][ T6361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.554356][ T6361] CPU: 0 UID: 0 PID: 6361 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.554378][ T6361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.554389][ T6361] Call Trace: [ 154.554397][ T6361] [ 154.554405][ T6361] dump_stack_lvl+0xe8/0x150 [ 154.554436][ T6361] should_fail_ex+0x467/0x600 [ 154.554467][ T6361] _copy_to_user+0x31/0xb0 [ 154.554488][ T6361] simple_read_from_buffer+0xe1/0x170 [ 154.554514][ T6361] proc_fail_nth_read+0x1be/0x230 [ 154.554540][ T6361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.554581][ T6361] ? rw_verify_area+0x250/0x4d0 [ 154.554607][ T6361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.554627][ T6361] vfs_read+0x219/0xa90 [ 154.554658][ T6361] ? __pfx_vfs_read+0x10/0x10 [ 154.554684][ T6361] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.554704][ T6361] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.554724][ T6361] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.554743][ T6361] ? mutex_lock_nested+0x152/0x1d0 [ 154.554768][ T6361] ? fdget_pos+0x252/0x320 [ 154.554797][ T6361] ksys_read+0x156/0x270 [ 154.554831][ T6361] ? __pfx_ksys_read+0x10/0x10 [ 154.554851][ T6361] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 154.554886][ T6361] do_syscall_64+0x17b/0x530 [ 154.554906][ T6361] ? irqentry_exit+0x10f/0x8f0 [ 154.554925][ T6361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.554945][ T6361] ? clear_bhb_loop+0x40/0x90 [ 154.554969][ T6361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.554989][ T6361] RIP: 0033:0x7f8f21c0e6ce [ 154.555008][ T6361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.555024][ T6361] RSP: 002b:00007f8f1fea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.555045][ T6361] RAX: ffffffffffffffda RBX: 00007f8f1fea66c0 RCX: 00007f8f21c0e6ce [ 154.555060][ T6361] RDX: 000000000000000f RSI: 00007f8f1fea60a0 RDI: 0000000000000005 [ 154.555072][ T6361] RBP: 00007f8f1fea6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.555084][ T6361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.555096][ T6361] R13: 00007f8f21ed6038 R14: 00007f8f21ed5fa0 R15: 00007ffd97302bd8 [ 154.555127][ T6361] [ 154.805265][ T5782] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 154.955678][ T5782] usb 3-1: Using ep0 maxpacket: 32 [ 154.968832][ T5782] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 154.968859][ T5782] usb 3-1: config 0 has no interface number 0 [ 154.972016][ T5782] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 154.972042][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.972062][ T5782] usb 3-1: Product: syz [ 154.972077][ T5782] usb 3-1: Manufacturer: syz [ 154.972091][ T5782] usb 3-1: SerialNumber: syz [ 155.040874][ T5782] usb 3-1: config 0 descriptor?? [ 155.072953][ T5782] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 155.453816][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 155.506273][ T5782] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 155.577072][ T5782] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 155.667048][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 155.671976][ T5798] usb 3-1: USB disconnect, device number 23 [ 155.769018][ T3387] hsr_slave_0: left promiscuous mode [ 155.796319][ T5709] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.812059][ T5798] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 155.825672][ T3387] hsr_slave_1: left promiscuous mode [ 155.831220][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.831314][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.868638][ T3387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.868694][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.904643][ T5798] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 155.910297][ T5798] quatech2 3-1:0.51: device disconnected [ 155.958595][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 155.977216][ T5709] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 155.977244][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.977263][ T5709] usb 1-1: Product: syz [ 155.977276][ T5709] usb 1-1: Manufacturer: syz [ 155.977289][ T5709] usb 1-1: SerialNumber: syz [ 156.072388][ T5709] r8152-cfgselector 1-1: Unknown version 0x0000 [ 156.072416][ T5709] r8152-cfgselector 1-1: config 0 descriptor?? [ 156.278520][ T3387] veth1_macvtap: left promiscuous mode [ 156.292703][ T3387] veth0_macvtap: left promiscuous mode [ 156.312210][ T5709] r8152-cfgselector 1-1: Unknown version 0x0000 [ 156.312505][ T5709] r8152-cfgselector 1-1: No union descriptors [ 156.317972][ T3387] veth1_vlan: left promiscuous mode [ 156.347652][ T5709] r8152-cfgselector 1-1: USB disconnect, device number 14 [ 156.368850][ T3387] veth0_vlan: left promiscuous mode [ 157.145994][ T3387] team0 (unregistering): Port device team_slave_1 removed [ 157.165282][ T5709] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 157.206291][ T3387] team0 (unregistering): Port device team_slave_0 removed [ 157.325365][ T5709] usb 1-1: Using ep0 maxpacket: 8 [ 157.330857][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.330887][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 157.334250][ T5709] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 157.334271][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.334285][ T5709] usb 1-1: Product: syz [ 157.334295][ T5709] usb 1-1: Manufacturer: syz [ 157.334306][ T5709] usb 1-1: SerialNumber: syz [ 157.375889][ T5709] usb 1-1: config 0 descriptor?? [ 157.564193][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.564207][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.564227][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.657775][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 157.700688][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.700700][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.700720][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.884018][ T37] audit: type=1800 audit(1785354281.496:2): pid=6385 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.0.166" name="file1" dev="tmpfs" ino=297 res=0 errno=0 [ 158.024958][ T6205] hsr_slave_0: entered promiscuous mode [ 158.068473][ T6205] hsr_slave_1: entered promiscuous mode [ 158.069967][ T6205] debugfs: 'hsr0' already exists in 'hsr' [ 158.115252][ T5782] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 158.115288][ T6205] Cannot create hsr debugfs directory [ 158.118267][ T5798] usb 1-1: USB disconnect, device number 15 [ 158.221054][ T5709] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.255258][ T5782] usb 3-1: device descriptor read/64, error -71 [ 158.388108][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 158.392891][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.411342][ T5709] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.411382][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.411403][ T5709] usb 2-1: Product: syz [ 158.411418][ T5709] usb 2-1: Manufacturer: syz [ 158.411433][ T5709] usb 2-1: SerialNumber: syz [ 158.466727][ T5709] usb 2-1: config 0 descriptor?? [ 158.482411][ T5709] smsc95xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 158.502110][ T5709] smsc95xx 2-1:0.0: probe with driver smsc95xx failed with error -22 [ 158.505199][ T5782] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 158.635365][ T5782] usb 3-1: device descriptor read/64, error -71 [ 158.745856][ T5782] usb usb3-port1: attempt power cycle [ 158.875455][ T6403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.169'. [ 159.097285][ T5782] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 159.119909][ T5782] usb 3-1: device descriptor read/8, error -71 [ 159.357138][ T5782] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 159.379220][ T5782] usb 3-1: device descriptor read/8, error -71 [ 159.428721][ T6412] loop8: detected capacity change from 0 to 7 [ 159.497099][ T5782] usb usb3-port1: unable to enumerate USB device [ 159.534706][ T6412] Dev loop8: unable to read RDB block 7 [ 159.546852][ T6412] loop8: unable to read partition table [ 159.547436][ T6412] loop8: partition table beyond EOD, truncated [ 159.547534][ T6412] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 159.576399][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 159.842624][ T3387] IPVS: stop unused estimator thread 0... [ 159.894392][ T6205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.944179][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.186700][ T6205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.233672][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.251792][ T6205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.356494][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.357412][ T6205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.441842][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 160.533103][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.566151][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 160.979466][ T5798] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.994933][ T6413] Flush: task=syz.1.167[6413] dev=loop8 state=2 [ 161.067321][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.105372][ T6413] Teardown: task=syz.1.167[6413] dev=loop8 state=2 [ 161.137688][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 161.158292][ T5798] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.158324][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.158344][ T5798] usb 1-1: Product: syz [ 161.158358][ T5798] usb 1-1: Manufacturer: syz [ 161.158372][ T5798] usb 1-1: SerialNumber: syz [ 161.212148][ T5798] r8152-cfgselector 1-1: Unknown version 0x0000 [ 161.212175][ T5798] r8152-cfgselector 1-1: config 0 descriptor?? [ 161.269656][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.295605][ T5610] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 161.339373][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.339552][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.431255][ T5798] r8152-cfgselector 1-1: Unknown version 0x0000 [ 161.433303][ T5798] r8152-cfgselector 1-1: No union descriptors [ 161.455274][ T5610] usb 3-1: Using ep0 maxpacket: 16 [ 161.469132][ T5610] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.469157][ T5610] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.474674][ T5610] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.474702][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.474724][ T5610] usb 3-1: Product: syz [ 161.474739][ T5610] usb 3-1: Manufacturer: syz [ 161.474754][ T5610] usb 3-1: SerialNumber: syz [ 161.513400][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.521805][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.557617][ T5798] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 161.701882][ T10] usb 2-1: USB disconnect, device number 12 [ 161.814604][ T5610] usb 3-1: USB disconnect, device number 28 [ 162.794596][ T6479] tipc: Started in network mode [ 162.794647][ T6479] tipc: Node identity f22824e8ef85, cluster identity 4711 [ 162.794995][ T6479] tipc: Enabled bearer , priority 0 [ 162.818970][ T6479] syzkaller0: mtu less than device minimum [ 162.941902][ T6477] tipc: Disabling bearer [ 163.055407][ T49] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 163.241824][ T49] usb 1-1: not running at top speed; connect to a high speed hub [ 163.256301][ T49] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.256364][ T49] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 163.256411][ T49] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 163.256437][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.346396][ T49] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 163.395422][ T49] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 163.395573][ T49] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 163.422608][ T49] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 163.479266][ T49] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 163.479442][ T49] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 163.519216][ T49] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 163.841350][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.274919][ T5610] usb 1-1: USB disconnect, device number 17 [ 164.313027][ T5610] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 164.335963][ T5610] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 164.337825][ T5610] keyspan 1-1:1.0: device disconnected [ 164.495306][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 164.640224][ T6205] veth0_vlan: entered promiscuous mode [ 164.665996][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 164.692967][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 164.692999][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.693019][ T9] usb 3-1: Product: syz [ 164.693033][ T9] usb 3-1: Manufacturer: syz [ 164.693048][ T9] usb 3-1: SerialNumber: syz [ 164.735738][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 164.735764][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 164.741055][ T6205] veth1_vlan: entered promiscuous mode [ 164.941787][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 164.942299][ T9] r8152-cfgselector 3-1: No union descriptors [ 165.001907][ T6205] veth0_macvtap: entered promiscuous mode [ 165.062598][ T9] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 165.120326][ T6205] veth1_macvtap: entered promiscuous mode [ 165.294455][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.319353][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.371591][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.371796][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.371838][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.371876][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.577830][ T6528] FAULT_INJECTION: forcing a failure. [ 165.577830][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.577863][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.577887][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.577899][ T6528] Call Trace: [ 165.577907][ T6528] [ 165.577915][ T6528] dump_stack_lvl+0xe8/0x150 [ 165.577944][ T6528] should_fail_ex+0x467/0x600 [ 165.577975][ T6528] _copy_to_user+0x31/0xb0 [ 165.578000][ T6528] simple_read_from_buffer+0xe1/0x170 [ 165.578028][ T6528] proc_fail_nth_read+0x1be/0x230 [ 165.578057][ T6528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.578085][ T6528] ? rw_verify_area+0x250/0x4d0 [ 165.578114][ T6528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 165.578138][ T6528] vfs_read+0x219/0xa90 [ 165.578173][ T6528] ? __pfx_vfs_read+0x10/0x10 [ 165.578202][ T6528] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.578225][ T6528] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.578248][ T6528] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.578270][ T6528] ? mutex_lock_nested+0x152/0x1d0 [ 165.578298][ T6528] ? fdget_pos+0x252/0x320 [ 165.578330][ T6528] ksys_read+0x156/0x270 [ 165.578358][ T6528] ? __pfx_ksys_read+0x10/0x10 [ 165.578391][ T6528] ? __pfx_v4l2_ioctl+0x10/0x10 [ 165.578435][ T6528] do_syscall_64+0x17b/0x530 [ 165.578458][ T6528] ? irqentry_exit+0x10f/0x8f0 [ 165.578478][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.578505][ T6528] ? clear_bhb_loop+0x40/0x90 [ 165.578532][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.578555][ T6528] RIP: 0033:0x7f1cb773e6ce [ 165.578576][ T6528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.578595][ T6528] RSP: 002b:00007f1cb59d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 165.578619][ T6528] RAX: ffffffffffffffda RBX: 00007f1cb59d66c0 RCX: 00007f1cb773e6ce [ 165.578635][ T6528] RDX: 000000000000000f RSI: 00007f1cb59d60a0 RDI: 0000000000000004 [ 165.578649][ T6528] RBP: 00007f1cb59d6090 R08: 0000000000000000 R09: 0000000000000000 [ 165.578663][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.578676][ T6528] R13: 00007f1cb7a06038 R14: 00007f1cb7a05fa0 R15: 00007ffee7338ba8 [ 165.578711][ T6528] [ 166.852728][ T6547] comedi comedi1: fl512: I/O base address not correctly aligned [ 167.071811][ T6349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.071832][ T6349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.156798][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.156821][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.203439][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 167.811441][ T5798] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 168.025183][ T5798] usb 3-1: Using ep0 maxpacket: 16 [ 168.049949][ T5798] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.049985][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.050007][ T5798] usb 3-1: Product: syz [ 168.050023][ T5798] usb 3-1: Manufacturer: syz [ 168.050038][ T5798] usb 3-1: SerialNumber: syz [ 168.057434][ T5610] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 168.118826][ T5798] r8152-cfgselector 3-1: Unknown version 0x0000 [ 168.118854][ T5798] r8152-cfgselector 3-1: config 0 descriptor?? [ 168.288546][ T5610] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.288639][ T5610] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 168.288664][ T5610] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.288687][ T5610] usb 5-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.288714][ T5610] usb 5-1: config 1 interface 0 has no altsetting 0 [ 168.360829][ T5610] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.360922][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.360944][ T5610] usb 5-1: Product: Н [ 168.360959][ T5610] usb 5-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 168.360991][ T5610] usb 5-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 168.479609][ T5798] r8152-cfgselector 3-1: Unknown version 0x0000 [ 168.511812][ T5798] r8152-cfgselector 3-1: No union descriptors [ 168.564177][ T6561] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 168.583215][ T5798] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 168.835424][ T5610] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 168.858456][ T5610] usb 5-1: USB disconnect, device number 2 [ 169.596845][ T5783] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 169.756017][ T5783] usb 1-1: Using ep0 maxpacket: 8 [ 169.758498][ T5783] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 169.758521][ T5783] usb 1-1: config 0 has no interface number 0 [ 169.798492][ T5783] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 169.798524][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.798546][ T5783] usb 1-1: Product: syz [ 169.798563][ T5783] usb 1-1: Manufacturer: syz [ 169.798578][ T5783] usb 1-1: SerialNumber: syz [ 169.888697][ T5783] usb 1-1: config 0 descriptor?? [ 170.114639][ T5783] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 170.114744][ T5783] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 170.225564][ T5783] usb 1-1: USB disconnect, device number 18 [ 170.328871][ T6598] Zero length message leads to an empty skb [ 170.735233][ T5709] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.895680][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 170.917675][ T5709] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 170.917707][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.917728][ T5709] usb 5-1: Product: syz [ 170.917743][ T5709] usb 5-1: Manufacturer: syz [ 170.917758][ T5709] usb 5-1: SerialNumber: syz [ 170.973737][ T5709] r8152-cfgselector 5-1: Unknown version 0x0000 [ 170.973764][ T5709] r8152-cfgselector 5-1: config 0 descriptor?? [ 171.138854][ T6613] netlink: 'syz.0.216': attribute type 3 has an invalid length. [ 171.223822][ T5709] r8152-cfgselector 5-1: Unknown version 0x0000 [ 171.224338][ T5709] r8152-cfgselector 5-1: No union descriptors [ 171.256915][ T5709] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 171.476336][ T5783] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 171.780430][ T5783] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.780465][ T5783] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 171.780488][ T5783] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 171.780514][ T5783] usb 3-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.780546][ T5783] usb 3-1: config 1 interface 0 has no altsetting 0 [ 171.785202][ T5709] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 171.841728][ T5783] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.841809][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.841872][ T5783] usb 3-1: Product: Н [ 171.841910][ T5783] usb 3-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 171.841976][ T5783] usb 3-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 171.962121][ T6614] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 172.000365][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.029278][ T5709] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 172.029327][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.029349][ T5709] usb 1-1: Product: syz [ 172.029365][ T5709] usb 1-1: Manufacturer: syz [ 172.029380][ T5709] usb 1-1: SerialNumber: syz [ 172.109100][ T5709] usb 1-1: config 0 descriptor?? [ 172.132962][ T5709] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 172.133040][ T5709] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 172.220586][ T5783] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.280770][ T5783] usb 3-1: USB disconnect, device number 31 [ 172.706668][ T6637] binder: 6635:6637 ioctl c018620c 200000000200 returned -22 [ 172.759080][ T5709] usb 1-1: USB disconnect, device number 19 [ 173.165222][ T5798] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 173.328510][ T5798] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 173.328541][ T5798] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 173.328562][ T5798] usb 5-1: config 220 has no interface number 2 [ 173.328761][ T5798] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 173.328792][ T5798] usb 5-1: config 220 interface 0 has no altsetting 0 [ 173.328812][ T5798] usb 5-1: config 220 interface 76 has no altsetting 0 [ 173.328832][ T5798] usb 5-1: config 220 interface 1 has no altsetting 0 [ 173.431262][ T5798] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 173.431296][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.431317][ T5798] usb 5-1: Product: syz [ 173.431332][ T5798] usb 5-1: Manufacturer: syz [ 173.431348][ T5798] usb 5-1: SerialNumber: syz [ 174.105255][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 174.156297][ T5610] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 174.259682][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 174.335943][ T5610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.340731][ T5610] usb 2-1: config 4 has an invalid interface number: 17 but max is 0 [ 174.340756][ T5610] usb 2-1: config 4 has no interface number 0 [ 174.340796][ T5610] usb 2-1: config 4 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 2047, setting to 1024 [ 174.341202][ T5610] usb 2-1: config 4 interface 17 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024 [ 174.341228][ T5610] usb 2-1: config 4 interface 17 altsetting 2 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 174.341252][ T5610] usb 2-1: config 4 interface 17 has no altsetting 0 [ 174.401607][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 174.401641][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 174.401688][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.460509][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 174.460542][ T9] usb 3-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 174.460574][ T9] usb 3-1: Product: syz [ 174.470323][ T5610] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=bb.9e [ 174.470351][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.470369][ T5610] usb 2-1: Product: syz [ 174.470382][ T5610] usb 2-1: Manufacturer: syz [ 174.470395][ T5610] usb 2-1: SerialNumber: syz [ 174.604444][ T6660] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 174.608415][ T9] usb 3-1: config 0 descriptor?? [ 174.845633][ T5709] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 175.015181][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 175.036352][ T5709] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.036384][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.036817][ T5709] usb 1-1: Product: syz [ 175.036834][ T5709] usb 1-1: Manufacturer: syz [ 175.036850][ T5709] usb 1-1: SerialNumber: syz [ 175.121408][ T5709] r8152-cfgselector 1-1: Unknown version 0x0000 [ 175.121434][ T5709] r8152-cfgselector 1-1: config 0 descriptor?? [ 175.170829][ T5610] kvaser_usb 2-1:4.17: error -ENODEV: Cannot get usb endpoint(s) [ 175.303993][ T5610] usb 2-1: USB disconnect, device number 13 [ 175.307673][ T9] hid-generic 0003:045E:10DA.0003: ignoring exceeding usage max [ 175.318922][ T9] hid-generic 0003:045E:10DA.0003: ignoring exceeding usage max [ 175.344427][ T9] hid-generic 0003:045E:10DA.0003: unbalanced collection at end of report description [ 175.354409][ T9] hid-generic 0003:045E:10DA.0003: probe with driver hid-generic failed with error -22 [ 175.379430][ T5709] r8152-cfgselector 1-1: Unknown version 0x0000 [ 175.392329][ T5709] r8152-cfgselector 1-1: No union descriptors [ 175.478589][ T9] usb 3-1: USB disconnect, device number 32 [ 175.505753][ T5709] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 175.757027][ T5798] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 175.757065][ T5798] uvcvideo 5-1:220.0: No valid video chain found. [ 175.757134][ T5798] usb 5-1: selecting invalid altsetting 0 [ 175.875025][ T5798] usb 5-1: selecting invalid altsetting 0 [ 175.880307][ T5798] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 175.927832][ T5798] usb 5-1: USB disconnect, device number 4 [ 176.855349][ T5709] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 177.018229][ T5709] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.018264][ T5709] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 177.018288][ T5709] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.018312][ T5709] usb 3-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.018340][ T5709] usb 3-1: config 1 interface 0 has no altsetting 0 [ 177.032628][ T5709] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.032655][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.032676][ T5709] usb 3-1: Product: Н [ 177.032689][ T5709] usb 3-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 177.032716][ T5709] usb 3-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 177.217339][ T6684] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.239233][ T6693] hub 8-0:1.0: USB hub found [ 177.243412][ T6693] hub 8-0:1.0: 1 port detected [ 177.499135][ T5709] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 177.574220][ T5709] usb 3-1: USB disconnect, device number 33 [ 178.686606][ T5782] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.750749][ T6717] can0: slcan on ttyS3. [ 178.777995][ T5783] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 178.836807][ T5782] usb 5-1: Using ep0 maxpacket: 16 [ 178.855673][ T5782] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 178.855706][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.855729][ T5782] usb 5-1: Product: syz [ 178.855746][ T5782] usb 5-1: Manufacturer: syz [ 178.855762][ T5782] usb 5-1: SerialNumber: syz [ 178.913090][ T5783] usb 3-1: device descriptor read/64, error -71 [ 178.979189][ T5782] r8152-cfgselector 5-1: Unknown version 0x0000 [ 178.979226][ T5782] r8152-cfgselector 5-1: config 0 descriptor?? [ 179.155385][ T5783] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 179.244310][ T5782] r8152-cfgselector 5-1: Unknown version 0x0000 [ 179.244832][ T5782] r8152-cfgselector 5-1: No union descriptors [ 179.286661][ T5783] usb 3-1: device descriptor read/64, error -71 [ 179.302810][ T5782] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 179.396572][ T5783] usb usb3-port1: attempt power cycle [ 179.740181][ T5783] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 179.768505][ T5783] usb 3-1: device descriptor read/8, error -71 [ 179.814915][ T6715] can0 (unregistered): slcan off ttyS3. [ 180.005264][ T5783] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 180.033900][ T5783] usb 3-1: device descriptor read/8, error -71 [ 180.140163][ T5783] usb usb3-port1: unable to enumerate USB device [ 181.221881][ T37] audit: type=1326 audit(1785354304.826:3): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035e6de99 code=0x7ffc0000 [ 181.225857][ T37] audit: type=1326 audit(1785354304.876:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa035e6de99 code=0x7ffc0000 [ 181.227521][ T37] audit: type=1326 audit(1785354304.876:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa035e2e6ce code=0x7ffc0000 [ 181.296479][ T37] audit: type=1326 audit(1785354304.946:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.296533][ T37] audit: type=1326 audit(1785354304.946:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.347915][ T37] audit: type=1326 audit(1785354304.996:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.348088][ T37] audit: type=1326 audit(1785354304.996:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.414782][ T37] audit: type=1326 audit(1785354305.056:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.529303][ T37] audit: type=1326 audit(1785354305.176:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.616772][ T5783] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.619630][ T37] audit: type=1326 audit(1785354305.266:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6760 comm="syz.1.245" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa035e6db2b code=0x7ffc0000 [ 181.836741][ T5783] usb 2-1: Using ep0 maxpacket: 8 [ 181.891421][ T5783] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.953519][ T5783] usb 2-1: config 1 has an invalid interface number: 8 but max is 0 [ 181.953549][ T5783] usb 2-1: config 1 has no interface number 0 [ 181.953610][ T5783] usb 2-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 181.953633][ T5783] usb 2-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 181.953660][ T5783] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 181.953687][ T5783] usb 2-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 181.953712][ T5783] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 181.953739][ T5783] usb 2-1: config 1 interface 8 altsetting 7 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 181.953766][ T5783] usb 2-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.953793][ T5783] usb 2-1: config 1 interface 8 has no altsetting 0 [ 182.123643][ T5783] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 182.123675][ T5783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.123695][ T5783] usb 2-1: Product: syz [ 182.123708][ T5783] usb 2-1: Manufacturer: syz [ 182.123723][ T5783] usb 2-1: SerialNumber: syz [ 182.405252][ T5782] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 182.442845][ T6779] FAULT_INJECTION: forcing a failure. [ 182.442845][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 182.442888][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.4.249 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.442912][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.442929][ T6779] Call Trace: [ 182.442937][ T6779] [ 182.442954][ T6779] dump_stack_lvl+0xe8/0x150 [ 182.442984][ T6779] should_fail_ex+0x467/0x600 [ 182.443015][ T6779] should_failslab+0xa8/0x100 [ 182.443030][ T6779] __kmalloc_noprof+0xfb/0x790 [ 182.443069][ T6779] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 182.443096][ T6779] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 182.443129][ T6779] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 182.443155][ T6779] ? kernel_text_address+0xa5/0xe0 [ 182.443189][ T6779] genl_family_rcv_msg_doit+0xda/0x340 [ 182.443212][ T6779] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 182.443253][ T6779] ? rcu_is_watching+0x15/0xb0 [ 182.443277][ T6779] ? cap_capable+0x123/0x460 [ 182.443298][ T6779] ? safesetid_security_capable+0xa9/0x1a0 [ 182.443324][ T6779] ? bpf_lsm_capable+0x9/0x20 [ 182.443350][ T6779] ? security_capable+0x74/0x280 [ 182.443373][ T6779] genl_rcv_msg+0x614/0x7a0 [ 182.443411][ T6779] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.443435][ T6779] ? __pfx_nfc_genl_dev_up+0x10/0x10 [ 182.443474][ T6779] netlink_rcv_skb+0x226/0x4a0 [ 182.443530][ T6779] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.443550][ T6779] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.443619][ T6779] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.443650][ T6779] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.443683][ T6779] genl_rcv+0x28/0x40 [ 182.443707][ T6779] netlink_unicast+0x7f5/0x990 [ 182.443735][ T6779] netlink_sendmsg+0x813/0xb40 [ 182.443786][ T6779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.443821][ T6779] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 182.443853][ T6779] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 182.443883][ T6779] ? arch_stack_walk+0xfb/0x150 [ 182.443908][ T6779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.443957][ T6779] sock_sendmsg_nosec+0x13a/0x180 [ 182.444002][ T6779] ____sys_sendmsg+0x565/0x870 [ 182.444066][ T6779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.444119][ T6779] ? import_iovec+0x73/0xa0 [ 182.444160][ T6779] ___sys_sendmsg+0x2a5/0x360 [ 182.444190][ T6779] ? __lock_acquire+0x6df/0x2e40 [ 182.444216][ T6779] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.444291][ T6779] ? __fget_files+0x2a/0x420 [ 182.444315][ T6779] ? __fget_files+0x3a8/0x420 [ 182.444349][ T6779] __x64_sys_sendmsg+0x1b7/0x290 [ 182.444383][ T6779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.444431][ T6779] do_syscall_64+0x17b/0x530 [ 182.444468][ T6779] ? irqentry_exit+0x10f/0x8f0 [ 182.444490][ T6779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.444514][ T6779] ? clear_bhb_loop+0x40/0x90 [ 182.444540][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.444562][ T6779] RIP: 0033:0x7f207b1ede99 [ 182.444586][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.444600][ T6779] RSP: 002b:00007f2079425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.444617][ T6779] RAX: ffffffffffffffda RBX: 00007f207b476090 RCX: 00007f207b1ede99 [ 182.444648][ T6779] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 182.444663][ T6779] RBP: 00007f2079425090 R08: 0000000000000000 R09: 0000000000000000 [ 182.444679][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.444692][ T6779] R13: 00007f207b476128 R14: 00007f207b476090 R15: 00007fff16bade38 [ 182.444725][ T6779] [ 183.049684][ T5782] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.049789][ T5782] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 183.049812][ T5782] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.049835][ T5782] usb 1-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 183.049863][ T5782] usb 1-1: config 1 interface 0 has no altsetting 0 [ 183.160571][ T5782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.160606][ T5782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.160627][ T5782] usb 1-1: Product: Н [ 183.160642][ T5782] usb 1-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 183.160730][ T5782] usb 1-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 183.440672][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 183.565796][ T6768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 183.625243][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 183.682873][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 183.682904][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.682981][ T10] usb 3-1: Product: syz [ 183.682995][ T10] usb 3-1: Manufacturer: syz [ 183.683009][ T10] usb 3-1: SerialNumber: syz [ 183.769456][ T6761] can0: slcan on ttyS3. [ 183.783970][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 183.784013][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 183.872359][ T5782] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 183.964953][ T5782] usb 1-1: USB disconnect, device number 21 [ 184.059590][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 184.060068][ T10] r8152-cfgselector 3-1: No union descriptors [ 184.169528][ T10] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 184.177953][ T5783] cxacru 2-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 184.276109][ T5783] cxacru 2-1:1.8: probe with driver cxacru failed with error -22 [ 184.409268][ T5783] usb 2-1: USB disconnect, device number 14 [ 184.698704][ T6760] can0 (unregistered): slcan off ttyS3. [ 185.097930][ T6798] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 185.098165][ T6798] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 185.117248][ T6798] FAULT_INJECTION: forcing a failure. [ 185.117248][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 185.117284][ T6798] CPU: 0 UID: 0 PID: 6798 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.117308][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 185.117321][ T6798] Call Trace: [ 185.117330][ T6798] [ 185.117338][ T6798] dump_stack_lvl+0xe8/0x150 [ 185.117371][ T6798] should_fail_ex+0x467/0x600 [ 185.117405][ T6798] should_failslab+0xa8/0x100 [ 185.117428][ T6798] __kmalloc_noprof+0xfb/0x790 [ 185.117458][ T6798] ? tomoyo_realpath_from_path+0xef/0x640 [ 185.117491][ T6798] ? tomoyo_realpath_from_path+0xef/0x640 [ 185.117531][ T6798] tomoyo_realpath_from_path+0xef/0x640 [ 185.117572][ T6798] ? tomoyo_path_number_perm+0x219/0x5f0 [ 185.117601][ T6798] tomoyo_path_number_perm+0x246/0x5f0 [ 185.117633][ T6798] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 185.117662][ T6798] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.117704][ T6798] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 185.117727][ T6798] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.117765][ T6798] ? __fget_files+0x2a/0x420 [ 185.117791][ T6798] ? __fget_files+0x3a8/0x420 [ 185.117856][ T6798] ? __fget_files+0x2a/0x420 [ 185.117940][ T6798] security_file_ioctl+0xb9/0x260 [ 185.118033][ T6798] __se_sys_ioctl+0x47/0x170 [ 185.118129][ T6798] do_syscall_64+0x17b/0x530 [ 185.118195][ T6798] ? irqentry_exit+0x10f/0x8f0 [ 185.118249][ T6798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.118305][ T6798] ? clear_bhb_loop+0x40/0x90 [ 185.118398][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.118474][ T6798] RIP: 0033:0x7f1cb777de99 [ 185.118528][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.118582][ T6798] RSP: 002b:00007f1cb59d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.118633][ T6798] RAX: ffffffffffffffda RBX: 00007f1cb7a05fa0 RCX: 00007f1cb777de99 [ 185.118678][ T6798] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 185.118719][ T6798] RBP: 00007f1cb59d6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.118755][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.118799][ T6798] R13: 00007f1cb7a06038 R14: 00007f1cb7a05fa0 R15: 00007ffee7338ba8 [ 185.118889][ T6798] [ 185.123975][ T6798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.643143][ T6799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.187922][ T6827] FAULT_INJECTION: forcing a failure. [ 186.187922][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 186.187968][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.2.256 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.188009][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 186.188023][ T6827] Call Trace: [ 186.188031][ T6827] [ 186.188040][ T6827] dump_stack_lvl+0xe8/0x150 [ 186.188072][ T6827] should_fail_ex+0x467/0x600 [ 186.188105][ T6827] should_failslab+0xa8/0x100 [ 186.188128][ T6827] __kmalloc_noprof+0xfb/0x790 [ 186.188161][ T6827] ? tomoyo_encode+0x2ad/0x570 [ 186.188191][ T6827] ? tomoyo_encode+0x2ad/0x570 [ 186.188229][ T6827] tomoyo_encode+0x2ad/0x570 [ 186.188268][ T6827] tomoyo_realpath_from_path+0x5fa/0x640 [ 186.188306][ T6827] ? tomoyo_path_number_perm+0x219/0x5f0 [ 186.188328][ T6827] tomoyo_path_number_perm+0x246/0x5f0 [ 186.188352][ T6827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.188375][ T6827] ? do_raw_spin_lock+0x12b/0x2f0 [ 186.188409][ T6827] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 186.188427][ T6827] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.188457][ T6827] ? __fget_files+0x2a/0x420 [ 186.188478][ T6827] ? __fget_files+0x3a8/0x420 [ 186.188497][ T6827] ? __fget_files+0x2a/0x420 [ 186.188518][ T6827] security_file_ioctl+0xb9/0x260 [ 186.188540][ T6827] __se_sys_ioctl+0x47/0x170 [ 186.188571][ T6827] do_syscall_64+0x17b/0x530 [ 186.188589][ T6827] ? irqentry_exit+0x10f/0x8f0 [ 186.188604][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.188622][ T6827] ? clear_bhb_loop+0x40/0x90 [ 186.188644][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.188661][ T6827] RIP: 0033:0x7f1cb777de99 [ 186.188677][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.188692][ T6827] RSP: 002b:00007f1cb59d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.188711][ T6827] RAX: ffffffffffffffda RBX: 00007f1cb7a05fa0 RCX: 00007f1cb777de99 [ 186.188724][ T6827] RDX: 00002000000001c0 RSI: 00000000c02064b6 RDI: 0000000000000005 [ 186.188735][ T6827] RBP: 00007f1cb59d6090 R08: 0000000000000000 R09: 0000000000000000 [ 186.188746][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.188756][ T6827] R13: 00007f1cb7a06038 R14: 00007f1cb7a05fa0 R15: 00007ffee7338ba8 [ 186.188783][ T6827] [ 186.194032][ T6827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.601063][ T6832] netlink: 480 bytes leftover after parsing attributes in process `syz.4.258'. [ 186.865286][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 186.985332][ T5610] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 187.036350][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 187.038915][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.038950][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.038990][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 187.039015][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.098788][ T10] usb 2-1: config 0 descriptor?? [ 187.155272][ T5610] usb 3-1: Using ep0 maxpacket: 16 [ 187.161067][ T5610] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 187.161096][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.161117][ T5610] usb 3-1: Product: syz [ 187.161131][ T5610] usb 3-1: Manufacturer: syz [ 187.161145][ T5610] usb 3-1: SerialNumber: syz [ 187.175543][ T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 187.277452][ T5610] r8152-cfgselector 3-1: Unknown version 0x0000 [ 187.277485][ T5610] r8152-cfgselector 3-1: config 0 descriptor?? [ 187.354293][ T9] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.354329][ T9] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 187.354415][ T9] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.354439][ T9] usb 1-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.354470][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 187.446968][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.447235][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.447259][ T9] usb 1-1: Product: Н [ 187.447276][ T9] usb 1-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 187.447309][ T9] usb 1-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 187.548031][ T5610] r8152-cfgselector 3-1: Unknown version 0x0000 [ 187.548516][ T5610] r8152-cfgselector 3-1: No union descriptors [ 187.619760][ T5610] r8152-cfgselector 3-1: USB disconnect, device number 39 [ 187.638321][ T6842] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 187.955962][ T10] hid_parser_main: 31 callbacks suppressed [ 187.955987][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 187.956018][ T10] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 187.964210][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 188.020694][ T9] usb 1-1: USB disconnect, device number 22 [ 188.072639][ T10] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 188.494430][ T6836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.504085][ T6836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.700780][ T9] usb 2-1: USB disconnect, device number 15 [ 189.831546][ T6873] kvm: apic: phys broadcast and lowest prio [ 190.616877][ T6887] 9pnet_virtio: no channels available for device syz [ 190.877200][ T9] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 190.892821][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.036503][ T9] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.036539][ T9] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 191.036563][ T9] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.036587][ T9] usb 3-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.036615][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 191.058960][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.059062][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.059119][ T9] usb 3-1: Product: Н [ 191.059145][ T9] usb 3-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 191.059222][ T9] usb 3-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 191.063804][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 191.190908][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 191.190939][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.190960][ T10] usb 5-1: Product: syz [ 191.190974][ T10] usb 5-1: Manufacturer: syz [ 191.190989][ T10] usb 5-1: SerialNumber: syz [ 191.239281][ T6890] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.254404][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 191.254429][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 191.513804][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 191.560842][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 191.561284][ T10] r8152-cfgselector 5-1: No union descriptors [ 191.621604][ T10] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 191.657088][ T9] usb 3-1: USB disconnect, device number 40 [ 192.071457][ T6910] FAULT_INJECTION: forcing a failure. [ 192.071457][ T6910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.071495][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.2.277 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.071524][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 192.071546][ T6910] Call Trace: [ 192.071555][ T6910] [ 192.071564][ T6910] dump_stack_lvl+0xe8/0x150 [ 192.071597][ T6910] should_fail_ex+0x467/0x600 [ 192.071632][ T6910] _copy_to_user+0x31/0xb0 [ 192.071656][ T6910] drm_ioctl+0x736/0xba0 [ 192.071691][ T6910] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 192.071720][ T6910] ? __pfx_drm_ioctl+0x10/0x10 [ 192.071758][ T6910] ? __fget_files+0x3a8/0x420 [ 192.071780][ T6910] ? __fget_files+0x2a/0x420 [ 192.071807][ T6910] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.071841][ T6910] ? __pfx_drm_ioctl+0x10/0x10 [ 192.071866][ T6910] __se_sys_ioctl+0xff/0x170 [ 192.071898][ T6910] do_syscall_64+0x17b/0x530 [ 192.071921][ T6910] ? irqentry_exit+0x10f/0x8f0 [ 192.071942][ T6910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.071965][ T6910] ? clear_bhb_loop+0x40/0x90 [ 192.071992][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.072015][ T6910] RIP: 0033:0x7f1cb777de99 [ 192.072035][ T6910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.072055][ T6910] RSP: 002b:00007f1cb59d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.072078][ T6910] RAX: ffffffffffffffda RBX: 00007f1cb7a05fa0 RCX: 00007f1cb777de99 [ 192.072095][ T6910] RDX: 0000200000000240 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 192.072110][ T6910] RBP: 00007f1cb59d6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.072125][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.072138][ T6910] R13: 00007f1cb7a06038 R14: 00007f1cb7a05fa0 R15: 00007ffee7338ba8 [ 192.072172][ T6910] [ 192.735733][ T6918] ./bus: Can't lookup blockdev [ 192.772164][ T6921] FAULT_INJECTION: forcing a failure. [ 192.772164][ T6921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.772195][ T6921] CPU: 1 UID: 0 PID: 6921 Comm: syz.2.281 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.772216][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 192.772229][ T6921] Call Trace: [ 192.772235][ T6921] [ 192.772243][ T6921] dump_stack_lvl+0xe8/0x150 [ 192.772270][ T6921] should_fail_ex+0x467/0x600 [ 192.772302][ T6921] _copy_from_iter+0x1d3/0x1660 [ 192.772335][ T6921] ? trace_kmem_cache_alloc+0x29/0xe0 [ 192.772366][ T6921] ? __pfx__copy_from_iter+0x10/0x10 [ 192.772393][ T6921] ? __alloc_skb+0x276/0x7a0 [ 192.772416][ T6921] ? __alloc_skb+0x276/0x7a0 [ 192.772444][ T6921] ? netlink_sendmsg+0x650/0xb40 [ 192.772472][ T6921] ? skb_put+0x112/0x210 [ 192.772499][ T6921] netlink_sendmsg+0x6c0/0xb40 [ 192.772535][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.772565][ T6921] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 192.772597][ T6921] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 192.772625][ T6921] ? arch_stack_walk+0xfb/0x150 [ 192.772657][ T6921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.772685][ T6921] sock_sendmsg_nosec+0x13a/0x180 [ 192.772709][ T6921] ____sys_sendmsg+0x565/0x870 [ 192.772745][ T6921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.772781][ T6921] ? import_iovec+0x73/0xa0 [ 192.772813][ T6921] ___sys_sendmsg+0x2a5/0x360 [ 192.772841][ T6921] ? __lock_acquire+0x6df/0x2e40 [ 192.772863][ T6921] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.772922][ T6921] ? __fget_files+0x2a/0x420 [ 192.772941][ T6921] ? __fget_files+0x3a8/0x420 [ 192.772969][ T6921] __x64_sys_sendmsg+0x1b7/0x290 [ 192.773024][ T6921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.773069][ T6921] do_syscall_64+0x17b/0x530 [ 192.773089][ T6921] ? irqentry_exit+0x10f/0x8f0 [ 192.773107][ T6921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.773126][ T6921] ? clear_bhb_loop+0x40/0x90 [ 192.773149][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.773169][ T6921] RIP: 0033:0x7f1cb777de99 [ 192.773187][ T6921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.773204][ T6921] RSP: 002b:00007f1cb59d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.773224][ T6921] RAX: ffffffffffffffda RBX: 00007f1cb7a05fa0 RCX: 00007f1cb777de99 [ 192.773239][ T6921] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 192.773250][ T6921] RBP: 00007f1cb59d6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.773262][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.773273][ T6921] R13: 00007f1cb7a06038 R14: 00007f1cb7a05fa0 R15: 00007ffee7338ba8 [ 192.773302][ T6921] [ 192.913522][ T5709] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.164461][ T5709] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 193.164493][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.164516][ T5709] usb 5-1: Product: syz [ 193.164530][ T5709] usb 5-1: Manufacturer: syz [ 193.164546][ T5709] usb 5-1: SerialNumber: syz [ 193.248578][ T5709] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 193.250384][ T5709] usb 5-1: UAS is ignored for this device, using usb-storage instead [ 193.250414][ T5709] usb-storage 5-1:1.0: USB Mass Storage device detected [ 193.326119][ T5709] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 193.329635][ T5709] scsi host1: usb-storage 5-1:1.0 [ 193.528361][ T5709] usb 5-1: USB disconnect, device number 7 [ 193.627703][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 193.730321][ T6935] FAULT_INJECTION: forcing a failure. [ 193.730321][ T6935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.730359][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.730383][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 193.730396][ T6935] Call Trace: [ 193.730405][ T6935] [ 193.730414][ T6935] dump_stack_lvl+0xe8/0x150 [ 193.730448][ T6935] should_fail_ex+0x467/0x600 [ 193.730482][ T6935] _copy_to_user+0x31/0xb0 [ 193.730506][ T6935] drm_ioctl+0x736/0xba0 [ 193.730540][ T6935] ? __pfx_drm_mode_setcrtc+0x10/0x10 [ 193.730568][ T6935] ? __pfx_drm_ioctl+0x10/0x10 [ 193.730616][ T6935] ? __fget_files+0x3a8/0x420 [ 193.730638][ T6935] ? __fget_files+0x2a/0x420 [ 193.730667][ T6935] ? bpf_lsm_file_ioctl+0x9/0x20 [ 193.730704][ T6935] ? __pfx_drm_ioctl+0x10/0x10 [ 193.730728][ T6935] __se_sys_ioctl+0xff/0x170 [ 193.730761][ T6935] do_syscall_64+0x17b/0x530 [ 193.730783][ T6935] ? irqentry_exit+0x10f/0x8f0 [ 193.730804][ T6935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.730827][ T6935] ? clear_bhb_loop+0x40/0x90 [ 193.730854][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.730877][ T6935] RIP: 0033:0x7fa035e6de99 [ 193.730897][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.730917][ T6935] RSP: 002b:00007fa0340c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.730952][ T6935] RAX: ffffffffffffffda RBX: 00007fa0360f5fa0 RCX: 00007fa035e6de99 [ 193.730967][ T6935] RDX: 0000200000000240 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 193.730994][ T6935] RBP: 00007fa0340c6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.731007][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.731019][ T6935] R13: 00007fa0360f6038 R14: 00007fa0360f5fa0 R15: 00007ffcd77bfc88 [ 193.731051][ T6935] [ 193.765260][ T9] usb 1-1: device descriptor read/64, error -71 [ 193.975543][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 194.062403][ T6937] netlink: 'syz.1.285': attribute type 49 has an invalid length. [ 194.111571][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 194.125444][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 194.135045][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.135645][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.135670][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.135724][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.135744][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.213468][ T10] usb 3-1: config 0 descriptor?? [ 194.235280][ T9] usb 1-1: device descriptor read/64, error -71 [ 194.273315][ T6937] bond0: (slave bond_slave_0): Releasing backup interface [ 194.330533][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341627][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389491][ T9] usb usb1-port1: attempt power cycle [ 194.557381][ T6937] bond_slave_0: entered promiscuous mode [ 194.557402][ T6937] bond_slave_0: entered allmulticast mode [ 194.585953][ T5709] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 194.626421][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 194.674097][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x3 [ 194.674133][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674158][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674184][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674209][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674235][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674262][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674288][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674314][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.674350][ T10] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 194.764200][ T10] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 194.764237][ T10] microsoft 0003:045E:07DA.0005: no inputs found [ 194.764250][ T10] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 194.808077][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 194.838041][ T9] usb 1-1: device descriptor read/8, error -71 [ 194.863472][ T5709] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.863506][ T5709] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 194.863530][ T5709] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.863553][ T5709] usb 5-1: config 1 interface 0 altsetting 127 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 194.863596][ T5709] usb 5-1: config 1 interface 0 has no altsetting 0 [ 194.919420][ T5709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.919451][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.919472][ T5709] usb 5-1: Product: Н [ 194.919486][ T5709] usb 5-1: Manufacturer: 틤ꀶԱ뱋㈠꒓띨⢗⦼엣᪢鷲덦▶똸헷殆폫底뼓鉫훫柙뽲쾣汷徶䈏ꬦ諡裞ڊ⯺昆腽裈홍ᖠ烫ꙵ쐍랲溲⒓奫縴㐭㯬侸받釱젘剩훓붬䄏ᥰ﷈脩˘쁘㟷꡼ꐧ뵍ኅ塢㼈揔㬼ᗲ钳ㄠ車挒Ⴕ洤᥿띬⭾奺᭦ꍌ澆 [ 194.919517][ T5709] usb 5-1: SerialNumber: 詎﹓㕏槄夈泫탕衠䄗㸭㖡㔑뺧ᾍ唽ꮄ踥ˀ펼횪왻空⿢隸㘁搩뾳 [ 195.010875][ T6940] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 195.075312][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 195.096195][ T9] usb 1-1: device descriptor read/8, error -71 [ 195.151817][ T5588] usb 3-1: USB disconnect, device number 41 [ 195.212365][ T9] usb usb1-port1: unable to enumerate USB device [ 195.252194][ T5709] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 195.275576][ T5709] usb 5-1: USB disconnect, device number 8 [ 195.346002][ T6943] fido_id[6943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 195.735281][ T5757] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 195.917377][ T5757] usb 2-1: Using ep0 maxpacket: 16 [ 195.936641][ T5757] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 195.936673][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.936704][ T5757] usb 2-1: Product: syz [ 195.936720][ T5757] usb 2-1: Manufacturer: syz [ 195.936736][ T5757] usb 2-1: SerialNumber: syz [ 195.997308][ T5757] r8152-cfgselector 2-1: Unknown version 0x0000 [ 195.997326][ T5757] r8152-cfgselector 2-1: config 0 descriptor?? [ 196.056298][ T6966] Mass Storage Function, version: 2009/09/11 [ 196.056340][ T6966] LUN: removable file: (no medium) [ 196.215598][ T5757] r8152-cfgselector 2-1: Unknown version 0x0000 [ 196.216041][ T5757] r8152-cfgselector 2-1: No union descriptors [ 196.236314][ T5757] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 196.347518][ T5588] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 196.450736][ T6972] binder: 6971:6972 ioctl c0306201 200000000080 returned -14 [ 196.452085][ T6973] binder: BINDER_SET_CONTEXT_MGR already set [ 196.453157][ T6973] binder: 6971:6973 ioctl 4018620d 200000000040 returned -16 [ 196.453167][ T6974] binder: 6971:6974 ioctl c0306201 2000000003c0 returned -14 [ 196.519393][ T5588] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 196.519430][ T5588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.519445][ T5588] usb 5-1: Product: syz [ 196.519456][ T5588] usb 5-1: Manufacturer: syz [ 196.519466][ T5588] usb 5-1: SerialNumber: syz [ 196.523418][ T5588] usb 5-1: config 0 descriptor?? [ 196.768533][ T5588] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 196.883167][ T6982] i2c i2c-0: delete_device: Can't parse I2C address [ 196.960138][ T6983] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 196.960160][ T6983] netlink: 'syz.0.295': attribute type 3 has an invalid length. [ 196.960188][ T6983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.295'. [ 197.115191][ T5709] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 197.288370][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.288404][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.288438][ T5709] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 197.288469][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.293804][ T5709] usb 3-1: config 0 descriptor?? [ 198.185996][ T5709] usbhid 3-1:0.0: can't add hid device: -71 [ 198.186130][ T5709] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 198.341356][ T6966] ================================================================== [ 198.341373][ T6966] BUG: KASAN: slab-use-after-free in configfs_dirent_is_ready+0x6d/0x70 [ 198.341408][ T6966] Read of size 4 at addr ffff88801b333938 by task syz.4.291/6966 [ 198.341426][ T6966] [ 198.341442][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.4.291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.341468][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.341482][ T6966] Call Trace: [ 198.341491][ T6966] [ 198.341500][ T6966] dump_stack_lvl+0xe8/0x150 [ 198.341530][ T6966] print_address_description+0x55/0x1e0 [ 198.341564][ T6966] ? configfs_dirent_is_ready+0x6d/0x70 [ 198.341591][ T6966] print_report+0x58/0x70 [ 198.341620][ T6966] kasan_report+0x117/0x150 [ 198.341642][ T6966] ? configfs_dirent_is_ready+0x6d/0x70 [ 198.341673][ T6966] configfs_dirent_is_ready+0x6d/0x70 [ 198.341699][ T6966] configfs_symlink+0x616/0x1030 [ 198.341731][ T6966] ? lookup_one_qstr_excl+0x1d4/0x360 [ 198.341756][ T6966] ? make_vfsuid+0x49/0xa0 [ 198.341790][ T6966] ? __pfx_configfs_symlink+0x10/0x10 [ 198.341823][ T6966] ? bpf_lsm_inode_symlink+0x9/0x20 [ 198.341854][ T6966] vfs_symlink+0x18b/0x330 [ 198.341885][ T6966] ? security_path_symlink+[ 198.341885][ T6966] ? security_path_symlink+0xf3/0x310 [ 198.341920][ T6966] filename_symlinkat+0x1cd/0x420 [ 198.341955][ T6966] ? __pfx_filename_symlinkat+0x10/0x10 [ 198.341985][ T6966] ? strncpy_from_user+0x150/0x2c0 [ 198.342014][ T6966] ? do_getname+0x151/0x250 [ 198.342048][ T6966] __se_sys_symlinkat+0x4e/0x2b0 [ 198.342080][ T6966] do_syscall_64+0x17b/0x530 [ 198.342103][ T6966] ? irqentry_exit+0x10f/0x8f0 [ 198.342134][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.342156][ T6966] ? clear_bhb_loop+0x40/0x90 [ 198.342179][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.342209][ T6966] RIP: 0033:0x7f207b1ede99 [ 198.342227][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.342246][ T6966] RSP: 002b:00007f2079446028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 198.342269][ T6966] RAX: ffffffffffffffda RBX: 00007f207b475fa0 RCX: 00007f207b1ede99 [ 198.342285][ T6966] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200 [ 198.342300][ T6966] RBP: 00007f207b283eaf R08: 0000000000000000 R09: 0000000000000000 [ 198.342314][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.342327][ T6966] R13: 00007f207b476038 R14: 00007f207b475fa0 R15: 00007fff16bade38 [ 198.342350][ T6966] [ 198.342357][ T6966] [ 198.342362][ T6966] Allocated by task 6966: [ 198.342371][ T6966] kasan_save_track+0x3e/0x80 [ 198.342399][ T6966] __kasan_slab_alloc+0x6c/0x80 [ 198.342428][ T6966] kmem_cache_alloc_noprof+0x358/0x680 [ 198.342454][ T6966] configfs_new_dirent+0x59/0x470 [ 198.342494][ T6966] configfs_attach_item+0xa1/0xd60 [ 198.342520][ T6966] configfs_attach_group+0x2a/0x370 [ 198.342546][ T6966] configfs_mkdir+0x6f0/0x9e0 [ 198.342570][ T6966] vfs_mkdir+0x408/0x620 [ 198.342594][ T6966] filename_mkdirat+0x289/0x520 [ 198.342621][ T6966] __se_sys_mkdirat+0x35/0x150 [ 198.342647][ T6966] do_syscall_64+0x17b/0x530 [ 198.342666][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.342686][ T6966] [ 198.342691][ T6966] Freed by task 7007: [ 198.342701][ T6966] kasan_save_track+0x3e/0x80 [ 198.342742][ T6966] kasan_save_free_info+0x40/0x50 [ 198.342764][ T6966] __kasan_slab_free+0x5c/0x80 [ 198.342792][ T6966] kmem_cache_free+0x187/0x6c0 [ 198.342819][ T6966] configfs_d_iput+0x209/0x270 [ 198.342840][ T6966] vfs_rmdir+0x24a/0x6b0 [ 198.342864][ T6966] filename_rmdir+0x292/0x520 [ 198.342889][ T6966] __se_sys_rmdir+0x2e/0x140 [ 198.342914][ T6966] do_syscall_64+0x17b/0x530 [ 198.342932][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.342950][ T6966] [ 198.342955][ T6966] The buggy address belongs to the object at ffff88801b333900 [ 198.342955][ T6966] which belongs to the cache configfs_dir_cache of size 96 [ 198.342973][ T6966] The buggy address is located 56 bytes inside of [ 198.342973][ T6966] freed 96-byte region [ffff88801b333900, ffff88801b333960) [ 198.342994][ T6966] [ 198.342999][ T6966] The buggy address belongs to the physical page: [ 198.343017][ T6966] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b333 [ 198.343036][ T6966] flags: 0x80000000000000(node=0|zone=1) [ 198.343057][ T6966] page_type: f5(slab) [ 198.343076][ T6966] raw: 0080000000000000 ffff888140419500 dead000000000100 dead000000000122 [ 198.343094][ T6966] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 198.343105][ T6966] page dumped because: kasan: bad access detected [ 198.343131][ T6966] page_owner tracks the page as allocated [ 198.343139][ T6966] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4819828368 [ 198.343190][ T6966] post_alloc_hook+0x1f9/0x250 [ 198.343228][ T6966] get_page_from_freelist+0x264c/0x26c0 [ 198.343260][ T6966] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 198.343295][ T6966] allocate_slab+0x7c/0x5e0 [ 198.343317][ T6966] refill_objects+0x2d8/0x350 [ 198.343340][ T6966] __pcs_replace_empty_main+0x330/0x690 [ 198.343363][ T6966] kmem_cache_alloc_noprof+0x455/0x680 [ 198.343407][ T6966] configfs_new_dirent+0x59/0x470 [ 198.343432][ T6966] configfs_attach_item+0xa1/0xd60 [ 198.343459][ T6966] configfs_attach_group+0x2a/0x370 [ 198.343486][ T6966] configfs_register_subsystem+0x3a5/0x560 [ 198.343514][ T6966] tb_domain_init+0x10/0x80 [ 198.343534][ T6966] nhi_init+0xb/0x40 [ 198.343557][ T6966] do_one_initcall+0x250/0x870 [ 198.343584][ T6966] do_initcall_level+0x10a/0x1a0 [ 198.343608][ T6966] do_initcalls+0x59/0xa0 [ 198.343630][ T6966] page_owner free stack trace missing [ 198.343638][ T6966] [ 198.343643][ T6966] Memory state around the buggy address: [ 198.343655][ T6966] ffff88801b333800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 198.343670][ T6966] ffff88801b333880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 198.343686][ T6966] >ffff88801b333900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 198.343698][ T6966] ^ [ 198.343710][ T6966] ffff88801b333980: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 198.343725][ T6966] ffff88801b333a00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 198.343736][ T6966] ================================================================== [ 198.399893][ T5709] usb 3-1: USB disconnect, device number 42 [ 198.472623][ T6966] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 198.472686][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.4.291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.472720][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 198.472761][ T6966] Call Trace: [ 198.472783][ T6966] [ 198.472812][ T6966] vpanic+0x56c/0xa60 [ 198.472886][ T6966] ? __pfx_vpanic+0x10/0x10 [ 198.472950][ T6966] ? __pfx___schedule+0x10/0x10 [ 198.473055][ T6966] panic+0xc5/0xd0 [ 198.473116][ T6966] ? __pfx_panic+0x10/0x10 [ 198.473180][ T6966] ? preempt_schedule_common+0x82/0xd0 [ 198.473296][ T6966] ? configfs_dirent_is_ready+0x6d/0x70 [ 198.473369][ T6966] check_panic_on_warn+0x89/0xb0 [ 198.473461][ T6966] ? configfs_dirent_is_ready+0x6d/0x70 [ 198.473527][ T6966] end_report+0x73/0x170 [ 198.473548][ T6966] ? configfs_dirent_is_ready+0x6d/0x70 [ 198.473612][ T6966] kasan_report+0x128/0x150 [ 198.473717][ T6966] ? configfs_dirent_is_ready+0x6d/0x70 [ 198.473811][ T6966] configfs_dirent_is_ready+0x6d/0x70 [ 198.473878][ T6966] configfs_symlink+0x616/0x1030 [ 198.473962][ T6966] ? lookup_one_qstr_excl+0x1d4/0x360 [ 198.474044][ T6966] ? make_vfsuid+0x49/0xa0 [ 198.474139][ T6966] ? __pfx_configfs_symlink+0x10/0x10 [ 198.474236][ T6966] ? bpf_lsm_inode_symlink+0x9/0x20 [ 198.474329][ T6966] vfs_symlink+0x18b/0x330 [ 198.474421][ T6966] ? security_path_symlink+0xf3/0x310 [ 198.474518][ T6966] filename_symlinkat+0x1cd/0x420 [ 198.474621][ T6966] ? __pfx_filename_symlinkat+0x10/0x10 [ 198.474698][ T6966] ? strncpy_from_user+0x150/0x2c0 [ 198.474775][ T6966] ? do_getname+0x151/0x250 [ 198.474869][ T6966] __se_sys_symlinkat+0x4e/0x2b0 [ 198.474987][ T6966] do_syscall_64+0x17b/0x530 [ 198.475025][ T6966] ? irqentry_exit+0x10f/0x8f0 [ 198.475061][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.475099][ T6966] ? clear_bhb_loop+0x40/0x90 [ 198.475179][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.475253][ T6966] RIP: 0033:0x7f207b1ede99 [ 198.475315][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.475369][ T6966] RSP: 002b:00007f2079446028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 198.475433][ T6966] RAX: ffffffffffffffda RBX: 00007f207b475fa0 RCX: 00007f207b1ede99 [ 198.475488][ T6966] RDX: 0000200000000300 RSI: ffffffffffffff9c RDI: 0000200000000200 [ 198.475535][ T6966] RBP: 00007f207b283eaf R08: 0000000000000000 R09: 0000000000000000 [ 198.475571][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.475603][ T6966] R13: 00007f207b476038 R14: 00007f207b475fa0 R15: 00007fff16bade38 [ 198.475671][ T6966] [ 198.476282][ T6966] Kernel Offset: disabled