last executing test programs: 2m29.849622511s ago: executing program 0 (id=352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5001000010000100fdffffbf00010000e0000001000000000000000000000000fc000000000000000000000000000000000103144e210009000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb00000000000000000000000000000000000000009c000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffefffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0001fc2000000000000000600003006465666c617465000000000000000000000000000000000000000000000048b27b7e8bc3ea01ce00000000000000000000000000000000000000000000000000000000000000000000c00000002316fad0ff50ef52d77b4f4acb812988403b8d1fabb904b214fa3f50a3d67697ae899bede87f14fd7c5416e525f107a26bbb87f0f2b9ea32a5edbf4513ca93b786b508efeb1d14f096e9c128dc83f06106c63e3749e0164e4cae8e54d4eb3f520ee533e59f547fce1b4cfa5710801015b0fc0905333a1fea2b2fcdf3d60b425ad93ad0b612bc717031bb73828a06f31e1d0dd15cc14a17"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) 2m28.516405887s ago: executing program 0 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80009, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_pidfd_open(r0, 0x0) sendmmsg$inet6(r3, &(0x7f0000005400), 0x0, 0x1000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r4, 0x4, 0x42800) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44041}, 0x0) r5 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x66, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0xfeff, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x400c6615, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m27.017292441s ago: executing program 0 (id=357): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x4a0, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0xd}, @generic="955d0a1ffbad02f7a5952bd37e1eedb9ee3993ff3938adb6737c778a96d7a74496e2d0f798a5f4b66128566dfe72d4679e27fc2d7f86b4ca81ccc0e63e"]}, @nested={0x43c, 0x6, 0x0, 0x1, [@nested={0x438, 0xa9, 0x0, 0x1, [@nested={0x434, 0x13e, 0x0, 0x1, [@nested={0x430, 0xa0, 0x0, 0x1, [@nested={0x42c, 0x61, 0x0, 0x1, [@nested={0x428, 0x6d, 0x0, 0x1, [@nested={0x424, 0xd1, 0x0, 0x1, [@nested={0x420, 0x112, 0x0, 0x1, [@nested={0x419, 0xcd, 0x0, 0x1, [@generic="42110f1d6f88ff52f41c6a703875b814ba2c48b3f0cf607256b8d243a3227bb11571d268c41187452c28663be3d9e39505157b48b9212b07ca7b4686a2a55f4f80cbea3f494421c794c12d35f89faffe1de6605dfada605ad7c5d1212f30e4f92cf2ae0e57c77aa34e47801d546b04458c2f6011fb906b6ed5217cb687ba4ddfe78e78b635fdfc513245c2cf7b69f9218d14bb4039e9e3c4cd1c649f4cdea528557d814da783fd6a399fb44d9ceae7ab2e046a74094f015f2aad655abdd7d7bd884d9eacfdffb8d690d970427074e38ab80e3fd67c77f2ec7fb214f91cdf12924a9bc02b01c5e2618391a7ef7c9a44cdce8b538dc7", @nested={0x31e, 0x28, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r0}, @nested={0xb4, 0x89, 0x0, 0x1, [@nested={0x83, 0x29, 0x0, 0x1, [@nested={0x4, 0xc9}, @typed={0x51, 0xfb, 0x0, 0x0, @binary="24da1a26d974406981e15a4f6fc1ce06841205d820592dba91c668ef28f69879c0eb12b84811cda27e0df5ef20fcd0d7e4fa47ef66ad1f951bd3b93d79998f09c3f69097b6c5916c114828009c"}, @typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @nested={0x4, 0xf5}, @generic="49f26f33267691207a86a99583e6ba"]}, @typed={0x8, 0xb, 0x0, 0x0, @u32=0x101}, @typed={0x8, 0x1a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x128, 0x0, 0x0, @uid}, @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@local}]}, @typed={0xc6, 0x154, 0x0, 0x0, @binary="18f7e8538b5761d6c819b18472df2c8db3658963416cb40e5dfcb2b2be084acd1ee02e05ac335f0dbf43ea0fa6769b79ee3602dcfd65a9560624e26404d241e351ba856fd5d220b579654f81245c46c1121a3c8c287e7969c953554f801aaa84caed97a4fbd5d53ff24c823242cac2637ab3baec8209be91f4797e38cd0bb66b881115f08fbd1decbcc0de800bab25028a4d046ff3cf6461cd4b6b1da3fbc2c06f429c05d1cc6ceaaf8ff329f2c700345a09009d400932e10e0f840b39791adf2dfd"}, @nested={0x14d, 0x5e, 0x0, 0x1, [@typed={0x51, 0x1e, 0x0, 0x0, @binary="5f7c3cf009c4e1aab02c6f39f086e43cf913c74c85854d106622a2fa0c7450b70e2bff5cf18ca94b008cae5248979c88fe6788966d2c31dd8c18377e40549667efc8a0451b7628bf01874de0d3"}, @generic="cce848ffa9c24ee68bde9bd43c226643571dfcfda3d8752d94a93502ef142936c295c8a50a", @nested={0x18, 0x157, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @fd}, @typed={0x4, 0xbe, 0x0, 0x0, @binary}, @typed={0x7, 0x92, 0x0, 0x0, @binary="a200f4"}]}, @typed={0x54, 0x6c, 0x0, 0x0, @binary="6e5398844563e0fa90f713d353705b38079b5bc7733637a9f4e913dbfba6dab920f33533586ba7ebeeaab34aba8c4a92e95dacf8a43c4fa77ec37466a4d2819f2c9bc6596913635d70bf18b37b76b68c"}, @typed={0x59, 0x108, 0x0, 0x0, @binary="0dc87fea6f8ec6c7d3b411209e3cb12bfd8b31c1c566f7a4932034cac84f853fa2f0a58c6aa8863660868552bbe3f92192f5145dc41d5c3e8d6374e9b15c4b410995836fac56db28efd09171547585707919824cfd"}, @typed={0x8, 0x7f, 0x0, 0x0, @fd}]}, @generic="ebd3d6e47308d56dc7e9ab0341fe80d22d3d0b1b7da2cb1414c4125d0f939f777df4906697889d94581cc22d418b3f3bd3e1316978099b27c5ff191c1fd5", @typed={0x8, 0x10c, 0x0, 0x0, @binary="2382a2ef"}]}]}]}]}]}]}]}]}]}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m26.644168531s ago: executing program 0 (id=360): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r1, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0x80, 0x40, 0x42, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r3}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff950000000016001b049cb83bd81ee7a5588a00"], &(0x7f0000000080)='GPL\x00', 0x4, 0xb, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000000)=0x6, 0x9, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2m25.36789611s ago: executing program 0 (id=363): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x1) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)="8870e17d150a401f3f0efa5ce961b35778dbfe9efbffc0faed856bfe1f74ac9b5c33f3581b409eb03ce452771d092722648578f8eb89216615b5dfc6234d75ca917cf9c01d9c5d831bcad997ccdc5a42fcff6b372e09e6c31e8ebc97c7e347fedbef894de5d5da2411f8cc03ec75c06eaccc62c033607a6e427370c6273e4141083d5a59b2594955502121d6877a63ff8a0491b58f191971470e0f5205df3043ff0464b59c53f094", 0xa8}, {&(0x7f0000000140)="88780f895d52e6b5f8864d1bdb240faee6eb41d8deabae3eb9ff9bbf64d2e4b88218d130c58b0996ea3747c0b0190b6ab190f5fe99d4f27f0b28192447dc30f7864fc2039585df80a5e3ca65b0c770a7a5c852d2aca7c572efab0e566dd818d89ad307298a63f1c7c5488e17ba1b10cf61ee636ca3d2280661f7e5a7454bfb14b302d0a7cfcd83b0ea5a31fec61e256aa5dbaa869cff75a46a7c3eb17686ab5ac304e1eb096935b708a7beb303d563fa37be11076da149ed2a", 0xb9}, {&(0x7f0000000440)="081d7f578828d66a122bf3ca20df18a0770bc1f517d3c5f5a6ccefb00840b6dd6de1746a456ee5a140ebaee6bf10da330b44926baadffbf4a0f835613f3f50", 0x3f}, {0x0}], 0x4, &(0x7f00000017c0)=[@dstopts={{0xe8, 0x29, 0x37, {0x11, 0x19, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x54, "90443cf6629bb06bb816176ea8a52232f36a512001db6fcbf54c9561a7b762c053cdb883f1e5bbd75dc8d3c0bec85e3a79159947beebe7b33ad01c2ad7f0b28eb0562cd029ab95fb0b92eda07b80c97ec60f2b2a"}, @jumbo={0xc2, 0x4, 0xde}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @generic={0x2, 0x58, "6318b4b82dad30e3c669569ab785c1db11d878414dd95e9937cdf873d34ecef39f51c25d4c83f9745772b1c744bd1f365136f068354d2abd5e0f2ad51f3016c1ed5498da0a86dcdac205527e6efc8cd76d42c13ea2c54fef"}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}], 0xe8}}], 0x2, 0x4004851) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 2m25.164268942s ago: executing program 0 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x27c, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10, 0x28f787b62f1a41f7}, {0xffff, 0xffff}, {0x5, 0xfffa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x250, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x5, 0x10, 0x18, 0x1e, 0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0xfffffff9}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x122}, 0x1, 0x0, 0x0, 0xf4}, 0x0) fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64bd55c157188b30) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 2m9.496916127s ago: executing program 32 (id=366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x27c, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10, 0x28f787b62f1a41f7}, {0xffff, 0xffff}, {0x5, 0xfffa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x250, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}, @TCA_RED_PARMS={0x14, 0x1, {0x5, 0x9, 0x5, 0x10, 0x18, 0x1e, 0x7}}, @TCA_RED_MAX_P={0x8, 0x3, 0xfffffff9}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x8}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_STAB={0x104, 0x2, "c2a53b7026b436aa0987ed2171b8a798a99e4e9a1543db34be4eb2c5968eeb0f97130059cc81a42e9fa6da6637952a1095ab5d6a4bd5069c86020fd5268e82bd3c6b81793f4f87795fb258e099ab81758983b01fd33b4885f46bb45647964980f66f78c0d6cd30dde0ecc8107b9a4c6ede627b85d952a63f3e87513748d74e32749edfb344012d5e6efe36487661768cf46f47800273f49bb41ced941825cdf09edf50e5a97bef4dd773f95f30ff9ea9a6253a7ead545cd1b8efdde3137c39d197e676678b31e53eb52a2d77eaa0662e132f900b33525483d0b78bc11e693ad7f7f491276afc7b8c1466aab48c183e57b7314cde1193a265bf46a945b8fa9cc6"}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x122}, 0x1, 0x0, 0x0, 0xf4}, 0x0) fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64bd55c157188b30) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) 15.69373031s ago: executing program 5 (id=863): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) eventfd2(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 15.375223376s ago: executing program 1 (id=865): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000740)={0x8000, 0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000400)=""/239, 0xef}], 0x2, &(0x7f0000000700)=[{&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000640)=""/154, 0x9a}], 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0xffffffa1, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x20000000) sendfile(r7, r3, 0x0, 0x100000000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000040)={r11, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000780)={r11, 0x1, 0x9, 0x3}, &(0x7f00000007c0)=0x10) 15.206379169s ago: executing program 5 (id=867): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000000000c24020106020604800e0509090401000001020000090401010101020000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0x17, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x4000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000011c0)) r3 = open$dir(0x0, 0x40, 0x62) openat(r3, 0x0, 0x515cc3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e21, 0x101, @mcast2, 0x3}}}, 0x84) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 14.931001507s ago: executing program 1 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x3a, &(0x7f0000000000)={&(0x7f0000000340)={0x14c, 0x43, 0x20, 0x70bd2d, 0x25dfdbff, {0x14, 0x7c}}, 0x14c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r1, r2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x4, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffe3e) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 14.776409692s ago: executing program 3 (id=872): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x6c, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75ff1ade9eb0791cfba6ee74ae33d9777c01c6838c14"}, 0x79) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r3, 0x5409, 0xb10000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x803b01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.47129423s ago: executing program 3 (id=874): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726fa0a367cb643deb5a4c32ebd0c7c689aacc63e30b6d42eaaa6f7c7ea1bc1dbf26049df33f615222df98bc3deb7c17c4c0c3eb5fbd9e96a6c15ae61ba49dbbde3579a8", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r7, 0xc0945662, &(0x7f0000000300)={0x8ffffd, 0x0, '\x00', {0x0, @bt={0x7, 0x0, 0x1, 0x3, 0x1, 0x8, 0x8, 0x5, 0x4, 0x0, 0x7, 0x3, 0x1, 0x7, 0x2, 0x10, {0x2, 0x100}, 0x1e, 0x4}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) 10.671333564s ago: executing program 1 (id=876): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) syz_open_dev$media(0x0, 0xfffffffffffffc01, 0x0) r5 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) copy_file_range(r7, 0x0, r6, 0x0, 0x1000da0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="150327bd7000fdeddf25040000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) 9.283101537s ago: executing program 5 (id=878): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce09050302"], &(0x7f0000000780)={0x0, 0x0, 0x4f, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x38}}], 0x1, 0x4008080) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000f40)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 9.211721095s ago: executing program 3 (id=879): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0xc40, 0x27025}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048d4}, 0x40000) (fail_nth: 4) 8.321376161s ago: executing program 1 (id=881): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x1) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="081d7f578828d66a122bf3ca20df18a0770bc1f517d3c5f5a6ccefb00840b6dd6de1746a456ee5a140ebaee6bf10da330b44926baadffbf4a0f835613f3f50d8bc7de5", 0x43}, {0x0}], 0x2, &(0x7f00000017c0)=[@dstopts={{0xe8, 0x29, 0x37, {0x11, 0x19, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x54, "90443cf6629bb06bb816176ea8a52232f36a512001db6fcbf54c9561a7b762c053cdb883f1e5bbd75dc8d3c0bec85e3a79159947beebe7b33ad01c2ad7f0b28eb0562cd029ab95fb0b92eda07b80c97ec60f2b2a"}, @jumbo={0xc2, 0x4, 0xde}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @generic={0x2, 0x58, "6318b4b82dad30e3c669569ab785c1db11d878414dd95e9937cdf873d34ecef39f51c25d4c83f9745772b1c744bd1f365136f068354d2abd5e0f2ad51f3016c1ed5498da0a86dcdac205527e6efc8cd76d42c13ea2c54fef"}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}], 0xe8}}], 0x2, 0x4004851) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 8.177880542s ago: executing program 1 (id=883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4400}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000c000700000000000a0000000800090064000000090006006e6f6e65000000000800009cf9fb77c4601a197bd88bd8d5802da66360cb3b5b6cc0d799e858fb61f498f3264b742517e90feee96094aeac1363730f952434f8b5638fe8dff88803f6e566e4688cfc9472cfe9216542173152ec077b77b66106e9c0ff961ee7e6944cc193a9cadf92de4b4be2cbb08434e05d4dc464cc41b8d1802e4f100045742f74f5d2f787"], 0x50}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r3, &(0x7f0000000680)=""/63, 0x3f) 8.177608235s ago: executing program 4 (id=884): write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x6c, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75ff1ade9eb0791cfba6ee74ae33d9777c01c6838c14"}, 0x79) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r3, 0x5409, 0xb10000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x803b01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.015072252s ago: executing program 4 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 7.321062238s ago: executing program 3 (id=886): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000000000c24020106020604800e050909040100000102000009"], 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="001b020000000203"]}, 0x0) syz_usb_control_io(r2, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040700000003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0x17, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x4000) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000011c0)) r4 = open$dir(&(0x7f0000001000)='./file1\x00', 0x40, 0x62) r5 = openat(r4, &(0x7f0000000080)='./file1\x00', 0x515cc3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001040)={0x0, 0x4, 0x1}, &(0x7f00000010c0)=0x8) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001100)={r6, @in6={{0xa, 0x4e21, 0x101, @mcast2, 0x3}}}, 0x84) fsopen(&(0x7f0000000040)='afs\x00', 0x0) 7.30342385s ago: executing program 5 (id=887): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x0, 0x1, 0x402}}, 0x26) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mprotect(&(0x7f000050c000/0x1000)=nil, 0x1000, 0x0) brk(0x200004ffc000) socket(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 6.928508239s ago: executing program 4 (id=888): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000000000c24020106020604800e0509090401000001020000090401010101020000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0x17, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x4000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000011c0)) r3 = open$dir(0x0, 0x40, 0x62) openat(r3, 0x0, 0x515cc3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e21, 0x101, @mcast2, 0x3}}}, 0x84) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 6.793500761s ago: executing program 2 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x4400}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000c000700000000000a0000000800090064000000090006006e6f6e65000000000800009cf9fb77c4601a197bd88bd8d5802da66360cb3b5b6cc0d799e858fb61f498f3264b742517e90feee96094aeac1363730f952434f8b5638fe8dff88803f6e566e4688cfc9472cfe9216542173152ec077b77b66106e9c0ff961ee7e6944cc193a9cadf92de4b4be2cbb08434e05d4dc464cc41b8d1802e4f100045742f74f5d2f787"], 0x50}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r7, &(0x7f0000000680)=""/63, 0x3f) getdents(r7, 0xffffffffffffffff, 0x5a) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r1]) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mount$afs(&(0x7f0000000140)=ANY=[@ANYBLOB="0373877a312e6261636b757000"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4080, 0x0) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) close(r6) 5.72815567s ago: executing program 2 (id=890): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) eventfd2(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 5.563178263s ago: executing program 2 (id=891): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) syz_open_dev$media(0x0, 0xfffffffffffffc01, 0x0) r5 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) copy_file_range(r7, 0x0, r6, 0x0, 0x1000da0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="150327bd7000fdeddf25040000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) 3.984620009s ago: executing program 2 (id=892): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf253b000000080003"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) 951.207747ms ago: executing program 4 (id=893): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x1) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="081d7f578828d66a122bf3ca20df18a0770bc1f517d3c5f5a6ccefb00840b6dd6de1746a456ee5a140ebaee6bf10da330b44926baadffbf4a0f835613f3f50d8bc7de5", 0x43}, {0x0}], 0x2, &(0x7f00000017c0)=[@dstopts={{0xe8, 0x29, 0x37, {0x11, 0x19, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x54, "90443cf6629bb06bb816176ea8a52232f36a512001db6fcbf54c9561a7b762c053cdb883f1e5bbd75dc8d3c0bec85e3a79159947beebe7b33ad01c2ad7f0b28eb0562cd029ab95fb0b92eda07b80c97ec60f2b2a"}, @jumbo={0xc2, 0x4, 0xde}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @generic={0x2, 0x58, "6318b4b82dad30e3c669569ab785c1db11d878414dd95e9937cdf873d34ecef39f51c25d4c83f9745772b1c744bd1f365136f068354d2abd5e0f2ad51f3016c1ed5498da0a86dcdac205527e6efc8cd76d42c13ea2c54fef"}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}], 0xe8}}], 0x2, 0x4004851) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 683.004588ms ago: executing program 2 (id=894): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4008084) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) (fail_nth: 4) 681.699433ms ago: executing program 3 (id=895): write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x6c, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02fda16d3040d75ff1ade9eb0791cfba6ee74ae33d9777c01c6838c14"}, 0x79) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r3, 0x5409, 0xb10000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x803b01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 579.519021ms ago: executing program 5 (id=896): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x18, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x18, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xfffa}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x4000800) 572.74764ms ago: executing program 4 (id=897): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) close(0x3) (fail_nth: 4) 443.266022ms ago: executing program 3 (id=898): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915c", 0x1e}], 0x1}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000002700012024bd7002f8dbdf"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x4}, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 206.159039ms ago: executing program 1 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x4400}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000003c000180060001000a0000000c000700000000000a0000000800090064000000090006006e6f6e65000000000800009cf9fb77c4601a197bd88bd8d5802da66360cb3b5b6cc0d799e858fb61f498f3264b742517e90feee96094aeac1363730f952434f8b5638fe8dff88803f6e566e4688cfc9472cfe9216542173152ec077b77b66106e9c0ff961ee7e6944cc193a9cadf92de4b4be2cbb08434e05d4dc464cc41b8d1802e4f100045742f74f5d2f787"], 0x50}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r7, &(0x7f0000000680)=""/63, 0x3f) getdents(r7, 0xffffffffffffffff, 0x5a) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r1]) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) close(r6) 169.089135ms ago: executing program 4 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x636}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x800) 47.251847ms ago: executing program 2 (id=901): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) eventfd2(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, 0x0, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 0s ago: executing program 5 (id=902): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) syz_open_dev$media(0x0, 0xfffffffffffffc01, 0x0) r5 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1) copy_file_range(r7, 0x0, r6, 0x0, 0x1000da0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="150327bd7000fdeddf25040000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): oc_no_stats+0x4a/0x4f0 [ 295.182385][ T7928] __vmalloc_noprof+0xd2/0x120 [ 295.182397][ T7928] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 295.182410][ T7928] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 295.182424][ T7928] bpf_prog_alloc+0x3c/0x1a0 [ 295.182437][ T7928] bpf_prog_load+0x7ba/0x1ae0 [ 295.182455][ T7928] ? __pfx_bpf_prog_load+0x10/0x10 [ 295.182477][ T7928] ? bpf_lsm_bpf+0x9/0x20 [ 295.182485][ T7928] ? security_bpf+0x7e/0x2d0 [ 295.182503][ T7928] __sys_bpf+0x618/0x950 [ 295.182516][ T7928] ? __pfx___sys_bpf+0x10/0x10 [ 295.182525][ T7928] ? rt_mutex_slowunlock+0x1cb/0x300 [ 295.182542][ T7928] ? ksys_write+0x248/0x270 [ 295.182556][ T7928] ? __pfx_ksys_write+0x10/0x10 [ 295.182572][ T7928] __x64_sys_bpf+0x7c/0x90 [ 295.182582][ T7928] do_syscall_64+0x14d/0xf80 [ 295.182593][ T7928] ? trace_irq_disable+0x3b/0x150 [ 295.182604][ T7928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.182613][ T7928] ? clear_bhb_loop+0x40/0x90 [ 295.182624][ T7928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.182633][ T7928] RIP: 0033:0x7f681362c629 [ 295.182642][ T7928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.182650][ T7928] RSP: 002b:00007f6811886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.182659][ T7928] RAX: ffffffffffffffda RBX: 00007f68138a5fa0 RCX: 00007f681362c629 [ 295.182666][ T7928] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 295.182671][ T7928] RBP: 00007f6811886090 R08: 0000000000000000 R09: 0000000000000000 [ 295.182677][ T7928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.182683][ T7928] R13: 00007f68138a6038 R14: 00007f68138a5fa0 R15: 00007ffdbdf18f28 [ 295.182697][ T7928] [ 295.182701][ T7928] Mem-Info: [ 295.182706][ T7928] active_anon:257 inactive_anon:7204 isolated_anon:0 [ 295.182706][ T7928] active_file:24067 inactive_file:36107 isolated_file:0 [ 295.182706][ T7928] unevictable:768 dirty:273 writeback:0 [ 295.182706][ T7928] slab_reclaimable:12132 slab_unreclaimable:105400 [ 295.182706][ T7928] mapped:38526 shmem:1358 pagetables:1450 [ 295.182706][ T7928] sec_pagetables:0 bounce:0 [ 295.182706][ T7928] kernel_misc_reclaimable:0 [ 295.182706][ T7928] free:1289767 free_pcp:6432 free_cma:0 [ 295.182731][ T7928] Node 0 active_anon:1028kB inactive_anon:28816kB active_file:95904kB inactive_file:144428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153988kB dirty:1088kB writeback:0kB shmem:3896kB kernel_stack:13864kB pagetables:5656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.182753][ T7928] Node 1 active_anon:0kB inactive_anon:0kB active_file:364kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.182773][ T7928] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.182801][ T7928] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 295.182817][ T7928] Node 0 DMA32 free:1206632kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:28792kB active_file:95904kB inactive_file:144428kB unevictable:1536kB writepending:1088kB zspages:0kB present:3129332kB managed:2566640kB mlocked:0kB bounce:0kB free_pcp:25728kB local_pcp:20188kB free_cma:0kB [ 295.182846][ T7928] lowmem_reserve[]: 0 0 0 0 0 [ 295.182861][ T7928] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.182892][ T7928] lowmem_reserve[]: 0 0 0 0 0 [ 295.182907][ T7928] Node 1 Normal free:3937076kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:364kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.182935][ T7928] lowmem_reserve[]: 0 0 0 0 0 [ 295.182949][ T7928] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.183008][ T7928] Node 0 DMA32: 2744*4kB (UME) 1297*8kB (UME) 1128*16kB (UM) 562*32kB (UME) 404*64kB (UM) 200*128kB (ME) 162*256kB (UM) 87*512kB (UM) 34*1024kB (UM) 17*2048kB (UM) 230*4096kB (UM) = 1206568kB [ 295.183080][ T7928] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.183125][ T7928] Node 1 Normal: 5*4kB (UME) 6*8kB (UE) 17*16kB (UME) 9*32kB (UE) 7*64kB (UM) 4*128kB (UM) 1*256kB (E) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 959*4096kB (M) = 3937076kB [ 295.183195][ T7928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.183203][ T7928] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 295.183211][ T7928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.183219][ T7928] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.183226][ T7928] 61528 total pagecache pages [ 295.183230][ T7928] 0 pages in swap cache [ 295.183233][ T7928] Free swap = 124996kB [ 295.183237][ T7928] Total swap = 124996kB [ 295.183240][ T7928] 2097051 pages RAM [ 295.183244][ T7928] 0 pages HighMem/MovableOnly [ 295.183247][ T7928] 423671 pages reserved [ 295.183250][ T7928] 0 pages cma reserved [ 295.337744][ T5804] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 295.550630][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 295.550679][ T5804] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 295.550700][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.548825][ T5804] usb 5-1: config 0 descriptor?? [ 296.568088][ T7925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 297.137130][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 297.137235][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 297.156232][ T5804] usb 5-1: USB disconnect, device number 24 [ 297.374483][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 297.487808][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 297.947421][ T7950] FAULT_INJECTION: forcing a failure. [ 297.947421][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 297.947456][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.4.602 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.947477][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.947486][ T7950] Call Trace: [ 297.947494][ T7950] [ 297.947501][ T7950] dump_stack_lvl+0xe8/0x150 [ 297.947529][ T7950] should_fail_ex+0x46b/0x600 [ 297.947562][ T7950] should_failslab+0xa8/0x100 [ 297.947587][ T7950] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 297.947608][ T7950] ? __alloc_skb+0x1d0/0x7d0 [ 297.947632][ T7950] __alloc_skb+0x1d0/0x7d0 [ 297.947654][ T7950] tipc_msg_build+0x160/0xd60 [ 297.947681][ T7950] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.947707][ T7950] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 297.947723][ T7950] ? rt_spin_lock+0x1e0/0x400 [ 297.947740][ T7950] ? __pfx_tipc_msg_build+0x10/0x10 [ 297.947765][ T7950] ? tipc_group_bc_cong+0x16c/0x220 [ 297.947784][ T7950] ? rt_spin_unlock+0x160/0x200 [ 297.947803][ T7950] tipc_send_group_bcast+0x80c/0xb00 [ 297.947839][ T7950] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 297.947856][ T7950] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.947890][ T7950] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.947910][ T7950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.947930][ T7950] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 297.947952][ T7950] ? __pfx_woken_wake_function+0x10/0x10 [ 297.947980][ T7950] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 297.948007][ T7950] __tipc_sendmsg+0x34f/0x2c30 [ 297.948023][ T7950] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.948059][ T7950] ? __pfx___tipc_sendmsg+0x10/0x10 [ 297.948081][ T7950] ? try_to_take_rt_mutex+0x840/0xb00 [ 297.948109][ T7950] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 297.948130][ T7950] ? __lock_acquire+0x6b5/0x2cf0 [ 297.948149][ T7950] ? __lock_acquire+0x6b5/0x2cf0 [ 297.948169][ T7950] ? __lock_acquire+0x6b5/0x2cf0 [ 297.948187][ T7950] ? __lock_acquire+0x6b5/0x2cf0 [ 297.948231][ T7950] ? __local_bh_enable+0x1e1/0x2f0 [ 297.948257][ T7950] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 297.948283][ T7950] tipc_sendmsg+0x55/0x70 [ 297.948303][ T7950] ____sys_sendmsg+0xa4e/0xac0 [ 297.948331][ T7950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.948360][ T7950] ? import_iovec+0x73/0xa0 [ 297.948383][ T7950] ___sys_sendmsg+0x2a5/0x360 [ 297.948406][ T7950] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.948459][ T7950] ? __fget_files+0x2a/0x420 [ 297.948477][ T7950] ? __fget_files+0x3a6/0x420 [ 297.948503][ T7950] __x64_sys_sendmsg+0x1c3/0x2a0 [ 297.948526][ T7950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.948555][ T7950] ? __pfx_ksys_write+0x10/0x10 [ 297.948588][ T7950] do_syscall_64+0x14d/0xf80 [ 297.948608][ T7950] ? trace_irq_disable+0x3b/0x150 [ 297.948624][ T7950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.948639][ T7950] ? clear_bhb_loop+0x40/0x90 [ 297.948659][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.948684][ T7950] RIP: 0033:0x7f249e0ec629 [ 297.948701][ T7950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.948716][ T7950] RSP: 002b:00007f249c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.948735][ T7950] RAX: ffffffffffffffda RBX: 00007f249e365fa0 RCX: 00007f249e0ec629 [ 297.948747][ T7950] RDX: 0000000000008820 RSI: 00002000000003c0 RDI: 0000000000000004 [ 297.948759][ T7950] RBP: 00007f249c346090 R08: 0000000000000000 R09: 0000000000000000 [ 297.948768][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.948779][ T7950] R13: 00007f249e366038 R14: 00007f249e365fa0 R15: 00007ffedba6dea8 [ 297.948808][ T7950] [ 299.033030][ T7968] FAULT_INJECTION: forcing a failure. [ 299.033030][ T7968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.033052][ T7968] CPU: 1 UID: 0 PID: 7968 Comm: syz.2.609 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 299.033064][ T7968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.033070][ T7968] Call Trace: [ 299.033075][ T7968] [ 299.033079][ T7968] dump_stack_lvl+0xe8/0x150 [ 299.033099][ T7968] should_fail_ex+0x46b/0x600 [ 299.033117][ T7968] _copy_from_iter+0x1d3/0x1670 [ 299.033131][ T7968] ? trace_kmem_cache_alloc+0x29/0xf0 [ 299.033144][ T7968] ? __alloc_skb+0x27d/0x7d0 [ 299.033155][ T7968] ? __pfx__copy_from_iter+0x10/0x10 [ 299.033164][ T7968] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 299.033177][ T7968] ? __alloc_skb+0x27d/0x7d0 [ 299.033189][ T7968] ? netlink_sendmsg+0x650/0xb40 [ 299.033199][ T7968] ? skb_put+0x11b/0x210 [ 299.033211][ T7968] netlink_sendmsg+0x6c0/0xb40 [ 299.033225][ T7968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.033239][ T7968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.033254][ T7968] ____sys_sendmsg+0xa4e/0xac0 [ 299.033271][ T7968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.033288][ T7968] ? import_iovec+0x73/0xa0 [ 299.033300][ T7968] ___sys_sendmsg+0x2a5/0x360 [ 299.033315][ T7968] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.033344][ T7968] ? __fget_files+0x2a/0x420 [ 299.033354][ T7968] ? __fget_files+0x3a6/0x420 [ 299.033369][ T7968] __x64_sys_sendmsg+0x1c3/0x2a0 [ 299.033383][ T7968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.033400][ T7968] ? __pfx_ksys_write+0x10/0x10 [ 299.033418][ T7968] do_syscall_64+0x14d/0xf80 [ 299.033430][ T7968] ? trace_irq_disable+0x3b/0x150 [ 299.033441][ T7968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.033451][ T7968] ? clear_bhb_loop+0x40/0x90 [ 299.033462][ T7968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.033472][ T7968] RIP: 0033:0x7f681362c629 [ 299.033482][ T7968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.033491][ T7968] RSP: 002b:00007f6811886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.033509][ T7968] RAX: ffffffffffffffda RBX: 00007f68138a5fa0 RCX: 00007f681362c629 [ 299.033517][ T7968] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000005 [ 299.033523][ T7968] RBP: 00007f6811886090 R08: 0000000000000000 R09: 0000000000000000 [ 299.033529][ T7968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.033535][ T7968] R13: 00007f68138a6038 R14: 00007f68138a5fa0 R15: 00007ffdbdf18f28 [ 299.033549][ T7968] [ 300.747676][ T5804] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 300.762355][ T7970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 300.920620][ T5804] usb 6-1: Using ep0 maxpacket: 16 [ 300.935339][ T5804] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 300.935367][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.935385][ T5804] usb 6-1: Product: syz [ 300.935398][ T5804] usb 6-1: Manufacturer: syz [ 300.935411][ T5804] usb 6-1: SerialNumber: syz [ 301.377360][ T5804] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.659548][ T5804] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 301.663094][ T5804] usb 6-1: USB disconnect, device number 4 [ 301.723133][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.167667][ T891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 303.216787][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.614'. [ 304.087886][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 304.087904][ T37] audit: type=1326 audit(1771687079.210:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86b5dc629 code=0x7ffc0000 [ 304.087946][ T37] audit: type=1326 audit(1771687079.210:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86b5dc629 code=0x7ffc0000 [ 304.087983][ T37] audit: type=1326 audit(1771687079.210:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fd86b5dc629 code=0x7ffc0000 [ 304.088020][ T37] audit: type=1326 audit(1771687079.210:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86b5dc629 code=0x7ffc0000 [ 304.088056][ T37] audit: type=1326 audit(1771687079.210:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86b5dc629 code=0x7ffc0000 [ 304.088092][ T37] audit: type=1326 audit(1771687079.210:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8000 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fd86b5dc629 code=0x7ffc0000 [ 304.137612][ T891] usb 2-1: Using ep0 maxpacket: 32 [ 304.139814][ T891] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 304.139838][ T891] usb 2-1: config 0 has no interface number 0 [ 304.139867][ T891] usb 2-1: config 0 interface 182 has no altsetting 0 [ 304.142510][ T891] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 304.142535][ T891] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 304.142554][ T891] usb 2-1: Product: syz [ 304.142567][ T891] usb 2-1: Manufacturer: syz [ 304.142580][ T891] usb 2-1: SerialNumber: syz [ 304.210113][ T891] usb 2-1: config 0 descriptor?? [ 304.212972][ T891] hub 2-1:0.182: bad descriptor, ignoring hub [ 304.213007][ T891] hub 2-1:0.182: probe with driver hub failed with error -5 [ 304.413121][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.413393][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.454820][ T891] kaweth 2-1:0.182: Firmware present in device. [ 304.614634][ T891] kaweth 2-1:0.182: Error reading configuration (-32), no net device created [ 304.614925][ T891] kaweth 2-1:0.182: probe with driver kaweth failed with error -5 [ 304.643654][ T8014] FAULT_INJECTION: forcing a failure. [ 304.643654][ T8014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.643686][ T8014] CPU: 0 UID: 0 PID: 8014 Comm: syz.5.623 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.643707][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.643731][ T8014] Call Trace: [ 304.643738][ T8014] [ 304.643746][ T8014] dump_stack_lvl+0xe8/0x150 [ 304.643777][ T8014] should_fail_ex+0x46b/0x600 [ 304.643807][ T8014] _copy_from_iter+0x1d3/0x1670 [ 304.643832][ T8014] ? trace_kmem_cache_alloc+0x29/0xf0 [ 304.643854][ T8014] ? __alloc_skb+0x27d/0x7d0 [ 304.643873][ T8014] ? __pfx__copy_from_iter+0x10/0x10 [ 304.643889][ T8014] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 304.643911][ T8014] ? __alloc_skb+0x27d/0x7d0 [ 304.643935][ T8014] ? netlink_sendmsg+0x650/0xb40 [ 304.643952][ T8014] ? skb_put+0x11b/0x210 [ 304.643975][ T8014] netlink_sendmsg+0x6c0/0xb40 [ 304.644002][ T8014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.644027][ T8014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.644061][ T8014] ____sys_sendmsg+0xa4e/0xac0 [ 304.644091][ T8014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.644121][ T8014] ? import_iovec+0x73/0xa0 [ 304.644144][ T8014] ___sys_sendmsg+0x2a5/0x360 [ 304.644164][ T8014] ? get_pid_task+0x20/0x1f0 [ 304.644186][ T8014] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.644228][ T8014] ? sb_end_write+0xe9/0x1c0 [ 304.644258][ T8014] ? __pfx_vfs_write+0x10/0x10 [ 304.644290][ T8014] __x64_sys_sendmsg+0x1c3/0x2a0 [ 304.644313][ T8014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.644344][ T8014] ? __pfx_ksys_write+0x10/0x10 [ 304.644377][ T8014] do_syscall_64+0x14d/0xf80 [ 304.644398][ T8014] ? trace_irq_disable+0x3b/0x150 [ 304.644417][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.644434][ T8014] ? clear_bhb_loop+0x40/0x90 [ 304.644455][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.644473][ T8014] RIP: 0033:0x7fd86b5dc629 [ 304.644490][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.644506][ T8014] RSP: 002b:00007fd869836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.644526][ T8014] RAX: ffffffffffffffda RBX: 00007fd86b855fa0 RCX: 00007fd86b5dc629 [ 304.644539][ T8014] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 304.644551][ T8014] RBP: 00007fd869836090 R08: 0000000000000000 R09: 0000000000000000 [ 304.644562][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.644573][ T8014] R13: 00007fd86b856038 R14: 00007fd86b855fa0 R15: 00007fff656f3e18 [ 304.644602][ T8014] [ 304.797667][ T891] usb 2-1: USB disconnect, device number 16 [ 305.287706][ T5873] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 305.327665][ T891] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 305.447747][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 305.458289][ T5873] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 305.458338][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.458360][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.458379][ T5873] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.458399][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.465539][ T5873] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.465567][ T5873] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.465584][ T5873] usb 4-1: Manufacturer: syz [ 305.477620][ T891] usb 6-1: Using ep0 maxpacket: 16 [ 305.479481][ T891] usb 6-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 305.479531][ T891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.479555][ T891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.479574][ T891] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.479594][ T891] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.480723][ T891] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.480748][ T891] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.480766][ T891] usb 6-1: Manufacturer: syz [ 306.581665][ T37] audit: type=1326 audit(1771687082.460:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 306.581837][ T37] audit: type=1326 audit(1771687082.460:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 306.581898][ T37] audit: type=1326 audit(1771687082.460:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 306.582079][ T37] audit: type=1326 audit(1771687082.460:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8030 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 307.369922][ T5873] usb 4-1: config 0 descriptor?? [ 307.388759][ T891] usb 6-1: config 0 descriptor?? [ 307.619715][ T5804] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 307.673368][ T8049] FAULT_INJECTION: forcing a failure. [ 307.673368][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.673400][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.2.637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.673420][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.673429][ T8049] Call Trace: [ 307.673436][ T8049] [ 307.673444][ T8049] dump_stack_lvl+0xe8/0x150 [ 307.673472][ T8049] should_fail_ex+0x46b/0x600 [ 307.673502][ T8049] _copy_from_iter+0x1d3/0x1670 [ 307.673528][ T8049] ? trace_kmem_cache_alloc+0x29/0xf0 [ 307.673550][ T8049] ? __alloc_skb+0x27d/0x7d0 [ 307.673570][ T8049] ? __pfx__copy_from_iter+0x10/0x10 [ 307.673586][ T8049] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 307.673609][ T8049] ? __alloc_skb+0x27d/0x7d0 [ 307.673632][ T8049] ? netlink_sendmsg+0x650/0xb40 [ 307.673650][ T8049] ? skb_put+0x11b/0x210 [ 307.673673][ T8049] netlink_sendmsg+0x6c0/0xb40 [ 307.673699][ T8049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.673725][ T8049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.673749][ T8049] ____sys_sendmsg+0xa4e/0xac0 [ 307.673780][ T8049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.673809][ T8049] ? import_iovec+0x73/0xa0 [ 307.673832][ T8049] ___sys_sendmsg+0x2a5/0x360 [ 307.673859][ T8049] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.673913][ T8049] ? __fget_files+0x2a/0x420 [ 307.673932][ T8049] ? __fget_files+0x3a6/0x420 [ 307.673962][ T8049] __x64_sys_sendmsg+0x1c3/0x2a0 [ 307.673992][ T8049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.674023][ T8049] ? __pfx_ksys_write+0x10/0x10 [ 307.674056][ T8049] do_syscall_64+0x14d/0xf80 [ 307.674078][ T8049] ? trace_irq_disable+0x3b/0x150 [ 307.674097][ T8049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.674116][ T8049] ? clear_bhb_loop+0x40/0x90 [ 307.674136][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.674154][ T8049] RIP: 0033:0x7f681362c629 [ 307.674172][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.674188][ T8049] RSP: 002b:00007f6811886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.674207][ T8049] RAX: ffffffffffffffda RBX: 00007f68138a5fa0 RCX: 00007f681362c629 [ 307.674221][ T8049] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 307.674233][ T8049] RBP: 00007f6811886090 R08: 0000000000000000 R09: 0000000000000000 [ 307.674244][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.674255][ T8049] R13: 00007f68138a6038 R14: 00007f68138a5fa0 R15: 00007ffdbdf18f28 [ 307.674284][ T8049] [ 307.682190][ T5873] rc_core: IR keymap rc-hauppauge not found [ 307.682208][ T5873] Registered IR keymap rc-empty [ 307.707029][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 307.719302][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 307.767681][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 307.771717][ T5804] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 307.771777][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.771802][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.771822][ T5804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.771842][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.788902][ T5804] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.788930][ T5804] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.788948][ T5804] usb 5-1: Manufacturer: syz [ 307.806254][ T5804] usb 5-1: config 0 descriptor?? [ 307.849851][ T5873] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 307.931654][ T891] rc_core: IR keymap rc-hauppauge not found [ 307.931676][ T891] Registered IR keymap rc-empty [ 307.932751][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 307.984737][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.112944][ T891] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 308.114474][ T5873] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 308.149011][ T891] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input12 [ 308.468756][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.487820][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.507819][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.527785][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.547764][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.567749][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.587723][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.607755][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.627734][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.647744][ T891] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.682148][ T891] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 308.682173][ T891] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.907683][ T891] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 308.992382][ T5804] rc_core: IR keymap rc-hauppauge not found [ 308.992404][ T5804] Registered IR keymap rc-empty [ 308.992552][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.015552][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.143767][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.176950][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.187744][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.219335][ T891] usb 3-1: Using ep0 maxpacket: 32 [ 309.220117][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.228067][ T7317] usb 6-1: USB disconnect, device number 5 [ 309.235952][ T891] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 309.235975][ T891] usb 3-1: config 0 has no interface number 0 [ 309.236004][ T891] usb 3-1: config 0 interface 182 has no altsetting 0 [ 309.239134][ T891] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 309.239160][ T891] usb 3-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 309.239178][ T891] usb 3-1: Product: syz [ 309.239191][ T891] usb 3-1: Manufacturer: syz [ 309.239204][ T891] usb 3-1: SerialNumber: syz [ 309.282876][ T5804] rc rc2: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2 [ 309.285920][ T5804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc2/input13 [ 309.337686][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.357965][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.377788][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.378322][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.378582][ T891] usb 3-1: config 0 descriptor?? [ 309.381254][ T891] hub 3-1:0.182: bad descriptor, ignoring hub [ 309.381290][ T891] hub 3-1:0.182: probe with driver hub failed with error -5 [ 309.397745][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.408918][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.417714][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.437712][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.439552][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.457736][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.459994][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.477763][ T5873] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 309.492116][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.507845][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.534675][ T5873] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 309.536036][ T5873] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.541195][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.557748][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.582555][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.583042][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.613648][ T891] kaweth 3-1:0.182: Firmware present in device. [ 309.651352][ T5804] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 309.651375][ T5804] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.683829][ T5873] usb 4-1: USB disconnect, device number 17 [ 309.695683][ T5804] usb 5-1: USB disconnect, device number 25 [ 309.795697][ T891] kaweth 3-1:0.182: Error reading configuration (-32), no net device created [ 309.795941][ T891] kaweth 3-1:0.182: probe with driver kaweth failed with error -5 [ 309.872874][ T8064] netlink: 'syz.5.641': attribute type 7 has an invalid length. [ 309.872894][ T8064] netlink: 'syz.5.641': attribute type 8 has an invalid length. [ 309.981704][ T891] usb 3-1: USB disconnect, device number 24 [ 310.045446][ T8066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.640'. [ 310.399688][ T8075] FAULT_INJECTION: forcing a failure. [ 310.399688][ T8075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.399720][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 310.399740][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.399750][ T8075] Call Trace: [ 310.399757][ T8075] [ 310.399764][ T8075] dump_stack_lvl+0xe8/0x150 [ 310.399795][ T8075] should_fail_ex+0x46b/0x600 [ 310.399826][ T8075] _copy_to_user+0x31/0xb0 [ 310.399850][ T8075] simple_read_from_buffer+0xe1/0x170 [ 310.399875][ T8075] proc_fail_nth_read+0x1be/0x230 [ 310.399898][ T8075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.399920][ T8075] ? rw_verify_area+0x2ac/0x4e0 [ 310.399942][ T8075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.399962][ T8075] vfs_read+0x212/0xa80 [ 310.399997][ T8075] ? __pfx_vfs_read+0x10/0x10 [ 310.400021][ T8075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 310.400044][ T8075] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.400065][ T8075] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 310.400085][ T8075] ? mutex_lock_nested+0x152/0x1d0 [ 310.400101][ T8075] ? fdget_pos+0x252/0x320 [ 310.400128][ T8075] ksys_read+0x156/0x270 [ 310.400152][ T8075] ? __pfx_ksys_read+0x10/0x10 [ 310.400173][ T8075] ? __pfx_sock_ioctl+0x10/0x10 [ 310.400206][ T8075] do_syscall_64+0x14d/0xf80 [ 310.400226][ T8075] ? trace_irq_disable+0x3b/0x150 [ 310.400244][ T8075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.400262][ T8075] ? clear_bhb_loop+0x40/0x90 [ 310.400283][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.400301][ T8075] RIP: 0033:0x7f249e0acece [ 310.400317][ T8075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.400332][ T8075] RSP: 002b:00007f249c345fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.400351][ T8075] RAX: ffffffffffffffda RBX: 00007f249c3466c0 RCX: 00007f249e0acece [ 310.400363][ T8075] RDX: 000000000000000f RSI: 00007f249c3460a0 RDI: 0000000000000004 [ 310.400374][ T8075] RBP: 00007f249c346090 R08: 0000000000000000 R09: 0000000000000000 [ 310.400385][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.400396][ T8075] R13: 00007f249e366038 R14: 00007f249e365fa0 R15: 00007ffedba6dea8 [ 310.400426][ T8075] [ 310.557676][ T5873] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 310.839691][ T5873] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 310.839718][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.863985][ T5873] usb 4-1: string descriptor 0 read error: -22 [ 310.864125][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.864146][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.902251][ T5873] usb 4-1: 0:2 : does not exist [ 311.123492][ T5873] usb 4-1: USB disconnect, device number 18 [ 311.979498][ T8095] netlink: 'syz.1.652': attribute type 7 has an invalid length. [ 311.979513][ T8095] netlink: 'syz.1.652': attribute type 8 has an invalid length. [ 312.148239][ T8100] FAULT_INJECTION: forcing a failure. [ 312.148239][ T8100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.148272][ T8100] CPU: 0 UID: 0 PID: 8100 Comm: syz.3.655 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.148292][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.148303][ T8100] Call Trace: [ 312.148310][ T8100] [ 312.148317][ T8100] dump_stack_lvl+0xe8/0x150 [ 312.148345][ T8100] should_fail_ex+0x46b/0x600 [ 312.148376][ T8100] _copy_from_user+0x2d/0xb0 [ 312.148398][ T8100] ___sys_recvmsg+0x175/0x590 [ 312.148418][ T8100] ? __lock_acquire+0x6b5/0x2cf0 [ 312.148440][ T8100] ? __pfx____sys_recvmsg+0x10/0x10 [ 312.148497][ T8100] do_recvmmsg+0x33a/0x800 [ 312.148527][ T8100] ? __pfx_do_recvmmsg+0x10/0x10 [ 312.148568][ T8100] ? rt_mutex_slowunlock+0x1cb/0x300 [ 312.148601][ T8100] __x64_sys_recvmmsg+0x198/0x250 [ 312.148626][ T8100] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 312.148660][ T8100] do_syscall_64+0x14d/0xf80 [ 312.148680][ T8100] ? trace_irq_disable+0x3b/0x150 [ 312.148699][ T8100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.148718][ T8100] ? clear_bhb_loop+0x40/0x90 [ 312.148739][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.148757][ T8100] RIP: 0033:0x7fcec33cc629 [ 312.148773][ T8100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.148789][ T8100] RSP: 002b:00007fcec161e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 312.148808][ T8100] RAX: ffffffffffffffda RBX: 00007fcec3645fa0 RCX: 00007fcec33cc629 [ 312.148821][ T8100] RDX: 0000000000000004 RSI: 0000200000004d80 RDI: 0000000000000003 [ 312.148833][ T8100] RBP: 00007fcec161e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.148844][ T8100] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 312.148855][ T8100] R13: 00007fcec3646038 R14: 00007fcec3645fa0 R15: 00007ffcd789cad8 [ 312.148883][ T8100] [ 312.433402][ T8113] FAULT_INJECTION: forcing a failure. [ 312.433402][ T8113] name failslab, interval 1, probability 0, space 0, times 0 [ 312.433424][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.3.659 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 312.433436][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.433442][ T8113] Call Trace: [ 312.433446][ T8113] [ 312.433451][ T8113] dump_stack_lvl+0xe8/0x150 [ 312.433471][ T8113] should_fail_ex+0x46b/0x600 [ 312.433489][ T8113] should_failslab+0xa8/0x100 [ 312.433505][ T8113] __kmalloc_noprof+0xdf/0x7b0 [ 312.433519][ T8113] ? do_sys_poll+0x30a/0xfa0 [ 312.433532][ T8113] do_sys_poll+0x30a/0xfa0 [ 312.433552][ T8113] ? __pfx_do_sys_poll+0x10/0x10 [ 312.433562][ T8113] ? __lock_acquire+0x6b5/0x2cf0 [ 312.433573][ T8113] ? is_bpf_text_address+0x26/0x2b0 [ 312.433632][ T8113] ? set_user_sigmask+0xcd/0x1c0 [ 312.433646][ T8113] ? __pfx_set_user_sigmask+0x10/0x10 [ 312.433657][ T8113] ? rt_mutex_slowunlock+0x1cb/0x300 [ 312.433668][ T8113] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 312.433681][ T8113] __se_sys_ppoll+0x209/0x2b0 [ 312.433691][ T8113] ? fput+0xa0/0xd0 [ 312.433703][ T8113] ? __pfx___se_sys_ppoll+0x10/0x10 [ 312.433713][ T8113] ? __pfx_ksys_write+0x10/0x10 [ 312.433729][ T8113] ? __x64_sys_ppoll+0x20/0xc0 [ 312.433739][ T8113] do_syscall_64+0x14d/0xf80 [ 312.433751][ T8113] ? trace_irq_disable+0x3b/0x150 [ 312.433762][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.433772][ T8113] ? clear_bhb_loop+0x40/0x90 [ 312.433784][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.433794][ T8113] RIP: 0033:0x7fcec33cc629 [ 312.433804][ T8113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.433812][ T8113] RSP: 002b:00007fcec161e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 312.433823][ T8113] RAX: ffffffffffffffda RBX: 00007fcec3645fa0 RCX: 00007fcec33cc629 [ 312.433830][ T8113] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 312.433836][ T8113] RBP: 00007fcec161e090 R08: 0000000000000000 R09: 0000000000000000 [ 312.433842][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.433848][ T8113] R13: 00007fcec3646038 R14: 00007fcec3645fa0 R15: 00007ffcd789cad8 [ 312.433862][ T8113] [ 312.829548][ T32] block nbd0: Possible stuck request ffff8880264e0000: control (read@0,1024B). Runtime 120 seconds [ 312.829588][ T32] block nbd0: Possible stuck request ffff8880264e01c0: control (read@1024,1024B). Runtime 120 seconds [ 312.829614][ T32] block nbd0: Possible stuck request ffff8880264e0380: control (read@2048,1024B). Runtime 120 seconds [ 312.829639][ T32] block nbd0: Possible stuck request ffff8880264e0540: control (read@3072,1024B). Runtime 120 seconds [ 313.452676][ T5805] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 313.822463][ T8132] netlink: 60 bytes leftover after parsing attributes in process `syz.5.662'. [ 314.055310][ T8134] FAULT_INJECTION: forcing a failure. [ 314.055310][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.055342][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.4.664 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 314.055362][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.055372][ T8134] Call Trace: [ 314.055378][ T8134] [ 314.055386][ T8134] dump_stack_lvl+0xe8/0x150 [ 314.055415][ T8134] should_fail_ex+0x46b/0x600 [ 314.055445][ T8134] _copy_from_user+0x2d/0xb0 [ 314.055466][ T8134] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 314.055487][ T8134] drm_ioctl+0x5d0/0xb80 [ 314.055503][ T8134] ? smk_tskacc+0x311/0x3a0 [ 314.055524][ T8134] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 314.055549][ T8134] ? __pfx_drm_ioctl+0x10/0x10 [ 314.055579][ T8134] ? __fget_files+0x2a/0x420 [ 314.055602][ T8134] ? bpf_lsm_file_ioctl+0x9/0x20 [ 314.055627][ T8134] ? __pfx_drm_ioctl+0x10/0x10 [ 314.055644][ T8134] __se_sys_ioctl+0xff/0x170 [ 314.055670][ T8134] do_syscall_64+0x14d/0xf80 [ 314.055691][ T8134] ? trace_irq_disable+0x3b/0x150 [ 314.055710][ T8134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.055727][ T8134] ? clear_bhb_loop+0x40/0x90 [ 314.055748][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.055765][ T8134] RIP: 0033:0x7f249e0ec629 [ 314.055779][ T8134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.055793][ T8134] RSP: 002b:00007f249c346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.055812][ T8134] RAX: ffffffffffffffda RBX: 00007f249e365fa0 RCX: 00007f249e0ec629 [ 314.055825][ T8134] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 314.055836][ T8134] RBP: 00007f249c346090 R08: 0000000000000000 R09: 0000000000000000 [ 314.055847][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.055857][ T8134] R13: 00007f249e366038 R14: 00007f249e365fa0 R15: 00007ffedba6dea8 [ 314.055885][ T8134] [ 314.411761][ T8138] netlink: 'syz.3.666': attribute type 7 has an invalid length. [ 314.411782][ T8138] netlink: 'syz.3.666': attribute type 8 has an invalid length. [ 314.799353][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 314.799377][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 317.226336][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.226403][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.354323][ T7317] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 318.707111][ T8177] FAULT_INJECTION: forcing a failure. [ 318.707111][ T8177] name failslab, interval 1, probability 0, space 0, times 0 [ 318.707144][ T8177] CPU: 0 UID: 0 PID: 8177 Comm: syz.5.677 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 318.707165][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.707175][ T8177] Call Trace: [ 318.707182][ T8177] [ 318.707191][ T8177] dump_stack_lvl+0xe8/0x150 [ 318.707219][ T8177] should_fail_ex+0x46b/0x600 [ 318.707250][ T8177] should_failslab+0xa8/0x100 [ 318.707278][ T8177] kmem_cache_alloc_noprof+0x87/0x680 [ 318.707302][ T8177] ? skb_clone+0x212/0x3a0 [ 318.707329][ T8177] skb_clone+0x212/0x3a0 [ 318.707354][ T8177] __netlink_deliver_tap+0x404/0x850 [ 318.707385][ T8177] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.707405][ T8177] netlink_deliver_tap+0x19c/0x1b0 [ 318.707424][ T8177] netlink_unicast+0x805/0x9f0 [ 318.707456][ T8177] ? __pfx_netlink_unicast+0x10/0x10 [ 318.707482][ T8177] ? netlink_sendmsg+0x650/0xb40 [ 318.707498][ T8177] ? skb_put+0x11b/0x210 [ 318.707521][ T8177] netlink_sendmsg+0x813/0xb40 [ 318.707548][ T8177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.707570][ T8177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.707594][ T8177] ____sys_sendmsg+0xa4e/0xac0 [ 318.707625][ T8177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.707656][ T8177] ? import_iovec+0x73/0xa0 [ 318.707679][ T8177] ___sys_sendmsg+0x2a5/0x360 [ 318.707708][ T8177] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.707762][ T8177] ? __fget_files+0x2a/0x420 [ 318.707782][ T8177] ? __fget_files+0x3a6/0x420 [ 318.707811][ T8177] __x64_sys_sendmsg+0x1c3/0x2a0 [ 318.707836][ T8177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.707868][ T8177] ? __pfx_ksys_write+0x10/0x10 [ 318.707901][ T8177] do_syscall_64+0x14d/0xf80 [ 318.707922][ T8177] ? trace_irq_disable+0x3b/0x150 [ 318.707942][ T8177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.707959][ T8177] ? clear_bhb_loop+0x40/0x90 [ 318.707981][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.708004][ T8177] RIP: 0033:0x7fd86b5dc629 [ 318.708022][ T8177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.708037][ T8177] RSP: 002b:00007fd869836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.708056][ T8177] RAX: ffffffffffffffda RBX: 00007fd86b855fa0 RCX: 00007fd86b5dc629 [ 318.708069][ T8177] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 318.708080][ T8177] RBP: 00007fd869836090 R08: 0000000000000000 R09: 0000000000000000 [ 318.708092][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.708103][ T8177] R13: 00007fd86b856038 R14: 00007fd86b855fa0 R15: 00007fff656f3e18 [ 318.708132][ T8177] [ 318.893068][ T5805] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 319.781452][ T8193] FAULT_INJECTION: forcing a failure. [ 319.781452][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.781587][ T8193] CPU: 1 UID: 0 PID: 8193 Comm: syz.4.682 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 319.781618][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 319.781628][ T8193] Call Trace: [ 319.781636][ T8193] [ 319.781644][ T8193] dump_stack_lvl+0xe8/0x150 [ 319.781673][ T8193] should_fail_ex+0x46b/0x600 [ 319.781703][ T8193] _copy_from_iter+0x1d3/0x1670 [ 319.781726][ T8193] ? trace_kmem_cache_alloc+0x29/0xf0 [ 319.781747][ T8193] ? __alloc_skb+0x27d/0x7d0 [ 319.781765][ T8193] ? __pfx__copy_from_iter+0x10/0x10 [ 319.781780][ T8193] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 319.781802][ T8193] ? __alloc_skb+0x27d/0x7d0 [ 319.781825][ T8193] ? netlink_sendmsg+0x650/0xb40 [ 319.781840][ T8193] ? skb_put+0x11b/0x210 [ 319.781862][ T8193] netlink_sendmsg+0x6c0/0xb40 [ 319.781887][ T8193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.781911][ T8193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.781936][ T8193] ____sys_sendmsg+0xa4e/0xac0 [ 319.781965][ T8193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.781994][ T8193] ? import_iovec+0x73/0xa0 [ 319.782016][ T8193] ___sys_sendmsg+0x2a5/0x360 [ 319.782042][ T8193] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.782092][ T8193] ? __fget_files+0x2a/0x420 [ 319.782110][ T8193] ? __fget_files+0x3a6/0x420 [ 319.782138][ T8193] __x64_sys_sendmsg+0x1c3/0x2a0 [ 319.782160][ T8193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.782189][ T8193] ? __pfx_ksys_write+0x10/0x10 [ 319.782222][ T8193] do_syscall_64+0x14d/0xf80 [ 319.782242][ T8193] ? trace_irq_disable+0x3b/0x150 [ 319.782261][ T8193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.782279][ T8193] ? clear_bhb_loop+0x40/0x90 [ 319.782300][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.782317][ T8193] RIP: 0033:0x7f249e0ec629 [ 319.782334][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.782348][ T8193] RSP: 002b:00007f249c346028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.782368][ T8193] RAX: ffffffffffffffda RBX: 00007f249e365fa0 RCX: 00007f249e0ec629 [ 319.782380][ T8193] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 319.782391][ T8193] RBP: 00007f249c346090 R08: 0000000000000000 R09: 0000000000000000 [ 319.782401][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.782412][ T8193] R13: 00007f249e366038 R14: 00007f249e365fa0 R15: 00007ffedba6dea8 [ 319.782441][ T8193] [ 321.667644][ T5976] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 322.636034][ T5805] Bluetooth: Unexpected continuation frame (len 13) [ 322.807683][ T5976] usb 4-1: Using ep0 maxpacket: 32 [ 322.809615][ T5976] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 322.809638][ T5976] usb 4-1: config 0 has no interface number 0 [ 322.809666][ T5976] usb 4-1: config 0 interface 182 has no altsetting 0 [ 322.813649][ T5976] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 322.813676][ T5976] usb 4-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 322.813693][ T5976] usb 4-1: Product: syz [ 322.813707][ T5976] usb 4-1: Manufacturer: syz [ 322.813720][ T5976] usb 4-1: SerialNumber: syz [ 322.893516][ T5976] usb 4-1: config 0 descriptor?? [ 322.895832][ T5976] hub 4-1:0.182: bad descriptor, ignoring hub [ 322.895862][ T5976] hub 4-1:0.182: probe with driver hub failed with error -5 [ 322.917669][ T5977] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 323.096812][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.097307][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.129977][ T5976] kaweth 4-1:0.182: Firmware present in device. [ 323.145064][ T5977] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 323.145092][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.145110][ T5977] usb 3-1: Product: syz [ 323.145345][ T5977] usb 3-1: Manufacturer: syz [ 323.145359][ T5977] usb 3-1: SerialNumber: syz [ 323.253504][ T5977] usb 3-1: config 0 descriptor?? [ 323.298671][ T5976] kaweth 4-1:0.182: Error reading configuration (-32), no net device created [ 323.299824][ T5976] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 323.379557][ T5976] usb 4-1: USB disconnect, device number 20 [ 323.506836][ T5977] airspy 3-1:0.0: usb_control_msg() failed -32 request 09 [ 323.506854][ T5977] airspy 3-1:0.0: Could not detect board [ 323.506911][ T5977] airspy 3-1:0.0: probe with driver airspy failed with error -32 [ 323.554054][ T5977] usb 3-1: USB disconnect, device number 25 [ 325.346284][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.702'. [ 325.817653][ T5977] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 325.967851][ T5977] usb 5-1: Using ep0 maxpacket: 32 [ 325.971443][ T5977] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 325.971470][ T5977] usb 5-1: config 0 has no interface number 0 [ 325.971499][ T5977] usb 5-1: config 0 interface 182 has no altsetting 0 [ 325.974372][ T5977] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 325.974399][ T5977] usb 5-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 325.974417][ T5977] usb 5-1: Product: syz [ 325.974429][ T5977] usb 5-1: Manufacturer: syz [ 325.974440][ T5977] usb 5-1: SerialNumber: syz [ 326.041167][ T5977] usb 5-1: config 0 descriptor?? [ 326.053170][ T5977] hub 5-1:0.182: bad descriptor, ignoring hub [ 326.053206][ T5977] hub 5-1:0.182: probe with driver hub failed with error -5 [ 326.245061][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.245559][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.276793][ T5977] kaweth 5-1:0.182: Firmware present in device. [ 326.448694][ T5977] kaweth 5-1:0.182: Error reading configuration (-32), no net device created [ 326.448956][ T5977] kaweth 5-1:0.182: probe with driver kaweth failed with error -5 [ 326.538520][ T5977] usb 5-1: USB disconnect, device number 26 [ 326.730237][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 327.061921][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 327.061937][ T37] audit: type=1326 audit(1771687103.020:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8280 comm="syz.3.711" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcec33cc629 code=0x0 [ 327.153772][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 327.181429][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 327.700920][ T5977] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 327.863338][ T5977] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 327.863367][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.863386][ T5977] usb 4-1: Product: syz [ 327.863399][ T5977] usb 4-1: Manufacturer: syz [ 327.863411][ T5977] usb 4-1: SerialNumber: syz [ 327.967440][ T5977] usb 4-1: config 0 descriptor?? [ 328.271511][ T8302] QAT: Invalid ioctl 21531 [ 328.651759][ T5977] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 328.651785][ T5977] airspy 4-1:0.0: Could not detect board [ 328.651961][ T5977] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 328.905736][ T5977] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 329.275001][ T8308] FAULT_INJECTION: forcing a failure. [ 329.275001][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.275036][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.5.719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.275057][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.275074][ T8308] Call Trace: [ 329.275081][ T8308] [ 329.275089][ T8308] dump_stack_lvl+0xe8/0x150 [ 329.275118][ T8308] should_fail_ex+0x46b/0x600 [ 329.275148][ T8308] _copy_from_iter+0x1d3/0x1670 [ 329.275178][ T8308] ? trace_kmem_cache_alloc+0x29/0xf0 [ 329.275200][ T8308] ? __alloc_skb+0x27d/0x7d0 [ 329.275219][ T8308] ? __pfx__copy_from_iter+0x10/0x10 [ 329.275236][ T8308] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 329.275257][ T8308] ? __alloc_skb+0x27d/0x7d0 [ 329.275281][ T8308] ? netlink_sendmsg+0x650/0xb40 [ 329.275298][ T8308] ? skb_put+0x11b/0x210 [ 329.275321][ T8308] netlink_sendmsg+0x6c0/0xb40 [ 329.275348][ T8308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.275373][ T8308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.275399][ T8308] ____sys_sendmsg+0xa4e/0xac0 [ 329.275429][ T8308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.275459][ T8308] ? import_iovec+0x73/0xa0 [ 329.275482][ T8308] ___sys_sendmsg+0x2a5/0x360 [ 329.275508][ T8308] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.275562][ T8308] ? __fget_files+0x2a/0x420 [ 329.275581][ T8308] ? __fget_files+0x3a6/0x420 [ 329.275610][ T8308] __x64_sys_sendmsg+0x1c3/0x2a0 [ 329.275634][ T8308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.275664][ T8308] ? __pfx_ksys_write+0x10/0x10 [ 329.275698][ T8308] do_syscall_64+0x14d/0xf80 [ 329.275722][ T8308] ? trace_irq_disable+0x3b/0x150 [ 329.275741][ T8308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.275759][ T8308] ? clear_bhb_loop+0x40/0x90 [ 329.275780][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.275798][ T8308] RIP: 0033:0x7fd86b5dc629 [ 329.275816][ T8308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.275905][ T8308] RSP: 002b:00007fd869836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.275929][ T8308] RAX: ffffffffffffffda RBX: 00007fd86b855fa0 RCX: 00007fd86b5dc629 [ 329.275942][ T8308] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 329.275953][ T8308] RBP: 00007fd869836090 R08: 0000000000000000 R09: 0000000000000000 [ 329.275964][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.275974][ T8308] R13: 00007fd86b856038 R14: 00007fd86b855fa0 R15: 00007fff656f3e18 [ 329.276006][ T8308] [ 329.357689][ T5977] usb 2-1: Using ep0 maxpacket: 32 [ 329.359555][ T5977] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 329.359577][ T5977] usb 2-1: config 0 has no interface number 0 [ 329.359604][ T5977] usb 2-1: config 0 interface 182 has no altsetting 0 [ 329.361923][ T10] usb 4-1: USB disconnect, device number 21 [ 329.402586][ T5977] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 329.402615][ T5977] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 329.402633][ T5977] usb 2-1: Product: syz [ 329.402646][ T5977] usb 2-1: Manufacturer: syz [ 329.402659][ T5977] usb 2-1: SerialNumber: syz [ 329.584766][ T5977] usb 2-1: config 0 descriptor?? [ 329.656987][ T5977] hub 2-1:0.182: bad descriptor, ignoring hub [ 329.657034][ T5977] hub 2-1:0.182: probe with driver hub failed with error -5 [ 329.671541][ T8309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 329.790647][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.791121][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.845357][ T5977] kaweth 2-1:0.182: Firmware present in device. [ 329.993766][ T5977] kaweth 2-1:0.182: Error reading configuration (-32), no net device created [ 329.994008][ T5977] kaweth 2-1:0.182: probe with driver kaweth failed with error -5 [ 330.058467][ T5977] usb 2-1: USB disconnect, device number 17 [ 330.347701][ T5873] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 330.777624][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 330.779384][ T5873] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 330.779408][ T5873] usb 5-1: config 0 has no interface number 0 [ 330.779436][ T5873] usb 5-1: config 0 interface 182 has no altsetting 0 [ 330.822550][ T5873] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 330.822577][ T5873] usb 5-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 330.822596][ T5873] usb 5-1: Product: syz [ 330.822608][ T5873] usb 5-1: Manufacturer: syz [ 330.822621][ T5873] usb 5-1: SerialNumber: syz [ 330.865226][ T5873] usb 5-1: config 0 descriptor?? [ 330.881430][ T5873] hub 5-1:0.182: bad descriptor, ignoring hub [ 330.881464][ T5873] hub 5-1:0.182: probe with driver hub failed with error -5 [ 331.073794][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.074223][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.112677][ T5873] kaweth 5-1:0.182: Firmware present in device. [ 331.220819][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.726'. [ 331.281300][ T5873] kaweth 5-1:0.182: Error reading configuration (-32), no net device created [ 331.281540][ T5873] kaweth 5-1:0.182: probe with driver kaweth failed with error -5 [ 331.328597][ T5873] usb 5-1: USB disconnect, device number 27 [ 331.741192][ T37] audit: type=1326 audit(1771687107.700:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.741712][ T37] audit: type=1326 audit(1771687107.700:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.742114][ T37] audit: type=1326 audit(1771687107.700:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.742481][ T37] audit: type=1326 audit(1771687107.700:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.742527][ T37] audit: type=1326 audit(1771687107.700:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.743029][ T37] audit: type=1326 audit(1771687107.700:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.743880][ T37] audit: type=1326 audit(1771687107.700:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.743931][ T37] audit: type=1326 audit(1771687107.700:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 331.744443][ T37] audit: type=1326 audit(1771687107.700:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.083882][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 332.083900][ T37] audit: type=1326 audit(1771687108.030:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fde9e178aec code=0x7ffc0000 [ 332.083942][ T37] audit: type=1326 audit(1771687108.030:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fde9e178b4e code=0x7ffc0000 [ 332.083979][ T37] audit: type=1326 audit(1771687108.030:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde9e1bc2bb code=0x7ffc0000 [ 332.084015][ T37] audit: type=1326 audit(1771687108.030:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.084051][ T37] audit: type=1326 audit(1771687108.030:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.084093][ T37] audit: type=1326 audit(1771687108.030:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.084129][ T37] audit: type=1326 audit(1771687108.030:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.084165][ T37] audit: type=1326 audit(1771687108.030:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.087160][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 332.087190][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'. [ 332.100146][ T37] audit: type=1326 audit(1771687108.040:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 332.100193][ T37] audit: type=1326 audit(1771687108.040:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8337 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 333.840521][ T8366] netlink: 'syz.4.729': attribute type 10 has an invalid length. [ 333.840542][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 333.840999][ T8366] dummy0: entered promiscuous mode [ 333.841791][ T8366] bridge0: port 3(dummy0) entered blocking state [ 333.842001][ T8366] bridge0: port 3(dummy0) entered disabled state [ 333.842165][ T8366] dummy0: entered allmulticast mode [ 333.913985][ T8366] bridge0: port 3(dummy0) entered blocking state [ 333.914131][ T8366] bridge0: port 3(dummy0) entered forwarding state [ 334.064976][ T8368] netlink: 68 bytes leftover after parsing attributes in process `syz.5.737'. [ 334.113232][ T8358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.735'. [ 334.287696][ T5977] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 334.717656][ T5977] usb 3-1: Using ep0 maxpacket: 32 [ 334.719136][ T5977] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 334.719152][ T5977] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 334.719161][ T5977] usb 3-1: config 0 has no interface number 0 [ 334.720896][ T5977] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 334.720910][ T5977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.720920][ T5977] usb 3-1: Product: syz [ 334.720927][ T5977] usb 3-1: Manufacturer: syz [ 334.720933][ T5977] usb 3-1: SerialNumber: syz [ 334.728754][ T5977] usb 3-1: config 0 descriptor?? [ 335.422307][ T5977] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 335.422395][ T5977] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 335.422894][ T5977] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 335.423169][ T5977] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 335.437359][ T5977] usb 3-1: USB disconnect, device number 26 [ 336.525916][ T8397] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.757654][ T5873] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 336.761516][ T8403] FAULT_INJECTION: forcing a failure. [ 336.761516][ T8403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.761538][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: syz.1.748 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.761550][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.761556][ T8403] Call Trace: [ 336.761560][ T8403] [ 336.761565][ T8403] dump_stack_lvl+0xe8/0x150 [ 336.761584][ T8403] should_fail_ex+0x46b/0x600 [ 336.761603][ T8403] _copy_from_iter+0x1d3/0x1670 [ 336.761617][ T8403] ? trace_kmem_cache_alloc+0x29/0xf0 [ 336.761630][ T8403] ? __alloc_skb+0x27d/0x7d0 [ 336.761641][ T8403] ? __pfx__copy_from_iter+0x10/0x10 [ 336.761650][ T8403] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 336.761663][ T8403] ? __alloc_skb+0x27d/0x7d0 [ 336.761676][ T8403] ? netlink_sendmsg+0x650/0xb40 [ 336.761685][ T8403] ? skb_put+0x11b/0x210 [ 336.761698][ T8403] netlink_sendmsg+0x6c0/0xb40 [ 336.761712][ T8403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.761726][ T8403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.761741][ T8403] ____sys_sendmsg+0xa4e/0xac0 [ 336.761758][ T8403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.761787][ T8403] ? import_iovec+0x73/0xa0 [ 336.761800][ T8403] ___sys_sendmsg+0x2a5/0x360 [ 336.761815][ T8403] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.761844][ T8403] ? __fget_files+0x2a/0x420 [ 336.761855][ T8403] ? __fget_files+0x3a6/0x420 [ 336.761870][ T8403] __x64_sys_sendmsg+0x1c3/0x2a0 [ 336.761884][ T8403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.761901][ T8403] ? __pfx_ksys_write+0x10/0x10 [ 336.761920][ T8403] do_syscall_64+0x14d/0xf80 [ 336.761932][ T8403] ? trace_irq_disable+0x3b/0x150 [ 336.761943][ T8403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.761953][ T8403] ? clear_bhb_loop+0x40/0x90 [ 336.761965][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.761974][ T8403] RIP: 0033:0x7fde9e1bc629 [ 336.761985][ T8403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.761993][ T8403] RSP: 002b:00007fde9c40e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.762004][ T8403] RAX: ffffffffffffffda RBX: 00007fde9e435fa0 RCX: 00007fde9e1bc629 [ 336.762011][ T8403] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 336.762017][ T8403] RBP: 00007fde9c40e090 R08: 0000000000000000 R09: 0000000000000000 [ 336.762023][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.762029][ T8403] R13: 00007fde9e436038 R14: 00007fde9e435fa0 R15: 00007ffe6a566188 [ 336.762044][ T8403] [ 336.910268][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 336.913138][ T5873] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.913162][ T5873] usb 5-1: config 0 has no interface number 0 [ 336.949819][ T5873] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 336.949848][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.949865][ T5873] usb 5-1: Product: syz [ 336.949878][ T5873] usb 5-1: Manufacturer: syz [ 336.949890][ T5873] usb 5-1: SerialNumber: syz [ 336.957705][ T5804] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 336.971615][ T5873] usb 5-1: config 0 descriptor?? [ 336.985795][ T5873] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 336.985829][ T5873] usb 5-1: selecting invalid altsetting 1 [ 336.985843][ T5873] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 337.157322][ T5873] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 337.189291][ T5873] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 337.189392][ T5873] usb 5-1: media controller created [ 337.252964][ T5804] usb 3-1: not running at top speed; connect to a high speed hub [ 337.254124][ T5804] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.254143][ T5804] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 337.254156][ T5804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 337.255270][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.256809][ T5804] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.256825][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.256835][ T5804] usb 3-1: Product: Ꞅāø¶č·øē‚­īˆ«īš¬ę¦£č‹”ą¢–ęæ»źƒŸćŽ©ā‚±ęŖŗēŗ³į”ˆē‰®ęµ˜ä‚į¬”Ć¾ā—ø×”ą­žČć²®ēµ„ļš®ė¹„ÅŸę—·ę—ė‰¤ē¦Ø䈁ą ŗė«ī•˜äŽ°įµ¦ļ¦•éÆī‰øź‚ŗį•‘ēœ‡ļ“ī £ā±Ŗą§€é—…ļØļµ“īƒµļ±ēØ’ć¬āŒ™ģž—ė¶ å¹§ģžŒę–”į²å¢Ÿć®“ć³Æź•§ī„Æī²°ā£žŲ™īš¦ė‘å±“歎萓ī‚±ä†½ģ³˜ą¶¦ćƒ¼ī §ęž‰ėˆ¶åˆ‘ģ™ź³€å“›åƒµļµŒå¶č®½é„°å… ź„Ÿģ­Žī»ėž…郍źŽ•źš²čŽć…¬ē²ŽćŖå»Šź†č–¦ [ 337.256850][ T5804] usb 3-1: Manufacturer: å‡ ę­…ę˜…ķ†­ē²¾čˆ”éšŖąØ…āøƒėæŖ [ 337.256858][ T5804] usb 3-1: SerialNumber: syz [ 337.398840][ T8399] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 337.536132][ T5873] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 337.536187][ T5873] zl10353_read_register: readreg error (reg=127, ret==-71) [ 337.536671][ T5873] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 337.675915][ T5873] usb 5-1: USB disconnect, device number 28 [ 337.789036][ T8414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.752'. [ 337.839981][ T8399] netlink: 'syz.2.749': attribute type 10 has an invalid length. [ 337.840890][ T8399] veth0_vlan: entered allmulticast mode [ 337.905999][ T8399] veth0_vlan: left promiscuous mode [ 337.926034][ T8399] veth0_vlan: entered promiscuous mode [ 337.937275][ T8399] team0: Device veth0_vlan failed to register rx_handler [ 338.105078][ T5804] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 338.125357][ T5804] usb 3-1: USB disconnect, device number 27 [ 338.137677][ T5886] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 338.277120][ T8416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.753'. [ 338.287713][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 338.289838][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.292281][ T5886] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 338.292306][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.292324][ T5886] usb 4-1: Product: syz [ 338.292337][ T5886] usb 4-1: Manufacturer: syz [ 338.292349][ T5886] usb 4-1: SerialNumber: syz [ 338.407877][ T10] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 338.493460][ T5886] usb 4-1: config 0 descriptor?? [ 338.511972][ T5886] cdc_ether 4-1:0.0: skipping garbage [ 338.511995][ T5886] usb 4-1: bad CDC descriptors [ 338.513878][ T5886] usb 4-1: unsupported MDLM descriptors [ 338.588846][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 338.588876][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.588904][ T10] usb 5-1: Product: syz [ 338.588916][ T10] usb 5-1: Manufacturer: syz [ 338.588928][ T10] usb 5-1: SerialNumber: syz [ 338.596789][ T10] usb 5-1: config 0 descriptor?? [ 338.760196][ T5886] usb 4-1: USB disconnect, device number 22 [ 338.948219][ T10] airspy 5-1:0.0: usb_control_msg() failed -32 request 09 [ 338.948245][ T10] airspy 5-1:0.0: Could not detect board [ 338.948338][ T10] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 339.023019][ T8433] netlink: 68 bytes leftover after parsing attributes in process `syz.5.757'. [ 339.214403][ T891] usb 5-1: USB disconnect, device number 29 [ 339.974363][ T8451] FAULT_INJECTION: forcing a failure. [ 339.974363][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.974385][ T8451] CPU: 1 UID: 0 PID: 8451 Comm: syz.1.763 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.974396][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.974402][ T8451] Call Trace: [ 339.974407][ T8451] [ 339.974412][ T8451] dump_stack_lvl+0xe8/0x150 [ 339.974431][ T8451] should_fail_ex+0x46b/0x600 [ 339.974449][ T8451] _copy_from_iter+0x1d3/0x1670 [ 339.974463][ T8451] ? trace_kmem_cache_alloc+0x29/0xf0 [ 339.974477][ T8451] ? __alloc_skb+0x27d/0x7d0 [ 339.974488][ T8451] ? __pfx__copy_from_iter+0x10/0x10 [ 339.974496][ T8451] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 339.974509][ T8451] ? __alloc_skb+0x27d/0x7d0 [ 339.974522][ T8451] ? netlink_sendmsg+0x650/0xb40 [ 339.974532][ T8451] ? skb_put+0x11b/0x210 [ 339.974545][ T8451] netlink_sendmsg+0x6c0/0xb40 [ 339.974558][ T8451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.974572][ T8451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.974587][ T8451] ____sys_sendmsg+0xa4e/0xac0 [ 339.974599][ T8451] ? __lock_acquire+0x6b5/0x2cf0 [ 339.974612][ T8451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.974628][ T8451] ? import_iovec+0x73/0xa0 [ 339.974641][ T8451] ___sys_sendmsg+0x2a5/0x360 [ 339.974656][ T8451] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.974670][ T8451] ? kstrtouint+0x6e/0xe0 [ 339.974696][ T8451] ? __fget_files+0x2a/0x420 [ 339.974707][ T8451] ? __fget_files+0x3a6/0x420 [ 339.974722][ T8451] __sys_sendmmsg+0x282/0x4e0 [ 339.974737][ T8451] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.974753][ T8451] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 339.974770][ T8451] ? ksys_write+0x248/0x270 [ 339.974785][ T8451] ? __pfx_ksys_write+0x10/0x10 [ 339.974800][ T8451] __x64_sys_sendmmsg+0xa0/0xc0 [ 339.974814][ T8451] do_syscall_64+0x14d/0xf80 [ 339.974826][ T8451] ? trace_irq_disable+0x3b/0x150 [ 339.974838][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.974848][ T8451] ? clear_bhb_loop+0x40/0x90 [ 339.974859][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.974872][ T8451] RIP: 0033:0x7fde9e1bc629 [ 339.974882][ T8451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.974891][ T8451] RSP: 002b:00007fde9c40e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.974902][ T8451] RAX: ffffffffffffffda RBX: 00007fde9e435fa0 RCX: 00007fde9e1bc629 [ 339.974909][ T8451] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 339.974916][ T8451] RBP: 00007fde9c40e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.974922][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.974928][ T8451] R13: 00007fde9e436038 R14: 00007fde9e435fa0 R15: 00007ffe6a566188 [ 339.974943][ T8451] [ 340.454212][ T8459] FAULT_INJECTION: forcing a failure. [ 340.454212][ T8459] name failslab, interval 1, probability 0, space 0, times 0 [ 340.454245][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.4.766 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.454265][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.454276][ T8459] Call Trace: [ 340.454283][ T8459] [ 340.454291][ T8459] dump_stack_lvl+0xe8/0x150 [ 340.454320][ T8459] should_fail_ex+0x46b/0x600 [ 340.454351][ T8459] should_failslab+0xa8/0x100 [ 340.454378][ T8459] __kmalloc_noprof+0xdf/0x7b0 [ 340.454401][ T8459] ? kfree+0x4d/0x6c0 [ 340.454419][ T8459] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 340.454447][ T8459] tomoyo_realpath_from_path+0xe3/0x5d0 [ 340.454481][ T8459] ? tomoyo_path_number_perm+0x219/0x630 [ 340.454502][ T8459] tomoyo_path_number_perm+0x246/0x630 [ 340.454526][ T8459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.454550][ T8459] ? __lock_acquire+0x6b5/0x2cf0 [ 340.454601][ T8459] ? __fget_files+0x2a/0x420 [ 340.454624][ T8459] ? __fget_files+0x2a/0x420 [ 340.454640][ T8459] ? __fget_files+0x3a6/0x420 [ 340.454658][ T8459] ? __fget_files+0x2a/0x420 [ 340.454680][ T8459] security_file_ioctl+0xc3/0x2a0 [ 340.454702][ T8459] __se_sys_ioctl+0x47/0x170 [ 340.454727][ T8459] do_syscall_64+0x14d/0xf80 [ 340.454755][ T8459] ? trace_irq_disable+0x3b/0x150 [ 340.454774][ T8459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.454792][ T8459] ? clear_bhb_loop+0x40/0x90 [ 340.454812][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.454833][ T8459] RIP: 0033:0x7f249e0ec629 [ 340.454851][ T8459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.454865][ T8459] RSP: 002b:00007f249c346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.454884][ T8459] RAX: ffffffffffffffda RBX: 00007f249e365fa0 RCX: 00007f249e0ec629 [ 340.454896][ T8459] RDX: 00002000000011c0 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 340.454908][ T8459] RBP: 00007f249c346090 R08: 0000000000000000 R09: 0000000000000000 [ 340.454919][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.454930][ T8459] R13: 00007f249e366038 R14: 00007f249e365fa0 R15: 00007ffedba6dea8 [ 340.454959][ T8459] [ 340.454966][ T8459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 341.519154][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.773'. [ 341.742348][ T8485] FAULT_INJECTION: forcing a failure. [ 341.742348][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.742379][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.5.776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 341.742399][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 341.742409][ T8485] Call Trace: [ 341.742416][ T8485] [ 341.742423][ T8485] dump_stack_lvl+0xe8/0x150 [ 341.742452][ T8485] should_fail_ex+0x46b/0x600 [ 341.742482][ T8485] _copy_from_iter+0x1d3/0x1670 [ 341.742509][ T8485] ? trace_kmem_cache_alloc+0x29/0xf0 [ 341.742531][ T8485] ? __alloc_skb+0x27d/0x7d0 [ 341.742550][ T8485] ? __pfx__copy_from_iter+0x10/0x10 [ 341.742566][ T8485] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 341.742588][ T8485] ? __alloc_skb+0x27d/0x7d0 [ 341.742611][ T8485] ? netlink_sendmsg+0x650/0xb40 [ 341.742627][ T8485] ? skb_put+0x11b/0x210 [ 341.742650][ T8485] netlink_sendmsg+0x6c0/0xb40 [ 341.742676][ T8485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.742699][ T8485] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 341.742725][ T8485] ____sys_sendmsg+0xa4e/0xac0 [ 341.742754][ T8485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.742783][ T8485] ? import_iovec+0x73/0xa0 [ 341.742806][ T8485] ___sys_sendmsg+0x2a5/0x360 [ 341.742832][ T8485] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.742886][ T8485] ? __fget_files+0x2a/0x420 [ 341.742905][ T8485] ? __fget_files+0x3a6/0x420 [ 341.742942][ T8485] __x64_sys_sendmsg+0x1c3/0x2a0 [ 341.742966][ T8485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.742998][ T8485] ? __pfx_ksys_write+0x10/0x10 [ 341.743031][ T8485] do_syscall_64+0x14d/0xf80 [ 341.743052][ T8485] ? trace_irq_disable+0x3b/0x150 [ 341.743071][ T8485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.743089][ T8485] ? clear_bhb_loop+0x40/0x90 [ 341.743111][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.743128][ T8485] RIP: 0033:0x7fd86b5dc629 [ 341.743150][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.743166][ T8485] RSP: 002b:00007fd869836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.743186][ T8485] RAX: ffffffffffffffda RBX: 00007fd86b855fa0 RCX: 00007fd86b5dc629 [ 341.743199][ T8485] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 341.743211][ T8485] RBP: 00007fd869836090 R08: 0000000000000000 R09: 0000000000000000 [ 341.743222][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.743232][ T8485] R13: 00007fd86b856038 R14: 00007fd86b855fa0 R15: 00007fff656f3e18 [ 341.743261][ T8485] [ 343.371071][ T8518] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 343.446429][ T8521] FAULT_INJECTION: forcing a failure. [ 343.446429][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 343.446462][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.3.788 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 343.446482][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.446492][ T8521] Call Trace: [ 343.446500][ T8521] [ 343.446508][ T8521] dump_stack_lvl+0xe8/0x150 [ 343.446546][ T8521] should_fail_ex+0x46b/0x600 [ 343.446577][ T8521] should_failslab+0xa8/0x100 [ 343.446604][ T8521] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 343.446627][ T8521] ? __alloc_skb+0x1d0/0x7d0 [ 343.446646][ T8521] ? __pfx_tcp_current_mss+0x10/0x10 [ 343.446677][ T8521] __alloc_skb+0x1d0/0x7d0 [ 343.446701][ T8521] tcp_stream_alloc_skb+0x3f/0x5c0 [ 343.446726][ T8521] tcp_sendmsg_locked+0x137b/0x5490 [ 343.446746][ T8521] ? __lock_acquire+0x6b5/0x2cf0 [ 343.446787][ T8521] ? __lock_acquire+0x6b5/0x2cf0 [ 343.446831][ T8521] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 343.446861][ T8521] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 343.446884][ T8521] ? lockdep_hardirqs_on+0x7a/0x110 [ 343.446911][ T8521] tcp_sendmsg+0x2f/0x50 [ 343.446930][ T8521] ____sys_sendmsg+0x875/0xac0 [ 343.446950][ T8521] ? __lock_acquire+0x6b5/0x2cf0 [ 343.446974][ T8521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.447005][ T8521] ? import_iovec+0x73/0xa0 [ 343.447030][ T8521] ___sys_sendmsg+0x2a5/0x360 [ 343.447058][ T8521] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.447085][ T8521] ? kstrtouint+0x6e/0xe0 [ 343.447134][ T8521] ? __fget_files+0x2a/0x420 [ 343.447154][ T8521] ? __fget_files+0x3a6/0x420 [ 343.447184][ T8521] __sys_sendmmsg+0x282/0x4e0 [ 343.447211][ T8521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 343.447243][ T8521] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 343.447275][ T8521] ? ksys_write+0x248/0x270 [ 343.447300][ T8521] ? __pfx_ksys_write+0x10/0x10 [ 343.447351][ T8521] __x64_sys_sendmmsg+0xa0/0xc0 [ 343.447376][ T8521] do_syscall_64+0x14d/0xf80 [ 343.447396][ T8521] ? trace_irq_disable+0x3b/0x150 [ 343.447415][ T8521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.447432][ T8521] ? clear_bhb_loop+0x40/0x90 [ 343.447453][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.447470][ T8521] RIP: 0033:0x7fcec33cc629 [ 343.447487][ T8521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.447502][ T8521] RSP: 002b:00007fcec161e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.447527][ T8521] RAX: ffffffffffffffda RBX: 00007fcec3645fa0 RCX: 00007fcec33cc629 [ 343.447538][ T8521] RDX: 0000000000000002 RSI: 00002000000060c0 RDI: 0000000000000003 [ 343.447548][ T8521] RBP: 00007fcec161e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.447558][ T8521] R10: 0000000004008080 R11: 0000000000000246 R12: 0000000000000001 [ 343.447569][ T8521] R13: 00007fcec3646038 R14: 00007fcec3645fa0 R15: 00007ffcd789cad8 [ 343.447600][ T8521] [ 343.827841][ T32] block nbd0: Possible stuck request ffff8880264e0000: control (read@0,1024B). Runtime 150 seconds [ 343.827884][ T32] block nbd0: Possible stuck request ffff8880264e01c0: control (read@1024,1024B). Runtime 150 seconds [ 343.827908][ T32] block nbd0: Possible stuck request ffff8880264e0380: control (read@2048,1024B). Runtime 150 seconds [ 343.827933][ T32] block nbd0: Possible stuck request ffff8880264e0540: control (read@3072,1024B). Runtime 150 seconds [ 343.987641][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 344.919724][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 344.928384][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 344.928410][ T10] usb 3-1: config 0 has no interface number 0 [ 344.939188][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 344.939216][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.939232][ T10] usb 3-1: Product: syz [ 344.939244][ T10] usb 3-1: Manufacturer: syz [ 344.939255][ T10] usb 3-1: SerialNumber: syz [ 344.945157][ T8533] overlayfs: conflicting lowerdir path [ 345.001170][ T10] usb 3-1: config 0 descriptor?? [ 345.005951][ T8535] overlayfs: conflicting lowerdir path [ 345.020855][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 345.187688][ T891] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 345.337638][ T891] usb 5-1: Using ep0 maxpacket: 16 [ 345.341100][ T891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.341124][ T891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.341157][ T891] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.341176][ T891] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 345.344525][ T891] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 345.344560][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.344579][ T891] usb 5-1: Product: syz [ 345.344591][ T891] usb 5-1: Manufacturer: syz [ 345.344603][ T891] usb 5-1: SerialNumber: syz [ 345.414365][ T10] gspca_spca1528: reg_w err -71 [ 345.427726][ T10] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 345.447784][ T10] usb 3-1: USB disconnect, device number 28 [ 345.737346][ T8534] kAFS: unable to lookup cell '\/' [ 346.312068][ T891] usb 5-1: 0:2 : does not exist [ 346.367884][ T891] usb 5-1: USB disconnect, device number 30 [ 346.405319][ T8555] netlink: 164 bytes leftover after parsing attributes in process `syz.5.801'. [ 346.455669][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.746580][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.803'. [ 348.007728][ T5873] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 348.042099][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 348.042132][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 348.058166][ T8582] overlayfs: conflicting lowerdir path [ 348.085438][ T8579] bridge1: entered promiscuous mode [ 348.085457][ T8579] bridge1: entered allmulticast mode [ 348.086776][ T8579] Invalid ELF header type: 2 != 1 [ 348.107346][ T8586] overlayfs: conflicting lowerdir path [ 348.157640][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 348.161191][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.162393][ T5873] usb 4-1: config 7 has an invalid interface number: 187 but max is 0 [ 348.162416][ T5873] usb 4-1: config 7 has no interface number 0 [ 348.162457][ T5873] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.162478][ T5873] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 348.162501][ T5873] usb 4-1: config 7 interface 187 has no altsetting 0 [ 348.166335][ T5873] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 348.166360][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.166377][ T5873] usb 4-1: Product: syz [ 348.166389][ T5873] usb 4-1: Manufacturer: syz [ 348.166401][ T5873] usb 4-1: SerialNumber: syz [ 348.181212][ T8589] FAULT_INJECTION: forcing a failure. [ 348.181212][ T8589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.181244][ T8589] CPU: 1 UID: 0 PID: 8589 Comm: syz.2.812 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.181268][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.181278][ T8589] Call Trace: [ 348.181285][ T8589] [ 348.181293][ T8589] dump_stack_lvl+0xe8/0x150 [ 348.181321][ T8589] should_fail_ex+0x46b/0x600 [ 348.181351][ T8589] _copy_from_iter+0x1d3/0x1670 [ 348.181376][ T8589] ? trace_kmem_cache_alloc+0x29/0xf0 [ 348.181399][ T8589] ? __alloc_skb+0x27d/0x7d0 [ 348.181418][ T8589] ? __pfx__copy_from_iter+0x10/0x10 [ 348.181434][ T8589] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 348.181455][ T8589] ? __alloc_skb+0x27d/0x7d0 [ 348.181478][ T8589] ? netlink_sendmsg+0x650/0xb40 [ 348.181494][ T8589] ? skb_put+0x11b/0x210 [ 348.181516][ T8589] netlink_sendmsg+0x6c0/0xb40 [ 348.181541][ T8589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.181566][ T8589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.181591][ T8589] ____sys_sendmsg+0xa4e/0xac0 [ 348.181620][ T8589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.181648][ T8589] ? import_iovec+0x73/0xa0 [ 348.181670][ T8589] ___sys_sendmsg+0x2a5/0x360 [ 348.181695][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.181747][ T8589] ? __fget_files+0x2a/0x420 [ 348.181765][ T8589] ? __fget_files+0x3a6/0x420 [ 348.181793][ T8589] __x64_sys_sendmsg+0x1c3/0x2a0 [ 348.181816][ T8589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.181846][ T8589] ? __pfx_ksys_write+0x10/0x10 [ 348.181877][ T8589] do_syscall_64+0x14d/0xf80 [ 348.181898][ T8589] ? trace_irq_disable+0x3b/0x150 [ 348.181916][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.181933][ T8589] ? clear_bhb_loop+0x40/0x90 [ 348.181953][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.181969][ T8589] RIP: 0033:0x7f681362c629 [ 348.181987][ T8589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.182001][ T8589] RSP: 002b:00007f6811886028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.182020][ T8589] RAX: ffffffffffffffda RBX: 00007f68138a5fa0 RCX: 00007f681362c629 [ 348.182033][ T8589] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 348.182044][ T8589] RBP: 00007f6811886090 R08: 0000000000000000 R09: 0000000000000000 [ 348.182055][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.182071][ T8589] R13: 00007f68138a6038 R14: 00007f68138a5fa0 R15: 00007ffdbdf18f28 [ 348.182099][ T8589] [ 348.763343][ T5873] usb 4-1: Cannot retrieve CPort count: -110 [ 348.764105][ T5873] usb 4-1: Cannot retrieve CPort count: -110 [ 348.764139][ T5873] es2_ap_driver 4-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 349.967632][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 350.127825][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 350.130058][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.130080][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.130113][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.130131][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 350.133304][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.133328][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.133347][ T10] usb 2-1: Product: syz [ 350.133359][ T10] usb 2-1: Manufacturer: syz [ 350.133372][ T10] usb 2-1: SerialNumber: syz [ 351.290195][ T5804] usb 4-1: USB disconnect, device number 23 [ 351.337744][ T5873] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 351.418705][ T8607] kAFS: unable to lookup cell '\/' [ 351.489044][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 351.511373][ T5873] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 351.511400][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.511419][ T5873] usb 3-1: Product: syz [ 351.511431][ T5873] usb 3-1: Manufacturer: syz [ 351.511444][ T5873] usb 3-1: SerialNumber: syz [ 351.571815][ T5873] r8152-cfgselector 3-1: Unknown version 0x0000 [ 351.571839][ T5873] r8152-cfgselector 3-1: config 0 descriptor?? [ 352.064788][ T5804] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 352.288770][ T10] usb 2-1: 0:2 : does not exist [ 352.316559][ T8637] FAULT_INJECTION: forcing a failure. [ 352.316559][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 352.316679][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.5.828 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 352.316708][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.316719][ T8637] Call Trace: [ 352.316727][ T8637] [ 352.316735][ T8637] dump_stack_lvl+0xe8/0x150 [ 352.316765][ T8637] should_fail_ex+0x46b/0x600 [ 352.316795][ T8637] should_failslab+0xa8/0x100 [ 352.316821][ T8637] kmem_cache_alloc_noprof+0x87/0x680 [ 352.316842][ T8637] ? alloc_empty_file+0x55/0x1d0 [ 352.316864][ T8637] alloc_empty_file+0x55/0x1d0 [ 352.316883][ T8637] alloc_file_pseudo+0x155/0x240 [ 352.316904][ T8637] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 352.316922][ T8637] ? evm_inode_alloc_security+0x40/0xb0 [ 352.316945][ T8637] ? security_inode_alloc+0xd5/0x310 [ 352.316974][ T8637] sock_alloc_file+0xb8/0x2f0 [ 352.317003][ T8637] do_accept+0x3ab/0x760 [ 352.317026][ T8637] ? __pfx_do_accept+0x10/0x10 [ 352.317065][ T8637] __sys_accept4+0x139/0x230 [ 352.317087][ T8637] ? __pfx___sys_accept4+0x10/0x10 [ 352.317105][ T8637] ? __pfx_ksys_write+0x10/0x10 [ 352.317134][ T8637] __x64_sys_accept4+0x9a/0xb0 [ 352.317154][ T8637] do_syscall_64+0x14d/0xf80 [ 352.317186][ T8637] ? trace_irq_disable+0x3b/0x150 [ 352.317205][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.317223][ T8637] ? clear_bhb_loop+0x40/0x90 [ 352.317244][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.317261][ T8637] RIP: 0033:0x7fd86b5dc629 [ 352.317278][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.317293][ T8637] RSP: 002b:00007fd869836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 352.317313][ T8637] RAX: ffffffffffffffda RBX: 00007fd86b855fa0 RCX: 00007fd86b5dc629 [ 352.317326][ T8637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 352.317337][ T8637] RBP: 00007fd869836090 R08: 0000000000000000 R09: 0000000000000000 [ 352.317347][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.317358][ T8637] R13: 00007fd86b856038 R14: 00007fd86b855fa0 R15: 00007fff656f3e18 [ 352.317386][ T8637] [ 352.611794][ T10] usb 2-1: USB disconnect, device number 18 [ 352.693109][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.033027][ T5977] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 354.079052][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.834'. [ 354.551960][ T5977] usb 4-1: config 0 has no interfaces? [ 354.554427][ T5977] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.554453][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.554478][ T5977] usb 4-1: Product: syz [ 354.554491][ T5977] usb 4-1: Manufacturer: syz [ 354.554503][ T5977] usb 4-1: SerialNumber: syz [ 354.569223][ T5977] usb 4-1: config 0 descriptor?? [ 354.787761][ T5873] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 354.811597][ T5849] usb 4-1: USB disconnect, device number 24 [ 354.946896][ T5873] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 354.946922][ T5873] usb 3-1: config 0 has no interface number 0 [ 354.946952][ T5873] usb 3-1: config 0 interface 29 has no altsetting 0 [ 354.952202][ T5873] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 354.952229][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.952246][ T5873] usb 3-1: Product: syz [ 354.952258][ T5873] usb 3-1: Manufacturer: syz [ 354.952270][ T5873] usb 3-1: SerialNumber: syz [ 354.958628][ T5873] usb 3-1: config 0 descriptor?? [ 355.007651][ T5886] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 355.067855][ T5915] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 355.127640][ T5849] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 355.157730][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 355.167076][ T5873] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 355.186341][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.196671][ T5886] usb 5-1: config 7 has an invalid interface number: 187 but max is 0 [ 355.196696][ T5886] usb 5-1: config 7 has no interface number 0 [ 355.196740][ T5886] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.196761][ T5886] usb 5-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 355.196781][ T5886] usb 5-1: config 7 interface 187 has no altsetting 0 [ 355.239578][ T5886] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 355.239605][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.239621][ T5886] usb 5-1: Product: syz [ 355.239633][ T5886] usb 5-1: Manufacturer: syz [ 355.239645][ T5886] usb 5-1: SerialNumber: syz [ 355.244288][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.244340][ T5915] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.244360][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.277783][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 355.286263][ T5849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.286288][ T5849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 355.286321][ T5849] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.286387][ T5849] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 355.289736][ T5849] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.289810][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.289828][ T5849] usb 6-1: Product: syz [ 355.289840][ T5849] usb 6-1: Manufacturer: syz [ 355.289853][ T5849] usb 6-1: SerialNumber: syz [ 355.349354][ T5915] usb 2-1: config 0 descriptor?? [ 355.367832][ T5873] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 355.367908][ T5873] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 355.368043][ T5873] peak_usb 3-1:0.29 can0: sending command failure: -8 [ 355.420450][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 355.505238][ T5886] usb 5-1: Cannot retrieve CPort count: 0 [ 355.505282][ T5886] usb 5-1: Cannot retrieve CPort count: -5 [ 355.505314][ T5886] es2_ap_driver 5-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 355.603523][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.604149][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.641779][ T5873] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -8 [ 355.797577][ T8667] kAFS: unable to lookup cell '\/' [ 355.911219][ T5915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.936787][ T891] usb 5-1: USB disconnect, device number 31 [ 356.938069][ T5915] pwc: recv_control_msg error -71 req 02 val 2c00 [ 356.946708][ T5915] pwc: recv_control_msg error -71 req 04 val 1000 [ 357.148421][ T5915] pwc: recv_control_msg error -71 req 04 val 1300 [ 357.173146][ T5915] pwc: recv_control_msg error -71 req 04 val 1400 [ 357.214839][ T5915] pwc: recv_control_msg error -71 req 02 val 2000 [ 357.275851][ T5915] pwc: recv_control_msg error -71 req 02 val 2100 [ 357.289992][ T5915] pwc: recv_control_msg error -71 req 04 val 1500 [ 357.341091][ T5915] pwc: recv_control_msg error -71 req 02 val 2500 [ 357.372792][ T5915] pwc: recv_control_msg error -71 req 02 val 2400 [ 357.557748][ T5915] pwc: recv_control_msg error -71 req 02 val 2600 [ 357.592985][ T5915] pwc: recv_control_msg error -71 req 02 val 2900 [ 357.639817][ T5915] pwc: recv_control_msg error -71 req 02 val 2800 [ 357.744974][ T5915] pwc: recv_control_msg error -71 req 04 val 1100 [ 357.747245][ T5915] pwc: recv_control_msg error -71 req 04 val 1200 [ 359.244295][ T5849] usb 6-1: 0:2 : does not exist [ 359.621808][ T5915] pwc: Registered as video103. [ 359.666470][ T5977] usb 3-1: USB disconnect, device number 30 [ 359.754750][ T5915] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 359.780141][ T5915] usb 2-1: USB disconnect, device number 19 [ 359.799889][ T8673] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 359.801068][ T8673] No control pipe specified [ 359.839170][ T5849] usb 6-1: USB disconnect, device number 6 [ 360.014153][ T8673] bond1: entered promiscuous mode [ 360.014178][ T8673] bond1: entered allmulticast mode [ 360.014660][ T8673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.044237][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.247665][ T5849] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 360.397682][ T5849] usb 6-1: Using ep0 maxpacket: 16 [ 360.400112][ T5849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.400128][ T5849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.400149][ T5849] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.400159][ T5849] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 360.402997][ T5849] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.403014][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.403024][ T5849] usb 6-1: Product: syz [ 360.403031][ T5849] usb 6-1: Manufacturer: syz [ 360.403038][ T5849] usb 6-1: SerialNumber: syz [ 360.651797][ T8699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.651815][ T8699] IPv6: NLM_F_CREATE should be set when creating new route [ 360.655180][ T8699] IPv6: NLM_F_CREATE should be set when creating new route [ 360.794303][ T8700] kAFS: unable to lookup cell '\/' [ 363.411833][ T8703] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 363.473602][ T5849] usb 6-1: 0:2 : does not exist [ 363.724654][ T5849] usb 6-1: USB disconnect, device number 7 [ 363.854884][ T5915] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 364.011026][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 364.023992][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.025452][ T5915] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 364.025575][ T5915] usb 3-1: config 7 has no interface number 0 [ 364.025620][ T5915] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.025641][ T5915] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 364.025662][ T5915] usb 3-1: config 7 interface 187 has no altsetting 0 [ 364.081005][ T5915] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 364.081034][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.081052][ T5915] usb 3-1: Product: syz [ 364.081064][ T5915] usb 3-1: Manufacturer: syz [ 364.081077][ T5915] usb 3-1: SerialNumber: syz [ 364.344971][ T5915] usb 3-1: Cannot retrieve CPort count: 0 [ 364.345017][ T5915] usb 3-1: Cannot retrieve CPort count: -5 [ 364.345048][ T5915] es2_ap_driver 3-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 364.439202][ T8733] FAULT_INJECTION: forcing a failure. [ 364.439202][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 364.439236][ T8733] CPU: 1 UID: 0 PID: 8733 Comm: syz.1.862 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 364.439256][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.439267][ T8733] Call Trace: [ 364.439274][ T8733] [ 364.439282][ T8733] dump_stack_lvl+0xe8/0x150 [ 364.439310][ T8733] should_fail_ex+0x46b/0x600 [ 364.439338][ T8733] should_failslab+0xa8/0x100 [ 364.439361][ T8733] __kmalloc_noprof+0xdf/0x7b0 [ 364.439384][ T8733] ? sk_prot_alloc+0xe7/0x210 [ 364.439402][ T8733] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 364.439424][ T8733] sk_prot_alloc+0xe7/0x210 [ 364.439441][ T8733] ? sk_alloc+0x27/0x390 [ 364.439460][ T8733] sk_alloc+0x3a/0x390 [ 364.439482][ T8733] __netlink_create+0x65/0x260 [ 364.439505][ T8733] ? __pfx_genl_release+0x10/0x10 [ 364.439524][ T8733] netlink_create+0x3be/0x580 [ 364.439542][ T8733] ? __pfx_genl_unbind+0x10/0x10 [ 364.439559][ T8733] ? __pfx_genl_bind+0x10/0x10 [ 364.439581][ T8733] __sock_create+0x4b2/0x9d0 [ 364.439605][ T8733] __sys_socket+0xd6/0x1b0 [ 364.439626][ T8733] __x64_sys_socket+0x7a/0x90 [ 364.439644][ T8733] do_syscall_64+0x14d/0xf80 [ 364.439662][ T8733] ? trace_irq_disable+0x3b/0x150 [ 364.439692][ T8733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.439711][ T8733] ? clear_bhb_loop+0x40/0x90 [ 364.439731][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.439748][ T8733] RIP: 0033:0x7fde9e1bdec7 [ 364.439765][ T8733] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.439778][ T8733] RSP: 002b:00007fde9c40cf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 364.439801][ T8733] RAX: ffffffffffffffda RBX: 00007fde9e435fa0 RCX: 00007fde9e1bdec7 [ 364.439818][ T8733] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 364.439828][ T8733] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 364.439838][ T8733] R10: 0000200000000580 R11: 0000000000000286 R12: 0000000000000001 [ 364.439850][ T8733] R13: 00007fde9e436038 R14: 00007fde9e435fa0 R15: 00007ffe6a566188 [ 364.439894][ T8733] [ 364.549045][ T5976] usb 3-1: USB disconnect, device number 31 [ 364.983835][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 365.238945][ T8749] netlink: 'syz.3.869': attribute type 10 has an invalid length. [ 365.257661][ T5977] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 365.294715][ T8749] team0: Failed to send options change via netlink (err -105) [ 365.294741][ T8749] team0: Port device dummy0 added [ 365.417649][ T5977] usb 6-1: Using ep0 maxpacket: 16 [ 365.419884][ T5977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.419908][ T5977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.419941][ T5977] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.419960][ T5977] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 365.422841][ T5977] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.422868][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.422887][ T5977] usb 6-1: Product: syz [ 365.422997][ T5977] usb 6-1: Manufacturer: syz [ 365.423011][ T5977] usb 6-1: SerialNumber: syz [ 365.760936][ T8760] kAFS: unable to lookup cell '\/' [ 368.922551][ T5977] usb 6-1: 0:2 : does not exist [ 369.994396][ T8770] fuse: Unknown parameter 'gro £gĖd' [ 371.001107][ T5977] usb 6-1: USB disconnect, device number 8 [ 371.390764][ T5977] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 371.547642][ T5977] usb 6-1: Using ep0 maxpacket: 32 [ 371.550446][ T5977] usb 6-1: unable to get BOS descriptor or descriptor too short [ 371.551731][ T5977] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 371.551752][ T5977] usb 6-1: config 7 has no interface number 0 [ 371.551796][ T5977] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.551817][ T5977] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 371.551840][ T5977] usb 6-1: config 7 interface 187 has no altsetting 0 [ 371.613394][ T5977] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 371.613422][ T5977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.613441][ T5977] usb 6-1: Product: syz [ 371.613454][ T5977] usb 6-1: Manufacturer: syz [ 371.613467][ T5977] usb 6-1: SerialNumber: syz [ 371.819883][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.918801][ T5977] usb 6-1: Cannot retrieve CPort count: 0 [ 371.918844][ T5977] usb 6-1: Cannot retrieve CPort count: -5 [ 371.918876][ T5977] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -5 [ 372.123911][ T5915] usb 6-1: USB disconnect, device number 9 [ 372.559030][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 372.660224][ T8796] FAULT_INJECTION: forcing a failure. [ 372.660224][ T8796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.660245][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.3.879 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.660258][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.660264][ T8796] Call Trace: [ 372.660268][ T8796] [ 372.660273][ T8796] dump_stack_lvl+0xe8/0x150 [ 372.660293][ T8796] should_fail_ex+0x46b/0x600 [ 372.660311][ T8796] _copy_from_iter+0x1d3/0x1670 [ 372.660325][ T8796] ? trace_kmem_cache_alloc+0x29/0xf0 [ 372.660339][ T8796] ? __alloc_skb+0x27d/0x7d0 [ 372.660350][ T8796] ? __pfx__copy_from_iter+0x10/0x10 [ 372.660359][ T8796] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 372.660372][ T8796] ? __alloc_skb+0x27d/0x7d0 [ 372.660385][ T8796] ? netlink_sendmsg+0x650/0xb40 [ 372.660394][ T8796] ? skb_put+0x11b/0x210 [ 372.660406][ T8796] netlink_sendmsg+0x6c0/0xb40 [ 372.660420][ T8796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.660440][ T8796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.660466][ T8796] ____sys_sendmsg+0xa4e/0xac0 [ 372.660495][ T8796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.660523][ T8796] ? import_iovec+0x73/0xa0 [ 372.660538][ T8796] ___sys_sendmsg+0x2a5/0x360 [ 372.660553][ T8796] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.660581][ T8796] ? __fget_files+0x2a/0x420 [ 372.660592][ T8796] ? __fget_files+0x3a6/0x420 [ 372.660607][ T8796] __x64_sys_sendmsg+0x1c3/0x2a0 [ 372.660621][ T8796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.660637][ T8796] ? __pfx_ksys_write+0x10/0x10 [ 372.660656][ T8796] do_syscall_64+0x14d/0xf80 [ 372.660668][ T8796] ? trace_irq_disable+0x3b/0x150 [ 372.660679][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.660689][ T8796] ? clear_bhb_loop+0x40/0x90 [ 372.660701][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.660710][ T8796] RIP: 0033:0x7fcec33cc629 [ 372.660720][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.660729][ T8796] RSP: 002b:00007fcec161e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.660740][ T8796] RAX: ffffffffffffffda RBX: 00007fcec3645fa0 RCX: 00007fcec33cc629 [ 372.660747][ T8796] RDX: 0000000000040000 RSI: 0000200000000500 RDI: 0000000000000004 [ 372.660753][ T8796] RBP: 00007fcec161e090 R08: 0000000000000000 R09: 0000000000000000 [ 372.660759][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.660765][ T8796] R13: 00007fcec3646038 R14: 00007fcec3645fa0 R15: 00007ffcd789cad8 [ 372.660780][ T8796] [ 373.440717][ T7317] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 373.453600][ T37] kauditd_printk_skb: 154 callbacks suppressed [ 373.453618][ T37] audit: type=1326 audit(1771687149.410:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.453659][ T37] audit: type=1326 audit(1771687149.410:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.453698][ T37] audit: type=1326 audit(1771687149.410:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.454063][ T37] audit: type=1326 audit(1771687149.410:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.454105][ T37] audit: type=1326 audit(1771687149.410:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.454177][ T37] audit: type=1326 audit(1771687149.410:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.454539][ T37] audit: type=1326 audit(1771687149.410:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.454584][ T37] audit: type=1326 audit(1771687149.410:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.454717][ T37] audit: type=1326 audit(1771687149.410:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 373.547496][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 373.572977][ T8808] fuse: Bad value for 'group_id' [ 373.573017][ T8808] fuse: Bad value for 'group_id' [ 373.580377][ T8808] kAFS: unparsable volume name [ 373.897464][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 373.982181][ T5915] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 374.367173][ T37] audit: type=1326 audit(1771687150.270:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8805 comm="syz.2.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f681362c629 code=0x7ffc0000 [ 374.397681][ T32] block nbd0: Possible stuck request ffff8880264e0000: control (read@0,1024B). Runtime 180 seconds [ 374.397720][ T32] block nbd0: Possible stuck request ffff8880264e01c0: control (read@1024,1024B). Runtime 180 seconds [ 374.397745][ T32] block nbd0: Possible stuck request ffff8880264e0380: control (read@2048,1024B). Runtime 180 seconds [ 374.397770][ T32] block nbd0: Possible stuck request ffff8880264e0540: control (read@3072,1024B). Runtime 180 seconds [ 374.478147][ T7317] usb 4-1: Using ep0 maxpacket: 16 [ 374.480348][ T7317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.480371][ T7317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.480404][ T7317] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.480422][ T7317] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 374.483335][ T7317] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.483361][ T7317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.483378][ T7317] usb 4-1: Product: syz [ 374.483391][ T7317] usb 4-1: Manufacturer: syz [ 374.483404][ T7317] usb 4-1: SerialNumber: syz [ 374.550066][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 374.552790][ T5915] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 374.552816][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.552837][ T5915] usb 6-1: Product: syz [ 374.552893][ T5915] usb 6-1: Manufacturer: syz [ 374.552913][ T5915] usb 6-1: SerialNumber: syz [ 374.576488][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.576514][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.576547][ T31] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.576612][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 374.582635][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.582663][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.582726][ T31] usb 5-1: Product: syz [ 374.582739][ T31] usb 5-1: Manufacturer: syz [ 374.582751][ T31] usb 5-1: SerialNumber: syz [ 374.604028][ T5915] usb 6-1: config 0 descriptor?? [ 375.787729][ T5915] airspy 6-1:0.0: usb_control_msg() failed -110 request 09 [ 375.787754][ T5915] airspy 6-1:0.0: Could not detect board [ 375.789147][ T5915] airspy 6-1:0.0: probe with driver airspy failed with error -110 [ 376.458844][ T5915] usb 6-1: USB disconnect, device number 10 [ 378.676235][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.676428][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.259905][ T7317] usb 4-1: 0:2 : does not exist [ 379.333840][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 379.406672][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'. [ 379.481173][ T31] usb 5-1: 0:2 : does not exist [ 379.498063][ T7317] usb 4-1: USB disconnect, device number 25 [ 379.565990][ T31] usb 5-1: USB disconnect, device number 32 [ 379.636310][ T8834] FAULT_INJECTION: forcing a failure. [ 379.636310][ T8834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.636341][ T8834] CPU: 0 UID: 0 PID: 8834 Comm: syz.2.894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.636362][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.636372][ T8834] Call Trace: [ 379.636379][ T8834] [ 379.636387][ T8834] dump_stack_lvl+0xe8/0x150 [ 379.636417][ T8834] should_fail_ex+0x46b/0x600 [ 379.636446][ T8834] _copy_to_user+0x31/0xb0 [ 379.636469][ T8834] simple_read_from_buffer+0xe1/0x170 [ 379.636493][ T8834] proc_fail_nth_read+0x1be/0x230 [ 379.636516][ T8834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.636538][ T8834] ? rw_verify_area+0x2ac/0x4e0 [ 379.636559][ T8834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.636579][ T8834] vfs_read+0x212/0xa80 [ 379.636608][ T8834] ? __pfx_vfs_read+0x10/0x10 [ 379.636631][ T8834] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 379.636653][ T8834] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.636675][ T8834] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.636695][ T8834] ? mutex_lock_nested+0x152/0x1d0 [ 379.636711][ T8834] ? fdget_pos+0x252/0x320 [ 379.636739][ T8834] ksys_read+0x156/0x270 [ 379.636762][ T8834] ? __pfx_ksys_read+0x10/0x10 [ 379.636794][ T8834] do_syscall_64+0x14d/0xf80 [ 379.636814][ T8834] ? trace_irq_disable+0x3b/0x150 [ 379.636833][ T8834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.636851][ T8834] ? clear_bhb_loop+0x40/0x90 [ 379.636872][ T8834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.636889][ T8834] RIP: 0033:0x7f68135ecece [ 379.636906][ T8834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 379.636919][ T8834] RSP: 002b:00007f6811864fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.636939][ T8834] RAX: ffffffffffffffda RBX: 00007f68118656c0 RCX: 00007f68135ecece [ 379.636951][ T8834] RDX: 000000000000000f RSI: 00007f68118650a0 RDI: 000000000000000a [ 379.636962][ T8834] RBP: 00007f6811865090 R08: 0000000000000000 R09: 0000000000000000 [ 379.636973][ T8834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.636983][ T8834] R13: 00007f68138a6128 R14: 00007f68138a6090 R15: 00007ffdbdf18f28 [ 379.637011][ T8834] [ 379.901801][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.050126][ T6419] udevd[6419]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 380.145754][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 380.145792][ T37] audit: type=1326 audit(1771687156.100:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.146009][ T37] audit: type=1326 audit(1771687156.100:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.146178][ T37] audit: type=1326 audit(1771687156.100:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.146341][ T37] audit: type=1326 audit(1771687156.100:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.146527][ T37] audit: type=1326 audit(1771687156.100:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.146731][ T37] audit: type=1326 audit(1771687156.100:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.147250][ T37] audit: type=1326 audit(1771687156.100:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.147311][ T37] audit: type=1326 audit(1771687156.100:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.147414][ T37] audit: type=1326 audit(1771687156.100:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8846 comm="syz.1.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fde9e1bc629 code=0x7ffc0000 [ 380.220046][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 380.234885][ T8852] fuse: Bad value for 'group_id' [ 380.234924][ T8852] fuse: Bad value for 'group_id' [ 380.538048][ T7317] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 380.581199][ T38] INFO: task syz.0.366:7211 blocked for more than 143 seconds. [ 380.581609][ T38] Not tainted syzkaller #0 [ 380.581757][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.581788][ T38] task:syz.0.366 state:D stack:28096 pid:7211 tgid:7203 ppid:5801 task_flags:0x400140 flags:0x00080002 [ 380.582648][ T38] Call Trace: [ 380.582656][ T38] [ 380.583126][ T38] __schedule+0x14fb/0x52c0 [ 380.583441][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 380.583482][ T38] ? __pfx___schedule+0x10/0x10 [ 380.584303][ T38] rt_mutex_schedule+0x76/0xf0 [ 380.584328][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 380.585119][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 380.585143][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 380.585554][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 380.585907][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 380.585945][ T38] ? bdev_open+0xe0/0xcc0 [ 380.586688][ T38] ? bdev_open+0xe0/0xcc0 [ 380.586733][ T38] mutex_lock_nested+0x168/0x1d0 [ 380.587126][ T38] bdev_open+0xe0/0xcc0 [ 380.588439][ T38] blkdev_open+0x485/0x620 [ 380.588672][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 380.588873][ T38] do_dentry_open+0x83d/0x13e0 [ 380.589191][ T38] vfs_open+0x3b/0x350 [ 380.589210][ T38] ? path_openat+0x2e2b/0x38a0 [ 380.589604][ T38] path_openat+0x2e43/0x38a0 [ 380.590116][ T38] ? __pfx_path_openat+0x10/0x10 [ 380.590320][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 380.590808][ T38] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 380.590952][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 380.591626][ T38] do_file_open+0x23e/0x4a0 [ 380.591790][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.592184][ T38] ? __pfx_do_file_open+0x10/0x10 [ 380.592395][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 380.593141][ T38] ? alloc_fd+0x64e/0x6c0 [ 380.593313][ T38] do_sys_openat2+0x113/0x200 [ 380.593338][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.593540][ T38] ? exc_page_fault+0x6a/0xc0 [ 380.593998][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 380.594089][ T38] __x64_sys_openat+0x138/0x170 [ 380.594162][ T38] do_syscall_64+0x14d/0xf80 [ 380.594358][ T38] ? trace_irq_disable+0x3b/0x150 [ 380.594565][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.594793][ T38] ? clear_bhb_loop+0x40/0x90 [ 380.594839][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.595037][ T38] RIP: 0033:0x7f5ed448cece [ 380.595208][ T38] RSP: 002b:00007f5ed2704b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.595419][ T38] RAX: ffffffffffffffda RBX: 00007f5ed27056c0 RCX: 00007f5ed448cece [ 380.595612][ T38] RDX: 0000000057188b30 RSI: 00007f5ed2704c00 RDI: ffffffffffffff9c [ 380.595626][ T38] RBP: 00007f5ed2704c00 R08: 0000000000000000 R09: 0000000000000000 [ 380.595637][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 380.595649][ T38] R13: 00007f5ed4746128 R14: 00007f5ed4746090 R15: 00007fffdbdc5248 [ 380.596458][ T38] [ 380.596517][ T38] [ 380.596517][ T38] Showing all locks held in the system: [ 380.596709][ T38] 4 locks held by ktimers/0/16: [ 380.597185][ T38] 1 lock held by khungtaskd/38: [ 380.597197][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 380.598968][ T38] 2 locks held by getty/5556: [ 380.599005][ T38] #0: ffff888037d4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.599769][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 380.600608][ T38] 1 lock held by udevd/6423: [ 380.600809][ T38] #0: ffff8880264994c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 380.601466][ T38] 1 lock held by syz.0.366/7211: [ 380.601652][ T38] #0: ffff8880264994c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 380.602314][ T38] 5 locks held by kworker/1:8/7317: [ 380.602506][ T38] #0: ffff888019d4ed38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 380.603074][ T38] #1: ffffc90010b8fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 380.603667][ T38] #2: ffff888029b69188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 380.603887][ T38] #3: ffff888029b6c5b8 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 380.604713][ T38] #4: ffff88802585e758 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 380.604879][ T38] 8 locks held by syz-executor/7325: [ 380.605276][ T38] 3 locks held by syz.4.900/8845: [ 380.605523][ T38] 2 locks held by syz.1.899/8851: [ 380.605556][ T38] 6 locks held by syz.2.901/8849: [ 380.605632][ T38] [ 380.605658][ T38] ============================================= [ 380.605658][ T38] [ 380.605735][ T38] NMI backtrace for cpu 1 [ 380.605750][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.605770][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.605781][ T38] Call Trace: [ 380.605788][ T38] [ 380.605797][ T38] dump_stack_lvl+0xe8/0x150 [ 380.605824][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 380.605842][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 380.605868][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 380.605889][ T38] sys_info+0x135/0x170 [ 380.605911][ T38] watchdog+0xfd9/0x1030 [ 380.605937][ T38] ? watchdog+0x21a/0x1030 [ 380.605964][ T38] kthread+0x388/0x470 [ 380.605983][ T38] ? __pfx_watchdog+0x10/0x10 [ 380.606001][ T38] ? __pfx_kthread+0x10/0x10 [ 380.606020][ T38] ret_from_fork+0x51e/0xb90 [ 380.606046][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 380.606067][ T38] ? __switch_to+0xc7d/0x1450 [ 380.606091][ T38] ? __pfx_kthread+0x10/0x10 [ 380.606110][ T38] ret_from_fork_asm+0x1a/0x30 [ 380.606140][ T38] [ 380.606147][ T38] Sending NMI from CPU 1 to CPUs 0: [ 380.606176][ C0] NMI backtrace for cpu 0 [ 380.606188][ C0] CPU: 0 UID: 0 PID: 8851 Comm: syz.1.899 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.606206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.606215][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 380.606233][ C0] Code: e8 fb b0 78 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 d7 7f 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 ec 04 81 00 48 c7 c3 18 1f 4f 92 49 03 1e 48 89 [ 380.606247][ C0] RSP: 0018:ffffc9000d9ff578 EFLAGS: 00000046 [ 380.606260][ C0] RAX: 1ffffffff1affaf2 RBX: 0000000000000000 RCX: 0000000080000003 [ 380.606271][ C0] RDX: 0000000000000000 RSI: ffffffff8ba64360 RDI: ffffffff8ba64320 [ 380.606281][ C0] RBP: ffffc9000d9ff6a0 R08: ffffffff8f6a23b7 R09: 1ffffffff1ed4476 [ 380.606292][ C0] R10: dffffc0000000000 R11: fffffbfff1ed4477 R12: 1ffff92001b3fec5 [ 380.606303][ C0] R13: 0000000000000246 R14: ffffffff8d7fd790 R15: dffffc0000000000 [ 380.606313][ C0] FS: 00007fde9c3ed6c0(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 380.606327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.606338][ C0] CR2: 0000200000215030 CR3: 000000003ccf4000 CR4: 00000000003526f0 [ 380.606351][ C0] Call Trace: [ 380.606357][ C0] [ 380.606364][ C0] trace_irq_enable+0x3b/0x150 [ 380.606382][ C0] trace_hardirqs_on+0x18/0x40 [ 380.606398][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.606417][ C0] rt_spin_lock+0x17a/0x400 [ 380.606434][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 380.606450][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.606470][ C0] __skb_try_recv_datagram+0x89/0x1b0 [ 380.606491][ C0] __unix_dgram_recvmsg+0x2e3/0xd50 [ 380.606517][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 380.606538][ C0] ? irqentry_exit+0x59e/0x620 [ 380.606556][ C0] ? trace_irq_disable+0x3b/0x150 [ 380.606577][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 380.606592][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 380.606609][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 380.606625][ C0] ____sys_recvmsg+0x3ef/0x4b0 [ 380.606647][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 380.606671][ C0] ? import_iovec+0x73/0xa0 [ 380.606689][ C0] ___sys_recvmsg+0x215/0x590 [ 380.606705][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 380.606721][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 380.606754][ C0] do_recvmmsg+0x33a/0x800 [ 380.606775][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 380.606798][ C0] ? __pfx_do_futex+0x10/0x10 [ 380.606818][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 380.606838][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 380.606859][ C0] ? __secure_computing+0xe1/0x2a0 [ 380.606879][ C0] do_syscall_64+0x14d/0xf80 [ 380.606895][ C0] ? trace_irq_disable+0x3b/0x150 [ 380.606911][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.606926][ C0] ? clear_bhb_loop+0x40/0x90 [ 380.606942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.606957][ C0] RIP: 0033:0x7fde9e1bc629 [ 380.606969][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.606982][ C0] RSP: 002b:00007fde9c3ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 380.606997][ C0] RAX: ffffffffffffffda RBX: 00007fde9e436090 RCX: 00007fde9e1bc629 [ 380.607007][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 380.607017][ C0] RBP: 00007fde9e252b39 R08: 0000000000000000 R09: 0000000000000000 [ 380.607026][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 380.607036][ C0] R13: 00007fde9e436128 R14: 00007fde9e436090 R15: 00007ffe6a566188 [ 380.607054][ C0] [ 380.607807][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 380.607823][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 380.607844][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.607854][ T38] Call Trace: [ 380.607861][ T38] [ 380.607869][ T38] vpanic+0x56c/0xa60 [ 380.607895][ T38] ? __pfx___schedule+0x10/0x10 [ 380.607920][ T38] ? __pfx_vpanic+0x10/0x10 [ 380.607952][ T38] panic+0xc5/0xd0 [ 380.607974][ T38] ? __pfx_panic+0x10/0x10 [ 380.608000][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 380.608026][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 380.608049][ T38] watchdog+0x1023/0x1030 [ 380.608074][ T38] ? watchdog+0x21a/0x1030 [ 380.608102][ T38] kthread+0x388/0x470 [ 380.608121][ T38] ? __pfx_watchdog+0x10/0x10 [ 380.608139][ T38] ? __pfx_kthread+0x10/0x10 [ 380.608158][ T38] ret_from_fork+0x51e/0xb90 [ 380.608184][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 380.608205][ T38] ? __switch_to+0xc7d/0x1450 [ 380.608229][ T38] ? __pfx_kthread+0x10/0x10 [ 380.608248][ T38] ret_from_fork_asm+0x1a/0x30 [ 380.608279][ T38] [ 380.608429][ T38] Kernel Offset: disabled