last executing test programs: 13.067828835s ago: executing program 1 (id=350): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000066168120a2071185289d01020301090212000100002f000904c534ef7e6842005739a84b149840ac861601172617d134f370fdff77d4ecfffce97f8c4f4582be0a5547920b454a884132bf5f1f2e03c2999d12d3abe631b5bdf9b1615264d8354d970fedd1d2ada3c3ac55b37fda547bcce48e23648f2b9fc3645a504b478f587f"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)={0x20, 0x1, 0x2, "ad61"}, 0x0, 0x0}) syz_usb_connect(0x6, 0x255, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0xcd, 0x15, 0xef, 0x8, 0x187f, 0x100, 0x84a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x243, 0x1, 0x7f, 0x7, 0x80, 0x0, [{{0x9, 0x4, 0x16, 0x2, 0x6, 0x6c, 0xf6, 0xff, 0x3, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0xf8, 0xff, 0x9, [@generic={0x4e, 0x4, "3c74c5d2083c48d6ddd3d5ee56a13b495d6cc02792514fdeabc51112b700e32fd5b1e6ba665a5ef6a25278d1ce55c055bd9ca9d2aaf8f968cb5ab231aa330532dfbd441d0c9667c695112481"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x7, 0x4, 0xa1, [@generic={0x74, 0x3, "d288f1fca80f6282524f7b77364d6629782e120c72498b6f5bb90d791498e3d85f43457ea3cb6110131550d108b5ea5f1d8768688ad2b19459534b5512643c770a6ffeec8ce5d0cf7eef092326327f24d944e471e8522de27ca2f6181cb059b6e35aa44a070e0dc808588111f5585cef2541"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0xfe, 0x8c, [@generic={0xe7, 0x24, "c73682a5b4ae108769eb62d5c5c60a70a02dcf52d39f9aba1dca658025512e463dad4fd9cb6499c09514d3ad33494532cddb93298e40d0b3998cd6abbf5d37f257983b829ae8b5c1957011af036d1bedda4647130cd08e31d875e85c3135f0fbaee11a45163482ae2ef2d80c1423840cf5554af6bf4e3d0a07c764c498901505465ee55fc69ab3e4eb9d2e477177d4aaaee0ea738bb590f45adfc05c009eec4e3124a9fdc3825c099157d981a77ca4cf57d3bb27416c01d26a943fece6e6dc6f574a9f470749e78d03fc289b0c9c41569de25dcecbc35f07778c1763566acabac1d8ab962a"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x2, 0x81, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x3, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0xd1, 0x2}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x6, 0xbd, 0x2, [@generic={0x3d, 0xf, "b0349eb5471aeb9d989d7aae81149bc1c0f4d245f964585f14ac3e67721a275f6d26184c7fa3faa7b09a0ebc91f8e15ff8908f93cccd92a130ba3a"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xa, 0x9, 0x7}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x8, 0x2, 0x6, 0x60, 0x3}, 0x2a, &(0x7f0000000040)={0x5, 0xf, 0x2a, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x1, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x3, 0x2, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x64, 0xf, 0x0, 0x3, 0xff}]}, 0x2, [{0x8f, &(0x7f00000001c0)=@string={0x8f, 0x3, "839869cb2a60b99b1783e7e65fde972f08e0f6bce4269002083d500237b60318c3ccdcc85149109abf36debaf96c32c2e088ada5e702f397b5591d333d877d5c596cf484507a9b7b2a78498d6203b3e0bea8f9c618b004e66f03cee8a37baf3a24783abd742c867691f691a417d492a076aae26fac4356c3d43da90006dd08b71eccaafb8ebda7068cb131399a"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000340)={0x0, 0x11, 0x2, "bbd9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.972112388s ago: executing program 0 (id=361): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="748b51", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',k']) 9.879083538s ago: executing program 1 (id=363): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x2, @local, 0x6}, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, 0x0, {[0x7, 0xfff, 0x3, 0x8, 0x6, 0x9, 0x2, 0x9]}}, 0x5c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000001c0)=0x9, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000008bdf9500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socket$kcm(0x10, 0x3, 0x10) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000180)={0x2, 0x3d}, 0x2) 9.767368312s ago: executing program 1 (id=364): r0 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1001) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002100)={0x40000013}) socket(0x1, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 8.804635122s ago: executing program 0 (id=365): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = getpid() syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(r1, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x7) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) io_uring_enter(0xffffffffffffffff, 0x7713, 0xc219, 0x30, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000040)=0xd) 8.529620486s ago: executing program 1 (id=367): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0xa, 0x5, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file1\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000007080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES64], 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) 8.023343187s ago: executing program 4 (id=370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @local, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="d89011b2c9dc63274d35fb1a15dacf7e615c9c16a0dff32933c09f677545e516a380dfb7640f9b6f22970158e5baa1e03106a49c6feb397e1c01745da9969d012c5bc688254e", @ANYRESDEC, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRESOCT, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffd9) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = getpid() bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r4, 0x4) sched_setscheduler(r5, 0x2, &(0x7f0000000400)=0x7) r6 = gettid() tkill(r6, 0x16) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x8, 0x80000000000000c, r6}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) 7.993369032s ago: executing program 4 (id=371): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0xffffffffffffffff, 0x15) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x4048094) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000340)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3d1}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 6.363739867s ago: executing program 4 (id=372): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000007600090700000000fcdbdf2507020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x44b, 0x70bd2b, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 6.363093216s ago: executing program 3 (id=373): socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3]) 5.975089526s ago: executing program 3 (id=376): ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) socket(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) r0 = syz_open_dev$dri(&(0x7f00000025c0), 0x1ff, 0x204000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xd528}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') preadv(r5, &(0x7f0000002180)=[{&(0x7f0000001180)=""/4076, 0xfec}, {0x0}], 0x2, 0x29d1, 0x6) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000480)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) sendmsg$nl_route_sched(r2, 0x0, 0x40) 5.72425007s ago: executing program 3 (id=378): r0 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1001) open(0x0, 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002100)={0x40000013}) socket(0x1, 0x803, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 5.586703639s ago: executing program 3 (id=380): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f00000002c0)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000180)={0x1, 0x4}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x541c, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000008e00000095"], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r0, 0x5) setsockopt(r6, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000940)={0xf0, 0x20, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4439}) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) setsockopt(r9, 0x36, 0x7, &(0x7f0000000a00)="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", 0x1000) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0) 5.32620798s ago: executing program 4 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x40}, 0x1c) msgsnd(0x0, 0x0, 0x2000, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 5.207876235s ago: executing program 0 (id=382): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0xffffffffffffffff, 0x15) chdir(&(0x7f0000000300)='./file0\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x4048094) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000340)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3d1}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 4.726826708s ago: executing program 1 (id=383): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, &(0x7f0000000e80)='exfat\x00', 0x200001a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 3.636375985s ago: executing program 0 (id=384): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x4000}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r5, 0x4b63, 0x3) sendmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c80)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close_range(r2, 0xffffffffffffffff, 0x0) 3.631976891s ago: executing program 4 (id=385): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="000000010000000018110000f72d29cf718f4bcefa714e2f7ed820186193a0ba42677855ad97b7aaa1d7daff0c92314d80cf2fdd02ff1e6f79a92a60d153b4cffc424c2b001d3c1a0a6b52864dfc7ab4246fb884e7beb4", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x638, 0x0, 0xd0, 0xd0, 0x428, 0x1f8, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff], 'pim6reg\x00', 'ip6erspan0\x00', {}, {0xff}, 0x2e, 0x40, 0x2, 0x44}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d2], 0xffffffff, 0x6, 0x2}}, @common=@ipv6header={{0x28}, {0x25, 0x8e}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @mcast1, [0xffffffff, 0xa5b3abc4c1fc1311, 0x0, 0xff], [0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'erspan0\x00', {0xff}, {}, 0x2b, 0x80, 0x7, 0xa}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x1, 0x9}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x0, 0x4259}}}, {{@ipv6={@empty, @empty, [0xff000000, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff000000], 'bond_slave_0\x00', 'geneve1\x00', {}, {}, 0x6, 0x50, 0x1, 0x8}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@local, 0x11, 0x3, 0xb}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@dev={0xac, 0x14, 0x14, 0x36}, 0x2c, 0xf, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x2c, 0xfffffffffffffe83, &(0x7f0000000980)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1042, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r7, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 3.505959876s ago: executing program 3 (id=386): socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r1]) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r1]) 3.46745702s ago: executing program 2 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32], 0x9) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) epoll_create1(0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x640) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000400)={0x0, ""/208}, 0xd8, 0x2, 0x800) 3.427756192s ago: executing program 1 (id=388): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7d37bcf9e433c29", 0x28}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "af20ef2647380be9", "ce7ae392b29ccb3f396c20bf277a4f6380326d5de7b5c5c7b8760630a72bc3d5", "d3af1db6", "10e0a087f3e187d8"}, 0x38) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x31, 0xcb, {0xcb, 0xe, "c11a4982e30e78414bb5251bcbca09d8e0a0d879a5cfe69bfaf7de50a607b5457d480fa56345001fb8cc402d20261474aac926e0144fe585594f7632b502d24ad674b7cb5cb5a831b29cbeabd12fe48ec922eb86b784c7280e16d9594829a756b23d033ac08c2512de2180229116d5fbfbe0b8ad79353453d06d5a06634a76437235a5cddc283d791182c2ca9f76df0a154838654ffa563ed94d4c8177afef0f00000000000000e6f73b91f190f4997d0b7df78a1740b573225400"/201}}, &(0x7f00000001c0)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "95b80187693d9098ebfb5a1996a54c1b1b64021ab1ef3ec41f39f3e09f879f35a856e4f12a41f8c71d3c64fa931961d8e2e52c2ee4537d166dd143b82b0575a96f43dff0e7b353a5f6475349fd8967890eb2d3083cafbdd58f43b2434af65ec2e62e4d176025f3fd"}}, &(0x7f0000000240)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x4, 0x7f}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x3, 0x1ef0f, 0x5, [0xffcf, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0x8, 0xb}, @generic={0x1b, 0x10, 0x5, "7f89c4bafeb0b6db174bcd1e5d79a4516294d298bb12da7e"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "89f171e646074ee30b16d6e82be9cdf4"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x52, 0x1, 0x4, 0xc, "b025f090", "740c33ee"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xed, 0x60, 0x9, 0x81, 0x8, 0x29b, 0xbb5}}}, &(0x7f0000000780)={0x84, &(0x7f0000000840)=ANY=[@ANYRES32=r3], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x120, 0x0, [0xffff]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xd}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000540)={0x40, 0xb, 0x2, '>\x00'}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000600)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x19, 0x2, "ea25"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0xca}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) 3.271643706s ago: executing program 3 (id=389): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001e000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000280)=ANY=[], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() (fail_nth: 1) 3.27096821s ago: executing program 0 (id=390): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000340)={0x3, 0x4000008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000002c0)='cifs.idmap\x00', 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1}) 2.463386896s ago: executing program 4 (id=391): syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000007600090700000000fcdbdf2507020000", @ANYRES32=0x0, @ANYBLOB="0c000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x44b, 0x70bd2b, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) 2.378819415s ago: executing program 2 (id=392): set_mempolicy(0x1, 0x0, 0x3) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000380)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x8, 0x5, 0x5, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x6, [{0x34, &(0x7f0000000140)=@string={0x34, 0x3, "14d5f3258865d1b3f9a3b43d324aabd92c5a5a1b09aa931e3809105a42ef6a53c90fd43832efb05b42e7fe870d130e3cab66"}}, {0x2, &(0x7f0000000180)=@string={0x2}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xd4ec}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc1a}}, {0xfc, &(0x7f0000000240)=@string={0xfc, 0x3, "c645f5e6838214c47670ac2e70c7fb3db4e13a23d6c455a2f2c0db4c6c2d02f03d261db483acf455dca2b5aa18b039502890974b4b74768e84607725b388dd20e9b201b0e3142e0d94fb69ac90b32c88457023f328401c16973cf3c4f628b67b2c5bb5edb5556109e1bad65a8665b9d3712194c8ec7877fa977b7a4654e08983367f90894584c4034a1671fda2b6fcf67ce89da3ffa802167538da6a7894ebeeee0e981c46781ee7aa798a41e530a05541e70f026e28279213847005784742f18c7ac970e49e6b5bfa46cf71f75bdc7069e5ee57997586ac15e86bf5e14941fa806d850ea383ef414051aca8b503fc25ac774fe848a2d2e718da"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}]}) 1.93736139s ago: executing program 0 (id=393): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000600)={{0x0, 0xd000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8f}, {0xffff1000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x3}, {0x10000, 0x4, 0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x15, 0x0, 0x3a, 0x0, 0x2, 0x2, 0x0, 0x0, 0xaf, 0xfc}, {0x5000, 0x0, 0xe, 0x1, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xf000}, 0xddf8ffdb, 0x0, 0x8080000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0xffffffffff7ffffc, 0x1]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000021c0)={0x0, 0x1000}) (async) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x0) 1.297531008s ago: executing program 2 (id=394): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14c, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1130}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf9ab}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48870}, 0x2404c850) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x20060840) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000100)={0x94ff, 0xa00}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r9, r10, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x8000, 0x2025, 0x0, 0x4, 0x40, 0x4, 0x0, 0x9, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 550.646246ms ago: executing program 2 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff00000000242065580000000000000021000086dd080088be4305400f"], 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r2, &(0x7f0000001b00)=[{&(0x7f00000000c0)='h', 0x1}], 0x2, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) 308.705274ms ago: executing program 2 (id=396): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r0, 0x23, {0x4, 0x6d4}, 0xf0}, 0x1) 0s ago: executing program 2 (id=397): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r0, 0x23, {0x4, 0x6d4}, 0xf0}, 0x1) (fail_nth: 1) kernel console output (not intermixed with test programs): S network, BSSID 50:50:50:50:50:50 [ 75.098747][ T5932] trusted_key: encrypted_key: keylen parameter is missing [ 75.238783][ T5940] Zero length message leads to an empty skb [ 75.912463][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 76.530884][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 76.786176][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14'. [ 76.937649][ T5963] can: request_module (can-proto-0) failed. [ 76.970821][ T5970] misc userio: No port type given on /dev/userio [ 76.997918][ T5971] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.007331][ T5971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.016246][ T5971] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.025050][ T5971] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.042786][ T55] Bluetooth: hci4: command tx timeout [ 77.585243][ T5873] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 77.624393][ T5876] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 77.639964][ T55] Bluetooth: min 6 > max 0 [ 77.774672][ T5983] FAULT_INJECTION: forcing a failure. [ 77.774672][ T5983] name failslab, interval 1, probability 0, space 0, times 1 [ 77.831646][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 77.838182][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.3.20 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 77.838207][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.838215][ T5983] Call Trace: [ 77.838221][ T5983] [ 77.838227][ T5983] dump_stack_lvl+0x241/0x360 [ 77.838250][ T5983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.838272][ T5983] ? __pfx__printk+0x10/0x10 [ 77.838295][ T5983] ? fs_reclaim_acquire+0x93/0x130 [ 77.838315][ T5983] ? __pfx___might_resched+0x10/0x10 [ 77.838336][ T5983] should_fail_ex+0x40a/0x550 [ 77.838362][ T5983] should_failslab+0xac/0x100 [ 77.838385][ T5983] __kmalloc_noprof+0xdd/0x4c0 [ 77.838399][ T5983] ? kstrtouint_from_user+0x128/0x190 [ 77.838412][ T5983] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 77.838432][ T5983] tomoyo_realpath_from_path+0xcf/0x5e0 [ 77.838457][ T5983] tomoyo_path_number_perm+0x239/0x770 [ 77.838480][ T5983] ? __lock_acquire+0x1397/0x2100 [ 77.838503][ T5983] ? tomoyo_path_number_perm+0x209/0x770 [ 77.838526][ T5983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 77.838583][ T5983] ? __fget_files+0x2a/0x410 [ 77.838603][ T5983] ? __fget_files+0x2a/0x410 [ 77.838623][ T5983] security_file_ioctl+0xc6/0x2a0 [ 77.838646][ T5983] __se_sys_ioctl+0x46/0x170 [ 77.838667][ T5983] do_syscall_64+0xf3/0x230 [ 77.838689][ T5983] ? clear_bhb_loop+0x35/0x90 [ 77.838712][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.838733][ T5983] RIP: 0033:0x7f7e4b58d169 [ 77.838749][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.838761][ T5983] RSP: 002b:00007f7e4c382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.838778][ T5983] RAX: ffffffffffffffda RBX: 00007f7e4b7a5fa0 RCX: 00007f7e4b58d169 [ 77.838789][ T5983] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 77.838798][ T5983] RBP: 00007f7e4c382090 R08: 0000000000000000 R09: 0000000000000000 [ 77.838806][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.838815][ T5983] R13: 0000000000000000 R14: 00007f7e4b7a5fa0 R15: 00007ffc147e81a8 [ 77.838841][ T5983] [ 77.838937][ T5983] ERROR: Out of memory at tomoyo_realpath_from_path. [ 77.983551][ T5873] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 78.044193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.103469][ T5876] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.128679][ T5876] usb 2-1: config 0 has no interface number 0 [ 78.168451][ T5876] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.198594][ T5876] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 78.393000][ T5873] usb 3-1: config 0 has no interface number 0 [ 78.473546][ T5876] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 78.495645][ T5873] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 78.505298][ T5876] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 78.509087][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.547126][ T5873] usb 3-1: Product: syz [ 78.551353][ T5873] usb 3-1: Manufacturer: syz [ 78.564423][ T5873] usb 3-1: SerialNumber: syz [ 78.589255][ T5876] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 78.591715][ T5873] usb 3-1: config 0 descriptor?? [ 78.631863][ T5876] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.641941][ T5873] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 78.688103][ T5876] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.727974][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.775240][ T5876] usb 2-1: config 0 descriptor?? [ 78.823371][ T5977] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.835225][ T5977] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 78.877765][ T5876] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 79.029396][ T55] Bluetooth: min 6 > max 0 [ 79.484555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.576432][ T5876] usb 2-1: USB disconnect, device number 2 [ 79.599940][ T5876] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 79.744315][ T55] Bluetooth: hci2: command tx timeout [ 79.798850][ T5873] gspca_topro: reg_w err -110 [ 79.807075][ T6001] lo speed is unknown, defaulting to 1000 [ 79.814873][ T6001] lo speed is unknown, defaulting to 1000 [ 79.822207][ T6001] lo speed is unknown, defaulting to 1000 [ 79.880311][ T6001] infiniband sz1: set active [ 79.885892][ T6001] infiniband sz1: added lo [ 79.896203][ T5944] lo speed is unknown, defaulting to 1000 [ 79.927729][ T6001] RDS/IB: sz1: added [ 79.932226][ T6001] smc: adding ib device sz1 with port count 1 [ 79.938640][ T6001] smc: ib device sz1 port 1 has pnetid [ 79.947455][ T6001] lo speed is unknown, defaulting to 1000 [ 80.007131][ T6001] lo speed is unknown, defaulting to 1000 [ 80.067292][ T6001] lo speed is unknown, defaulting to 1000 [ 80.126252][ T6001] lo speed is unknown, defaulting to 1000 [ 80.183772][ T6001] lo speed is unknown, defaulting to 1000 [ 80.242243][ T5873] gspca_topro: Sensor soi763a [ 80.247967][ T5944] lo speed is unknown, defaulting to 1000 [ 80.622288][ T55] Bluetooth: min 6 > max 0 [ 81.014479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.044462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.053231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.062684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.071602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.084692][ T55] Bluetooth: hci0: command tx timeout [ 81.212509][ T6015] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.376705][ T10] cfg80211: failed to load regulatory.db [ 82.508294][ T9] usb 3-1: USB disconnect, device number 2 [ 82.589138][ T6030] FAULT_INJECTION: forcing a failure. [ 82.589138][ T6030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.673571][ T6030] CPU: 1 UID: 0 PID: 6030 Comm: syz.1.30 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 82.673596][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.673606][ T6030] Call Trace: [ 82.673612][ T6030] [ 82.673620][ T6030] dump_stack_lvl+0x241/0x360 [ 82.673644][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.673661][ T6030] ? __pfx__printk+0x10/0x10 [ 82.673686][ T6030] ? __pfx_lock_release+0x10/0x10 [ 82.673716][ T6030] should_fail_ex+0x40a/0x550 [ 82.673744][ T6030] _copy_from_user+0x2d/0xb0 [ 82.673766][ T6030] do_sock_getsockopt+0x1d1/0x740 [ 82.673799][ T6030] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 82.673814][ T6030] ? __fget_files+0x2a/0x410 [ 82.673833][ T6030] ? __fget_files+0x395/0x410 [ 82.673848][ T6030] ? __fget_files+0x2a/0x410 [ 82.673872][ T6030] __x64_sys_getsockopt+0x2a1/0x370 [ 82.673896][ T6030] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 82.673913][ T6030] ? do_syscall_64+0x100/0x230 [ 82.673939][ T6030] ? do_syscall_64+0xb6/0x230 [ 82.673963][ T6030] do_syscall_64+0xf3/0x230 [ 82.673985][ T6030] ? clear_bhb_loop+0x35/0x90 [ 82.674011][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.674030][ T6030] RIP: 0033:0x7f5f6618d169 [ 82.674044][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.674054][ T6030] RSP: 002b:00007f5f67067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 82.674071][ T6030] RAX: ffffffffffffffda RBX: 00007f5f663a5fa0 RCX: 00007f5f6618d169 [ 82.674081][ T6030] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000003 [ 82.674090][ T6030] RBP: 00007f5f67067090 R08: 0000400000000100 R09: 0000000000000000 [ 82.674100][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.674109][ T6030] R13: 0000000000000000 R14: 00007f5f663a5fa0 R15: 00007ffcb70e2f38 [ 82.674132][ T6030] [ 82.864725][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.925250][ T55] Bluetooth: hci2: command tx timeout [ 83.144294][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 83.172767][ T6039] FAULT_INJECTION: forcing a failure. [ 83.172767][ T6039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.254763][ T6039] CPU: 1 UID: 0 PID: 6039 Comm: syz.3.34 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 83.254785][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.254795][ T6039] Call Trace: [ 83.254800][ T6039] [ 83.254807][ T6039] dump_stack_lvl+0x241/0x360 [ 83.254832][ T6039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.254848][ T6039] ? __pfx__printk+0x10/0x10 [ 83.254872][ T6039] ? __pfx_lock_release+0x10/0x10 [ 83.254901][ T6039] should_fail_ex+0x40a/0x550 [ 83.254928][ T6039] _copy_from_user+0x2d/0xb0 [ 83.254949][ T6039] do_sock_getsockopt+0x1d1/0x740 [ 83.254971][ T6039] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 83.254986][ T6039] ? __fget_files+0x2a/0x410 [ 83.255004][ T6039] ? __fget_files+0x395/0x410 [ 83.255020][ T6039] ? __fget_files+0x2a/0x410 [ 83.255043][ T6039] __x64_sys_getsockopt+0x2a1/0x370 [ 83.255063][ T6039] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 83.255081][ T6039] ? do_syscall_64+0x100/0x230 [ 83.255104][ T6039] ? do_syscall_64+0xb6/0x230 [ 83.255129][ T6039] do_syscall_64+0xf3/0x230 [ 83.255150][ T6039] ? clear_bhb_loop+0x35/0x90 [ 83.255173][ T6039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.255193][ T6039] RIP: 0033:0x7f7e4b58d169 [ 83.255209][ T6039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.255221][ T6039] RSP: 002b:00007f7e4c382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 83.255238][ T6039] RAX: ffffffffffffffda RBX: 00007f7e4b7a5fa0 RCX: 00007f7e4b58d169 [ 83.255250][ T6039] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 83.255260][ T6039] RBP: 00007f7e4c382090 R08: 0000400000000080 R09: 0000000000000000 [ 83.255270][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.255279][ T6039] R13: 0000000000000000 R14: 00007f7e4b7a5fa0 R15: 00007ffc147e81a8 [ 83.255304][ T6039] [ 83.454527][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.495056][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 83.543316][ T30] audit: type=1326 audit(1741549786.771:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 83.652617][ T30] audit: type=1326 audit(1741549786.771:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 83.676839][ T6043] loop6: detected capacity change from 0 to 524287999 [ 83.765337][ T6049] lo speed is unknown, defaulting to 1000 [ 83.787844][ T6043] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 83.890435][ T30] audit: type=1326 audit(1741549786.771:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 83.904232][ T55] Bluetooth: min 6 > max 0 [ 83.926914][ T30] audit: type=1326 audit(1741549786.771:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 83.949094][ T30] audit: type=1326 audit(1741549786.771:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 83.982016][ T30] audit: type=1326 audit(1741549786.771:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 83.988379][ T6043] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.012822][ T30] audit: type=1326 audit(1741549786.771:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 84.033953][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.040537][ T30] audit: type=1326 audit(1741549786.771:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 84.075333][ T30] audit: type=1326 audit(1741549786.771:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 84.139890][ T6043] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 84.157975][ T30] audit: type=1326 audit(1741549786.771:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6035 comm="syz.4.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 84.217720][ T6043] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 84.341113][ T6052] rdma_rxe: rxe_newlink: failed to add lo [ 84.454246][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.614130][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 84.636367][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.650090][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.669196][ T10] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 84.679664][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.706432][ T10] usb 5-1: config 0 descriptor?? [ 85.557557][ T6064] ======================================================= [ 85.557557][ T6064] WARNING: The mand mount option has been deprecated and [ 85.557557][ T6064] and is ignored by this kernel. Remove the mand [ 85.557557][ T6064] option from the mount to silence this warning. [ 85.557557][ T6064] ======================================================= [ 85.685359][ T10] greenasia 0003:0E8F:0012.0001: item fetching failed at offset 2/3 [ 85.696825][ T6064] tmpfs: Bad value for 'mpol' [ 85.706338][ T10] greenasia 0003:0E8F:0012.0001: parse failed [ 85.712694][ T10] greenasia 0003:0E8F:0012.0001: probe with driver greenasia failed with error -22 [ 85.912767][ T5904] usb 5-1: USB disconnect, device number 2 [ 85.965993][ T55] Bluetooth: hci1: command tx timeout [ 86.039774][ T6073] random: crng reseeded on system resumption [ 87.117956][ T6083] FAULT_INJECTION: forcing a failure. [ 87.117956][ T6083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.156496][ T6083] CPU: 1 UID: 0 PID: 6083 Comm: syz.1.46 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 87.156521][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.156531][ T6083] Call Trace: [ 87.156536][ T6083] [ 87.156543][ T6083] dump_stack_lvl+0x241/0x360 [ 87.156567][ T6083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.156581][ T6083] ? __pfx__printk+0x10/0x10 [ 87.156601][ T6083] ? __pfx_lock_release+0x10/0x10 [ 87.156627][ T6083] should_fail_ex+0x40a/0x550 [ 87.156652][ T6083] _copy_from_user+0x2d/0xb0 [ 87.156672][ T6083] move_addr_to_kernel+0x82/0x150 [ 87.156693][ T6083] __sys_sendto+0x268/0x4c0 [ 87.156717][ T6083] ? __pfx___sys_sendto+0x10/0x10 [ 87.156750][ T6083] ? __fget_files+0x2a/0x410 [ 87.156772][ T6083] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.156795][ T6083] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.156821][ T6083] __x64_sys_sendto+0xde/0x100 [ 87.156847][ T6083] do_syscall_64+0xf3/0x230 [ 87.156869][ T6083] ? clear_bhb_loop+0x35/0x90 [ 87.156894][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.156914][ T6083] RIP: 0033:0x7f5f6618d169 [ 87.156928][ T6083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.156941][ T6083] RSP: 002b:00007f5f67067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.156959][ T6083] RAX: ffffffffffffffda RBX: 00007f5f663a5fa0 RCX: 00007f5f6618d169 [ 87.156970][ T6083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 87.156979][ T6083] RBP: 00007f5f67067090 R08: 0000400000000040 R09: 000000000000001c [ 87.156990][ T6083] R10: 00000000000400c0 R11: 0000000000000246 R12: 0000000000000001 [ 87.156999][ T6083] R13: 0000000000000000 R14: 00007f5f663a5fa0 R15: 00007ffcb70e2f38 [ 87.157024][ T6083] [ 87.164699][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 87.916517][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'. [ 88.069792][ T6097] loop6: detected capacity change from 0 to 524287999 [ 88.200774][ T6097] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.307647][ T6097] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.567811][ T6097] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 88.624872][ T6097] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 88.791598][ T6106] FAULT_INJECTION: forcing a failure. [ 88.791598][ T6106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.821000][ T6107] netlink: 52 bytes leftover after parsing attributes in process `syz.2.53'. [ 88.844177][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.1.52 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 88.844203][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.844213][ T6106] Call Trace: [ 88.844219][ T6106] [ 88.844226][ T6106] dump_stack_lvl+0x241/0x360 [ 88.844252][ T6106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.844268][ T6106] ? __pfx__printk+0x10/0x10 [ 88.844293][ T6106] ? __pfx_lock_release+0x10/0x10 [ 88.844323][ T6106] should_fail_ex+0x40a/0x550 [ 88.844351][ T6106] _copy_from_user+0x2d/0xb0 [ 88.844373][ T6106] copy_msghdr_from_user+0xae/0x680 [ 88.844400][ T6106] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 88.844419][ T6106] ? __fget_files+0x2a/0x410 [ 88.844439][ T6106] ? __fget_files+0x2a/0x410 [ 88.844463][ T6106] __sys_sendmsg+0x209/0x350 [ 88.844485][ T6106] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.844514][ T6106] ? do_sys_openat2+0x17a/0x1d0 [ 88.844555][ T6106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.844578][ T6106] ? do_syscall_64+0x100/0x230 [ 88.844603][ T6106] ? do_syscall_64+0xb6/0x230 [ 88.844627][ T6106] do_syscall_64+0xf3/0x230 [ 88.844649][ T6106] ? clear_bhb_loop+0x35/0x90 [ 88.844673][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.844693][ T6106] RIP: 0033:0x7f5f6618d169 [ 88.844709][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.844721][ T6106] RSP: 002b:00007f5f67067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.844740][ T6106] RAX: ffffffffffffffda RBX: 00007f5f663a5fa0 RCX: 00007f5f6618d169 [ 88.844751][ T6106] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 88.844761][ T6106] RBP: 00007f5f67067090 R08: 0000000000000000 R09: 0000000000000000 [ 88.844771][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.844780][ T6106] R13: 0000000000000000 R14: 00007f5f663a5fa0 R15: 00007ffcb70e2f38 [ 88.844806][ T6106] [ 89.192394][ T6113] FAULT_INJECTION: forcing a failure. [ 89.192394][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.324183][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.0.54 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 89.324207][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.324217][ T6113] Call Trace: [ 89.324222][ T6113] [ 89.324230][ T6113] dump_stack_lvl+0x241/0x360 [ 89.324254][ T6113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.324271][ T6113] ? __pfx__printk+0x10/0x10 [ 89.324295][ T6113] ? __pfx_lock_release+0x10/0x10 [ 89.324324][ T6113] should_fail_ex+0x40a/0x550 [ 89.324352][ T6113] _copy_from_user+0x2d/0xb0 [ 89.324373][ T6113] copy_msghdr_from_user+0xae/0x680 [ 89.324400][ T6113] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 89.324417][ T6113] ? __fget_files+0x2a/0x410 [ 89.324437][ T6113] ? __fget_files+0x2a/0x410 [ 89.324462][ T6113] __sys_sendmsg+0x209/0x350 [ 89.324483][ T6113] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.324511][ T6113] ? do_sys_openat2+0x17a/0x1d0 [ 89.324552][ T6113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.324575][ T6113] ? do_syscall_64+0x100/0x230 [ 89.324601][ T6113] ? do_syscall_64+0xb6/0x230 [ 89.324625][ T6113] do_syscall_64+0xf3/0x230 [ 89.324646][ T6113] ? clear_bhb_loop+0x35/0x90 [ 89.324671][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.324692][ T6113] RIP: 0033:0x7fb20258d169 [ 89.324707][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.324723][ T6113] RSP: 002b:00007fb203437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.324741][ T6113] RAX: ffffffffffffffda RBX: 00007fb2027a5fa0 RCX: 00007fb20258d169 [ 89.324753][ T6113] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 89.324763][ T6113] RBP: 00007fb203437090 R08: 0000000000000000 R09: 0000000000000000 [ 89.324773][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.324782][ T6113] R13: 0000000000000000 R14: 00007fb2027a5fa0 R15: 00007ffcdce625f8 [ 89.324804][ T6113] [ 89.531883][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.726823][ T6126] xt_bpf: check failed: parse error [ 90.150429][ T6135] FAULT_INJECTION: forcing a failure. [ 90.150429][ T6135] name failslab, interval 1, probability 0, space 0, times 0 [ 90.194495][ T6135] CPU: 1 UID: 0 PID: 6135 Comm: syz.2.64 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 90.194521][ T6135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 90.194531][ T6135] Call Trace: [ 90.194538][ T6135] [ 90.194545][ T6135] dump_stack_lvl+0x241/0x360 [ 90.194571][ T6135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.194588][ T6135] ? __pfx__printk+0x10/0x10 [ 90.194614][ T6135] ? fs_reclaim_acquire+0x93/0x130 [ 90.194635][ T6135] ? __pfx___might_resched+0x10/0x10 [ 90.194659][ T6135] should_fail_ex+0x40a/0x550 [ 90.194687][ T6135] should_failslab+0xac/0x100 [ 90.194717][ T6135] __kmalloc_noprof+0xdd/0x4c0 [ 90.194733][ T6135] ? kstrtouint_from_user+0x128/0x190 [ 90.194749][ T6135] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 90.194773][ T6135] tomoyo_realpath_from_path+0xcf/0x5e0 [ 90.194803][ T6135] tomoyo_path_number_perm+0x239/0x770 [ 90.194825][ T6135] ? __lock_acquire+0x1397/0x2100 [ 90.194850][ T6135] ? tomoyo_path_number_perm+0x209/0x770 [ 90.194874][ T6135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 90.194937][ T6135] ? __fget_files+0x2a/0x410 [ 90.194958][ T6135] ? __fget_files+0x2a/0x410 [ 90.194980][ T6135] security_file_ioctl+0xc6/0x2a0 [ 90.195006][ T6135] __se_sys_ioctl+0x46/0x170 [ 90.195029][ T6135] do_syscall_64+0xf3/0x230 [ 90.195053][ T6135] ? clear_bhb_loop+0x35/0x90 [ 90.195078][ T6135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.195104][ T6135] RIP: 0033:0x7f9e61f8d169 [ 90.195119][ T6135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.195132][ T6135] RSP: 002b:00007f9e62d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.195151][ T6135] RAX: ffffffffffffffda RBX: 00007f9e621a5fa0 RCX: 00007f9e61f8d169 [ 90.195163][ T6135] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 90.195172][ T6135] RBP: 00007f9e62d93090 R08: 0000000000000000 R09: 0000000000000000 [ 90.195182][ T6135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.195192][ T6135] R13: 0000000000000000 R14: 00007f9e621a5fa0 R15: 00007ffe1c7d40e8 [ 90.195218][ T6135] [ 90.195285][ T6135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 90.697860][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 90.697879][ T30] audit: type=1326 audit(1741549793.981:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 90.814813][ T30] audit: type=1326 audit(1741549794.091:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 90.836423][ T30] audit: type=1326 audit(1741549794.091:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 90.837086][ T6147] FAULT_INJECTION: forcing a failure. [ 90.837086][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 90.857686][ T30] audit: type=1326 audit(1741549794.091:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ecfb8bad0 code=0x7ffc0000 [ 90.857722][ T30] audit: type=1326 audit(1741549794.121:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ecfb84127 code=0x7ffc0000 [ 90.857750][ T30] audit: type=1326 audit(1741549794.121:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ecfb29359 code=0x7ffc0000 [ 90.857775][ T30] audit: type=1326 audit(1741549794.121:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6144 comm="syz.4.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ecfb8bc1f code=0x7ffc0000 [ 90.892379][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.958310][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.961075][ T6150] netlink: 'syz.1.67': attribute type 5 has an invalid length. [ 91.004131][ T6147] CPU: 1 UID: 0 PID: 6147 Comm: syz.4.66 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 91.004156][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.004166][ T6147] Call Trace: [ 91.004171][ T6147] [ 91.004177][ T6147] dump_stack_lvl+0x241/0x360 [ 91.004200][ T6147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.004215][ T6147] ? __pfx__printk+0x10/0x10 [ 91.004237][ T6147] ? kmem_cache_alloc_noprof+0x48/0x380 [ 91.004253][ T6147] ? __pfx___might_resched+0x10/0x10 [ 91.004269][ T6147] ? audit_filter+0x10fb/0x1180 [ 91.004292][ T6147] should_fail_ex+0x40a/0x550 [ 91.004317][ T6147] should_failslab+0xac/0x100 [ 91.004340][ T6147] ? audit_log_start+0x15e/0xa30 [ 91.004354][ T6147] kmem_cache_alloc_noprof+0x70/0x380 [ 91.004373][ T6147] audit_log_start+0x15e/0xa30 [ 91.004396][ T6147] ? __pfx_audit_log_start+0x10/0x10 [ 91.004411][ T6147] ? migrate_enable+0x395/0x510 [ 91.004434][ T6147] ? __pfx_migrate_enable+0x10/0x10 [ 91.004453][ T6147] ? __pfx___cant_migrate+0x10/0x10 [ 91.004475][ T6147] audit_seccomp+0x63/0x1f0 [ 91.004494][ T6147] __seccomp_filter+0xb38/0x1fe0 [ 91.004517][ T6147] ? vfs_write+0x7fa/0xd10 [ 91.004540][ T6147] ? __pfx___seccomp_filter+0x10/0x10 [ 91.004560][ T6147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.004581][ T6147] ? __fget_files+0x2a/0x410 [ 91.004601][ T6147] ? __fget_files+0x2a/0x410 [ 91.004631][ T6147] ? __secure_computing+0x125/0x370 [ 91.004650][ T6147] syscall_trace_enter+0xa8/0x150 [ 91.004675][ T6147] do_syscall_64+0xcc/0x230 [ 91.004696][ T6147] ? clear_bhb_loop+0x35/0x90 [ 91.004719][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.004738][ T6147] RIP: 0033:0x7f2ecfb8d169 [ 91.004754][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.004766][ T6147] RSP: 002b:00007f2ed0993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 91.004795][ T6147] RAX: ffffffffffffffda RBX: 00007f2ecfda6080 RCX: 00007f2ecfb8d169 [ 91.004807][ T6147] RDX: 0000000000000001 RSI: 0000400000000700 RDI: 0000000000000007 [ 91.004816][ T6147] RBP: 00007f2ed0993090 R08: 0000000000000000 R09: 0000000000000000 [ 91.004826][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.004835][ T6147] R13: 0000000000000000 R14: 00007f2ecfda6080 R15: 00007ffff599ffa8 [ 91.004859][ T6147] [ 91.004869][ T6147] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 91.264186][ T6147] audit: out of memory in audit_log_start [ 91.414964][ T6150] netlink: 'syz.1.67': attribute type 15 has an invalid length. [ 91.442775][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.67'. [ 91.512490][ T6161] wlan0: tun_chr_ioctl cmd 1074025677 [ 91.536188][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 91.565439][ T6161] wlan0: linktype set to 1 [ 91.586470][ T6166] FAULT_INJECTION: forcing a failure. [ 91.586470][ T6166] name failslab, interval 1, probability 0, space 0, times 0 [ 91.614205][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.2.73 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 91.614229][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.614238][ T6166] Call Trace: [ 91.614244][ T6166] [ 91.614251][ T6166] dump_stack_lvl+0x241/0x360 [ 91.614276][ T6166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.614286][ T6166] ? __pfx__printk+0x10/0x10 [ 91.614300][ T6166] ? __kmalloc_cache_noprof+0x48/0x390 [ 91.614311][ T6166] ? __pfx___might_resched+0x10/0x10 [ 91.614325][ T6166] should_fail_ex+0x40a/0x550 [ 91.614342][ T6166] should_failslab+0xac/0x100 [ 91.614357][ T6166] __kmalloc_cache_noprof+0x70/0x390 [ 91.614365][ T6166] ? __vb2_init_fileio+0x1e9/0xf90 [ 91.614380][ T6166] __vb2_init_fileio+0x1e9/0xf90 [ 91.614393][ T6166] ? trace_contention_end+0x3c/0x120 [ 91.614404][ T6166] ? __mutex_lock+0x397/0x1010 [ 91.614421][ T6166] __vb2_perform_fileio+0x31a/0x17b0 [ 91.614435][ T6166] ? __pfx___mutex_lock+0x10/0x10 [ 91.614451][ T6166] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 91.614464][ T6166] ? __pfx_lock_release+0x10/0x10 [ 91.614479][ T6166] vb2_fop_read+0x247/0x330 [ 91.614494][ T6166] v4l2_read+0x1a4/0x2c0 [ 91.614506][ T6166] vfs_readv+0x6bc/0xa80 [ 91.614521][ T6166] ? __pfx_v4l2_read+0x10/0x10 [ 91.614530][ T6166] ? __pfx_vfs_readv+0x10/0x10 [ 91.614545][ T6166] ? do_sys_openat2+0x17a/0x1d0 [ 91.614555][ T6166] ? __fget_files+0x2a/0x410 [ 91.614566][ T6166] ? __fget_files+0x395/0x410 [ 91.614574][ T6166] ? __fget_files+0x2a/0x410 [ 91.614588][ T6166] do_readv+0x1b6/0x360 [ 91.614600][ T6166] ? __pfx_do_readv+0x10/0x10 [ 91.614609][ T6166] ? do_syscall_64+0x100/0x230 [ 91.614624][ T6166] ? do_syscall_64+0xb6/0x230 [ 91.614637][ T6166] do_syscall_64+0xf3/0x230 [ 91.614649][ T6166] ? clear_bhb_loop+0x35/0x90 [ 91.614664][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.614676][ T6166] RIP: 0033:0x7f9e61f8d169 [ 91.614695][ T6166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.614703][ T6166] RSP: 002b:00007f9e62d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 91.614714][ T6166] RAX: ffffffffffffffda RBX: 00007f9e621a5fa0 RCX: 00007f9e61f8d169 [ 91.614721][ T6166] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000003 [ 91.614726][ T6166] RBP: 00007f9e62d93090 R08: 0000000000000000 R09: 0000000000000000 [ 91.614732][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.614737][ T6166] R13: 0000000000000000 R14: 00007f9e621a5fa0 R15: 00007ffe1c7d40e8 [ 91.614751][ T6166] [ 91.882166][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.660707][ T6185] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 94.207729][ T6201] syzkaller1: entered promiscuous mode [ 94.213267][ T6201] syzkaller1: entered allmulticast mode [ 94.325132][ T6201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.85'. [ 95.614440][ T6213] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 95.623088][ T6213] cramfs: wrong magic [ 95.821194][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'. [ 95.854219][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 95.883621][ T6222] warning: `syz.1.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.274607][ T6235] FAULT_INJECTION: forcing a failure. [ 96.274607][ T6235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.317298][ T6231] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 96.383638][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.1.94 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 96.383661][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.383671][ T6235] Call Trace: [ 96.383677][ T6235] [ 96.383684][ T6235] dump_stack_lvl+0x241/0x360 [ 96.383709][ T6235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.383725][ T6235] ? __pfx__printk+0x10/0x10 [ 96.383750][ T6235] ? __pfx_lock_release+0x10/0x10 [ 96.383785][ T6235] should_fail_ex+0x40a/0x550 [ 96.383812][ T6235] _copy_from_user+0x2d/0xb0 [ 96.383834][ T6235] copy_msghdr_from_user+0xae/0x680 [ 96.383860][ T6235] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.383882][ T6235] ? __fget_files+0x2a/0x410 [ 96.383902][ T6235] ? __fget_files+0x2a/0x410 [ 96.383927][ T6235] __sys_sendmsg+0x209/0x350 [ 96.383949][ T6235] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.383977][ T6235] ? do_sys_openat2+0x17a/0x1d0 [ 96.384019][ T6235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.384039][ T6235] ? do_syscall_64+0x100/0x230 [ 96.384062][ T6235] ? do_syscall_64+0xb6/0x230 [ 96.384084][ T6235] do_syscall_64+0xf3/0x230 [ 96.384106][ T6235] ? clear_bhb_loop+0x35/0x90 [ 96.384130][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.384150][ T6235] RIP: 0033:0x7f5f6618d169 [ 96.384165][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.384177][ T6235] RSP: 002b:00007f5f67046038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.384195][ T6235] RAX: ffffffffffffffda RBX: 00007f5f663a6080 RCX: 00007f5f6618d169 [ 96.384206][ T6235] RDX: 0000000000000000 RSI: 0000400000000500 RDI: 0000000000000003 [ 96.384215][ T6235] RBP: 00007f5f67046090 R08: 0000000000000000 R09: 0000000000000000 [ 96.384224][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.384234][ T6235] R13: 0000000000000000 R14: 00007f5f663a6080 R15: 00007ffcb70e2f38 [ 96.384259][ T6235] [ 96.664579][ T6241] fuse: Unknown parameter '' [ 96.715525][ T6241] Malformed UNC in devname [ 96.715525][ T6241] [ 96.754499][ T6241] CIFS: VFS: Malformed UNC in devname [ 97.136164][ T6242] xt_socket: unknown flags 0x50 [ 97.186264][ T6242] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 98.098673][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 98.844550][ T6265] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 98.866165][ T6265] cramfs: wrong magic [ 102.285366][ T6299] FAULT_INJECTION: forcing a failure. [ 102.285366][ T6299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.427021][ T6299] CPU: 0 UID: 0 PID: 6299 Comm: syz.2.110 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 102.427047][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.427057][ T6299] Call Trace: [ 102.427063][ T6299] [ 102.427070][ T6299] dump_stack_lvl+0x241/0x360 [ 102.427095][ T6299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.427112][ T6299] ? __pfx__printk+0x10/0x10 [ 102.427141][ T6299] ? snprintf+0xda/0x120 [ 102.427162][ T6299] should_fail_ex+0x40a/0x550 [ 102.427190][ T6299] _copy_to_user+0x31/0xb0 [ 102.427212][ T6299] simple_read_from_buffer+0xca/0x150 [ 102.427241][ T6299] proc_fail_nth_read+0x1e9/0x250 [ 102.427261][ T6299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.427280][ T6299] ? rw_verify_area+0x243/0x630 [ 102.427300][ T6299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.427318][ T6299] vfs_read+0x1f8/0xb40 [ 102.427339][ T6299] ? fdget_pos+0x254/0x320 [ 102.427358][ T6299] ? __pfx___mutex_lock+0x10/0x10 [ 102.427381][ T6299] ? __pfx_vfs_read+0x10/0x10 [ 102.427398][ T6299] ? do_sys_openat2+0x17a/0x1d0 [ 102.427419][ T6299] ? __fget_files+0x2a/0x410 [ 102.427437][ T6299] ? __fget_files+0x395/0x410 [ 102.427453][ T6299] ? __fget_files+0x2a/0x410 [ 102.427479][ T6299] ksys_read+0x18f/0x2b0 [ 102.427501][ T6299] ? __pfx_ksys_read+0x10/0x10 [ 102.427522][ T6299] ? do_syscall_64+0x100/0x230 [ 102.427547][ T6299] ? do_syscall_64+0xb6/0x230 [ 102.427572][ T6299] do_syscall_64+0xf3/0x230 [ 102.427593][ T6299] ? clear_bhb_loop+0x35/0x90 [ 102.427617][ T6299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.427638][ T6299] RIP: 0033:0x7f9e61f8bb7c [ 102.427653][ T6299] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.427665][ T6299] RSP: 002b:00007f9e62d72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.427683][ T6299] RAX: ffffffffffffffda RBX: 00007f9e621a6080 RCX: 00007f9e61f8bb7c [ 102.427695][ T6299] RDX: 000000000000000f RSI: 00007f9e62d720a0 RDI: 0000000000000003 [ 102.427705][ T6299] RBP: 00007f9e62d72090 R08: 0000000000000000 R09: 0000000000000000 [ 102.427714][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.427724][ T6299] R13: 0000000000000001 R14: 00007f9e621a6080 R15: 00007ffe1c7d40e8 [ 102.427751][ T6299] [ 102.735521][ T6302] usb usb8: usbfs: process 6302 (syz.0.111) did not claim interface 0 before use [ 103.149801][ T6316] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 103.307346][ T6318] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 103.590471][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 103.594465][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.875401][ T6321] fuse: Bad value for 'user_id' [ 103.880355][ T6321] fuse: Bad value for 'user_id' [ 103.938509][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.113'. [ 104.305569][ T6331] lo speed is unknown, defaulting to 1000 [ 105.504865][ T6351] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 105.512251][ T6351] cramfs: wrong magic [ 106.280765][ T6353] lo speed is unknown, defaulting to 1000 [ 106.325863][ T6356] FAULT_INJECTION: forcing a failure. [ 106.325863][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 106.374130][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.2.125 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 106.374156][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.374165][ T6356] Call Trace: [ 106.374171][ T6356] [ 106.374178][ T6356] dump_stack_lvl+0x241/0x360 [ 106.374204][ T6356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.374222][ T6356] ? __pfx__printk+0x10/0x10 [ 106.374248][ T6356] ? __kmalloc_noprof+0xb5/0x4c0 [ 106.374266][ T6356] ? __pfx___might_resched+0x10/0x10 [ 106.374291][ T6356] should_fail_ex+0x40a/0x550 [ 106.374320][ T6356] should_failslab+0xac/0x100 [ 106.374353][ T6356] __kmalloc_noprof+0xdd/0x4c0 [ 106.374370][ T6356] ? kernfs_fop_write_iter+0x15a/0x500 [ 106.374395][ T6356] kernfs_fop_write_iter+0x15a/0x500 [ 106.374422][ T6356] vfs_write+0xacf/0xd10 [ 106.374448][ T6356] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 106.374470][ T6356] ? __pfx_vfs_write+0x10/0x10 [ 106.374487][ T6356] ? do_sys_openat2+0x17a/0x1d0 [ 106.374507][ T6356] ? __fget_files+0x2a/0x410 [ 106.374526][ T6356] ? __fget_files+0x2a/0x410 [ 106.374551][ T6356] ksys_write+0x18f/0x2b0 [ 106.374572][ T6356] ? __pfx_ksys_write+0x10/0x10 [ 106.374593][ T6356] ? do_syscall_64+0x100/0x230 [ 106.374618][ T6356] ? do_syscall_64+0xb6/0x230 [ 106.374641][ T6356] do_syscall_64+0xf3/0x230 [ 106.374667][ T6356] ? clear_bhb_loop+0x35/0x90 [ 106.374692][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.374712][ T6356] RIP: 0033:0x7f9e61f8d169 [ 106.374727][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.374740][ T6356] RSP: 002b:00007f9e62d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.374759][ T6356] RAX: ffffffffffffffda RBX: 00007f9e621a5fa0 RCX: 00007f9e61f8d169 [ 106.374769][ T6356] RDX: 0000000000000012 RSI: 00004000000000c0 RDI: 0000000000000004 [ 106.374779][ T6356] RBP: 00007f9e62d93090 R08: 0000000000000000 R09: 0000000000000000 [ 106.374788][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.374796][ T6356] R13: 0000000000000000 R14: 00007f9e621a5fa0 R15: 00007ffe1c7d40e8 [ 106.374825][ T6356] [ 107.301999][ T6363] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 108.754996][ T6371] input: syz0 as /devices/virtual/input/input5 [ 108.763479][ T6374] input: syz0 as /devices/virtual/input/input6 [ 108.962839][ T6376] xt_bpf: check failed: parse error [ 109.015944][ T6379] FAULT_INJECTION: forcing a failure. [ 109.015944][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 109.074234][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.2.129 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 109.074259][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.074268][ T6379] Call Trace: [ 109.074274][ T6379] [ 109.074281][ T6379] dump_stack_lvl+0x241/0x360 [ 109.074306][ T6379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.074323][ T6379] ? __pfx__printk+0x10/0x10 [ 109.074357][ T6379] ? fs_reclaim_acquire+0x93/0x130 [ 109.074379][ T6379] ? __pfx___might_resched+0x10/0x10 [ 109.074402][ T6379] should_fail_ex+0x40a/0x550 [ 109.074430][ T6379] should_failslab+0xac/0x100 [ 109.074456][ T6379] __kmalloc_noprof+0xdd/0x4c0 [ 109.074471][ T6379] ? kstrtouint_from_user+0x128/0x190 [ 109.074488][ T6379] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 109.074511][ T6379] tomoyo_realpath_from_path+0xcf/0x5e0 [ 109.074541][ T6379] tomoyo_path_number_perm+0x239/0x770 [ 109.074563][ T6379] ? __lock_acquire+0x1397/0x2100 [ 109.074589][ T6379] ? tomoyo_path_number_perm+0x209/0x770 [ 109.074613][ T6379] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.074675][ T6379] ? __fget_files+0x2a/0x410 [ 109.074696][ T6379] ? __fget_files+0x2a/0x410 [ 109.074719][ T6379] security_file_ioctl+0xc6/0x2a0 [ 109.074745][ T6379] __se_sys_ioctl+0x46/0x170 [ 109.074768][ T6379] do_syscall_64+0xf3/0x230 [ 109.074792][ T6379] ? clear_bhb_loop+0x35/0x90 [ 109.074816][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.074837][ T6379] RIP: 0033:0x7f9e61f8d169 [ 109.074852][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.074865][ T6379] RSP: 002b:00007f9e62d72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.074883][ T6379] RAX: ffffffffffffffda RBX: 00007f9e621a6080 RCX: 00007f9e61f8d169 [ 109.074895][ T6379] RDX: 8000000000000001 RSI: 0000000000004b30 RDI: 0000000000000004 [ 109.074905][ T6379] RBP: 00007f9e62d72090 R08: 0000000000000000 R09: 0000000000000000 [ 109.074915][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.074925][ T6379] R13: 0000000000000000 R14: 00007f9e621a6080 R15: 00007ffe1c7d40e8 [ 109.074950][ T6379] [ 109.074957][ T6379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.960572][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.131'. [ 110.637498][ T30] audit: type=1326 audit(1741549813.891:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 111.665837][ T30] audit: type=1326 audit(1741549813.911:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 111.687244][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.069020][ T30] audit: type=1326 audit(1741549813.911:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069058][ T30] audit: type=1326 audit(1741549813.911:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069095][ T30] audit: type=1326 audit(1741549813.911:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069125][ T30] audit: type=1326 audit(1741549813.911:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069155][ T30] audit: type=1326 audit(1741549813.911:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069185][ T30] audit: type=1326 audit(1741549813.911:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069214][ T30] audit: type=1326 audit(1741549813.911:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.069243][ T30] audit: type=1326 audit(1741549813.911:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6391 comm="syz.4.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ecfb8d169 code=0x7ffc0000 [ 112.184455][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 112.237548][ T5944] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.714121][ T5944] usb 5-1: Using ep0 maxpacket: 32 [ 112.716718][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.716743][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.716772][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 112.716793][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 112.718719][ T5944] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.718746][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.718766][ T5944] usb 5-1: Product: 䀊 [ 112.718780][ T5944] usb 5-1: Manufacturer: 㢥녉驭Ჶǻꋁ蘶逻૳汍꬐㪗紣䄬傣쩬➊Ꙗ澷陧볒넸ꥧꫫꄏ䋞謧俧泶㋛䏧ꒀ榛ꅔ洇ᮻ闪鴘亿ఞ뼻䭉舋껛⓰蜍ꥆ憺塶焔䣨뉯秅䕶蔥樔ꥭꡊ⮂Ⲗũ徆魀฾ၨ彷㫒ᡒ∣⥊떪⵺驤ἒ홛蜊栘譌霓䎯帇寋 [ 112.718806][ T5944] usb 5-1: SerialNumber: syz [ 112.968324][ T6407] FAULT_INJECTION: forcing a failure. [ 112.968324][ T6407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.968355][ T6407] CPU: 0 UID: 0 PID: 6407 Comm: syz.2.139 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 112.968373][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.968383][ T6407] Call Trace: [ 112.968388][ T6407] [ 112.968395][ T6407] dump_stack_lvl+0x241/0x360 [ 112.968418][ T6407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.968435][ T6407] ? __pfx__printk+0x10/0x10 [ 112.968459][ T6407] ? __pfx_lock_release+0x10/0x10 [ 112.968488][ T6407] should_fail_ex+0x40a/0x550 [ 112.968516][ T6407] _copy_from_user+0x2d/0xb0 [ 112.968538][ T6407] copy_msghdr_from_user+0xae/0x680 [ 112.968565][ T6407] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 112.968583][ T6407] ? __fget_files+0x2a/0x410 [ 112.968603][ T6407] ? __fget_files+0x2a/0x410 [ 112.968628][ T6407] __sys_sendmsg+0x209/0x350 [ 112.968648][ T6407] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.968677][ T6407] ? do_sys_openat2+0x17a/0x1d0 [ 112.968719][ T6407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.968742][ T6407] ? do_syscall_64+0x100/0x230 [ 112.968767][ T6407] ? do_syscall_64+0xb6/0x230 [ 112.968791][ T6407] do_syscall_64+0xf3/0x230 [ 112.968812][ T6407] ? clear_bhb_loop+0x35/0x90 [ 112.968837][ T6407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.968857][ T6407] RIP: 0033:0x7f9e61f8d169 [ 112.968872][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.968884][ T6407] RSP: 002b:00007f9e62d93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.968908][ T6407] RAX: ffffffffffffffda RBX: 00007f9e621a5fa0 RCX: 00007f9e61f8d169 [ 112.968920][ T6407] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000004 [ 112.968930][ T6407] RBP: 00007f9e62d93090 R08: 0000000000000000 R09: 0000000000000000 [ 112.968940][ T6407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.968949][ T6407] R13: 0000000000000000 R14: 00007f9e621a5fa0 R15: 00007ffe1c7d40e8 [ 112.968975][ T6407] [ 112.973946][ T6393] netlink: 56 bytes leftover after parsing attributes in process `syz.4.137'. [ 113.182475][ T5944] usb 5-1: 0:2 : does not exist [ 113.322727][ T6412] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 113.404407][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.515359][ T5944] usb 5-1: USB disconnect, device number 3 [ 114.306468][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.405821][ T6398] tty tty20: ldisc open failed (-12), clearing slot 19 [ 114.533800][ T6417] tty tty3: ldisc open failed (-12), clearing slot 2 [ 114.541241][ T6420] tty tty1: ldisc open failed (-12), clearing slot 0 [ 114.738457][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.144'. [ 114.784721][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.793438][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.355688][ T6471] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 116.847947][ T6479] xt_bpf: check failed: parse error [ 116.899986][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 117.193561][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 117.343616][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 117.343630][ T30] audit: type=1326 audit(1741549820.611:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 117.413046][ T30] audit: type=1326 audit(1741549820.611:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 117.491314][ T6486] netlink: 100 bytes leftover after parsing attributes in process `syz.0.158'. [ 117.509870][ T30] audit: type=1326 audit(1741549820.611:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 117.691523][ T6489] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 117.710901][ T6489] cramfs: wrong magic [ 117.768434][ T30] audit: type=1326 audit(1741549820.621:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 117.924175][ T30] audit: type=1326 audit(1741549820.621:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 118.754402][ T5874] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.940730][ T30] audit: type=1326 audit(1741549820.621:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 119.019065][ T30] audit: type=1326 audit(1741549820.621:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 119.070019][ T30] audit: type=1326 audit(1741549820.621:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 119.204169][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 119.216036][ T5874] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.224749][ T5874] usb 3-1: config 0 has no interface number 0 [ 119.230873][ T5874] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.253071][ T5874] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 119.321881][ T5874] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.976086][ T30] audit: type=1326 audit(1741549820.621:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 120.076438][ T5874] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=f4.6a [ 120.085624][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.097638][ T5874] usb 3-1: config 0 descriptor?? [ 120.106910][ T5874] ldusb 3-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 120.116488][ T30] audit: type=1326 audit(1741549820.621:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6476 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e4b58d169 code=0x7ffc0000 [ 120.145211][ T5874] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 120.386234][ T6514] syz.1.166 uses obsolete (PF_INET,SOCK_PACKET) [ 120.420001][ T6514] syzkaller1: entered promiscuous mode [ 120.431845][ T6514] syzkaller1: entered allmulticast mode [ 120.570202][ T6518] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 120.693710][ T5874] usb 3-1: USB disconnect, device number 3 [ 120.723279][ T5874] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 121.483544][ T6527] FAULT_INJECTION: forcing a failure. [ 121.483544][ T6527] name failslab, interval 1, probability 0, space 0, times 0 [ 121.544229][ T6527] CPU: 1 UID: 0 PID: 6527 Comm: syz.1.169 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 121.544253][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.544263][ T6527] Call Trace: [ 121.544270][ T6527] [ 121.544277][ T6527] dump_stack_lvl+0x241/0x360 [ 121.544302][ T6527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.544319][ T6527] ? __pfx__printk+0x10/0x10 [ 121.544343][ T6527] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 121.544361][ T6527] ? __pfx___might_resched+0x10/0x10 [ 121.544386][ T6527] should_fail_ex+0x40a/0x550 [ 121.544413][ T6527] should_failslab+0xac/0x100 [ 121.544438][ T6527] kmem_cache_alloc_node_noprof+0x77/0x380 [ 121.544455][ T6527] ? __alloc_skb+0x1c3/0x440 [ 121.544482][ T6527] __alloc_skb+0x1c3/0x440 [ 121.544508][ T6527] ? __pfx___alloc_skb+0x10/0x10 [ 121.544532][ T6527] ? netlink_autobind+0xd6/0x2f0 [ 121.544549][ T6527] ? netlink_autobind+0x2b0/0x2f0 [ 121.544572][ T6527] netlink_sendmsg+0x634/0xcb0 [ 121.544588][ T6527] ? mark_lock+0x9a/0x360 [ 121.544621][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.544650][ T6527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.544667][ T6527] __sock_sendmsg+0x221/0x270 [ 121.544691][ T6527] sock_write_iter+0x2d7/0x3f0 [ 121.544712][ T6527] ? __pfx_sock_write_iter+0x10/0x10 [ 121.544751][ T6527] do_iter_readv_writev+0x71a/0x9d0 [ 121.544778][ T6527] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 121.544805][ T6527] ? bpf_lsm_file_permission+0x9/0x10 [ 121.544826][ T6527] ? rw_verify_area+0x243/0x630 [ 121.544848][ T6527] vfs_writev+0x38b/0xbc0 [ 121.544878][ T6527] ? __pfx_vfs_writev+0x10/0x10 [ 121.544906][ T6527] ? do_sys_openat2+0x17a/0x1d0 [ 121.544923][ T6527] ? __fget_files+0x2a/0x410 [ 121.544941][ T6527] ? __fget_files+0x395/0x410 [ 121.544957][ T6527] ? __fget_files+0x2a/0x410 [ 121.544981][ T6527] do_writev+0x1b6/0x360 [ 121.545003][ T6527] ? __pfx_do_writev+0x10/0x10 [ 121.545020][ T6527] ? do_syscall_64+0x100/0x230 [ 121.545046][ T6527] ? do_syscall_64+0xb6/0x230 [ 121.545069][ T6527] do_syscall_64+0xf3/0x230 [ 121.545091][ T6527] ? clear_bhb_loop+0x35/0x90 [ 121.545114][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.545134][ T6527] RIP: 0033:0x7f5f6618d169 [ 121.545155][ T6527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.545168][ T6527] RSP: 002b:00007f5f67067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 121.545186][ T6527] RAX: ffffffffffffffda RBX: 00007f5f663a5fa0 RCX: 00007f5f6618d169 [ 121.545197][ T6527] RDX: 0000000000000001 RSI: 0000400000001200 RDI: 0000000000000004 [ 121.545207][ T6527] RBP: 00007f5f67067090 R08: 0000000000000000 R09: 0000000000000000 [ 121.545217][ T6527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.545227][ T6527] R13: 0000000000000000 R14: 00007f5f663a5fa0 R15: 00007ffcb70e2f38 [ 121.545252][ T6527] [ 121.994143][ T6428] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.154236][ T6428] usb 5-1: Using ep0 maxpacket: 16 [ 122.164900][ T6428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 122.178464][ T6428] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 122.189436][ T6428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.199649][ T6428] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.367471][ T6428] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 122.377138][ T6428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.390451][ T6428] usb 5-1: Product: syz [ 122.396409][ T6428] usb 5-1: Manufacturer: syz [ 122.401173][ T6428] usb 5-1: SerialNumber: syz [ 122.610370][ T6428] usb 5-1: config 0 descriptor?? [ 122.681090][ T6529] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.748695][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 122.752210][ C1] port100 5-1:0.0: NFC: Urb failure (status -71) [ 122.799589][ T6428] port100 5-1:0.0: NFC: Could not get supported command types [ 122.981444][ T6428] usb 5-1: USB disconnect, device number 4 [ 123.059244][ T9] usb 4-1: device descriptor read/64, error -71 [ 123.317494][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 123.875342][ T9] usb 4-1: device descriptor read/64, error -71 [ 124.001762][ T9] usb usb4-port1: attempt power cycle [ 124.401791][ T6566] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 124.574208][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 124.605079][ T9] usb 4-1: device descriptor read/8, error -71 [ 124.874192][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 124.945885][ T9] usb 4-1: device descriptor read/8, error -71 [ 125.023169][ T6575] FAULT_INJECTION: forcing a failure. [ 125.023169][ T6575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.054670][ T9] usb usb4-port1: unable to enumerate USB device [ 125.096639][ T6572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.114253][ T6575] CPU: 0 UID: 0 PID: 6575 Comm: syz.0.184 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 125.114279][ T6575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.114289][ T6575] Call Trace: [ 125.114295][ T6575] [ 125.114303][ T6575] dump_stack_lvl+0x241/0x360 [ 125.114327][ T6575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.114344][ T6575] ? __pfx__printk+0x10/0x10 [ 125.114369][ T6575] ? __pfx_lock_release+0x10/0x10 [ 125.114398][ T6575] should_fail_ex+0x40a/0x550 [ 125.114425][ T6575] _copy_from_user+0x2d/0xb0 [ 125.114447][ T6575] copy_msghdr_from_user+0xae/0x680 [ 125.114474][ T6575] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.114492][ T6575] ? __fget_files+0x2a/0x410 [ 125.114512][ T6575] ? __fget_files+0x2a/0x410 [ 125.114541][ T6575] __sys_sendmmsg+0x32b/0x720 [ 125.114575][ T6575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 125.114602][ T6575] ? __pfx_lock_release+0x10/0x10 [ 125.114621][ T6575] ? kstrtouint_from_user+0x128/0x190 [ 125.114661][ T6575] ? ksys_write+0x22a/0x2b0 [ 125.114681][ T6575] ? __pfx_lock_release+0x10/0x10 [ 125.114708][ T6575] ? sb_end_write+0xe9/0x1c0 [ 125.114725][ T6575] ? vfs_write+0x7fa/0xd10 [ 125.114747][ T6575] ? __mutex_unlock_slowpath+0x227/0x800 [ 125.114796][ T6575] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.114819][ T6575] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.114842][ T6575] ? do_syscall_64+0x100/0x230 [ 125.114868][ T6575] __x64_sys_sendmmsg+0xa0/0xb0 [ 125.114887][ T6575] do_syscall_64+0xf3/0x230 [ 125.114908][ T6575] ? clear_bhb_loop+0x35/0x90 [ 125.114932][ T6575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.114953][ T6575] RIP: 0033:0x7fb20258d169 [ 125.114967][ T6575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.114980][ T6575] RSP: 002b:00007fb203437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 125.114998][ T6575] RAX: ffffffffffffffda RBX: 00007fb2027a5fa0 RCX: 00007fb20258d169 [ 125.115010][ T6575] RDX: 00000000000003ef RSI: 0000400000000180 RDI: 0000000000000003 [ 125.115020][ T6575] RBP: 00007fb203437090 R08: 0000000000000000 R09: 0000000000000000 [ 125.115030][ T6575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.115039][ T6575] R13: 0000000000000000 R14: 00007fb2027a5fa0 R15: 00007ffcdce625f8 [ 125.115064][ T6575] [ 126.898817][ T5874] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.148704][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.224209][ T5874] usb 3-1: config 0 has no interfaces? [ 127.250333][ T5874] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.353083][ T6602] program syz.3.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.415340][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.625033][ T5874] usb 3-1: config 0 descriptor?? [ 127.629068][ T6579] Bluetooth: MGMT ver 1.23 [ 128.013800][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.734206][ T6428] usb 3-1: USB disconnect, device number 4 [ 128.755924][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.774624][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.793240][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.814566][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.823774][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.840936][ T9] usb 1-1: config 0 descriptor?? [ 130.260632][ T6621] mmap: syz.0.193 (6621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.956671][ T6622] FAULT_INJECTION: forcing a failure. [ 130.956671][ T6622] name failslab, interval 1, probability 0, space 0, times 0 [ 130.986929][ T6622] CPU: 1 UID: 0 PID: 6622 Comm: syz.4.197 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 130.986947][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.986953][ T6622] Call Trace: [ 130.986957][ T6622] [ 130.986964][ T6622] dump_stack_lvl+0x241/0x360 [ 130.986988][ T6622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.987005][ T6622] ? __pfx__printk+0x10/0x10 [ 130.987031][ T6622] ? fs_reclaim_acquire+0x93/0x130 [ 130.987052][ T6622] ? __pfx___might_resched+0x10/0x10 [ 130.987074][ T6622] should_fail_ex+0x40a/0x550 [ 130.987092][ T6622] should_failslab+0xac/0x100 [ 130.987108][ T6622] __kmalloc_noprof+0xdd/0x4c0 [ 130.987116][ T6622] ? kstrtouint_from_user+0x128/0x190 [ 130.987126][ T6622] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 130.987148][ T6622] tomoyo_realpath_from_path+0xcf/0x5e0 [ 130.987178][ T6622] tomoyo_path_number_perm+0x239/0x770 [ 130.987201][ T6622] ? __lock_acquire+0x1397/0x2100 [ 130.987225][ T6622] ? tomoyo_path_number_perm+0x209/0x770 [ 130.987240][ T6622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.987281][ T6622] ? __fget_files+0x2a/0x410 [ 130.987300][ T6622] ? __fget_files+0x2a/0x410 [ 130.987323][ T6622] security_file_ioctl+0xc6/0x2a0 [ 130.987349][ T6622] __se_sys_ioctl+0x46/0x170 [ 130.987372][ T6622] do_syscall_64+0xf3/0x230 [ 130.987389][ T6622] ? clear_bhb_loop+0x35/0x90 [ 130.987403][ T6622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.987415][ T6622] RIP: 0033:0x7f2ecfb8d169 [ 130.987425][ T6622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.987432][ T6622] RSP: 002b:00007f2ed09b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.987450][ T6622] RAX: ffffffffffffffda RBX: 00007f2ecfda5fa0 RCX: 00007f2ecfb8d169 [ 130.987461][ T6622] RDX: 0000000000000000 RSI: 000000004018aee2 RDI: 0000000000000003 [ 130.987471][ T6622] RBP: 00007f2ed09b4090 R08: 0000000000000000 R09: 0000000000000000 [ 130.987481][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.987491][ T6622] R13: 0000000000000000 R14: 00007f2ecfda5fa0 R15: 00007ffff599ffa8 [ 130.987518][ T6622] [ 130.990779][ T6622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.382765][ T6629] 9pnet_fd: Insufficient options for proto=fd [ 132.454248][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 132.474288][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 132.523343][ T6638] FAULT_INJECTION: forcing a failure. [ 132.523343][ T6638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.529975][ T9] usb 1-1: USB disconnect, device number 2 [ 132.570492][ T6638] CPU: 1 UID: 0 PID: 6638 Comm: syz.4.202 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 132.570516][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.570525][ T6638] Call Trace: [ 132.570531][ T6638] [ 132.570538][ T6638] dump_stack_lvl+0x241/0x360 [ 132.570563][ T6638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.570579][ T6638] ? __pfx__printk+0x10/0x10 [ 132.570608][ T6638] ? snprintf+0xda/0x120 [ 132.570629][ T6638] should_fail_ex+0x40a/0x550 [ 132.570656][ T6638] _copy_to_user+0x31/0xb0 [ 132.570679][ T6638] simple_read_from_buffer+0xca/0x150 [ 132.570707][ T6638] proc_fail_nth_read+0x1e9/0x250 [ 132.570726][ T6638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.570746][ T6638] ? rw_verify_area+0x243/0x630 [ 132.570765][ T6638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.570783][ T6638] vfs_read+0x1f8/0xb40 [ 132.570805][ T6638] ? fdget_pos+0x254/0x320 [ 132.570823][ T6638] ? __pfx___mutex_lock+0x10/0x10 [ 132.570846][ T6638] ? __pfx_vfs_read+0x10/0x10 [ 132.570868][ T6638] ? __fget_files+0x2a/0x410 [ 132.570887][ T6638] ? __fget_files+0x395/0x410 [ 132.570902][ T6638] ? __fget_files+0x2a/0x410 [ 132.570928][ T6638] ksys_read+0x18f/0x2b0 [ 132.570951][ T6638] ? __pfx_ksys_read+0x10/0x10 [ 132.570971][ T6638] ? do_syscall_64+0x100/0x230 [ 132.570996][ T6638] ? do_syscall_64+0xb6/0x230 [ 132.571020][ T6638] do_syscall_64+0xf3/0x230 [ 132.571042][ T6638] ? clear_bhb_loop+0x35/0x90 [ 132.571065][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.571086][ T6638] RIP: 0033:0x7f2ecfb8bb7c [ 132.571100][ T6638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.571112][ T6638] RSP: 002b:00007f2ed09b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.571130][ T6638] RAX: ffffffffffffffda RBX: 00007f2ecfda5fa0 RCX: 00007f2ecfb8bb7c [ 132.571142][ T6638] RDX: 000000000000000f RSI: 00007f2ed09b40a0 RDI: 0000000000000005 [ 132.571159][ T6638] RBP: 00007f2ed09b4090 R08: 0000000000000000 R09: 000000008b3d3000 [ 132.571169][ T6638] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 132.571179][ T6638] R13: 0000000000000000 R14: 00007f2ecfda5fa0 R15: 00007ffff599ffa8 [ 132.571205][ T6638] [ 133.082960][ T6431] IPVS: starting estimator thread 0... [ 133.184720][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191132][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.224287][ T6653] IPVS: using max 22 ests per chain, 52800 per kthread [ 134.350784][ T6666] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 134.357776][ T6666] cramfs: wrong magic [ 135.049108][ T6678] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 135.064545][ T6678] cramfs: wrong magic [ 136.122701][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 136.517303][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 136.559167][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 136.586442][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.723817][ T9] usb 4-1: config 0 descriptor?? [ 136.760837][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 136.799688][ T6699] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.856261][ T9] gspca_sq930x: ucbus_write failed -110 [ 137.862682][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 138.182030][ T6711] openvswitch: netlink: Key type 31 is not supported [ 138.865543][ T6431] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.064094][ T6431] usb 1-1: Using ep0 maxpacket: 8 [ 139.099478][ T5876] usb 4-1: USB disconnect, device number 6 [ 139.149223][ T6431] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 139.259706][ T6431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.409658][ T6431] usb 1-1: config 0 descriptor?? [ 141.615943][ T5839] Bluetooth: hci2: Malformed LE Event: 0x0d [ 143.585879][ T6431] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 143.617412][ T6431] asix 1-1:0.0: probe with driver asix failed with error -71 [ 143.673045][ T6431] usb 1-1: USB disconnect, device number 3 [ 143.733946][ T6769] FAULT_INJECTION: forcing a failure. [ 143.733946][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.749622][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.4.234 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 143.749643][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.749652][ T6769] Call Trace: [ 143.749658][ T6769] [ 143.749664][ T6769] dump_stack_lvl+0x241/0x360 [ 143.749688][ T6769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.749705][ T6769] ? __pfx__printk+0x10/0x10 [ 143.749729][ T6769] ? __pfx_lock_release+0x10/0x10 [ 143.749758][ T6769] should_fail_ex+0x40a/0x550 [ 143.749785][ T6769] _copy_from_user+0x2d/0xb0 [ 143.749806][ T6769] copy_msghdr_from_user+0xae/0x680 [ 143.749832][ T6769] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 143.749850][ T6769] ? __fget_files+0x2a/0x410 [ 143.749870][ T6769] ? __fget_files+0x2a/0x410 [ 143.749894][ T6769] __sys_sendmsg+0x209/0x350 [ 143.749915][ T6769] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.749943][ T6769] ? do_sys_openat2+0x17a/0x1d0 [ 143.749983][ T6769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.750005][ T6769] ? do_syscall_64+0x100/0x230 [ 143.750030][ T6769] ? do_syscall_64+0xb6/0x230 [ 143.750054][ T6769] do_syscall_64+0xf3/0x230 [ 143.750076][ T6769] ? clear_bhb_loop+0x35/0x90 [ 143.750106][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.750127][ T6769] RIP: 0033:0x7f2ecfb8d169 [ 143.750142][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.750154][ T6769] RSP: 002b:00007f2ed0972038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.750172][ T6769] RAX: ffffffffffffffda RBX: 00007f2ecfda6160 RCX: 00007f2ecfb8d169 [ 143.750184][ T6769] RDX: 0000000000000000 RSI: 00004000000034c0 RDI: 0000000000000006 [ 143.750194][ T6769] RBP: 00007f2ed0972090 R08: 0000000000000000 R09: 0000000000000000 [ 143.750203][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.750213][ T6769] R13: 0000000000000000 R14: 00007f2ecfda6160 R15: 00007ffff599ffa8 [ 143.750237][ T6769] [ 143.810539][ T6772] FAULT_INJECTION: forcing a failure. [ 143.810539][ T6772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.969126][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.1.237 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 143.969149][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.969159][ T6772] Call Trace: [ 143.969165][ T6772] [ 143.969172][ T6772] dump_stack_lvl+0x241/0x360 [ 143.969197][ T6772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.969214][ T6772] ? __pfx__printk+0x10/0x10 [ 143.969242][ T6772] ? snprintf+0xda/0x120 [ 143.969263][ T6772] should_fail_ex+0x40a/0x550 [ 143.969292][ T6772] _copy_to_user+0x31/0xb0 [ 143.969314][ T6772] simple_read_from_buffer+0xca/0x150 [ 143.969341][ T6772] proc_fail_nth_read+0x1e9/0x250 [ 143.969360][ T6772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.969379][ T6772] ? rw_verify_area+0x243/0x630 [ 143.969398][ T6772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.969421][ T6772] vfs_read+0x1f8/0xb40 [ 143.969442][ T6772] ? fdget_pos+0x254/0x320 [ 143.969460][ T6772] ? __pfx___mutex_lock+0x10/0x10 [ 143.969483][ T6772] ? __pfx_vfs_read+0x10/0x10 [ 143.969506][ T6772] ? __fget_files+0x2a/0x410 [ 143.969524][ T6772] ? __fget_files+0x395/0x410 [ 143.969539][ T6772] ? __fget_files+0x2a/0x410 [ 143.969564][ T6772] ksys_read+0x18f/0x2b0 [ 143.969586][ T6772] ? __pfx_ksys_read+0x10/0x10 [ 143.969607][ T6772] ? do_syscall_64+0x100/0x230 [ 143.969632][ T6772] ? do_syscall_64+0xb6/0x230 [ 143.969656][ T6772] do_syscall_64+0xf3/0x230 [ 143.969678][ T6772] ? clear_bhb_loop+0x35/0x90 [ 143.969702][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.969722][ T6772] RIP: 0033:0x7f5f6618bb7c [ 143.969737][ T6772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.969749][ T6772] RSP: 002b:00007f5f67046030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.969765][ T6772] RAX: ffffffffffffffda RBX: 00007f5f663a6080 RCX: 00007f5f6618bb7c [ 143.969775][ T6772] RDX: 000000000000000f RSI: 00007f5f670460a0 RDI: 0000000000000005 [ 143.969784][ T6772] RBP: 00007f5f67046090 R08: 0000000000000000 R09: 0000000000000000 [ 143.969793][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.969801][ T6772] R13: 0000000000000000 R14: 00007f5f663a6080 R15: 00007ffcb70e2f38 [ 143.969822][ T6772] [ 144.420320][ T6782] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.241'. [ 144.980041][ T6428] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.245805][ T6428] usb 5-1: Using ep0 maxpacket: 16 [ 145.299435][ T6428] usb 5-1: config 1 interface 0 has no altsetting 0 [ 145.438525][ T6428] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 145.803448][ T6428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.868043][ T6428] usb 5-1: Product: 퓬 [ 145.877234][ T6428] usb 5-1: SerialNumber: చ [ 146.122925][ T6428] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 146.175448][ T5182] bcm5974 5-1:1.0: could not read from device [ 146.197814][ T6428] usb 5-1: USB disconnect, device number 5 [ 146.214985][ T5182] bcm5974 5-1:1.0: could not read from device [ 146.826827][ T6807] FAULT_INJECTION: forcing a failure. [ 146.826827][ T6807] name failslab, interval 1, probability 0, space 0, times 0 [ 146.859679][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.1.247 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 146.859702][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.859710][ T6807] Call Trace: [ 146.859716][ T6807] [ 146.859722][ T6807] dump_stack_lvl+0x241/0x360 [ 146.859745][ T6807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.859764][ T6807] ? __pfx__printk+0x10/0x10 [ 146.859786][ T6807] ? __kmalloc_cache_noprof+0x48/0x390 [ 146.859803][ T6807] ? __pfx___might_resched+0x10/0x10 [ 146.859836][ T6807] should_fail_ex+0x40a/0x550 [ 146.859861][ T6807] should_failslab+0xac/0x100 [ 146.859887][ T6807] __kmalloc_cache_noprof+0x70/0x390 [ 146.859902][ T6807] ? snd_pcm_oss_change_params_locked+0x174/0x4030 [ 146.859929][ T6807] snd_pcm_oss_change_params_locked+0x174/0x4030 [ 146.859959][ T6807] ? rcu_is_watching+0x15/0xb0 [ 146.859976][ T6807] ? trace_contention_end+0x3c/0x120 [ 146.859994][ T6807] ? __mutex_lock+0x397/0x1010 [ 146.860026][ T6807] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 146.860046][ T6807] ? snd_pcm_oss_write+0x25e/0x11f0 [ 146.860066][ T6807] ? __pfx___mutex_lock+0x10/0x10 [ 146.860092][ T6807] ? __pfx_lock_acquire+0x10/0x10 [ 146.860113][ T6807] ? get_pid_task+0x23/0x1f0 [ 146.860137][ T6807] ? mark_lock+0x9a/0x360 [ 146.860161][ T6807] snd_pcm_oss_write+0x2cf/0x11f0 [ 146.860181][ T6807] ? __lock_acquire+0x1397/0x2100 [ 146.860217][ T6807] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 146.860240][ T6807] ? bpf_lsm_file_permission+0x9/0x10 [ 146.860262][ T6807] ? rw_verify_area+0x243/0x630 [ 146.860281][ T6807] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 146.860304][ T6807] vfs_write+0x29f/0xd10 [ 146.860327][ T6807] ? __mutex_unlock_slowpath+0x227/0x800 [ 146.860353][ T6807] ? __pfx_vfs_write+0x10/0x10 [ 146.860369][ T6807] ? do_sys_openat2+0x17a/0x1d0 [ 146.860388][ T6807] ? __fget_files+0x2a/0x410 [ 146.860407][ T6807] ? __fget_files+0x395/0x410 [ 146.860421][ T6807] ? __fget_files+0x2a/0x410 [ 146.860443][ T6807] ksys_write+0x18f/0x2b0 [ 146.860463][ T6807] ? __pfx_ksys_write+0x10/0x10 [ 146.860483][ T6807] ? do_syscall_64+0x100/0x230 [ 146.860507][ T6807] ? do_syscall_64+0xb6/0x230 [ 146.860531][ T6807] do_syscall_64+0xf3/0x230 [ 146.860552][ T6807] ? clear_bhb_loop+0x35/0x90 [ 146.860575][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.860593][ T6807] RIP: 0033:0x7f5f6618d169 [ 146.860607][ T6807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.860619][ T6807] RSP: 002b:00007f5f67046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 146.860636][ T6807] RAX: ffffffffffffffda RBX: 00007f5f663a6080 RCX: 00007f5f6618d169 [ 146.860647][ T6807] RDX: 0000000000004000 RSI: 00004000000012c0 RDI: 0000000000000005 [ 146.860656][ T6807] RBP: 00007f5f67046090 R08: 0000000000000000 R09: 0000000000000000 [ 146.860665][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.860674][ T6807] R13: 0000000000000001 R14: 00007f5f663a6080 R15: 00007ffcb70e2f38 [ 146.860697][ T6807] [ 148.029768][ T5839] Bluetooth: min 6 > max 0 [ 150.044191][ T5839] Bluetooth: hci0: command tx timeout [ 151.876952][ T6855] process 'syz.2.260' launched './file0' with NULL argv: empty string added [ 152.022182][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 153.164273][ T5839] Bluetooth: min 6 > max 0 [ 153.374210][ T6431] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.594630][ T6431] usb 3-1: Using ep0 maxpacket: 8 [ 153.603589][ T6431] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.625022][ T6431] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.646398][ T6431] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.664737][ T6431] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.691423][ T6431] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.730300][ T6431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.769433][ T6431] usbtmc 3-1:16.0: bulk endpoints not found [ 153.884251][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.923690][ T6887] nfs: Unknown parameter '}//~\[' [ 154.261963][ T5874] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 154.271356][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.280006][ T5874] usb 4-1: Product: syz [ 154.284619][ T5874] usb 4-1: Manufacturer: syz [ 154.289291][ T5874] usb 4-1: SerialNumber: syz [ 154.311899][ T5874] usb 4-1: config 0 descriptor?? [ 155.274314][ T5839] Bluetooth: hci2: command tx timeout [ 155.303701][ T5874] usb-storage 4-1:0.0: USB Mass Storage device detected [ 156.313560][ T5874] usb 4-1: USB disconnect, device number 7 [ 156.431682][ T5827] usb 3-1: USB disconnect, device number 5 [ 157.326191][ T6924] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 157.332897][ T6924] cramfs: wrong magic [ 157.849697][ T5874] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 157.967612][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 158.039794][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 158.056474][ T5874] usb 4-1: config 1 interface 0 has no altsetting 0 [ 158.091208][ T5874] usb 4-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 158.129866][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.194365][ T5874] usb 4-1: Product: 퓬 [ 158.217163][ T5874] usb 4-1: SerialNumber: చ [ 158.480548][ T5874] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8 [ 158.528958][ T5182] bcm5974 4-1:1.0: could not read from device [ 158.566064][ T5182] bcm5974 4-1:1.0: could not read from device [ 158.578913][ T5874] usb 4-1: USB disconnect, device number 8 [ 159.007385][ T6428] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 159.204802][ T6428] usb 2-1: Using ep0 maxpacket: 8 [ 159.298732][ T6428] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.330023][ T6428] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.360363][ T6428] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.383982][ T6428] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.432890][ T6428] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.456209][ T6428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.497715][ T6428] usbtmc 2-1:16.0: bulk endpoints not found [ 159.717637][ T6960] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 159.730655][ T6960] cramfs: wrong magic [ 159.908786][ T6951] [U] . [ 161.969642][ T10] usb 2-1: USB disconnect, device number 3 [ 162.165391][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 162.184351][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 162.621773][ T7000] FAULT_INJECTION: forcing a failure. [ 162.621773][ T7000] name failslab, interval 1, probability 0, space 0, times 0 [ 162.644393][ T7000] CPU: 1 UID: 0 PID: 7000 Comm: syz.2.307 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 162.644419][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.644428][ T7000] Call Trace: [ 162.644434][ T7000] [ 162.644442][ T7000] dump_stack_lvl+0x241/0x360 [ 162.644467][ T7000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.644484][ T7000] ? __pfx__printk+0x10/0x10 [ 162.644509][ T7000] ? fs_reclaim_acquire+0x93/0x130 [ 162.644531][ T7000] ? __pfx___might_resched+0x10/0x10 [ 162.644553][ T7000] should_fail_ex+0x40a/0x550 [ 162.644581][ T7000] should_failslab+0xac/0x100 [ 162.644606][ T7000] __kmalloc_noprof+0xdd/0x4c0 [ 162.644627][ T7000] ? kstrtouint_from_user+0x128/0x190 [ 162.644643][ T7000] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 162.644666][ T7000] tomoyo_realpath_from_path+0xcf/0x5e0 [ 162.644696][ T7000] tomoyo_path_number_perm+0x239/0x770 [ 162.644718][ T7000] ? __lock_acquire+0x1397/0x2100 [ 162.644742][ T7000] ? tomoyo_path_number_perm+0x209/0x770 [ 162.644766][ T7000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 162.644827][ T7000] ? __fget_files+0x2a/0x410 [ 162.644847][ T7000] ? __fget_files+0x2a/0x410 [ 162.644869][ T7000] security_file_ioctl+0xc6/0x2a0 [ 162.644894][ T7000] __se_sys_ioctl+0x46/0x170 [ 162.644917][ T7000] do_syscall_64+0xf3/0x230 [ 162.644941][ T7000] ? clear_bhb_loop+0x35/0x90 [ 162.644965][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.645020][ T7000] RIP: 0033:0x7f9e61f8d169 [ 162.645036][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.645048][ T7000] RSP: 002b:00007f9e62d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.645066][ T7000] RAX: ffffffffffffffda RBX: 00007f9e621a5fa0 RCX: 00007f9e61f8d169 [ 162.645078][ T7000] RDX: 0000400000000240 RSI: 00000000c0046686 RDI: 0000000000000005 [ 162.645088][ T7000] RBP: 00007f9e62d93090 R08: 0000000000000000 R09: 0000000000000000 [ 162.645098][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.645107][ T7000] R13: 0000000000000000 R14: 00007f9e621a5fa0 R15: 00007ffe1c7d40e8 [ 162.645133][ T7000] [ 162.645169][ T7000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 162.665223][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.860407][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.930216][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 163.947059][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.956198][ T7012] xt_connbytes: Forcing CT accounting to be enabled [ 163.976945][ T10] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 163.986401][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.994497][ T10] usb 2-1: Product: syz [ 163.999034][ T10] usb 2-1: Manufacturer: syz [ 164.006481][ T10] usb 2-1: SerialNumber: syz [ 164.022407][ T10] usb 2-1: config 0 descriptor?? [ 164.031783][ T7012] Cannot find add_set index 0 as target [ 164.034962][ T6991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.124233][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 164.329796][ T10] powermate: unknown product id 0240 [ 164.345742][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 164.363242][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 164.385098][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 164.581067][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 164.606996][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.657130][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.692334][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.751322][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.796222][ T5874] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.834282][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.917431][ T5874] usbtmc 5-1:16.0: bulk endpoints not found [ 164.928685][ C0] powermate: config urb returned -71 [ 164.934314][ C0] powermate: config urb returned -71 [ 164.939929][ C0] powermate: config urb returned -71 [ 164.950628][ T5876] usb 2-1: USB disconnect, device number 4 [ 164.956591][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 167.022738][ T6424] usb 5-1: USB disconnect, device number 6 [ 168.884628][ T7097] FAULT_INJECTION: forcing a failure. [ 168.884628][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.898040][ T7097] CPU: 0 UID: 0 PID: 7097 Comm: syz.1.327 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 168.898054][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.898060][ T7097] Call Trace: [ 168.898065][ T7097] [ 168.898070][ T7097] dump_stack_lvl+0x241/0x360 [ 168.898085][ T7097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.898095][ T7097] ? __pfx__printk+0x10/0x10 [ 168.898108][ T7097] ? kstrtouint_from_user+0x128/0x190 [ 168.898119][ T7097] ? __pfx_lock_release+0x10/0x10 [ 168.898136][ T7097] should_fail_ex+0x40a/0x550 [ 168.898152][ T7097] _copy_from_user+0x2d/0xb0 [ 168.898164][ T7097] mptcp_setsockopt+0x1b00/0x3800 [ 168.898180][ T7097] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 168.898194][ T7097] ? __pfx_lock_acquire+0x10/0x10 [ 168.898206][ T7097] ? sock_common_setsockopt+0x37/0xc0 [ 168.898221][ T7097] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.898232][ T7097] do_sock_setsockopt+0x3af/0x720 [ 168.898250][ T7097] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 168.898266][ T7097] ? __fget_files+0x395/0x410 [ 168.898275][ T7097] ? __fget_files+0x2a/0x410 [ 168.898289][ T7097] __x64_sys_setsockopt+0x1ee/0x280 [ 168.898301][ T7097] do_syscall_64+0xf3/0x230 [ 168.898314][ T7097] ? clear_bhb_loop+0x35/0x90 [ 168.898329][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.898342][ T7097] RIP: 0033:0x7f5f6618d169 [ 168.898352][ T7097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.898359][ T7097] RSP: 002b:00007f5f67067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.898371][ T7097] RAX: ffffffffffffffda RBX: 00007f5f663a5fa0 RCX: 00007f5f6618d169 [ 168.898378][ T7097] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000006 [ 168.898383][ T7097] RBP: 00007f5f67067090 R08: 0000000000000004 R09: 0000000000000000 [ 168.898389][ T7097] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.898395][ T7097] R13: 0000000000000000 R14: 00007f5f663a5fa0 R15: 00007ffcb70e2f38 [ 168.898409][ T7097] [ 170.190983][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 171.234616][ T5874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.435904][ T5874] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 171.488165][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 171.519881][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 171.560959][ T5874] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 171.584496][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.630471][ T5874] usb 4-1: Product: syz [ 171.650721][ T5874] usb 4-1: Manufacturer: syz [ 171.664102][ T5874] usb 4-1: SerialNumber: syz [ 171.664242][ T5876] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.788884][ T5874] usb 4-1: config 0 descriptor?? [ 171.796068][ T7108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 172.432777][ T5874] powermate: unknown product id 0240 [ 172.466155][ T5874] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 172.494478][ T5874] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 172.524194][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 172.547392][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.572225][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.594245][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 172.645036][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 172.684516][ C1] powermate: config urb returned -71 [ 172.686520][ T10] usb 4-1: USB disconnect, device number 9 [ 172.689846][ C1] powermate: usb_submit_urb(config) failed [ 172.696489][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.704120][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 172.811850][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.841356][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.879722][ T5876] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 172.919324][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 172.945213][ T7147] FAULT_INJECTION: forcing a failure. [ 172.945213][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 172.951094][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 172.967157][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.2.338 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 172.967180][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.967190][ T7147] Call Trace: [ 172.967196][ T7147] [ 172.967203][ T7147] dump_stack_lvl+0x241/0x360 [ 172.967227][ T7147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.967243][ T7147] ? __pfx__printk+0x10/0x10 [ 172.967267][ T7147] ? fs_reclaim_acquire+0x93/0x130 [ 172.967288][ T7147] ? __pfx___might_resched+0x10/0x10 [ 172.967311][ T7147] should_fail_ex+0x40a/0x550 [ 172.967339][ T7147] should_failslab+0xac/0x100 [ 172.967365][ T7147] __kmalloc_noprof+0xdd/0x4c0 [ 172.967380][ T7147] ? kstrtouint_from_user+0x128/0x190 [ 172.967396][ T7147] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 172.967420][ T7147] tomoyo_realpath_from_path+0xcf/0x5e0 [ 172.967450][ T7147] tomoyo_path_number_perm+0x239/0x770 [ 172.967472][ T7147] ? __lock_acquire+0x1397/0x2100 [ 172.967496][ T7147] ? tomoyo_path_number_perm+0x209/0x770 [ 172.967521][ T7147] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 172.967583][ T7147] ? __fget_files+0x2a/0x410 [ 172.967604][ T7147] ? __fget_files+0x2a/0x410 [ 172.967627][ T7147] security_file_ioctl+0xc6/0x2a0 [ 172.967652][ T7147] __se_sys_ioctl+0x46/0x170 [ 172.967675][ T7147] do_syscall_64+0xf3/0x230 [ 172.967699][ T7147] ? clear_bhb_loop+0x35/0x90 [ 172.967723][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.967744][ T7147] RIP: 0033:0x7f9e61f8d169 [ 172.967759][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.967772][ T7147] RSP: 002b:00007f9e62d72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.967790][ T7147] RAX: ffffffffffffffda RBX: 00007f9e621a6080 RCX: 00007f9e61f8d169 [ 172.967802][ T7147] RDX: 0000400000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 172.967813][ T7147] RBP: 00007f9e62d72090 R08: 0000000000000000 R09: 0000000000000000 [ 172.967823][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.967833][ T7147] R13: 0000000000000000 R14: 00007f9e621a6080 R15: 00007ffe1c7d40e8 [ 172.967860][ T7147] [ 172.967898][ T7147] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.456861][ T7159] FAULT_INJECTION: forcing a failure. [ 173.456861][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.522794][ T7159] CPU: 1 UID: 0 PID: 7159 Comm: syz.0.340 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 173.522820][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.522830][ T7159] Call Trace: [ 173.522836][ T7159] [ 173.522843][ T7159] dump_stack_lvl+0x241/0x360 [ 173.522867][ T7159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.522882][ T7159] ? __pfx__printk+0x10/0x10 [ 173.522907][ T7159] ? __pfx_lock_release+0x10/0x10 [ 173.522928][ T7159] ? __local_bh_enable_ip+0x168/0x200 [ 173.522948][ T7159] should_fail_ex+0x40a/0x550 [ 173.522974][ T7159] _copy_from_user+0x2d/0xb0 [ 173.522994][ T7159] vsock_connectible_setsockopt+0x588/0x960 [ 173.523021][ T7159] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 173.523055][ T7159] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 173.523083][ T7159] do_sock_setsockopt+0x3af/0x720 [ 173.523112][ T7159] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 173.523141][ T7159] ? __fget_files+0x395/0x410 [ 173.523158][ T7159] ? __fget_files+0x2a/0x410 [ 173.523183][ T7159] __x64_sys_setsockopt+0x1ee/0x280 [ 173.523207][ T7159] do_syscall_64+0xf3/0x230 [ 173.523229][ T7159] ? clear_bhb_loop+0x35/0x90 [ 173.523254][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.523275][ T7159] RIP: 0033:0x7fb20258d169 [ 173.523290][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.523303][ T7159] RSP: 002b:00007fb203437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.523325][ T7159] RAX: ffffffffffffffda RBX: 00007fb2027a5fa0 RCX: 00007fb20258d169 [ 173.523337][ T7159] RDX: 0000000000000001 RSI: 0000000000000028 RDI: 0000000000000005 [ 173.523347][ T7159] RBP: 00007fb203437090 R08: 0000000000000112 R09: 0000000000000000 [ 173.523358][ T7159] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000001 [ 173.523369][ T7159] R13: 0000000000000000 R14: 00007fb2027a5fa0 R15: 00007ffcdce625f8 [ 173.523395][ T7159] [ 174.702882][ T7171] netlink: 64 bytes leftover after parsing attributes in process `syz.0.343'. [ 174.769527][ T7171] nbd: must specify at least one socket [ 174.961586][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 175.375720][ T10] usb 5-1: USB disconnect, device number 7 [ 175.680632][ T7184] fuse: Bad value for 'user_id' [ 175.706378][ T7184] fuse: Bad value for 'user_id' [ 176.252381][ T7190] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 176.340632][ T7190] cramfs: wrong magic [ 176.894226][ T5874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 177.074563][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 177.116994][ T5874] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 177.178342][ T5874] usb 2-1: config 0 has no interface number 0 [ 177.178449][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.185295][ T5874] usb 2-1: too many endpoints for config 0 interface 197 altsetting 52: 239, using maximum allowed: 30 [ 177.304714][ T5874] usb 2-1: config 0 interface 197 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 177.406205][ T5874] usb 2-1: config 0 interface 197 has no altsetting 0 [ 177.416303][ T7209] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 177.428096][ T7209] cramfs: wrong magic [ 177.488774][ T5874] usb 2-1: New USB device found, idVendor=07a2, idProduct=8511, bcdDevice=9d.28 [ 177.579678][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.615808][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 177.621454][ T5874] usb 2-1: Product: syz [ 177.648444][ T5874] usb 2-1: Manufacturer: syz [ 177.677959][ T5874] usb 2-1: SerialNumber: syz [ 177.687957][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.695222][ T5874] usb 2-1: config 0 descriptor?? [ 177.713066][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.774450][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 177.786997][ T7211] can0: slcan on pty24. [ 177.791489][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 177.829941][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.873032][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.895509][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.932590][ T10] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 178.603706][ T7202] can0 (unregistered): slcan off pty24. [ 178.991291][ T7232] FAULT_INJECTION: forcing a failure. [ 178.991291][ T7232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.004883][ T7232] CPU: 1 UID: 0 PID: 7232 Comm: syz.4.358 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 179.004907][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.004920][ T7232] Call Trace: [ 179.004927][ T7232] [ 179.004934][ T7232] dump_stack_lvl+0x241/0x360 [ 179.004968][ T7232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.004985][ T7232] ? __pfx__printk+0x10/0x10 [ 179.005009][ T7232] ? __schedule+0x18c4/0x4c40 [ 179.005029][ T7232] ? __pfx_lock_release+0x10/0x10 [ 179.005060][ T7232] should_fail_ex+0x40a/0x550 [ 179.005088][ T7232] strncpy_from_user+0x36/0x270 [ 179.005113][ T7232] __se_sys_add_key+0xd9/0x490 [ 179.005139][ T7232] ? __pfx___se_sys_add_key+0x10/0x10 [ 179.005164][ T7232] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.005190][ T7232] ? __x64_sys_add_key+0x20/0xc0 [ 179.005214][ T7232] do_syscall_64+0xf3/0x230 [ 179.005237][ T7232] ? clear_bhb_loop+0x35/0x90 [ 179.005261][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.005282][ T7232] RIP: 0033:0x7f2ecfb8d169 [ 179.005301][ T7232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.005316][ T7232] RSP: 002b:00007f2ed0972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 179.005339][ T7232] RAX: ffffffffffffffda RBX: 00007f2ecfda6160 RCX: 00007f2ecfb8d169 [ 179.005352][ T7232] RDX: 0000400000000100 RSI: 0000400000000180 RDI: 0000400000000140 [ 179.005364][ T7232] RBP: 00007f2ed0972090 R08: fffffffffffffffe R09: 0000000000000000 [ 179.005375][ T7232] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 179.005386][ T7232] R13: 0000000000000000 R14: 00007f2ecfda6160 R15: 00007ffff599ffa8 [ 179.005415][ T7232] [ 179.007064][ T7231] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 179.673016][ T7236] fuse: Bad value for 'user_id' [ 179.717526][ T7236] fuse: Bad value for 'user_id' [ 179.731553][ T10] usb 2-1: USB disconnect, device number 5 [ 180.833647][ T6431] usb 4-1: USB disconnect, device number 10 [ 181.644572][ T6431] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.349778][ T6431] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.480326][ T6431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 182.492829][ T6431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.201410][ T6431] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 183.212277][ T6431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.220703][ T6431] usb 2-1: Product: syz [ 183.225185][ T6431] usb 2-1: Manufacturer: syz [ 183.229815][ T6431] usb 2-1: SerialNumber: syz [ 183.238518][ T6431] usb 2-1: config 0 descriptor?? [ 183.252564][ T7264] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.431959][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 183.464530][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 183.514249][ T6431] powermate: unknown product id 0240 [ 183.530661][ T6431] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 183.557038][ T6431] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 183.732781][ C1] powermate: config urb returned -71 [ 183.738319][ C1] powermate: config urb returned -71 [ 183.743907][ C1] powermate: config urb returned -71 [ 183.750068][ C1] powermate: config urb returned -71 [ 183.775332][ T6431] usb 2-1: USB disconnect, device number 6 [ 183.781232][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 186.191363][ T7333] Bluetooth: MGMT ver 1.23 [ 186.215667][ T7333] capability: warning: `syz.0.384' uses deprecated v2 capabilities in a way that may be insecure [ 186.256136][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 186.279606][ T7330] x_tables: duplicate underflow at hook 1 [ 186.594534][ T6428] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.356703][ T7348] FAULT_INJECTION: forcing a failure. [ 187.356703][ T7348] name failslab, interval 1, probability 0, space 0, times 0 [ 187.383309][ T7348] CPU: 0 UID: 0 PID: 7348 Comm: syz.3.389 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 187.383335][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.383346][ T7348] Call Trace: [ 187.383353][ T7348] [ 187.383361][ T7348] dump_stack_lvl+0x241/0x360 [ 187.383385][ T7348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.383403][ T7348] ? __pfx__printk+0x10/0x10 [ 187.383429][ T7348] ? kmem_cache_alloc_noprof+0x48/0x380 [ 187.383447][ T7348] ? __pfx___might_resched+0x10/0x10 [ 187.383471][ T7348] should_fail_ex+0x40a/0x550 [ 187.383499][ T7348] should_failslab+0xac/0x100 [ 187.383523][ T7348] ? mas_alloc_nodes+0x25b/0x7e0 [ 187.383544][ T7348] kmem_cache_alloc_noprof+0x70/0x380 [ 187.383565][ T7348] mas_alloc_nodes+0x25b/0x7e0 [ 187.383595][ T7348] mas_preallocate+0x575/0x8d0 [ 187.383621][ T7348] ? __pfx_mas_preallocate+0x10/0x10 [ 187.383648][ T7348] ? vma_merge_existing_range+0xeb7/0x1770 [ 187.383669][ T7348] ? __mas_set_range+0x133/0x3c0 [ 187.383691][ T7348] commit_merge+0x405/0x790 [ 187.383722][ T7348] ? __pfx_commit_merge+0x10/0x10 [ 187.383751][ T7348] ? dup_anon_vma+0x76/0x2b0 [ 187.383777][ T7348] vma_merge_existing_range+0x142f/0x1770 [ 187.383798][ T7348] ? vma_merge_existing_range+0x6e1/0x1770 [ 187.383817][ T7348] ? vma_merge_existing_range+0x6e1/0x1770 [ 187.383844][ T7348] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 187.383862][ T7348] ? mlock_drain_local+0x79/0x490 [ 187.383893][ T7348] vma_modify+0x76/0x390 [ 187.383917][ T7348] vma_modify_flags+0x3a5/0x430 [ 187.383946][ T7348] ? __pfx_vma_modify_flags+0x10/0x10 [ 187.383990][ T7348] mlock_fixup+0x21d/0x350 [ 187.384016][ T7348] apply_mlockall_flags+0x307/0x410 [ 187.384040][ T7348] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 187.384062][ T7348] ? __do_sys_munlockall+0x5a/0x220 [ 187.384090][ T7348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.384114][ T7348] ? do_syscall_64+0x100/0x230 [ 187.384140][ T7348] __do_sys_munlockall+0x10a/0x220 [ 187.384166][ T7348] do_syscall_64+0xf3/0x230 [ 187.384189][ T7348] ? clear_bhb_loop+0x35/0x90 [ 187.384213][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.384234][ T7348] RIP: 0033:0x7f7e4b58d169 [ 187.384249][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.384262][ T7348] RSP: 002b:00007f7e4c382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 187.384280][ T7348] RAX: ffffffffffffffda RBX: 00007f7e4b7a5fa0 RCX: 00007f7e4b58d169 [ 187.384292][ T7348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.384302][ T7348] RBP: 00007f7e4c382090 R08: 0000000000000000 R09: 0000000000000000 [ 187.384313][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.384322][ T7348] R13: 0000000000000000 R14: 00007f7e4b7a5fa0 R15: 00007ffc147e81a8 [ 187.384348][ T7348] [ 187.414115][ T6428] usb 2-1: Using ep0 maxpacket: 32 [ 187.416329][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.677210][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.697283][ T6428] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 187.706690][ T6428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.730120][ T7348] vmg ffffc9000c32fc40 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 187.734778][ T6428] usb 2-1: config 0 descriptor?? [ 187.750253][ T7348] vmg ffffc9000c32fc40 state: mm ffff888035316180 pgoff 400000a96 [ 187.750253][ T7348] vmi ffffc9000c32fde0 [400000130000,400000800000) [ 187.750253][ T7348] prev ffff888033cf69b0 next 0000000000000000 vma ffff888033cf69b0 [ 187.750253][ T7348] start 400000130000 end 400000800000 flags 8100077 [ 187.750253][ T7348] file 0000000000000000 anon_vma ffff888034595220 policy 0000000000000000 [ 187.750253][ T7348] uffd_ctx 0000000000000000 [ 187.750253][ T7348] anon_name 0000000000000000 [ 187.750253][ T7348] merge_flags 0 state 0 [ 187.841650][ T6428] gspca_main: sunplus-2.14.0 probing 041e:400b [ 187.848610][ T7348] vmg ffffc9000c32fc40 mm: [ 187.853546][ T7348] mm ffff888035316180 task_size 140737488351232 [ 187.853546][ T7348] mmap_base 140180421382144 mmap_legacy_base 47452373786624 [ 187.853546][ T7348] pgd ffff8880120ce000 mm_users 3 mm_count 1 pgtables_bytes 131072 map_count 37 [ 187.853546][ T7348] hiwater_rss 1602 hiwater_vm 5fa4 total_vm 5fc4 locked_vm 6d0 [ 187.853546][ T7348] pinned_vm 0 data_vm 23da exec_vm 1a4 stack_vm 21 [ 187.853546][ T7348] start_code 7f7e4b448000 end_code 7f7e4b5e9529 start_data 7f7e4b780000 end_data 7f7e4b780000 [ 187.853546][ T7348] start_brk 55557f93d000 brk 55557f971000 start_stack 7ffc147e8a10 [ 187.853546][ T7348] arg_start 7ffc147e8f6d arg_end 7ffc147e8f81 env_start 7ffc147e8f81 env_end 7ffc147e8fe9 [ 187.853546][ T7348] binfmt ffffffff8eca79e0 flags 800007fd [ 187.853546][ T7348] ioctx_table 0000000000000000 [ 187.853546][ T7348] owner ffff88802e158000 exe_file ffff888025643880 [ 187.853546][ T7348] notifier_subscriptions 0000000000000000 [ 187.853546][ T7348] numa_next_scan 4294955828 numa_scan_offset 0 numa_scan_seq 0 [ 187.853546][ T7348] tlb_flush_pending 0 [ 187.853546][ T7348] def_flags: 0x0() [ 187.880643][ T7360] lo speed is unknown, defaulting to 1000 [ 187.954157][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.956390][ T7348] vmg ffffc9000c32fc40 vma: [ 187.971463][ T7348] vma ffff888033cf69b0 start 0000400000130000 end 0000400000800000 mm ffff888035316180 [ 187.971463][ T7348] prot 25 anon_vma ffff888034595220 vm_ops 0000000000000000 [ 187.971463][ T7348] pgoff 400000a96 file 0000000000000000 private_data 0000000000000000 [ 187.971463][ T7348] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty) [ 188.005673][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.012959][ T7348] vmg ffffc9000c32fc40 prev: [ 188.024452][ T7348] vma ffff888033cf69b0 start 0000400000130000 end 0000400000800000 mm ffff888035316180 [ 188.024452][ T7348] prot 25 anon_vma ffff888034595220 vm_ops 0000000000000000 [ 188.024452][ T7348] pgoff 400000a96 file 0000000000000000 private_data 0000000000000000 [ 188.024452][ T7348] flags: 0x8102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty) [ 188.058803][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.068077][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 188.117553][ T7348] vmg ffffc9000c32fc40 next: (NULL) [ 188.122946][ T7348] vmg ffffc9000c32fc40 vmi: [ 188.167201][ T7348] MAS: tree=ffff8880353161c0 enode=ffff88803420e80c [ 188.167221][ T7348] (ma_active) [ 188.173947][ T7348] Store Type: [ 188.204966][ T7348] node_store [ 188.211584][ T7348] [7/14] index=400000130000 last=4000007fffff [ 188.237294][ T7348] min=0 max=55557f95efff alloc=0000000000000000, depth=1, flags=0 [ 188.264857][ T7348] maple_tree(ffff8880353161c0) flags 30B, height 2 root ffff888033f6121e [ 188.298287][ T7348] 0-ffffffffffffffff: node ffff888033f61200 depth 0 type 3 parent ffff8880353161c1 contents: 3fe4d0a9f000 2a28c9a86000 63000 ffff8003eb817000 0 0 0 0 0 0 | 03 03| ffff88803420e80c 55557F95EFFF ffff88802b92ac0c 7F7E4B3FFFFF ffff888033f6020c 7F7E4C341FFF ffff888033f61c0c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 188.335348][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.374250][ T7348] 0-55557f95efff: node ffff88803420e800 depth 1 type 1 parent ffff888033f61206 contents: 0000000000000000 110C22FFFF ffff888030ce12e8 110E22FFFF 0000000000000000 1B2F51FFFF ffff8880345923e0 1B2F55FFFF 0000000000000000 3FFFFFFFEFFF ffff888011dc4000 3FFFFFFFFFFF ffff888029fa17c0 40000012FFFF ffff888033cf69b0 4000007FFFFF ffff888033cf61f0 40000092FFFF ffff888033cf66c8 400000A95FFF 0000000000000000 400000A96FFF ffff888033cf63e0 400000FFFFFF ffff888011dc4c98 400001000FFF 0000000000000000 55557F93CFFF ffff888011dc48b8 55557F95EFFF 000000000000000e [ 188.524073][ T7348] 0-110c22ffff: 0000000000000000 [ 189.019915][ T7348] 110c230000-110e22ffff: ffff888030ce12e8 [ 189.036545][ T7348] 110e230000-1b2f51ffff: 0000000000000000 [ 189.042889][ T7348] 1b2f520000-1b2f55ffff: ffff8880345923e0 [ 189.068404][ T7348] 1b2f560000-3fffffffefff: 0000000000000000 [ 189.100870][ T7348] 3ffffffff000-3fffffffffff: ffff888011dc4000 [ 189.134808][ T7348] 400000000000-40000012ffff: ffff888029fa17c0 [ 189.149625][ T7348] 400000130000-4000007fffff: ffff888033cf69b0 [ 189.203704][ T7348] 400000800000-40000092ffff: ffff888033cf61f0 [ 189.223938][ T7348] 400000930000-400000a95fff: ffff888033cf66c8 [ 189.230803][ T7348] 400000a96000-400000a96fff: 0000000000000000 [ 189.247601][ T7348] 400000a97000-400000ffffff: ffff888033cf63e0 [ 189.294172][ T7348] 400001000000-400001000fff: ffff888011dc4c98 [ 189.331616][ T7348] 400001001000-55557f93cfff: 0000000000000000 [ 189.344198][ T6428] gspca_sunplus: reg_w_riv err -71 [ 189.355904][ T6428] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 189.394229][ T7348] 55557f93d000-55557f95efff: ffff888011dc48b8 [ 189.400760][ T7348] 55557f95f000-7f7e4b3fffff: node ffff88802b92ac00 depth 1 type 1 parent ffff888033f6120e contents: ffff888011dc44d8 55557F970FFF 0000000000000000 7F7E493F6FFF ffff888011dc43e0 7F7E493F7FFF ffff888011dc41f0 7F7E49BF7FFF ffff888011dc42e8 7F7E49BF8FFF ffff8880314935d0 7F7E4A3F8FFF ffff888031493000 7F7E4A3FAFFF ffff8880334d4d90 7F7E4A7FAFFF ffff88802b13c000 7F7E4A7FCFFF ffff88802b13caa8 7F7E4ABFCFFF ffff88807b6aae88 7F7E4ABFEFFF ffff88807b6aad90 7F7E4AFFEFFF ffff888029672c98 7F7E4AFFFFFF ffff888029672ba0 7F7E4B3FFFFF 0000000000000000 0 000000000000000d [ 189.456190][ T6428] usb 2-1: USB disconnect, device number 7 [ 189.674234][ T7348] 55557f95f000-55557f970fff: ffff888011dc44d8 [ 189.703699][ T7348] 55557f971000-7f7e493f6fff: 0000000000000000 [ 189.723142][ T7348] 7f7e493f7000-7f7e493f7fff: ffff888011dc43e0 [ 189.741212][ T7376] FAULT_INJECTION: forcing a failure. [ 189.741212][ T7376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.755240][ T7348] 7f7e493f8000-7f7e49bf7fff: ffff888011dc41f0 [ 189.772026][ T7348] 7f7e49bf8000-7f7e49bf8fff: ffff888011dc42e8 [ 189.782171][ T7348] 7f7e49bf9000-7f7e4a3f8fff: ffff8880314935d0 [ 189.788978][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.2.397 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 189.789002][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.789012][ T7376] Call Trace: [ 189.789018][ T7376] [ 189.789025][ T7376] dump_stack_lvl+0x241/0x360 [ 189.789051][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.789068][ T7376] ? __pfx__printk+0x10/0x10 [ 189.789093][ T7376] ? __pfx_lock_release+0x10/0x10 [ 189.789124][ T7376] should_fail_ex+0x40a/0x550 [ 189.789153][ T7376] _copy_from_user+0x2d/0xb0 [ 189.789176][ T7376] io_sync_cancel+0x2a8/0x1100 [ 189.789198][ T7376] ? __pfx___mutex_trylock_common+0x10/0x10 [ 189.789221][ T7376] ? rcu_is_watching+0x15/0xb0 [ 189.789238][ T7376] ? trace_contention_end+0x3c/0x120 [ 189.789258][ T7376] ? __pfx_io_sync_cancel+0x10/0x10 [ 189.789284][ T7376] ? __pfx_lock_release+0x10/0x10 [ 189.789317][ T7376] ? __pfx_autoremove_wake_function+0x10/0x10 [ 189.789339][ T7376] ? __fget_files+0x395/0x410 [ 189.789356][ T7376] ? __fget_files+0x2a/0x410 [ 189.789380][ T7376] __se_sys_io_uring_register+0xacf/0x3a50 [ 189.789410][ T7376] ? __pfx_lock_acquire+0x10/0x10 [ 189.789432][ T7376] ? get_pid_task+0x23/0x1f0 [ 189.789455][ T7376] ? __pfx_lock_release+0x10/0x10 [ 189.789474][ T7376] ? kstrtouint_from_user+0x128/0x190 [ 189.789500][ T7376] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 189.789536][ T7376] ? ksys_write+0x22a/0x2b0 [ 189.789566][ T7376] ? __pfx_lock_release+0x10/0x10 [ 189.789594][ T7376] ? sb_end_write+0xe9/0x1c0 [ 189.789612][ T7376] ? vfs_write+0x7fa/0xd10 [ 189.789635][ T7376] ? __mutex_unlock_slowpath+0x227/0x800 [ 189.789662][ T7376] ? do_sys_openat2+0x17a/0x1d0 [ 189.789681][ T7376] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.789703][ T7376] ? __fget_files+0x2a/0x410 [ 189.789723][ T7376] ? __fget_files+0x2a/0x410 [ 189.789748][ T7376] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 189.789773][ T7376] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.789796][ T7376] ? do_syscall_64+0x100/0x230 [ 189.789821][ T7376] ? do_syscall_64+0xb6/0x230 [ 189.789846][ T7376] do_syscall_64+0xf3/0x230 [ 189.789868][ T7376] ? clear_bhb_loop+0x35/0x90 [ 189.789893][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.789914][ T7376] RIP: 0033:0x7f9e61f8d169 [ 189.789930][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.789943][ T7376] RSP: 002b:00007f9e62d93038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 189.789962][ T7376] RAX: ffffffffffffffda RBX: 00007f9e621a5fa0 RCX: 00007f9e61f8d169 [ 189.789974][ T7376] RDX: 0000400000000000 RSI: 0000000000000018 RDI: 0000000000000005 [ 189.789984][ T7376] RBP: 00007f9e62d93090 R08: 0000000000000000 R09: 0000000000000000 [ 189.789994][ T7376] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 189.790004][ T7376] R13: 0000000000000000 R14: 00007f9e621a5fa0 R15: 00007ffe1c7d40e8 [ 189.790030][ T7376] [ 190.108889][ T7348] 7f7e4a3f9000-7f7e4a3fafff: ffff888031493000 [ 190.115508][ T7348] 7f7e4a3fb000-7f7e4a7fafff: ffff8880334d4d90 [ 190.122098][ T7348] 7f7e4a7fb000-7f7e4a7fcfff: ffff88802b13c000 [ 190.128781][ T7348] 7f7e4a7fd000-7f7e4abfcfff: ffff88802b13caa8 [ 190.135636][ T7348] 7f7e4abfd000-7f7e4abfefff: ffff88807b6aae88 [ 190.142450][ T7348] 7f7e4abff000-7f7e4affefff: ffff88807b6aad90 [ 190.149023][ T7348] 7f7e4afff000-7f7e4affffff: ffff888029672c98 [ 190.155680][ T7348] 7f7e4b000000-7f7e4b3fffff: ffff888029672ba0 [ 190.162238][ T7348] 7f7e4b400000-7f7e4c341fff: node ffff888033f60200 depth 1 type 1 parent ffff888033f61216 contents: ffff888029672aa8 7F7E4B447FFF ffff8880296729b0 7F7E4B5E9FFF ffff8880296728b8 7F7E4B695FFF ffff8880296727c0 7F7E4B775FFF ffff8880296726c8 7F7E4B77EFFF 0000000000000000 7F7E4B77FFFF ffff8880296725d0 7F7E4C2DDFFF 0000000000000000 7F7E4C340FFF ffff888032a30c98 7F7E4C341FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 190.208826][ T7348] 7f7e4b400000-7f7e4b447fff: ffff888029672aa8 [ 190.215392][ T7348] 7f7e4b448000-7f7e4b5e9fff: ffff8880296729b0 [ 190.221918][ T7348] 7f7e4b5ea000-7f7e4b695fff: ffff8880296728b8 [ 190.228468][ T7348] 7f7e4b696000-7f7e4b775fff: ffff8880296727c0 [ 190.235043][ T7348] 7f7e4b776000-7f7e4b77efff: ffff8880296726c8 [ 190.241887][ T7348] 7f7e4b77f000-7f7e4b77ffff: 0000000000000000 [ 190.248829][ T7348] 7f7e4b780000-7f7e4c2ddfff: ffff8880296725d0 [ 190.255396][ T7348] 7f7e4c2de000-7f7e4c340fff: 0000000000000000 [ 190.261948][ T7348] 7f7e4c341000-7f7e4c341fff: ffff888032a30c98 [ 190.268550][ T7348] 7f7e4c342000-ffffffffffffffff: node ffff888033f61c00 depth 1 type 1 parent ffff888033f6121e contents: ffff888029672000 7F7E4C361FFF ffff88802fe724d8 7F7E4C362FFF ffff8880296720f8 7F7E4C382FFF ffff8880296724d8 7F7E4C384FFF ffff8880296723e0 7F7E4C386FFF ffff8880296722e8 7F7E4C388FFF 0000000000000000 7FFC147C7FFF ffff8880296721f0 7FFC147E8FFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 190.315435][ T7348] 7f7e4c342000-7f7e4c361fff: ffff888029672000 [ 190.321981][ T7348] 7f7e4c362000-7f7e4c362fff: ffff88802fe724d8 [ 190.328546][ T7348] 7f7e4c363000-7f7e4c382fff: ffff8880296720f8 [ 190.335097][ T7348] 7f7e4c383000-7f7e4c384fff: ffff8880296724d8 [ 190.341934][ T7348] 7f7e4c385000-7f7e4c386fff: ffff8880296723e0 [ 190.349152][ T7348] 7f7e4c387000-7f7e4c388fff: ffff8880296722e8 [ 190.355711][ T7348] 7f7e4c389000-7ffc147c7fff: 0000000000000000 [ 190.362244][ T7348] 7ffc147c8000-7ffc147e8fff: ffff8880296721f0 [ 190.368827][ T7348] 7ffc147e9000-ffffffffffffffff: 0000000000000000 [ 190.375848][ T7348] ------------[ cut here ]------------ [ 190.381353][ T7348] WARNING: CPU: 1 PID: 7348 at mm/vma.c:734 vma_merge_existing_range+0x11c8/0x1770 [ 190.390715][ T7348] Modules linked in: [ 190.394665][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.3.389 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 190.405312][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.415592][ T7348] RIP: 0010:vma_merge_existing_range+0x11c8/0x1770 [ 190.422138][ T7348] Code: 48 c7 c6 20 10 36 8c e8 66 a1 f2 ff 90 0f 0b 90 e9 fd f0 ff ff e8 d8 2b aa ff 4c 89 f7 48 c7 c6 a0 10 36 8c e8 49 a1 f2 ff 90 <0f> 0b 90 e9 61 f1 ff ff e8 bb 2b aa ff e9 7b f2 ff ff e8 b1 2b aa [ 190.441886][ T7348] RSP: 0018:ffffc9000c32fa40 EFLAGS: 00010282 [ 190.448769][ T7348] RAX: ffffffff8bf94505 RBX: 0000400000130000 RCX: ffff88802e15bc00 [ 190.456988][ T7348] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 190.465036][ T7348] RBP: ffffc9000c32fb90 R08: ffffffff8bf94400 R09: fffffbfff1d3a68c [ 190.473044][ T7348] R10: dffffc0000000000 R11: fffffbfff1d3a68c R12: 0000400000800000 [ 190.481181][ T7348] R13: 0000400000130000 R14: ffffc9000c32fc40 R15: ffff888033cf69b0 [ 190.489265][ T7348] FS: 00007f7e4c3826c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 190.498273][ T7348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.504913][ T7348] CR2: 00007f9e621762d8 CR3: 00000000120ce000 CR4: 00000000003526f0 [ 190.512910][ T7348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 190.521027][ T7348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 190.529092][ T7348] Call Trace: [ 190.532388][ T7348] [ 190.536723][ T7348] ? __warn+0x165/0x4d0 [ 190.540922][ T7348] ? vma_merge_existing_range+0x11c8/0x1770 [ 190.547773][ T7348] ? report_bug+0x2b3/0x500 [ 190.552306][ T7348] ? vma_merge_existing_range+0x11c8/0x1770 [ 190.558429][ T7348] ? handle_bug+0x60/0x90 [ 190.562752][ T7348] ? exc_invalid_op+0x1a/0x50 [ 190.567487][ T7348] ? asm_exc_invalid_op+0x1a/0x20 [ 190.572640][ T7348] ? mt_dump_node+0x1860/0x2290 [ 190.577616][ T7348] ? mt_dump_node+0x1965/0x2290 [ 190.582520][ T7348] ? vma_merge_existing_range+0x11c8/0x1770 [ 190.588536][ T7348] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 190.594685][ T7348] ? mlock_drain_local+0x79/0x490 [ 190.599763][ T7348] vma_modify+0x76/0x390 [ 190.604109][ T7348] vma_modify_flags+0x3a5/0x430 [ 190.609015][ T7348] ? __pfx_vma_modify_flags+0x10/0x10 [ 190.614729][ T7348] mlock_fixup+0x21d/0x350 [ 190.619193][ T7348] apply_mlockall_flags+0x307/0x410 [ 190.624587][ T7348] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 190.630477][ T7348] ? __do_sys_munlockall+0x5a/0x220 [ 190.635818][ T7348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.642179][ T7348] ? do_syscall_64+0x100/0x230 [ 190.647344][ T7348] __do_sys_munlockall+0x10a/0x220 [ 190.652505][ T7348] do_syscall_64+0xf3/0x230 [ 190.657427][ T7348] ? clear_bhb_loop+0x35/0x90 [ 190.662150][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.668171][ T7348] RIP: 0033:0x7f7e4b58d169 [ 190.672712][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.692622][ T7348] RSP: 002b:00007f7e4c382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 190.701379][ T7348] RAX: ffffffffffffffda RBX: 00007f7e4b7a5fa0 RCX: 00007f7e4b58d169 [ 190.709441][ T7348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.717520][ T7348] RBP: 00007f7e4c382090 R08: 0000000000000000 R09: 0000000000000000 [ 190.725955][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.733968][ T7348] R13: 0000000000000000 R14: 00007f7e4b7a5fa0 R15: 00007ffc147e81a8 [ 190.742130][ T7348] [ 190.745248][ T7348] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 190.752570][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.3.389 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 190.763189][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.773279][ T7348] Call Trace: [ 190.776641][ T7348] [ 190.779597][ T7348] dump_stack_lvl+0x241/0x360 [ 190.784305][ T7348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.789529][ T7348] ? __pfx__printk+0x10/0x10 [ 190.794129][ T7348] ? _printk+0xd5/0x120 [ 190.798338][ T7348] ? __init_begin+0x41000/0x41000 [ 190.803366][ T7348] ? vscnprintf+0x5d/0x90 [ 190.807715][ T7348] panic+0x349/0x880 [ 190.811617][ T7348] ? __warn+0x174/0x4d0 [ 190.815773][ T7348] ? __pfx_panic+0x10/0x10 [ 190.820202][ T7348] __warn+0x344/0x4d0 [ 190.824186][ T7348] ? vma_merge_existing_range+0x11c8/0x1770 [ 190.830105][ T7348] report_bug+0x2b3/0x500 [ 190.834436][ T7348] ? vma_merge_existing_range+0x11c8/0x1770 [ 190.840333][ T7348] handle_bug+0x60/0x90 [ 190.844570][ T7348] exc_invalid_op+0x1a/0x50 [ 190.849067][ T7348] asm_exc_invalid_op+0x1a/0x20 [ 190.853919][ T7348] RIP: 0010:vma_merge_existing_range+0x11c8/0x1770 [ 190.860423][ T7348] Code: 48 c7 c6 20 10 36 8c e8 66 a1 f2 ff 90 0f 0b 90 e9 fd f0 ff ff e8 d8 2b aa ff 4c 89 f7 48 c7 c6 a0 10 36 8c e8 49 a1 f2 ff 90 <0f> 0b 90 e9 61 f1 ff ff e8 bb 2b aa ff e9 7b f2 ff ff e8 b1 2b aa [ 190.880208][ T7348] RSP: 0018:ffffc9000c32fa40 EFLAGS: 00010282 [ 190.886276][ T7348] RAX: ffffffff8bf94505 RBX: 0000400000130000 RCX: ffff88802e15bc00 [ 190.894243][ T7348] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 190.902209][ T7348] RBP: ffffc9000c32fb90 R08: ffffffff8bf94400 R09: fffffbfff1d3a68c [ 190.910182][ T7348] R10: dffffc0000000000 R11: fffffbfff1d3a68c R12: 0000400000800000 [ 190.918148][ T7348] R13: 0000400000130000 R14: ffffc9000c32fc40 R15: ffff888033cf69b0 [ 190.926213][ T7348] ? mt_dump_node+0x1860/0x2290 [ 190.931062][ T7348] ? mt_dump_node+0x1965/0x2290 [ 190.935929][ T7348] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 190.942005][ T7348] ? mlock_drain_local+0x79/0x490 [ 190.947033][ T7348] vma_modify+0x76/0x390 [ 190.951274][ T7348] vma_modify_flags+0x3a5/0x430 [ 190.956128][ T7348] ? __pfx_vma_modify_flags+0x10/0x10 [ 190.961635][ T7348] mlock_fixup+0x21d/0x350 [ 190.966069][ T7348] apply_mlockall_flags+0x307/0x410 [ 190.971356][ T7348] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 190.977073][ T7348] ? __do_sys_munlockall+0x5a/0x220 [ 190.982272][ T7348] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.988605][ T7348] ? do_syscall_64+0x100/0x230 [ 190.993374][ T7348] __do_sys_munlockall+0x10a/0x220 [ 190.998491][ T7348] do_syscall_64+0xf3/0x230 [ 191.002998][ T7348] ? clear_bhb_loop+0x35/0x90 [ 191.007680][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.013570][ T7348] RIP: 0033:0x7f7e4b58d169 [ 191.017982][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.037586][ T7348] RSP: 002b:00007f7e4c382038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 191.046003][ T7348] RAX: ffffffffffffffda RBX: 00007f7e4b7a5fa0 RCX: 00007f7e4b58d169 [ 191.053975][ T7348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.061940][ T7348] RBP: 00007f7e4c382090 R08: 0000000000000000 R09: 0000000000000000 [ 191.069915][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.077986][ T7348] R13: 0000000000000000 R14: 00007f7e4b7a5fa0 R15: 00007ffc147e81a8 [ 191.086317][ T7348] [ 191.089685][ T7348] Kernel Offset: disabled [ 191.094127][ T7348] Rebooting in 86400 seconds..