last executing test programs: 10m9.099780255s ago: executing program 4 (id=592): socket(0xf, 0x803, 0x0) r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004550", 0x2e}, {&(0x7f0000000a40)}], 0x2}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x6, 0x87dc, {0xffffffffffffffff}, {0xee01}, 0x3, 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000240)={0x8, 0x10000, [{0x40, 0x0, 0x8}, {0x1ff, 0x0, 0x4}, {0xd4, 0x0, 0xffff}, {0x4f, 0x0, 0x9}, {0x0, 0x0, 0x9}, {0x400000, 0x0, 0x9}, {0xfff, 0x0, 0x80000001}, {0x8000, 0x0, 0x7}, {0x8000, 0x0, 0x7fffffffffffffff}, {0x7, 0x0, 0x400}, {0x9, 0x0, 0x300}, {0x1000, 0x0, 0x3}, {0x0, 0x0, 0xfffffffffffffc00}, {0x6, 0x0, 0x4aa}, {0x3, 0x0, 0x1c000000000000}, {0x153, 0x0, 0x1}]}) ioprio_set$pid(0x3, r2, 0x2004) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 10m7.575195073s ago: executing program 4 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 10m5.780457639s ago: executing program 4 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 10m4.844335269s ago: executing program 4 (id=600): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 10m4.146596208s ago: executing program 4 (id=602): io_uring_setup(0x2753, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0x0, 0x2c3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0xfd, 0x2, 0x8, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x20000000, 0x4}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x79, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x57, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "8cb602aaf7d0a7765eb8653926ff17ee9e35b31348e200ddde58e9575e4e61080000000000fa00b2923f7ae8f79cef372242982b13aa36123e60cdccec4ab853bb2f9087b13a5d245c8498"}}}}}}, 0x0) 10m1.512412343s ago: executing program 4 (id=609): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r4 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="a9050000000074640001", 0xa}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9c", 0xf}], 0x2}}, {{&(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r5], 0xc4}}], 0x2, 0x2404c0e4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x8000004}, {0xffffffff}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, 0xc}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31"], 0x60}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x3b, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 9m46.304578318s ago: executing program 32 (id=609): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) r4 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80}) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="a9050000000074640001", 0xa}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9c", 0xf}], 0x2}}, {{&(0x7f0000000340)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r5], 0xc4}}], 0x2, 0x2404c0e4) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0x0, 0x0, 0x0, {0x4, 0x8000004}, {0xffffffff}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x2, 0xc}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31"], 0x60}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x3b, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 16.255550606s ago: executing program 3 (id=1935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x59f, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pread64(r3, &(0x7f0000001500)=""/220, 0xdc, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000340)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r8 = syz_open_pts(r3, 0x0) r9 = dup3(r8, r3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f00000001c0)={"9a5ecda6cc353a00887078582983fd07", 0x0, 0x0, {0x7, 0xe4}, {0xd9da, 0x1}, 0x0, [0x7, 0x8000, 0x100000001, 0x400, 0x7, 0x1, 0x8, 0x8, 0xf091, 0x5, 0x5, 0x4, 0x1, 0x7, 0x2, 0x1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000380)={{r3}, r10, 0x4, @unused=[0x6, 0x5398f2cb, 0xffffffffffffffff, 0x4], @subvolid=0x7}) ioctl$TIOCL_GETKMSGREDIRECT(r9, 0x541c, &(0x7f0000000180)) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f00000002c0)=@x86={0x9, 0x8, 0x8, 0x0, 0x7, 0xfe, 0x40, 0x1, 0x1, 0x6, 0x9, 0xc7, 0x0, 0xff9, 0x9, 0x9, 0x9, 0x58, 0x5, '\x00', 0x4, 0x5}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="13019757c0200000140003006e657464657673696d3000000000000034001680300001802c000c801400010000000080e805000004000000810000001400010000100000280d0000fbffffff88a80000"], 0x68}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r8) 12.835084554s ago: executing program 1 (id=1943): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000618110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x2, 0x56d, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xff, 0x6, 0x5, 0x5, 0x11, "35636c31d2213346"}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, [0x0, 0x91]}}) 12.293841834s ago: executing program 3 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20fb05000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x7f, 0x5, 0x7, 0x4, 0x28, "03f37fe99f4da288"}) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42080, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect(0xf400, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x10012, 0x0) r7 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0xeace, 0x0, 0xffffffff, 0x40001c8}, &(0x7f0000000240), &(0x7f0000001180)) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x1}, 0x4) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) 11.576937694s ago: executing program 0 (id=1947): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xe0000003}) 11.341931605s ago: executing program 2 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) capset(0x0, &(0x7f0000000040)) 11.316399485s ago: executing program 1 (id=1950): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x800000, &(0x7f0000002a00)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0/file0'}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 9.605756735s ago: executing program 2 (id=1951): io_uring_setup(0x1178, &(0x7f0000000100)={0x0, 0x49cb, 0x20000, 0x1, 0x136}) r0 = syz_clone(0x8008000, &(0x7f00000002c0)="322378832bdd126cc455c66712d0c0e2ac004d17c7", 0x15, &(0x7f0000000300), &(0x7f0000000340), 0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x2, 0x10000000000008}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2, 0x0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) 9.225304645s ago: executing program 0 (id=1952): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xfffffeff}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8.278644265s ago: executing program 5 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x1c0, 0x60004, 0x43f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port0\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x10000, 0x4, 0x200000, 0x0, 0x4875c99660ff2b28}) 7.036227129s ago: executing program 5 (id=1955): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 6.904816s ago: executing program 0 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xffffffffffffffa0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.628141979s ago: executing program 5 (id=1957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x800000, &(0x7f0000002a00)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0/file0'}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 6.509742975s ago: executing program 2 (id=1958): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES64=r2, @ANYRESOCT], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_emit_ethernet(0x133, &(0x7f00000012c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa81003000884800000d00000014ff0000000000000000010290787f000001ac1414bb00071b6fac14143700000000ac1e01017f00000164010100ac141418441016a846a88709ad37295a0759cd131f009078e00000023f0a05e7a4478b444ab66cb5e8b4c505c4b7d9057dd4cf3cbf8a2e59793c768f9340a4a603eebee2b86db0f22285952440cf6a68f14088e94e95d9490f1587bf552328944d66aea745892ba8eeec29fa6eaca589a1e2f53ae51d8b73826977b3e86b0f810100000000000000c7ab16e4abb5e1e004c9aeef24045c7011a723f3f8571ecc825b4b28bad5a95be570622f90ce906199de25b9894f782f48b3c39973526769ecbfabb106d5644f00607b2a35b49affe232a473d1b855100df0e827984c"], &(0x7f0000001400)={0x1, 0x1, [0x9ae, 0xb17, 0xfa4, 0xa79]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005340)={0xffffffffffffffff, 0xe0, &(0x7f0000005240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005180), 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.779959239s ago: executing program 1 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) capset(0x0, &(0x7f0000000040)) 4.681104014s ago: executing program 3 (id=1963): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0xe0000003}) 4.549192757s ago: executing program 5 (id=1964): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x7, 0x9, 0x0, 0x1, [@generic="a1fcd7"]}]}, 0x20}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@main=@item_012={0x1, 0x0, 0xb, 'v'}, @global=@item_4={0x3, 0x1, 0x8, "6ea61365"}, @global=@item_4={0x3, 0x1, 0x8, "a8da250f"}, @global=@item_4={0x3, 0x1, 0x8}, @local=@item_012={0x1, 0x2, 0x3, "ca"}, @main=@item_4={0x3, 0x0, 0xb, "dac6abd6"}]}}, 0x0}, 0x0) 4.281696753s ago: executing program 2 (id=1965): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r5, &(0x7f0000003180)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 3.477410955s ago: executing program 0 (id=1966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xfffffeff}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.477073424s ago: executing program 3 (id=1967): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setresuid(0xee01, 0xee01, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe}, 0x9, 0x5, 0x2, 0x1, 0x0, 0x0, 0x3ff}) shmctl$SHM_UNLOCK(r1, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r4, &(0x7f00000007c0)={&(0x7f0000000100), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000180)=""/173, 0xad}, {&(0x7f0000000240)=""/144, 0x90}, {0x0}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/187, 0xbb}], 0x6, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x100) r5 = fanotify_init(0x8, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) fanotify_mark(r7, 0x21, 0x8, r7, 0x0) fanotify_mark(r5, 0x22, 0x800101b, r7, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4(r4, &(0x7f0000000500)=@nfc, &(0x7f0000000580)=0x80, 0xc1000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x100000000000000) 3.344307719s ago: executing program 1 (id=1968): io_uring_setup(0x1178, &(0x7f0000000100)={0x0, 0x49cb, 0x20000, 0x1, 0x136}) r0 = syz_clone(0x8008000, &(0x7f00000002c0)="322378832bdd126cc455c66712d0c0e2ac004d17c7", 0x15, &(0x7f0000000300), &(0x7f0000000340), 0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x2, 0x10000000000008}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2, 0x0, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.001713273s ago: executing program 0 (id=1969): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x7, 0x9, 0x0, 0x1, [@generic="a1fcd7"]}]}, 0x20}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@main=@item_012={0x1, 0x0, 0xb, 'v'}, @global=@item_4={0x3, 0x1, 0x8, "6ea61365"}, @global=@item_4={0x3, 0x1, 0x8, "a8da250f"}, @global=@item_4={0x3, 0x1, 0x8}, @local=@item_012={0x1, 0x2, 0x3, "ca"}, @main=@item_4={0x3, 0x0, 0xb, "dac6abd6"}]}}, 0x0}, 0x0) 1.389786894s ago: executing program 2 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0xffffffffffffffa0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.246877445s ago: executing program 3 (id=1971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x41, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x40) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget$private(0x0, 0x1c0) 1.113944621s ago: executing program 2 (id=1972): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f060008"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 164.351504ms ago: executing program 3 (id=1973): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fcntl$lock(r1, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x2bc, 0x7fffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000024000780080002"], 0x38}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r4, 0x8, &(0x7f0000000180)=0x20000000000000a) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000001c0)='P') r7 = timerfd_create(0x5, 0x80800) timerfd_gettime(r7, &(0x7f0000000040)) 132.381557ms ago: executing program 1 (id=1974): r0 = socket$inet(0x2, 0x80000, 0x4) r1 = socket(0x18, 0x40806, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102400, 0x19000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) brk(0x400000ffc000) getrandom(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x15c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f000001df80)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000480)="49e81c02c1bc1e881eb5136ec8f0b5c64ffd32b823c9a13e248d87f78573d9babdf11a47268ff035bc1294b0d80cad007de7b8b7f2cba7b039995591124a275cc7f10b8b500085cf0721239ca2decd2c01fa886fd8a8148e4ebcc852cd6896ef2fd634aee58c69a00b9c6a660c809c6f4f65dee5df3c08eaa23a4aacddfb26089fc03a58118743017a71e6e80d64e113891f708f2ca5cfea965b3cd7178801549b533ca7ed3611c1a350260123cb987234e65d51abf5435763a133c25a1af4b6470ba94400a9f7447ad88b0cb1e78cf30a9ecc9f7babfaaa46c84133c987e6869a3e67dd2749d149c542e5fb07ae1d404050efe0b7470a831588a2c9", 0xfc}], 0x1, &(0x7f0000019a80)=[@rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x110, 0x8080}}, {{&(0x7f0000019bc0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000019fc0)=[{&(0x7f0000019c40)="b15856b085c2b39381ba7da952739a2fa365c1ab93425c5e4c3aea2ab691ec676c088992104faa73c3b62e6d8fcb9e3034c41dbeb71e62a2d8449593ec84f3355902801e7c78dff78431a211c51340c092037246d3a20e9296e66b55955fcd43f441b7872e71087fd360e59cf0ddc2c316891f5fd4ab045acc926d24b6e1654afb38f2e848058c28a9e429ed5a2e63bc8cc6036a610eae2edb79116dd0e2540bbb117cb9f5ffa56a330fe68212", 0xad}, {&(0x7f0000019d00)="c430decc341becf3d707c5321cadfedc669f678cd4554ec262d19398e30bd45cf8314ed755fc982b1cf3d5a1e5d392e3a549b2eb00f8388af2963666a374dd16820112cf008ad45dcba72a0d4db39ee8a692dfdc15ef", 0x56}, {&(0x7f0000019d80)="403b6ff8034afaf77e7902c02125fe597d994648d1f67c62a1ed7199c1821f999ff353ba5d37de5c5e8f827a0ef5c30c89d15303f90b1055b613ed622675cf5d45e4f780e9873fc0a97782e2c182c8cb9310f049a49d6fe22bc973f480ce8090e3abd2970416f1822d78230fb149080a7dc86a6f12d693d4010da82300e8f18f25cc91e6b594f26a434c28f4b531f4cb6203d6816ffd3a9ad3b9077a4221d83db1bfcd2c27693704a282f98f8ba6b3086c4b6d6aa9953325eefd96fb80ec22206c240a46edad900009fdbc7cfa64f1787ef62af51404f980", 0xd8}, {&(0x7f0000019e80)="ac1bdb2db8874970cd41fd694ebfc938f09cf730c05cdb088d992a26", 0x1c}, {&(0x7f0000019ec0)="a0e0c7b055ef5c0fc26014038e35d3479f55", 0x12}, {&(0x7f0000019f00)="1029639ea10a8c8835500fa8f3d132be5e0a15f17bea01dff9f340992797245ecc807907d324a062c00399ae31882bf403cf20b81f590ada01bc265588adc72d320dffa24d", 0x45}, {&(0x7f0000019f80)="97165afc4496540383493d6364e4d441d4a4d65cb550df1bba7b0d6164846b82f90bbf8872ba250cbe39eb58360e420a58f2bfc5c785a3c136", 0x39}], 0x7, &(0x7f000001a0c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x20, 0x1, 0x1, [r0, r6, 0xffffffffffffffff, r8]}}, @cred={{0x1c}}], 0x98, 0x20000040}}, {{0x0, 0x0, &(0x7f000001b300)=[{&(0x7f000001a180)="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", 0x1000}, {&(0x7f000001b180)="aa1a1dbf8b3971bdce57da5fb5d43b968bb291fb59e03ecac10909d74dd2f06b0931efd5b48b2760defa", 0x2a}, {&(0x7f000001b1c0)="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", 0xff}, {&(0x7f000001b2c0)="823acf27972540f631de7255e0a995b9b5d775d8db2216125afab507816774a5dc1433eaee4fa93cd89e1749cc19c8d9a2b180", 0x33}], 0x4, &(0x7f000001b4c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r0, r8, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r8, 0xffffffffffffffff, r8, r6, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x18, 0x1, 0x1, [r3, r8]}}], 0x150, 0x20000000}}, {{&(0x7f000001b640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001b980)=[{&(0x7f000001b6c0)="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", 0xff}, {&(0x7f000001b7c0)="b99c972dbecc37711d29c9e4d51d43a75c97ed53bd422da7d258c3e3acdd8a8536c8f62b8a97cf423581f9f8cb7612a98b7ea65e3b78f2e5eb16e8b674884a442e20a91612ecf260dc4c5fc39449da00a76da82ef3c4d0ad2981878bf9f888bab33eacc817ffb54c5b6269c7c4d72fd8428ba79c4a2aef50e38043e90527c1ab88b2e644cdcd63efe1661f4d850bf979fdcd808738742e18d8536d001402739e14", 0xa1}, {&(0x7f000001b880)="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", 0xfa}], 0x3, 0x0, 0x0, 0x44890}}, {{0x0, 0x0, &(0x7f000001bec0)=[{&(0x7f000001b9c0)="0e0ca91f4eee7932ac4352ba3036ce68025bfe9e280de8833264ada58535e76a96ffea5719391bacd09ba8d3d16cb97d115bb7b01efc0d4ebe19395f658312199271eb3674409f01222d328f12a86119fe596714ffccb241a9fc31326e783cc15bc09a4e3f48c4759668b8655a6e56fec99f4a0c69789d03fa201438f07f4735315aa7447d3ee0d111a15053cc4b43ddbac3f2fa145fb7d4f7679958f547", 0x9e}, {&(0x7f000001ba80)="512bd6aad9e8b4da3cc2e4374fd579061f1d6a3a0e4ed916f220ec4b058339113d7e69b63316219ca2b79a6ed473764cdade75671aa0a8fa66a39e44b2c3df09087bdcaaa7feefdeb2ddbeab8141e1e9c513393fb0f71ef12791549c25e4ac9d9aca74e8a866e6fc26e523faee14cacee64f35c6ea39a422fc26d2fe1a3cf62aaee3b1846ddbb5e7214613c4d3baf3640ffcb8d8a17290dbe874fb41d281bbf1b06f3aa719e6327f473977d7dfae", 0xae}, {&(0x7f000001bb40)="9f8609b273274b52c4758e8b13e05fe9620c3f2175ea8a5fb95c65bc1f624e1b3bd3c14b64019bcf3c0336e5575e093798eb990ba3d69ec5e5d03578e035ac47c73f7b67ee2ecdc3122b982e7fa84507159f12eee6448c6cadc54ec4b67ebf84887b5b6b34ce288a2d8c12c20094eb5ca91ea30658c4d1088e7a4885c75001bfd8344a8f47a2e96779989df7", 0x8c}, {&(0x7f000001bc00)="63af66dc9589481e9a9b35ff16967351421c2706924ac9939a2047be0744b9a1bd12cecad798436c85afb32bf8ac9bf33e5ad2ff7175c669149bc0cbfa28461ec5a80a9af6f2ba5daa58222155d9ff43e6af749c87592cb6596d04c05ce37f5f30a67ebc32c2ebf8aefd0ee5f5e761d227eb50898f60c0bc40d860c7cb7dbd", 0x7f}, {&(0x7f000001bc80)="ed7483e41f6b9d0df5ab5cf4163b5d888b1928a4a74f37053f924c27b5613973540dddf8349d44a30e70f06368b9c1e8b7e7a75961f0d8244a54489273a7977e3b801a68105bff5324d3fa487e02ad1c146bc52f8f41bd9f1c3d8b86123e59d2c7c41fe1ca36e0f087fa69c1c93336691297400953e5e6417ff990baf8aba90355722b61584339ba46e4e0d5120f725dc4c6936a81b0b7f3907dc21c44c57d19c701ef462506557f579794", 0xab}, {&(0x7f000001bd40)="be284ddc18b1ae368d71fbb8af31bdd871a710051692126921ae09943f717520fc3a0f253b9fed2100489cd5e535e208bfc25a1c9a7638de93181985023dcd457269e62eb450b31289029934c9a185fb9c9bd3f8ef765ce6a263d24edc964ca38c0072d8ad27061c91700b0fe7531ec41f0f0df8f4dd8bc9954bc9134d3f8cc55df14bf67f6dd31d123fe4e0f1ab551829fb90d1ced9d8a9294ffc290379b200461e87edf342b4632075e1b0e7dba86764b95c35e1afb9effb1a04d95dedd52d792d941228217d9a73e4266d52c7ca01cc21031e3a17a819", 0xd8}, {&(0x7f000001be40)="f7dac6674072e87fbd60592e1c5665537563891b1a241170b3acd7f6ed5e7d42553441dbc84df8743235bd6fb033e1921a97296ca781ddcb5335dd83b7c507ba807f00327db0a6f2a04cb87b79e3b94c01ec8af0d9d06316a5ae84bd87bc3648b36b59872525e7c8ed676409d3ffdbd720cabbdf8a5841", 0x77}], 0x7, &(0x7f000001bf40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}], 0xe0, 0x10}}, {{&(0x7f000001c040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001d280)=[{&(0x7f000001c0c0)="60dda3051ca46e46aa5b127194cbbe89bce25c27d8bc0de54ce9961d5295c695c0b6896bf8975ef7a94081852f2b1025845f7507a05576685e938f89096c6bf4444bfa61b5ee4ef5fa237d535bdc8ace889a8b406720b721c5ea6ab3177e2d80202c8fbd9511bb683c46b3c78f928ffd68eea73e5ffb16bfbcd03f405083b6757e7509284f462422f361fcaafbeca9cbf2e66a3faa4571fbea05b8e7ba38d00b448232e871e4d6ebcac26f66b43a5ca419a16edd315898c78de5d85831ebc076e30beabc7f55f7c7f0698cc17e7dccbdafa3d9", 0xd3}, {&(0x7f000001c1c0)="22e8cdb34747a8b68d8446a4ef98f1458ff99e0159f4840689c64827ff3e2e50c74ea7d4aacdd1197c30642008aafcfe47c9abbd6bd1d003c5388c64b6cf00eb383730ac64bb94dbe6aab038482202c06402cfdc6ec0dcd972446c5468fb8352b92558f2b567a70c02da8f22eaeee041117ec1983835f0b59cd102e6fe49f05fee105750c3b55a2553b29a059a74b3", 0x8f}, {&(0x7f000001c280)="6a20e84ece722240a2a67360c490d7f7d97ecdedcc8e18dad36eaffd1947588d003f7e7364e2fe7c48bd11d6f3e8844c2736295100bf7f470eb17ec1bdddfae6e7b9d4067940d0986d6699dd6ed3f0c2e3b088e9c2311172d093f179a71a90a9b7ed467e19ac7f01dabdce16bef98ae7978776028eef98ce1e2a9de222277239338d2d811df06c00844c3139f983fe4acb90646231955af8306d56d3e006f760aafffb9ed632022ea6fb3d25bf2adbf5ef735416fda800403c9700b8ca4813193d128858c799a4b0e7c6517ee1b53ccb253a121f9a54476e67ffecd44a6f568540aca66fbb1058eb07e763704093ce634da22cfefa4789fcafa6eb1aee5ea5986c69c2578118af1095f62d7330c057963b013e3ae39407e2f62b116bf8228881385a04fc19dcb49c3a49754f528fb0b72190c887dfd0d742c8431fc7c441dd7f6fa589852e8b8e07e299f2e5e175febfd0516dec84a6c0f0c4fd242eef293b2d089677187c522e796078d15174bdda4c79f72d9701cf22fe77e4e51d5ce31b7d48933172ee37ba8ab4886a482794225c3eeb74e7baedfbb083b634a21dcf6fc90d3bf7199c8e3973999e4b872b79cd854683582c8996a8e53a91b7bd7bb6f1cc5e7c34d293ca66afe316cc4647ed31e1cc8559310e551eea54d75e42c370afdbcd7f2f9726241a8f96673d1b2511befd5aea7978883741bc0c10915f6e885c7920b873fd01bf7f15616675ec052696d645d024573367c35f48dd18303394c32673aac21a1355d874375e2795bdb147e173eec2ab081bb643bf24375691640e714f59c5b83d7ba1d928c68d0f26b25235d0325ae3aa823e280d7d0ea5572bc769e0b9a03b5ea7e66297375de8bfc62115abd58443a7942d02e81076eb98cd4bda8bf76b9279004c6bbc88bad906e12f43b472e532316d7fc93c334a2725217b0a1613f2ee278b8668161c94a3750e9152799524b94aae000a068b17f2a1bc2284728d0171d9099883a308a776b7059d8954d57ec2c22c9984da81f8ef6dba26646efa0677217b55a237851057c6c2bb7a6b32e1612c801c4afdec3b1d211c7269fd568950aa8a66e7b84a35518a4a7d4cec74cf70a60100bcad621e40341940d4e8cd29ecf1d717ab26995bfae66f60e86185c95d6e5bc44073233372051337888d1a5d7ebc6007be2b229478e95fc75b137c58bf00c678517f13e17b6ecc4bbe9f938adbfc5992d31f3af03f66aec2036b1ef383d06689dd8ea9a3550b4747596fb0d29d205b31674c5d5fc87b48846c6a547f4a62514215aedb4f7f1be4609ee83df713bec07462622f182b9c24e04c5c83ff7794e87c4a663b4a83cdb13b9ae9f0aea00b79276083d8dc8cb07c099c7ca0240341fc08106789260459d383e61c86476cfa7db64d0d44c91f8390176450e2e1c1651c2bd9596b282e27358bc8b5624b7eef65f3b5e949736796eea2b9ec558313e75370a1797007b0087c17dbc82147623b0cb1e4d27aa8662d66fa0d5a42ff38410fc26b8285dc1f6b954a2e68911cf08189ea5ba7b03e5883c31192730792e6b6fd1d14cebd81030046d9e8148779597f80dcd9b7f5ffe7a205a2908fc4eabd42c0b9dab0386a24d42ad435ad2d3807d9a9dac03cb53e61065328ba47325bdab9d79ff08b84b4f12d89bad4c6300dbcc6042a6bdb3ceb75316d1931d04221a196fce982df71d56f57648ec005fcbf5e1e7b4a1382c323094aeec6e7706d345534397c0f70f9c47559fb569593e7329e048d68c49822622ce58816375802b879da7a46f381576bee41fe9a2d7742d1094ceb8542f6ee0f9e3cb887045ed91c962cef70fa40003b1523b9731446eec75d1c7fd613a920e6beb5a5056bb146e4098fd4918b65ca69152054ca680760ba20b396b1f9f193dca2e2260fb66049f248709dd4e848e3ce5f75f62c0fe8fc573d711de5d65e030e0b4d7d92c65de3f71f5a7f3d8a3bd6363400e2da8a5eb8b0dc955a6be0740c325093341335ba778aa7629de94ee36f2743743edbb6d4a5b0183bc195ca1220fc9e51f4e5ce511eef0e833f55aa7ebdb75a417d2bb8c45a1e1dfb28cf09bcd0b03c1d1967f9dff87f90c4a858d9bc26192e5191473697420b55b165a0c96dd0c23fbdde68c1e9133294ef46a216a0e7a17d104627fe745016763a4fdca92299830813224af6b177b965f1c836eb7d4072dc4f785271f50c7a28105450f3d31d8dec912c55f0b56af20859248f3e9dcf244091398c22f1f9b3de8645229fcf2eeaeda538b81b4be9221f3ddf700b6519c103d86defc419abc8e1ae6453bd31bb4a654d17af19656b0f3e90e1be5e4666b4168764595ae7a446332c0c630f04e43c639bfbf034cc5ef0f1eb57c5ee65512c9de5de637bc6d7670c314cf991ff22c8ab0786d04ebe668b671558d563879423fde52addfa55ca776f8e5f190da07ea4595fe40eba7caf1861deb503804127f48466f24e152618ff58399f68948ffb8720817a4b8f69f31cc52c51562c4d22c2efc978b32ef1f6d0f99819b17e528c5dd3eb2977f84196f2ac7323d1bc1af709da6da1e350f371d5d8e03cdcb9afa14abcca1660c3de2a62af618d64c1ed9792e7e7e8c2e9d7e709f696c1e92860fffc0ac8a870e424aa738d59cd38a3f63b1d2bec4065305d1cf36e0bc32166f974b7febc60724d9e3542f4d11e5e94be6cd16d1ec12cf6082cc92bbe67f5677e2c2569bc8dd00ba1cbaed507bd97c9da6ef95db86664f795877fa3879d51b68142f40ec4f595c3c5b920d8a906354174cd813da23496b84a15a4fc84fa2e3467969f707b77f13ade4dead2efcbe954e3d6b3a53c3a6e6d732c8badbb4995778d747888b97a27098cb1bf61f623ed4c04b73efc5e5d3020341a0b5786c21c684c4ac013e4ae46044de1045438eec4303b0ae69f5117e13c5360b3edd4422c8e8ccb3427f3d49ac24872019980391698dfc8d09c4d114df805ea7f14150156d291afd650c64fa9abfd0a7cf83d39d88910027d0c50f0a7e5343a21addd35765b3d7a44304e373717a71782e53742ae9fa76b5007760fd1685a195e5248211232b14c59639a74b1e161fa3522504ea59237a36cb7a248afc10454aa351b295c66f8c45b9f957181afe1b7a6bc82f8a8b6d04345cc7cb3baae6f8d9ace3cfdc366fcbe32cf55524efb24595434de4259759a1bad27d5d4d2d8df258017de53dbee391f3a4ea02c6e3bcb631d77058138fac9b9125e671cf6eee0f4bef1aeefb4ed6ecc6246822eabee87bf8121b05b26a4fc7047a53ec1a99bcfc45093b451fb64afe06446835fd25eeb6bc192a3d7c36eb5814f9a1942eac1da48cb3a39e8cea59466e8521699a1b6eb22afac666b2da3f4539e9fc8797e9ba2cd031512eeb72b166dd56935c8e8e87b27e694d1aef291534654b1d131872a887def632214fb5d41f1281b1ed7d2af92bdc8c0dfade2ffc94433404b5c5d89c96af1cbe43a76069233ad355f132dd36c77e2030254cd53a215f048dffba1deccd426b17fa45ea22b8741022cee0158e4b2826ced9b9182d3ce2c519182485628ed85139cd3aad8a1bf8569b5a5e073a48dfb88d5761cb55c327df2b4052403c24a07a5145637ba3cbdc8d653fce0bba700cc68f7e43029baf009057b18e6f5042bbc061cdf8f8d3a9ce1c21d2ffb88e9ba973f5f9da6de3b6385a080f2cd458a76197cdc384f50e22e0a0915414b76739aaac15d2735d25cd26247af47b9d5d0f77a356e82d37aedb567824e0e7ecb7ca7223c03d61ff335fc0d278017043b492f15bbd7fd3d7f5c876e48866cf3d09d8a166f9d38acdb26118e762c6bcfd89911d2ddc1367f74afa094f990f5085a9346622e04bdc386080f40fe2506f8620e8d25bf3978b00acde7463e7f161249f64eb95ef32e44050e7b8fb711fe575c724204ca8d00cd42ce2c32c7c54263a9505d10d5614265e27b0e7628b26467e5c84ec317b231dd147ab8d1126336b405bb69078a9dbd0d08fd828a448a0daa504942cf0865bb4a2de8edc05f57c9140b4f59609a4875542aa9e8c4b697f008daad69d276933b8cdffe75b126ccef2e98a8a8ed1efd1433180af48c71260b302b6b318b59b01214a49fbf19e5755a36409552192b919427d0ea355ba644f8aa4e90cd3bd68dff3bced4994390865276f0a70ac1b8929a6cf300ab22878a702dcd1868c450586bdd40410f63a40fce22bbfa48bd3848efd974c84d405c730f90ab28975c751dbce9d9f4de7875c70eef7389f421f66e2b0903512298186f06409bc6e5b1db72ef8c85f73696ad8ee4ade91a3a02e4786f009786026c7e2323cb2d144228f50fd848f8162943d53bdf38d35dab52c56b7f857f2a6a00b10d051581d9e11b872efc60388f3e85b6338c668e02cbafbda4f63e1dfb143f51e19f1f3cf8d46cfc6df34ef6e92e51795c7764ac68a8f1a7ecaff1e8127b67662bf1f2f1e3b04d027535ce70d5d2cbe06d07c6d82c3799823de13cce95a8c494fe5c503b6c5158350a2121616ccbf778d53f809309270d9a7334dd7631593ac38353970166c0879df1e2ea4e210ab537c9d5e7a068c22922778d3e3a13a45613ecc9a3f2b2747e2bbb1c6ac7292fd08f6bf1da0d524ad3604c3cb01ed60105f98dcc4a38a39eb0f8f3abaa658bbf6a1f8463d6dd25dd554e131fcab39685acc3185ebc47faec18c41bf7e4af371bfbfd732c7e5f7477702db2d35f5107562869dc34414660826a8b3e1b8a536670a980c7204f0bcf933f0fb672016eb41ff696b48ae8d9d106963cbd71390d492edc05944549709908aace3ed3d5ca045f5703dec35d2cfb2bc0a4d9c9c46ba1e38dcb9de0f6ad5beb3aebbf823dcbf25f1755ee18570f1bfb40fe3e870e25bc55081b5e12679f94cceca1ab5f4bcb4a31828f69de1a2dfddb9ea0d60013dbebe38007b2b2ec40a954df84b124faf443ae7bdb42f90152d2f31cda358b32ddf92d8acc6e220a3945cb9f10c0e2ec54fc85d5148716406bda8d20615f870a84b819928c4b04bcf14264564293609eab11ad47f590b231ef46ea2dadbaf1600cc2fa2abc913a19b690b82561b4f46bacfd78776e0d04d7a7f6d0ec8dea9bad533080ccf078cba8ca3b8278d9b7481fdb75ff88198708bb16f0816eb1fe42f7f9a54acc847b62740213d3eb0eacbe09c00fb6acff2960725db2c2fdb9a687cbebf4483592e31696bad74ef12b235e49eed6a2959bd1b261d08f767269e720bbcd0a77164be255a659dacab9e4f47ca40a3afba7e9bb7d4f607301c95a94f95534f99caade07cd8b83d6ef828a4fc7e92657534aacf8a5a4d0f0f75755ba8095d0c70e8ee9e209d12d8a6b7659bc715ac786bec28828be5d768b9d01aa31e2445920f4fdab5407aa4993e72894953cfe3cdef3dd16e0e20523b2ca0247247eafc0b5c7e410cb775399b2700ca53bf92b74b1180d1685352dcb2b0fe4e07d1ebc95dbcd07e360e8112af2c93038ca9aba835436795abcc2044b69eb7b6c8462aeaa9be01e0c7c5ee6e1f445d082d0c9f58e7e520ee5e237aa6fef2c980605906d41db0ab4202ca7bfe7d423f0b08d05d8d3421cb211c6245df73c42da2f47aeb1b05f7f225cbb20bd3163cf8628dbe98e6fed000ecbd5ca2e7760700677562e89ee3816013c2e05ede9691dd0072d69c35a94519f88a164fa86af96935b5414328a0ae41fe78dee53ffbb2be216d8f84c8730de647d013a18ec29ca6ab4e1ca96161d8ed9209b905ef242773fac097dad8e8aa28367896f35a7", 0x1000}], 0x3, &(0x7f000001d2c0), 0x0, 0x90}}, {{&(0x7f000001d300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f000001d840)=[{&(0x7f000001d380)="ca258dce4b41306dd625a13be57b388f6e7397ca1fa4c36973b91ab1e28ef9a053ecb7132b8fbfd41e739de7c2c45e79b447b0bf2e0ecc230dc058e3d6aebfad4d2ccb22f38b7430d6b888a90ea01ffbee3a27148d4cfb713c6ab95379c124044fb5b7c0b0da4c3b5909540e0d2bdd6eef9979b51b9178678a27afe798a9657736adb3d180856bd3e234bab9858a2e49cd424b4b7eb3355fee98a4e5162a9ca162a0ab66d7778ef955b7a3c9e3839f381ed2d4a0c2b7ba9e03092c9f80f099eebee2762e94ca3793c656ff47", 0xcc}, {&(0x7f000001d480)="a893f3b6e3ae5f3186d5d112c577959eeaf1d1f40bd1d3a65fb2a72a34808a3414f20c97a7bcd7c57ecf6f3e6a0bf2366d9e14a5cfe6093401ef3a01fd1a8530dbfa5490032807b38a345de364c40d3a9606fa119875508607c393ae185d3796a3eae6d3e0a7c0ccbe11fc667bfda3a7639c6611b207538c7be3c3873df3a1261247009cd8c72e84a0a487d096bf94d54dc719490cf50a6bb8071838c136d9a9362e417fe8f97a7407bfae3fcd68c9eee1ba5885f421a0f426112508cef415084b592af38354514e61616186c99e68c1d9b8", 0xd2}, {&(0x7f000001d580)="528444a2a1c9a3580542d25b8837c39c17657d67cc97d456dbaaa7fd305b14afd00a656c4e62894ffb3b11562021b2fc5770b3c603b3560e13ff110120f363bd5a058dba740ee71301a59a8bd35aefc413ff3d69ba46f8cabd22ee2f9ba1a32a0311ecf808d9545d5198e1896d593f88e6be0280892019667a1cbf48c8241efbb809d24aa152ebbd845f9e9889487150457ecd34964d35317fe6a6cb4b0f185bde3c6ae5a8305b610bc670cb1114f860667473ff6e52f42a64fd6ef037d4cee719f79c5ac546c3b511f82344c05fe468b1b874de7222ca1b4f307afc22e654aa78b94f", 0xe3}, {&(0x7f000001d680)="950292c642a2286a18b303eec401e66a08de7db3c35578244de60ec8822519ea0a9469be64b013e0d1fb304ef6800c5b1c1c192946211140f8747664a0d67021a6e181b8199796aa1030404871ef94fe4922f961b34804d3f33382c2", 0x5c}, {&(0x7f000001d700)="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", 0xfa}, {&(0x7f000001d800)="6f83159ccd3e3701ac0c73f8574884d123a4f780870b435a1a029cb24f9267b5310645f671f83f10f9cf35ef1bd82cb909c52af6", 0x34}], 0x6, &(0x7f000001d900)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x20004001}}, {{0x0, 0x0, &(0x7f000001dac0)=[{&(0x7f000001d9c0)="a2d66798c531d96753c5b2df1079d68adffcbd02d2121e7e27677e372bf58199815bb267cc1e039d413d6991365206e3e4e391589549aa6b5139ac5646bd8cbee7d36e", 0x43}, {&(0x7f000001da40)="5ccf79ab503870061c7393e6c8989dfd6b7abe5ae3b3fc75b91fd13290cc2d95873b3ea8bd80c51ce9232646ab4e77ca6c3fda1f4288ea7dacf1678832c0ffdb", 0x40}, {&(0x7f000001da80)="ab5a9c5be5ce75f99b90d08e03e4d52243f2d555fec81c01e6", 0x19}], 0x3, &(0x7f000001db80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x8090}}, {{0x0, 0x0, &(0x7f000001dcc0)=[{&(0x7f000001dc00)="2a7db8213b8a2f87db76fcfe1692eaa57f8065a39fb0c6901255d807c26f6715f50a21a946c3ef175cc287ae0e2b853d524cd9499c70041edaac7e017065cbf959f223284b36565a2291bca8f8da6a85195c822b8393bfefe32b4a3b9bb15f85571fffad663a621a412a82478d3ff567952697d18d5de8daf7965adf4ca0fcb196021312d02023efa54e61471699b0b504b9c16eba156224847341f10555", 0x9e}], 0x1, &(0x7f000001de80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x40000}}], 0x9, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x400000000000235, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x6) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) unshare(0x4000280) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f00000000c0)=0x1001, 0x4) 0s ago: executing program 5 (id=1975): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x7, 0x9, 0x0, 0x1, [@generic="a1fcd7"]}]}, 0x20}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x18, {[@main=@item_012={0x1, 0x0, 0xb, 'v'}, @global=@item_4={0x3, 0x1, 0x8, "6ea61365"}, @global=@item_4={0x3, 0x1, 0x8, "a8da250f"}, @global=@item_4={0x3, 0x1, 0x8}, @local=@item_012={0x1, 0x2, 0x3, "ca"}, @main=@item_4={0x3, 0x0, 0xb, "dac6abd6"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): suppressed [ 664.733680][ T37] audit: type=1326 audit(5291375672.916:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.741845][ T31] usb 6-1: USB disconnect, device number 12 [ 664.743721][ T37] audit: type=1326 audit(5291375672.916:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.744025][ T37] audit: type=1326 audit(5291375672.926:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.746617][ T37] audit: type=1326 audit(5291375672.936:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.746907][ T37] audit: type=1326 audit(5291375672.936:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.751024][ T37] audit: type=1326 audit(5291375672.936:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.751070][ T37] audit: type=1326 audit(5291375672.936:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.751107][ T37] audit: type=1326 audit(5291375672.936:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.753182][ T37] audit: type=1326 audit(5291375672.936:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 664.753727][ T37] audit: type=1326 audit(5291375672.936:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10722 comm="syz.1.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc18d8f749 code=0x7ffc0000 [ 665.004273][ T5807] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 665.039032][T10733] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1329'. [ 665.074469][ T5814] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 665.186270][ T5807] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 665.186304][ T5807] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 665.186322][ T5807] usb 2-1: config 220 has no interface number 2 [ 665.186408][ T5807] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 665.186433][ T5807] usb 2-1: config 220 interface 0 has no altsetting 0 [ 665.186450][ T5807] usb 2-1: config 220 interface 76 has no altsetting 0 [ 665.186465][ T5807] usb 2-1: config 220 interface 1 has no altsetting 0 [ 665.234245][ T5807] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 665.234281][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.234299][ T5807] usb 2-1: Product: syz [ 665.234312][ T5807] usb 2-1: Manufacturer: syz [ 665.234325][ T5807] usb 2-1: SerialNumber: syz [ 665.785016][ T5807] usb 2-1: selecting invalid altsetting 0 [ 665.785614][ T5807] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 665.785642][ T5807] uvcvideo 2-1:220.0: No valid video chain found. [ 665.815697][ T5807] usb 2-1: selecting invalid altsetting 0 [ 665.815735][ T5807] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 665.843900][ T5807] usb 2-1: USB disconnect, device number 27 [ 670.690015][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1338'. [ 670.737986][T10771] macsec0: entered promiscuous mode [ 670.742118][T10770] macsec0: left promiscuous mode [ 670.755528][T10779] FAULT_INJECTION: forcing a failure. [ 670.755528][T10779] name failslab, interval 1, probability 0, space 0, times 0 [ 670.755556][T10779] CPU: 0 UID: 0 PID: 10779 Comm: syz.3.1341 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 670.755577][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.755587][T10779] Call Trace: [ 670.755594][T10779] [ 670.755603][T10779] dump_stack_lvl+0x189/0x250 [ 670.755630][T10779] ? __pfx____ratelimit+0x10/0x10 [ 670.755653][T10779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.755676][T10779] ? __pfx__printk+0x10/0x10 [ 670.755711][T10779] ? __pfx___might_resched+0x10/0x10 [ 670.755730][T10779] ? fs_reclaim_acquire+0x7d/0x100 [ 670.755755][T10779] should_fail_ex+0x46c/0x600 [ 670.755782][T10779] ? __alloc_skb+0x112/0x2d0 [ 670.755799][T10779] should_failslab+0xa8/0x100 [ 670.755822][T10779] ? __alloc_skb+0x112/0x2d0 [ 670.755837][T10779] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 670.755867][T10779] __alloc_skb+0x112/0x2d0 [ 670.755890][T10779] alloc_skb_with_frags+0xca/0x890 [ 670.755910][T10779] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 670.755934][T10779] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 670.755965][T10779] sock_alloc_send_pskb+0x859/0x990 [ 670.756006][T10779] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 670.756035][T10779] ? rtlock_slowlock_locked+0xd8/0x4010 [ 670.756063][T10779] __ip6_append_data+0x2b43/0x3f30 [ 670.756107][T10779] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.756148][T10779] ? __pfx___ip6_append_data+0x10/0x10 [ 670.756165][T10779] ? __pfx_ip6_mtu+0x10/0x10 [ 670.756194][T10779] ip6_append_data+0x1c1/0x380 [ 670.756218][T10779] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 670.756241][T10779] l2tp_ip6_sendmsg+0x1286/0x17c0 [ 670.756266][T10779] ? smack_ipv6host_label+0x824/0x8e0 [ 670.756298][T10779] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 670.756316][T10779] ? smack_socket_sendmsg+0x460/0x520 [ 670.756359][T10779] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 670.756388][T10779] ? inet_sendmsg+0x2f4/0x370 [ 670.756409][T10779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.756433][T10779] __sock_sendmsg+0x19c/0x270 [ 670.756459][T10779] ____sys_sendmsg+0x508/0x820 [ 670.756488][T10779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.756518][T10779] ? import_iovec+0x74/0xa0 [ 670.756540][T10779] ___sys_sendmsg+0x21f/0x2a0 [ 670.756562][T10779] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.756620][T10779] ? __fget_files+0x2a/0x420 [ 670.756640][T10779] ? __fget_files+0x3a6/0x420 [ 670.756672][T10779] __x64_sys_sendmsg+0x1a1/0x260 [ 670.756700][T10779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.756730][T10779] ? __pfx_ksys_write+0x10/0x10 [ 670.756755][T10779] ? do_syscall_64+0xbe/0xfa0 [ 670.756781][T10779] do_syscall_64+0xfa/0xfa0 [ 670.756800][T10779] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.756825][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.756842][T10779] ? clear_bhb_loop+0x60/0xb0 [ 670.756862][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.756878][T10779] RIP: 0033:0x7f871459f749 [ 670.756893][T10779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.756908][T10779] RSP: 002b:00007f8712806038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.756927][T10779] RAX: ffffffffffffffda RBX: 00007f87147f5fa0 RCX: 00007f871459f749 [ 670.756940][T10779] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 670.756950][T10779] RBP: 00007f8712806090 R08: 0000000000000000 R09: 0000000000000000 [ 670.756961][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.756971][T10779] R13: 00007f87147f6038 R14: 00007f87147f5fa0 R15: 00007ffe35174c18 [ 670.757003][T10779] [ 673.959293][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 673.959310][ T37] audit: type=1326 audit(5291375682.146:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 673.975466][ T37] audit: type=1326 audit(5291375682.166:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 673.975959][ T37] audit: type=1326 audit(5291375682.166:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 673.976151][ T37] audit: type=1326 audit(5291375682.166:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 673.984324][ T37] audit: type=1326 audit(5291375682.176:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 673.985114][ T37] audit: type=1326 audit(5291375682.176:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 673.985250][ T37] audit: type=1326 audit(5291375682.176:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 674.935723][ T37] audit: type=1326 audit(5291375683.126:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 674.935878][ T37] audit: type=1326 audit(5291375683.126:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 674.936052][ T37] audit: type=1326 audit(5291375683.126:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10793 comm="syz.5.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c9b2af749 code=0x7ffc0000 [ 675.764155][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 675.922208][T10821] cgroup: release_agent respecified [ 676.289096][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 676.289132][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 676.289150][ T10] usb 6-1: config 220 has no interface number 2 [ 676.289228][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 676.289253][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 676.289270][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 676.289286][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 677.133199][T10826] cgroup: release_agent respecified [ 677.963806][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 677.963824][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.035460][ T10] usb 6-1: can't set config #220, error -71 [ 678.056961][ T10] usb 6-1: USB disconnect, device number 13 [ 678.201704][T10840] fuse: Unknown parameter 'grou00000000000000000000' [ 678.209612][T10840] FAULT_INJECTION: forcing a failure. [ 678.209612][T10840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.209645][T10840] CPU: 0 UID: 0 PID: 10840 Comm: syz.0.1359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 678.209665][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.209675][T10840] Call Trace: [ 678.209682][T10840] [ 678.209689][T10840] dump_stack_lvl+0x189/0x250 [ 678.209717][T10840] ? __pfx____ratelimit+0x10/0x10 [ 678.209740][T10840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 678.209762][T10840] ? __pfx__printk+0x10/0x10 [ 678.209783][T10840] ? __might_fault+0xb0/0x130 [ 678.209815][T10840] should_fail_ex+0x46c/0x600 [ 678.209842][T10840] _copy_from_user+0x2d/0xb0 [ 678.209861][T10840] ___sys_sendmsg+0x158/0x2a0 [ 678.209885][T10840] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.209941][T10840] ? __fget_files+0x2a/0x420 [ 678.209961][T10840] ? __fget_files+0x3a6/0x420 [ 678.209992][T10840] __x64_sys_sendmsg+0x1a1/0x260 [ 678.210015][T10840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 678.210044][T10840] ? __pfx_ksys_write+0x10/0x10 [ 678.210067][T10840] ? do_syscall_64+0xbe/0xfa0 [ 678.210094][T10840] do_syscall_64+0xfa/0xfa0 [ 678.210114][T10840] ? lockdep_hardirqs_on+0x9c/0x150 [ 678.210134][T10840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.210150][T10840] ? clear_bhb_loop+0x60/0xb0 [ 678.210170][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.210187][T10840] RIP: 0033:0x7f2f254bf749 [ 678.210209][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.210224][T10840] RSP: 002b:00007f2f2371e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.210243][T10840] RAX: ffffffffffffffda RBX: 00007f2f25715fa0 RCX: 00007f2f254bf749 [ 678.210256][T10840] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 678.210266][T10840] RBP: 00007f2f2371e090 R08: 0000000000000000 R09: 0000000000000000 [ 678.210277][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.210287][T10840] R13: 00007f2f25716038 R14: 00007f2f25715fa0 R15: 00007ffd1231c3e8 [ 678.210318][T10840] [ 678.464221][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 679.712739][ T37] kauditd_printk_skb: 38 callbacks suppressed [ 679.712756][ T37] audit: type=1326 audit(5291375687.896:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.784814][ T37] audit: type=1326 audit(5291375687.976:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.786030][ T37] audit: type=1326 audit(5291375687.976:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.786670][ T37] audit: type=1326 audit(5291375687.976:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.787537][ T37] audit: type=1326 audit(5291375687.976:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.788156][ T37] audit: type=1326 audit(5291375687.976:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.788741][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 679.788763][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 679.788779][ T31] usb 2-1: config 220 has no interface number 2 [ 679.788853][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 679.788877][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 679.788896][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 679.788912][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 679.789485][ T37] audit: type=1326 audit(5291375687.976:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.790015][ T37] audit: type=1326 audit(5291375687.976:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.791322][ T37] audit: type=1326 audit(5291375687.976:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 679.792306][ T37] audit: type=1326 audit(5291375687.976:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc18d8f34b code=0x7ffc0000 [ 681.141510][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 681.141537][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.141555][ T31] usb 2-1: Product: syz [ 681.141568][ T31] usb 2-1: Manufacturer: syz [ 681.141581][ T31] usb 2-1: SerialNumber: syz [ 681.877592][ T31] usb 2-1: can't set config #220, error -71 [ 681.904807][ T31] usb 2-1: USB disconnect, device number 28 [ 682.102012][T10871] FAULT_INJECTION: forcing a failure. [ 682.102012][T10871] name failslab, interval 1, probability 0, space 0, times 0 [ 682.102045][T10871] CPU: 1 UID: 0 PID: 10871 Comm: syz.2.1369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 682.102066][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.102077][T10871] Call Trace: [ 682.102084][T10871] [ 682.102092][T10871] dump_stack_lvl+0x189/0x250 [ 682.102121][T10871] ? __pfx____ratelimit+0x10/0x10 [ 682.102144][T10871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.102167][T10871] ? __pfx__printk+0x10/0x10 [ 682.102196][T10871] ? try_to_take_rt_mutex+0x840/0xb00 [ 682.102223][T10871] should_fail_ex+0x46c/0x600 [ 682.102250][T10871] ? radix_tree_node_alloc+0xc0/0x3d0 [ 682.102269][T10871] should_failslab+0xa8/0x100 [ 682.102292][T10871] ? radix_tree_node_alloc+0xc0/0x3d0 [ 682.102309][T10871] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 682.102340][T10871] radix_tree_node_alloc+0xc0/0x3d0 [ 682.102372][T10871] idr_get_free+0x2b9/0xa70 [ 682.102409][T10871] idr_alloc_u32+0x15f/0x2d0 [ 682.102439][T10871] ? __pfx_idr_alloc_u32+0x10/0x10 [ 682.102467][T10871] ? rt_spin_lock+0x1f4/0x3e0 [ 682.102496][T10871] idr_alloc_cyclic+0xa1/0x1b0 [ 682.102522][T10871] ? bpf_link_prime+0x47/0x270 [ 682.102543][T10871] bpf_link_prime+0x7f/0x270 [ 682.102566][T10871] bpf_raw_tp_link_attach+0x499/0x640 [ 682.102593][T10871] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 682.102628][T10871] ? __fget_files+0x2a/0x420 [ 682.102662][T10871] bpf_raw_tracepoint_open+0x1b8/0x220 [ 682.102689][T10871] __sys_bpf+0x73e/0x860 [ 682.102714][T10871] ? __pfx___sys_bpf+0x10/0x10 [ 682.102732][T10871] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 682.102774][T10871] ? ksys_write+0x230/0x260 [ 682.102804][T10871] ? __pfx_ksys_write+0x10/0x10 [ 682.102833][T10871] __x64_sys_bpf+0x7c/0x90 [ 682.102855][T10871] do_syscall_64+0xfa/0xfa0 [ 682.102876][T10871] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.102898][T10871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.102916][T10871] ? clear_bhb_loop+0x60/0xb0 [ 682.102938][T10871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.102956][T10871] RIP: 0033:0x7f8f829ff749 [ 682.102972][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.102988][T10871] RSP: 002b:00007f8f80c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 682.103007][T10871] RAX: ffffffffffffffda RBX: 00007f8f82c55fa0 RCX: 00007f8f829ff749 [ 682.103021][T10871] RDX: 0000000000000018 RSI: 00002000000007c0 RDI: 0000000000000011 [ 682.103033][T10871] RBP: 00007f8f80c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 682.103045][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.103055][T10871] R13: 00007f8f82c56038 R14: 00007f8f82c55fa0 R15: 00007ffd53509b78 [ 682.103091][T10871] [ 682.134764][T10872] FAULT_INJECTION: forcing a failure. [ 682.134764][T10872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.134809][T10872] CPU: 0 UID: 0 PID: 10872 Comm: syz.5.1368 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 682.134834][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.134845][T10872] Call Trace: [ 682.134852][T10872] [ 682.134860][T10872] dump_stack_lvl+0x189/0x250 [ 682.134883][T10872] ? __pfx____ratelimit+0x10/0x10 [ 682.134897][T10872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.134911][T10872] ? __pfx__printk+0x10/0x10 [ 682.134923][T10872] ? __might_fault+0xb0/0x130 [ 682.134943][T10872] should_fail_ex+0x46c/0x600 [ 682.134960][T10872] _copy_to_iter+0x1de/0x1790 [ 682.134978][T10872] ? __pfx__copy_to_iter+0x10/0x10 [ 682.134989][T10872] ? chacha_block_generic+0x53/0xc80 [ 682.135006][T10872] get_random_bytes_user+0x1a0/0x380 [ 682.135018][T10872] ? __pfx_get_random_bytes_user+0x10/0x10 [ 682.135030][T10872] ? do_raw_spin_unlock+0x122/0x240 [ 682.135049][T10872] ? import_ubuf+0xfb/0x1d0 [ 682.135060][T10872] __x64_sys_getrandom+0x16d/0x260 [ 682.135077][T10872] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 682.135097][T10872] ? do_syscall_64+0xbe/0xfa0 [ 682.135112][T10872] do_syscall_64+0xfa/0xfa0 [ 682.135126][T10872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.135136][T10872] ? asm_sysvec_call_function_single+0x1a/0x20 [ 682.135145][T10872] ? clear_bhb_loop+0x60/0xb0 [ 682.135156][T10872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.135165][T10872] RIP: 0033:0x7f1c9b2af749 [ 682.135174][T10872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.135182][T10872] RSP: 002b:00007f1c994f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 682.135193][T10872] RAX: ffffffffffffffda RBX: 00007f1c9b506090 RCX: 00007f1c9b2af749 [ 682.135200][T10872] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 682.135207][T10872] RBP: 00007f1c994f5090 R08: 0000000000000000 R09: 0000000000000000 [ 682.135212][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.135218][T10872] R13: 00007f1c9b506128 R14: 00007f1c9b506090 R15: 00007ffe7ba37fb8 [ 682.135234][T10872] [ 682.164208][ T5917] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 682.331963][ T5917] usb 4-1: not running at top speed; connect to a high speed hub [ 682.333608][ T5917] usb 4-1: config 6 has too many interfaces: 111, using maximum allowed: 32 [ 682.333631][ T5917] usb 4-1: config 6 has an invalid descriptor of length 168, skipping remainder of the config [ 682.333647][ T5917] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 111 [ 682.365631][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 682.365658][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.365674][ T5917] usb 4-1: Product: syz [ 682.365686][ T5917] usb 4-1: Manufacturer: syz [ 682.365698][ T5917] usb 4-1: SerialNumber: syz [ 682.478450][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 682.744100][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 682.759580][ T31] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 682.759607][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.759625][ T31] usb 2-1: Product: syz [ 682.759638][ T31] usb 2-1: Manufacturer: syz [ 682.759650][ T31] usb 2-1: SerialNumber: syz [ 682.765137][ T31] usb 2-1: config 0 descriptor?? [ 682.855890][ T5917] usb 4-1: USB disconnect, device number 32 [ 683.834331][ T5917] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 684.021958][ T5917] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 684.022048][ T5917] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 684.022067][ T5917] usb 3-1: config 220 has no interface number 2 [ 684.022145][ T5917] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 684.022170][ T5917] usb 3-1: config 220 interface 0 has no altsetting 0 [ 684.022186][ T5917] usb 3-1: config 220 interface 76 has no altsetting 0 [ 684.022202][ T5917] usb 3-1: config 220 interface 1 has no altsetting 0 [ 684.533801][ T31] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a [ 684.533824][ T31] airspy 2-1:0.0: Could not detect board [ 684.533939][ T31] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 684.564303][ T31] usb 2-1: USB disconnect, device number 29 [ 684.726997][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 684.727016][ T37] audit: type=1326 audit(5291375692.916:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.728080][ T37] audit: type=1326 audit(5291375692.916:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.728497][ T37] audit: type=1326 audit(5291375692.916:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.728656][ T5917] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 684.728672][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.728681][ T5917] usb 3-1: Product: syz [ 684.728688][ T5917] usb 3-1: Manufacturer: syz [ 684.728695][ T5917] usb 3-1: SerialNumber: syz [ 684.734535][ T37] audit: type=1326 audit(5291375692.916:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.980607][ T37] audit: type=1326 audit(5291375693.166:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.980655][ T37] audit: type=1326 audit(5291375693.166:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.980695][ T37] audit: type=1326 audit(5291375693.166:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f829ff34b code=0x7ffc0000 [ 684.980734][ T37] audit: type=1326 audit(5291375693.166:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f82a32005 code=0x7ffc0000 [ 685.274381][ T37] audit: type=1326 audit(5291375693.466:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f829ff749 code=0x7ffc0000 [ 685.984298][ T37] audit: type=1326 audit(5291375694.146:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10882 comm="syz.2.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f829ff749 code=0x7ffc0000 [ 685.987216][ T5917] usb 3-1: selecting invalid altsetting 0 [ 685.987737][ T5917] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 685.987879][ T5917] uvcvideo 3-1:220.0: No valid video chain found. [ 686.016865][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.016931][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.077069][ T5917] usb 3-1: selecting invalid altsetting 0 [ 686.077106][ T5917] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 686.131879][ T5917] usb 3-1: USB disconnect, device number 39 [ 686.804302][ T5917] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 686.958049][ T5917] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 686.958075][ T5917] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 686.958092][ T5917] usb 4-1: config 220 has no interface number 2 [ 686.958165][ T5917] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 686.958189][ T5917] usb 4-1: config 220 interface 0 has no altsetting 0 [ 686.958205][ T5917] usb 4-1: config 220 interface 76 has no altsetting 0 [ 686.958221][ T5917] usb 4-1: config 220 interface 1 has no altsetting 0 [ 687.030441][ T5917] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 687.030469][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.030487][ T5917] usb 4-1: Product: syz [ 687.030499][ T5917] usb 4-1: Manufacturer: syz [ 687.030511][ T5917] usb 4-1: SerialNumber: syz [ 688.327606][ T5917] usb 4-1: selecting invalid altsetting 0 [ 688.328113][ T5917] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 688.328140][ T5917] uvcvideo 4-1:220.0: No valid video chain found. [ 688.364241][ T5917] usb 4-1: selecting invalid altsetting 0 [ 688.364281][ T5917] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 688.369273][ T5917] usb 4-1: USB disconnect, device number 33 [ 691.638437][T10932] 9p: Unknown Cache mode or invalid value m [ 693.465654][T10946] netlink: 'syz.1.1387': attribute type 7 has an invalid length. [ 693.492568][ T5917] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 693.751832][T10951] netlink: 'syz.5.1388': attribute type 6 has an invalid length. [ 693.814526][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 693.816166][ T5917] usb 3-1: config 0 has an invalid interface number: 4 but max is 1 [ 693.816179][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.816189][ T5917] usb 3-1: config 0 has no interface number 1 [ 693.816222][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 693.816233][ T5917] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 693.816252][ T5917] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 693.818548][ T5917] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 693.818571][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.818581][ T5917] usb 3-1: Product: syz [ 693.818587][ T5917] usb 3-1: Manufacturer: syz [ 693.818594][ T5917] usb 3-1: SerialNumber: syz [ 693.846727][ T5917] usb 3-1: config 0 descriptor?? [ 694.088156][ T5917] cxacru 3-1:0.0: cxacru_bind: interface has incorrect endpoints [ 694.088282][ T5917] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 694.144402][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 694.147958][ T5917] cxacru 3-1:0.4: cxacru_bind: interface has incorrect endpoints [ 694.148073][ T5917] cxacru 3-1:0.4: usbatm_usb_probe: bind failed: -19! [ 694.282767][ T5917] usb 3-1: USB disconnect, device number 40 [ 694.344194][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 694.347261][ T10] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.347280][ T10] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1024 [ 694.347292][ T10] usb 6-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 694.347305][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 694.349370][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.349385][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.349396][ T10] usb 6-1: Product: syz [ 694.349403][ T10] usb 6-1: Manufacturer: syz [ 694.349410][ T10] usb 6-1: SerialNumber: syz [ 694.388936][T10951] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 694.389110][T10951] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 696.557752][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 696.654664][ T10] usb 6-1: USB disconnect, device number 14 [ 696.820735][T10980] batadv_slave_0: entered promiscuous mode [ 696.822618][T10979] batadv_slave_0: left promiscuous mode [ 698.441142][T10991] batadv_slave_0: entered promiscuous mode [ 702.631209][T10982] batadv_slave_0: left promiscuous mode [ 702.632693][T11022] macsec0: entered promiscuous mode [ 702.688580][T11022] macsec0: left promiscuous mode [ 703.284589][ T9] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 703.946948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 703.946978][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 703.946989][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.952390][ T9] usb 4-1: config 0 descriptor?? [ 703.953562][T11038] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 704.621962][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 704.622074][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 704.674814][ T9] usb 4-1: USB disconnect, device number 34 [ 707.814434][ T7949] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 707.967083][ T7949] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 707.967111][ T7949] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 707.967129][ T7949] usb 4-1: config 220 has no interface number 2 [ 707.967203][ T7949] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 707.967228][ T7949] usb 4-1: config 220 interface 0 has no altsetting 0 [ 707.967244][ T7949] usb 4-1: config 220 interface 76 has no altsetting 0 [ 707.967259][ T7949] usb 4-1: config 220 interface 1 has no altsetting 0 [ 708.145374][ T7949] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 708.145401][ T7949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.145419][ T7949] usb 4-1: Product: syz [ 708.145432][ T7949] usb 4-1: Manufacturer: syz [ 708.145444][ T7949] usb 4-1: SerialNumber: syz [ 709.130938][T11077] macsec0: entered promiscuous mode [ 709.476788][T11066] macsec0: left promiscuous mode [ 709.580017][ T7949] usb 4-1: selecting invalid altsetting 0 [ 709.580520][ T7949] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 709.580547][ T7949] uvcvideo 4-1:220.0: No valid video chain found. [ 709.669888][ T7949] usb 4-1: selecting invalid altsetting 0 [ 709.669925][ T7949] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 709.683146][ T7949] usb 4-1: USB disconnect, device number 35 [ 710.514410][ T5871] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 710.667014][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 710.667071][ T5871] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 710.667092][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.711821][ T5871] usb 4-1: config 0 descriptor?? [ 710.713025][T11093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 711.162600][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 711.162718][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 711.224517][ T5871] usb 4-1: USB disconnect, device number 36 [ 711.644201][ T31] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 711.804140][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 711.809792][ T31] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.809810][ T31] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.809820][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 711.809840][ T31] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 711.809851][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.826762][ T31] usb 3-1: config 0 descriptor?? [ 712.238954][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 712.738182][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.741863][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.478610][ T31] nzxt-smart2 0003:1E71:2009.001C: item fetching failed at offset 2/5 [ 714.481262][ T31] nzxt-smart2 0003:1E71:2009.001C: probe with driver nzxt-smart2 failed with error -22 [ 714.726589][ T5892] usb 3-1: USB disconnect, device number 41 [ 715.000877][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 715.131440][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 715.589347][T11126] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 715.844126][ T7949] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 715.998558][ T7949] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 715.998576][ T7949] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 715.998586][ T7949] usb 1-1: config 220 has no interface number 2 [ 715.998631][ T7949] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 715.998645][ T7949] usb 1-1: config 220 interface 0 has no altsetting 0 [ 715.998653][ T7949] usb 1-1: config 220 interface 76 has no altsetting 0 [ 715.998662][ T7949] usb 1-1: config 220 interface 1 has no altsetting 0 [ 716.002255][ T7949] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 716.002279][ T7949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.002289][ T7949] usb 1-1: Product: syz [ 716.002296][ T7949] usb 1-1: Manufacturer: syz [ 716.002303][ T7949] usb 1-1: SerialNumber: syz [ 716.309978][ T7949] usb 1-1: selecting invalid altsetting 0 [ 716.337566][ T7949] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 716.337606][ T7949] uvcvideo 1-1:220.0: No valid video chain found. [ 716.367209][ T7949] usb 1-1: selecting invalid altsetting 0 [ 716.367246][ T7949] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 716.451081][ T7949] usb 1-1: USB disconnect, device number 21 [ 716.493495][T11139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.080018][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 717.146593][T11152] cgroup: release_agent respecified [ 719.229968][T11165] FAULT_INJECTION: forcing a failure. [ 719.229968][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 719.230002][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.3.1448 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 719.230022][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.230033][T11165] Call Trace: [ 719.230041][T11165] [ 719.230050][T11165] dump_stack_lvl+0x189/0x250 [ 719.230079][T11165] ? __pfx____ratelimit+0x10/0x10 [ 719.230102][T11165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.230125][T11165] ? __pfx__printk+0x10/0x10 [ 719.230152][T11165] ? __pfx___might_resched+0x10/0x10 [ 719.230171][T11165] ? fs_reclaim_acquire+0x7d/0x100 [ 719.230198][T11165] should_fail_ex+0x46c/0x600 [ 719.230226][T11165] should_failslab+0xa8/0x100 [ 719.230251][T11165] __kmalloc_noprof+0xcc/0x7d0 [ 719.230272][T11165] ? anon_vma_name_alloc+0x40/0xf0 [ 719.230300][T11165] anon_vma_name_alloc+0x40/0xf0 [ 719.230323][T11165] set_anon_vma_name+0x172/0x380 [ 719.230347][T11165] ? static_key_count+0x41/0x70 [ 719.230365][T11165] ? security_task_prctl+0x163/0x190 [ 719.230394][T11165] __se_sys_prctl+0xfb3/0x1830 [ 719.230415][T11165] ? __pfx___se_sys_prctl+0x10/0x10 [ 719.230437][T11165] ? do_syscall_64+0xbe/0xfa0 [ 719.230457][T11165] ? __x64_sys_prctl+0x20/0xc0 [ 719.230477][T11165] do_syscall_64+0xfa/0xfa0 [ 719.230497][T11165] ? lockdep_hardirqs_on+0x9c/0x150 [ 719.230519][T11165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.230536][T11165] ? clear_bhb_loop+0x60/0xb0 [ 719.230557][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.230574][T11165] RIP: 0033:0x7f871459f749 [ 719.230590][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.230605][T11165] RSP: 002b:00007f8712806038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 719.230624][T11165] RAX: ffffffffffffffda RBX: 00007f87147f5fa0 RCX: 00007f871459f749 [ 719.230637][T11165] RDX: 0000200000ffa000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 719.230648][T11165] RBP: 00007f8712806090 R08: 0000200000000780 R09: 0000000000000000 [ 719.230660][T11165] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 719.230671][T11165] R13: 00007f87147f6038 R14: 00007f87147f5fa0 R15: 00007ffe35174c18 [ 719.230704][T11165] [ 719.544547][T11168] cgroup: release_agent respecified [ 720.694709][ T5871] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 720.754472][ T7949] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 720.857988][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 720.858037][ T5871] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 720.858058][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.895059][ T5871] usb 1-1: config 0 descriptor?? [ 720.896246][T11172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 720.925147][ T7949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 720.925259][ T7949] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 720.925278][ T7949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.964568][ T7949] usb 2-1: config 0 descriptor?? [ 720.982990][T11175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 721.319538][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 721.322927][ T5871] usbhid 1-1:0.0: can't add hid device: -71 [ 721.323846][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 721.377273][ T5871] usb 1-1: USB disconnect, device number 22 [ 721.401764][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 721.402233][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 721.405453][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 721.419743][ T7949] usbhid 2-1:0.0: can't add hid device: -32 [ 721.419868][ T7949] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 721.459767][ T7949] usb 2-1: USB disconnect, device number 30 [ 721.466249][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 721.624171][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 721.626932][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 721.626961][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 721.631038][ T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 721.631064][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.631082][ T10] usb 4-1: Product: syz [ 721.631094][ T10] usb 4-1: Manufacturer: syz [ 721.631107][ T10] usb 4-1: SerialNumber: syz [ 721.643086][ T10] usb 4-1: config 0 descriptor?? [ 721.649864][ T10] usb 4-1: no audio or video endpoints found [ 722.124193][ T7949] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 722.174469][ T5871] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 722.282991][ T7949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.283036][ T7949] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 722.283056][ T7949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.289035][ T7949] usb 6-1: config 0 descriptor?? [ 722.711298][ T9] usb 4-1: USB disconnect, device number 37 [ 722.716339][ T5871] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 722.716436][ T5871] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 722.716455][ T5871] usb 1-1: config 220 has no interface number 2 [ 722.716528][ T5871] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 722.716552][ T5871] usb 1-1: config 220 interface 0 has no altsetting 0 [ 722.716568][ T5871] usb 1-1: config 220 interface 76 has no altsetting 0 [ 722.716584][ T5871] usb 1-1: config 220 interface 1 has no altsetting 0 [ 722.921518][ T5871] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 722.921547][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.921564][ T5871] usb 1-1: Product: syz [ 722.921577][ T5871] usb 1-1: Manufacturer: syz [ 722.921589][ T5871] usb 1-1: SerialNumber: syz [ 723.215277][T11191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.228954][T11191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.359840][T11205] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 723.360316][T11205] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 723.949502][ T7949] hid-generic 0003:18D1:503C.001D: hidraw0: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.5-1/input0 [ 724.334210][ T5918] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 724.457162][ T5871] usb 1-1: selecting invalid altsetting 0 [ 724.462994][ T5871] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 724.463025][ T5871] uvcvideo 1-1:220.0: No valid video chain found. [ 724.472821][ T5871] usb 1-1: selecting invalid altsetting 0 [ 724.472859][ T5871] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 724.478550][ T5871] usb 1-1: USB disconnect, device number 23 [ 724.516793][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.516833][ T5918] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 724.516853][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.572918][ T5918] usb 3-1: config 0 descriptor?? [ 725.819757][ T5892] usb 6-1: USB disconnect, device number 15 [ 725.826714][ T5918] hid-generic 0003:18D1:503C.001E: hidraw1: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.2-1/input0 [ 725.987798][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.988351][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.353430][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1467'. [ 727.397190][T11228] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 727.423943][T11207] usb 3-1: USB disconnect, device number 42 [ 727.438868][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1467'. [ 727.634387][ T5918] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 728.367366][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 728.367415][ T5918] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 728.367435][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.373072][ T5918] usb 2-1: config 0 descriptor?? [ 728.375340][T11234] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 728.944353][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 728.947409][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 728.947532][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 728.964793][ T5918] usb 2-1: USB disconnect, device number 31 [ 729.094443][ T7949] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 729.244382][ T7949] usb 3-1: Using ep0 maxpacket: 32 [ 729.247876][ T7949] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 729.247900][ T7949] usb 3-1: config 0 has no interface number 0 [ 729.251242][ T7949] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 729.251267][ T7949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.251284][ T7949] usb 3-1: Product: syz [ 729.251295][ T7949] usb 3-1: Manufacturer: syz [ 729.251306][ T7949] usb 3-1: SerialNumber: syz [ 729.320416][ T7949] usb 3-1: config 0 descriptor?? [ 729.474187][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 729.612716][ T7949] radio-si470x 3-1:0.35: this is not a si470x device. [ 729.802607][T11256] cgroup: release_agent respecified [ 730.164210][ T7949] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 730.691055][ T7949] usb 3-1: USB disconnect, device number 43 [ 732.837568][ T5871] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 733.029750][ T5871] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 733.029777][ T5871] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 733.029795][ T5871] usb 6-1: config 220 has no interface number 2 [ 733.029871][ T5871] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 733.029896][ T5871] usb 6-1: config 220 interface 0 has no altsetting 0 [ 733.029912][ T5871] usb 6-1: config 220 interface 76 has no altsetting 0 [ 733.029928][ T5871] usb 6-1: config 220 interface 1 has no altsetting 0 [ 733.121311][ T5871] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 733.121340][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.121358][ T5871] usb 6-1: Product: syz [ 733.121370][ T5871] usb 6-1: Manufacturer: syz [ 733.121383][ T5871] usb 6-1: SerialNumber: syz [ 733.390475][ T5871] usb 6-1: selecting invalid altsetting 0 [ 733.416029][ T5871] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 733.416049][ T5871] uvcvideo 6-1:220.0: No valid video chain found. [ 733.426538][ T5871] usb 6-1: selecting invalid altsetting 0 [ 733.426561][ T5871] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 733.488263][ T5871] usb 6-1: USB disconnect, device number 16 [ 739.345910][T11320] cgroup: release_agent respecified [ 741.433532][T11345] FAULT_INJECTION: forcing a failure. [ 741.433532][T11345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.433565][T11345] CPU: 1 UID: 0 PID: 11345 Comm: syz.0.1497 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 741.433592][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 741.433603][T11345] Call Trace: [ 741.433610][T11345] [ 741.433618][T11345] dump_stack_lvl+0x189/0x250 [ 741.433644][T11345] ? __pfx____ratelimit+0x10/0x10 [ 741.433666][T11345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.433685][T11345] ? __pfx__printk+0x10/0x10 [ 741.433705][T11345] ? __might_fault+0xb0/0x130 [ 741.433738][T11345] should_fail_ex+0x46c/0x600 [ 741.433762][T11345] _copy_from_iter+0x1de/0x1790 [ 741.433783][T11345] ? kmalloc_reserve+0xbd/0x290 [ 741.433798][T11345] ? rcu_is_watching+0x15/0xb0 [ 741.433814][T11345] ? kmalloc_reserve+0xbd/0x290 [ 741.433828][T11345] ? __alloc_skb+0x112/0x2d0 [ 741.433845][T11345] ? __pfx__copy_from_iter+0x10/0x10 [ 741.433863][T11345] ? __build_skb_around+0x262/0x3f0 [ 741.433884][T11345] ? netlink_sendmsg+0x642/0xb30 [ 741.433901][T11345] ? skb_put+0x11b/0x210 [ 741.433920][T11345] netlink_sendmsg+0x6b2/0xb30 [ 741.433935][T11345] ? is_bpf_text_address+0x26/0x2b0 [ 741.433965][T11345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.433991][T11345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 741.434014][T11345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.434033][T11345] __sock_sendmsg+0x21c/0x270 [ 741.434058][T11345] ____sys_sendmsg+0x508/0x820 [ 741.434084][T11345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.434111][T11345] ? import_iovec+0x74/0xa0 [ 741.434133][T11345] ___sys_sendmsg+0x21f/0x2a0 [ 741.434154][T11345] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.434206][T11345] ? __fget_files+0x2a/0x420 [ 741.434226][T11345] ? __fget_files+0x3a6/0x420 [ 741.434256][T11345] __x64_sys_sendmsg+0x1a1/0x260 [ 741.434279][T11345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.434308][T11345] ? __pfx_ksys_write+0x10/0x10 [ 741.434331][T11345] ? do_syscall_64+0xbe/0xfa0 [ 741.434358][T11345] do_syscall_64+0xfa/0xfa0 [ 741.434376][T11345] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.434396][T11345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.434412][T11345] ? clear_bhb_loop+0x60/0xb0 [ 741.434432][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.434448][T11345] RIP: 0033:0x7f2f254bf749 [ 741.434464][T11345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.434479][T11345] RSP: 002b:00007f2f2371e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.434499][T11345] RAX: ffffffffffffffda RBX: 00007f2f25715fa0 RCX: 00007f2f254bf749 [ 741.434512][T11345] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 741.434523][T11345] RBP: 00007f2f2371e090 R08: 0000000000000000 R09: 0000000000000000 [ 741.434534][T11345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.434545][T11345] R13: 00007f2f25716038 R14: 00007f2f25715fa0 R15: 00007ffd1231c3e8 [ 741.434582][T11345] [ 741.604152][ T5892] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 741.826682][ T5892] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 741.826709][ T5892] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 741.826726][ T5892] usb 4-1: config 220 has no interface number 2 [ 741.826803][ T5892] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 741.826827][ T5892] usb 4-1: config 220 interface 0 has no altsetting 0 [ 741.826844][ T5892] usb 4-1: config 220 interface 76 has no altsetting 0 [ 741.826860][ T5892] usb 4-1: config 220 interface 1 has no altsetting 0 [ 741.829882][ T5892] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 741.829908][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.829926][ T5892] usb 4-1: Product: syz [ 741.829939][ T5892] usb 4-1: Manufacturer: syz [ 741.829952][ T5892] usb 4-1: SerialNumber: syz [ 742.004175][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 742.154129][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 742.182112][ T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 742.182512][ T10] usb 1-1: config 0 has no interface number 0 [ 742.232064][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 742.232090][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.232107][ T10] usb 1-1: Product: syz [ 742.232119][ T10] usb 1-1: Manufacturer: syz [ 742.232131][ T10] usb 1-1: SerialNumber: syz [ 742.310740][ T5892] usb 4-1: selecting invalid altsetting 0 [ 742.311231][ T5892] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 742.311257][ T5892] uvcvideo 4-1:220.0: No valid video chain found. [ 742.402190][ T5892] usb 4-1: selecting invalid altsetting 0 [ 742.402227][ T5892] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 742.437006][ T10] usb 1-1: config 0 descriptor?? [ 742.437730][ T5892] usb 4-1: USB disconnect, device number 38 [ 742.726534][ T10] radio-si470x 1-1:0.35: this is not a si470x device. [ 742.764844][ T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 742.782864][ T10] usb 1-1: USB disconnect, device number 24 [ 745.275752][T11382] cgroup: release_agent respecified [ 746.255862][T11382] syz.3.1509 (11382) used greatest stack depth: 17744 bytes left [ 746.414173][T11207] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 746.564103][T11207] usb 2-1: Using ep0 maxpacket: 16 [ 746.566621][T11207] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 746.566648][T11207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 746.571345][T11207] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 746.571370][T11207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.571387][T11207] usb 2-1: Product: syz [ 746.571399][T11207] usb 2-1: Manufacturer: syz [ 746.571412][T11207] usb 2-1: SerialNumber: syz [ 746.866612][T11207] usb 2-1: config 0 descriptor?? [ 746.880140][T11207] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 746.880177][T11207] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 747.316953][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.317104][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.797764][T11207] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 748.798441][T11207] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 749.000052][T11207] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 749.000073][T11207] em28xx 2-1:0.0: No AC97 audio processor [ 750.184920][T11427] cgroup: release_agent respecified [ 751.132385][ T5918] usb 2-1: USB disconnect, device number 32 [ 751.135235][ T5918] em28xx 2-1:0.0: Disconnecting em28xx [ 752.576947][ T5918] em28xx 2-1:0.0: Freeing device [ 754.146643][T11434] cgroup: release_agent respecified [ 754.884160][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 755.068194][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.068238][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 755.068259][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.188017][T11452] cgroup: release_agent respecified [ 756.336898][ T10] usb 3-1: config 0 descriptor?? [ 756.821278][ T10] hid-generic 0003:18D1:503C.001F: hidraw0: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.2-1/input0 [ 756.945322][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.945888][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.199924][T11473] cgroup: release_agent respecified [ 758.534583][ T5917] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 758.684402][ T5918] usb 3-1: USB disconnect, device number 44 [ 758.734201][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 758.736791][ T5917] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.736822][ T5917] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.736843][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 758.736872][ T5917] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 758.736891][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.828405][ T5917] usb 6-1: config 0 descriptor?? [ 759.319669][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1538'. [ 759.348270][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.348848][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.481281][ T5917] usbhid 6-1:0.0: can't add hid device: -71 [ 760.481407][ T5917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 760.560032][ T5917] usb 6-1: USB disconnect, device number 17 [ 761.919154][T11500] cgroup: release_agent respecified [ 766.054196][ T5917] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 766.220449][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.220494][ T5917] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 766.220515][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.276971][ T5917] usb 3-1: config 0 descriptor?? [ 767.418502][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.419472][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.008559][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 769.008678][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 769.036425][ T5917] usb 3-1: USB disconnect, device number 45 [ 787.413922][T11646] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1587'. [ 789.524642][ T7949] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 790.284419][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 790.382286][T11666] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 790.543113][T11678] cgroup: release_agent respecified [ 790.726050][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.728505][ T7949] usb 6-1: device not accepting address 18, error -71 [ 791.685724][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.354820][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 793.000765][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.064116][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 794.104117][ T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 794.224403][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 794.281295][T11704] cgroup: release_agent respecified [ 795.157411][ T10] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 795.157429][ T10] usb 2-1: config 0 has no interface number 0 [ 795.157457][ T10] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 795.162475][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 795.162492][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.162501][ T10] usb 2-1: Product: syz [ 795.162508][ T10] usb 2-1: Manufacturer: syz [ 795.162515][ T10] usb 2-1: SerialNumber: syz [ 795.274708][ T10] usb 2-1: config 0 descriptor?? [ 795.276522][ T10] usb 2-1: can't set config #0, error -71 [ 795.327879][ T10] usb 2-1: USB disconnect, device number 33 [ 795.511558][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 795.511586][ T9] usb 4-1: can't read configurations, error -71 [ 795.594148][ T49] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 795.687007][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.746502][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.746547][ T49] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 795.746568][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.751851][ T49] usb 6-1: config 0 descriptor?? [ 796.179499][ T49] hid-generic 0003:18D1:503C.0020: hidraw0: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.5-1/input0 [ 796.469451][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.471120][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.840269][ T5917] usb 6-1: USB disconnect, device number 20 [ 799.028846][ C0] vkms_vblank_simulate: vblank timer overrun [ 799.525853][T11744] cgroup: release_agent respecified [ 801.625406][T11748] FAULT_INJECTION: forcing a failure. [ 801.625406][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 801.625439][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.5.1616 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 801.625459][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.625477][T11748] Call Trace: [ 801.625485][T11748] [ 801.625492][T11748] dump_stack_lvl+0x189/0x250 [ 801.625520][T11748] ? __pfx____ratelimit+0x10/0x10 [ 801.625543][T11748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.625565][T11748] ? __pfx__printk+0x10/0x10 [ 801.625593][T11748] ? __pfx___might_resched+0x10/0x10 [ 801.625612][T11748] ? fs_reclaim_acquire+0x7d/0x100 [ 801.625639][T11748] should_fail_ex+0x46c/0x600 [ 801.625669][T11748] should_failslab+0xa8/0x100 [ 801.625694][T11748] __kmalloc_cache_noprof+0x6f/0x6c0 [ 801.625716][T11748] ? mutex_lock_nested+0x154/0x1d0 [ 801.625733][T11748] ? snd_info_text_entry_write+0x1b3/0x470 [ 801.625751][T11748] ? snd_info_text_entry_write+0x150/0x470 [ 801.625774][T11748] snd_info_text_entry_write+0x1b3/0x470 [ 801.625790][T11748] ? rcu_read_lock_any_held+0xb3/0x120 [ 801.625837][T11748] ? __pfx_snd_info_text_entry_write+0x10/0x10 [ 801.625853][T11748] proc_reg_write+0x1f6/0x2f0 [ 801.625879][T11748] vfs_writev+0x4bf/0x970 [ 801.625899][T11748] ? __pfx_proc_reg_write+0x10/0x10 [ 801.625923][T11748] ? __pfx_vfs_writev+0x10/0x10 [ 801.625965][T11748] ? mutex_lock_nested+0x154/0x1d0 [ 801.625982][T11748] ? fdget_pos+0x253/0x320 [ 801.626014][T11748] do_writev+0x153/0x2d0 [ 801.626040][T11748] ? __pfx_do_writev+0x10/0x10 [ 801.626073][T11748] ? do_syscall_64+0xbe/0xfa0 [ 801.626100][T11748] do_syscall_64+0xfa/0xfa0 [ 801.626119][T11748] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.626141][T11748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.626158][T11748] ? clear_bhb_loop+0x60/0xb0 [ 801.626180][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.626196][T11748] RIP: 0033:0x7f1c9b2af749 [ 801.626217][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.626232][T11748] RSP: 002b:00007f1c99516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 801.626255][T11748] RAX: ffffffffffffffda RBX: 00007f1c9b505fa0 RCX: 00007f1c9b2af749 [ 801.626268][T11748] RDX: 0000000000000001 RSI: 00002000000010c0 RDI: 0000000000000003 [ 801.626279][T11748] RBP: 00007f1c99516090 R08: 0000000000000000 R09: 0000000000000000 [ 801.626290][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.626301][T11748] R13: 00007f1c9b506038 R14: 00007f1c9b505fa0 R15: 00007ffe7ba37fb8 [ 801.626335][T11748] [ 806.584241][ T5917] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 806.736968][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 806.739302][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 806.739331][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 806.742476][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 806.742501][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.742519][ T5917] usb 2-1: Product: syz [ 806.742532][ T5917] usb 2-1: Manufacturer: syz [ 806.742545][ T5917] usb 2-1: SerialNumber: syz [ 806.756442][ T5917] usb 2-1: config 0 descriptor?? [ 806.789295][ T5917] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 806.789326][ T5917] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 807.485008][ T5917] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 807.502103][ T5917] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 807.871208][ T5917] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 807.871229][ T5917] em28xx 2-1:0.0: No AC97 audio processor [ 808.865331][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.865415][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.243060][ T5917] usb 2-1: USB disconnect, device number 34 [ 810.245766][ T5917] em28xx 2-1:0.0: Disconnecting em28xx [ 810.342213][ T5917] em28xx 2-1:0.0: Freeing device [ 810.694422][ T7949] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 812.044429][ T7949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.044529][ T7949] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 812.044584][ T7949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.348011][ T7949] usb 1-1: config 0 descriptor?? [ 815.472451][T11828] 9p: Unknown Cache mode or invalid value m [ 815.485861][ T7949] usbhid 1-1:0.0: can't add hid device: -71 [ 815.485989][ T7949] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 815.513718][ T7949] usb 1-1: USB disconnect, device number 25 [ 816.174300][ T5891] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 816.324095][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 816.326222][ T5891] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 816.326236][ T5891] usb 6-1: config 0 has no interface number 0 [ 816.328185][ T5891] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 816.328200][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.328210][ T5891] usb 6-1: Product: syz [ 816.328216][ T5891] usb 6-1: Manufacturer: syz [ 816.328223][ T5891] usb 6-1: SerialNumber: syz [ 816.386247][ T5891] usb 6-1: config 0 descriptor?? [ 816.925212][ T5891] radio-si470x 6-1:0.35: this is not a si470x device. [ 816.984524][ T5891] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 817.020133][ T5891] usb 6-1: USB disconnect, device number 21 [ 819.910948][T11869] cgroup: release_agent respecified [ 820.427275][ T5917] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 820.798985][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.799028][ T5917] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 820.799050][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.885344][ T5917] usb 1-1: config 0 descriptor?? [ 822.300951][ T5917] hid-generic 0003:18D1:503C.0021: hidraw0: USB HID v10.00 Device [HID 18d1:503c] on usb-dummy_hcd.0-1/input0 [ 823.743703][T11207] usb 1-1: USB disconnect, device number 26 [ 824.627840][T11905] cgroup: release_agent respecified [ 825.818134][T11915] 9p: Unknown Cache mode or invalid value m [ 828.194081][ T7949] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 828.354275][ T7949] usb 6-1: Using ep0 maxpacket: 16 [ 828.357223][ T7949] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.357252][ T7949] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.357272][ T7949] usb 6-1: config 0 interface 0 has no altsetting 0 [ 828.357304][ T7949] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 828.357324][ T7949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.362518][ T7949] usb 6-1: config 0 descriptor?? [ 828.961237][T11944] cgroup: release_agent respecified [ 829.634606][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'. [ 829.773692][ T7949] nzxt-smart2 0003:1E71:2009.0022: item fetching failed at offset 2/5 [ 829.782874][ T7949] nzxt-smart2 0003:1E71:2009.0022: probe with driver nzxt-smart2 failed with error -22 [ 830.441551][ T7949] usb 6-1: USB disconnect, device number 22 [ 835.373551][T11991] batadv_slave_1: entered promiscuous mode [ 835.373847][T11991] macsec1: entered promiscuous mode [ 835.378682][T11991] macsec1: entered allmulticast mode [ 835.378703][T11991] batadv_slave_1: entered allmulticast mode [ 835.447029][T11991] batadv_slave_1: left allmulticast mode [ 835.471998][T11991] batadv_slave_1: left promiscuous mode [ 835.808314][T12002] cgroup: release_agent respecified [ 836.974320][ T1229] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 837.281526][ T1229] usb 4-1: Using ep0 maxpacket: 16 [ 838.041750][ T5918] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 838.043028][ T1229] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 838.043108][ T1229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 838.047482][ T1229] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 838.047509][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.047527][ T1229] usb 4-1: Product: syz [ 838.047540][ T1229] usb 4-1: Manufacturer: syz [ 838.047606][ T1229] usb 4-1: SerialNumber: syz [ 838.070307][ T1229] usb 4-1: config 0 descriptor?? [ 838.113742][ T1229] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 838.113773][ T1229] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 838.227653][ T5918] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 838.227678][ T5918] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 838.227715][ T5918] usb 1-1: config 220 interface 0 has no altsetting 0 [ 838.297108][ T5918] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 838.297197][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.297216][ T5918] usb 1-1: Product: syz [ 838.297228][ T5918] usb 1-1: Manufacturer: syz [ 838.297241][ T5918] usb 1-1: SerialNumber: syz [ 838.654784][ T5918] usb 1-1: USB disconnect, device number 27 [ 838.953885][ T1229] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 838.972412][ T1229] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 839.274104][ T1229] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 839.274123][ T1229] em28xx 4-1:0.0: No AC97 audio processor [ 840.123228][T12042] cgroup: release_agent respecified [ 841.033421][ T5891] usb 4-1: USB disconnect, device number 41 [ 841.047306][ T5891] em28xx 4-1:0.0: Disconnecting em28xx [ 841.103805][ T5891] em28xx 4-1:0.0: Freeing device [ 844.978173][T12080] cgroup: release_agent respecified [ 848.064103][ T5918] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 848.226290][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 848.229065][ T5918] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.229095][ T5918] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.229115][ T5918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 848.229147][ T5918] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 848.229169][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.268093][ T5918] usb 2-1: config 0 descriptor?? [ 848.307094][T12105] vivid-002: ================= START STATUS ================= [ 848.307233][T12105] vivid-002: ================== END STATUS ================== [ 848.740372][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 848.893270][ T5918] nzxt-smart2 0003:1E71:2009.0023: item fetching failed at offset 2/5 [ 848.893759][ T5918] nzxt-smart2 0003:1E71:2009.0023: probe with driver nzxt-smart2 failed with error -22 [ 850.083682][ T5891] usb 2-1: USB disconnect, device number 35 [ 851.059722][T12116] macsec0: entered promiscuous mode [ 851.102954][T12109] macsec0: left promiscuous mode [ 851.346246][T12122] cgroup: release_agent respecified [ 852.155733][T12126] FAULT_INJECTION: forcing a failure. [ 852.155733][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 852.155765][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.5.1730 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 852.155785][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.155796][T12126] Call Trace: [ 852.155803][T12126] [ 852.155811][T12126] dump_stack_lvl+0x189/0x250 [ 852.155840][T12126] ? __pfx____ratelimit+0x10/0x10 [ 852.155863][T12126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.155885][T12126] ? __pfx__printk+0x10/0x10 [ 852.155911][T12126] ? __pfx___might_resched+0x10/0x10 [ 852.155934][T12126] should_fail_ex+0x46c/0x600 [ 852.155961][T12126] ? getname_flags+0xb8/0x540 [ 852.155982][T12126] should_failslab+0xa8/0x100 [ 852.156005][T12126] ? getname_flags+0xb8/0x540 [ 852.156025][T12126] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 852.156047][T12126] ? ksys_write+0x1e7/0x260 [ 852.156071][T12126] getname_flags+0xb8/0x540 [ 852.156097][T12126] __x64_sys_linkat+0xb4/0xf0 [ 852.156121][T12126] do_syscall_64+0xfa/0xfa0 [ 852.156141][T12126] ? lockdep_hardirqs_on+0x9c/0x150 [ 852.156163][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.156180][T12126] ? clear_bhb_loop+0x60/0xb0 [ 852.156200][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.156216][T12126] RIP: 0033:0x7f1c9b2af749 [ 852.156231][T12126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.156246][T12126] RSP: 002b:00007f1c99516038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 852.156266][T12126] RAX: ffffffffffffffda RBX: 00007f1c9b505fa0 RCX: 00007f1c9b2af749 [ 852.156279][T12126] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 852.156290][T12126] RBP: 00007f1c99516090 R08: 0000000000001000 R09: 0000000000000000 [ 852.156301][T12126] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 852.156313][T12126] R13: 00007f1c9b506038 R14: 00007f1c9b505fa0 R15: 00007ffe7ba37fb8 [ 852.156345][T12126] [ 852.985721][T12141] vivid-002: ================= START STATUS ================= [ 852.985741][T12141] vivid-002: FM Deviation: 75000 [ 852.985771][T12141] vivid-002: ================== END STATUS ================== [ 856.645760][ T5918] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 862.184129][ T5918] usb 2-1: device descriptor read/64, error -110 [ 862.458296][T12166] FAULT_INJECTION: forcing a failure. [ 862.458296][T12166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.458328][T12166] CPU: 0 UID: 0 PID: 12166 Comm: syz.5.1742 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 862.458350][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.458360][T12166] Call Trace: [ 862.458367][T12166] [ 862.458376][T12166] dump_stack_lvl+0x189/0x250 [ 862.458407][T12166] ? __pfx____ratelimit+0x10/0x10 [ 862.458429][T12166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.458451][T12166] ? __pfx__printk+0x10/0x10 [ 862.458488][T12166] should_fail_ex+0x46c/0x600 [ 862.458517][T12166] _copy_to_user+0x31/0xb0 [ 862.458538][T12166] simple_read_from_buffer+0xe1/0x170 [ 862.458565][T12166] proc_fail_nth_read+0x1b6/0x220 [ 862.458597][T12166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.458619][T12166] ? rw_verify_area+0x2ac/0x4e0 [ 862.458638][T12166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 862.458659][T12166] vfs_read+0x206/0xa30 [ 862.458689][T12166] ? __pfx_vfs_read+0x10/0x10 [ 862.458705][T12166] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 862.458735][T12166] ? mutex_lock_nested+0x154/0x1d0 [ 862.458752][T12166] ? fdget_pos+0x253/0x320 [ 862.458784][T12166] ksys_read+0x14b/0x260 [ 862.458804][T12166] ? __pfx_ksys_read+0x10/0x10 [ 862.458826][T12166] ? do_syscall_64+0xbe/0xfa0 [ 862.458850][T12166] do_syscall_64+0xfa/0xfa0 [ 862.458870][T12166] ? lockdep_hardirqs_on+0x9c/0x150 [ 862.458891][T12166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.458907][T12166] ? clear_bhb_loop+0x60/0xb0 [ 862.458928][T12166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.458944][T12166] RIP: 0033:0x7f1c9b2ae15c [ 862.458960][T12166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 862.458974][T12166] RSP: 002b:00007f1c99516030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 862.458992][T12166] RAX: ffffffffffffffda RBX: 00007f1c9b505fa0 RCX: 00007f1c9b2ae15c [ 862.459005][T12166] RDX: 000000000000000f RSI: 00007f1c995160a0 RDI: 0000000000000004 [ 862.459015][T12166] RBP: 00007f1c99516090 R08: 0000000000000000 R09: 0000000000000000 [ 862.459026][T12166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.459037][T12166] R13: 00007f1c9b506038 R14: 00007f1c9b505fa0 R15: 00007ffe7ba37fb8 [ 862.459068][T12166] [ 863.249349][T12183] FAULT_INJECTION: forcing a failure. [ 863.249349][T12183] name failslab, interval 1, probability 0, space 0, times 0 [ 863.249380][T12183] CPU: 0 UID: 0 PID: 12183 Comm: syz.3.1747 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 863.249399][T12183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.249409][T12183] Call Trace: [ 863.249416][T12183] [ 863.249424][T12183] dump_stack_lvl+0x189/0x250 [ 863.249453][T12183] ? __pfx____ratelimit+0x10/0x10 [ 863.249475][T12183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.249498][T12183] ? __pfx__printk+0x10/0x10 [ 863.249523][T12183] ? __pfx___might_resched+0x10/0x10 [ 863.249550][T12183] ? fs_reclaim_acquire+0x7d/0x100 [ 863.249576][T12183] should_fail_ex+0x46c/0x600 [ 863.249602][T12183] ? copy_fs_struct+0x4f/0x270 [ 863.249621][T12183] should_failslab+0xa8/0x100 [ 863.249645][T12183] ? copy_fs_struct+0x4f/0x270 [ 863.249661][T12183] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 863.249688][T12183] copy_fs_struct+0x4f/0x270 [ 863.249709][T12183] ksys_unshare+0x3a2/0x8c0 [ 863.249737][T12183] ? __pfx_ksys_unshare+0x10/0x10 [ 863.249755][T12183] ? ksys_write+0x230/0x260 [ 863.249776][T12183] ? __pfx_ksys_write+0x10/0x10 [ 863.249802][T12183] __x64_sys_unshare+0x38/0x50 [ 863.249821][T12183] do_syscall_64+0xfa/0xfa0 [ 863.249842][T12183] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.249863][T12183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.249880][T12183] ? clear_bhb_loop+0x60/0xb0 [ 863.249901][T12183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.249917][T12183] RIP: 0033:0x7f871459f749 [ 863.249933][T12183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.249948][T12183] RSP: 002b:00007f8712806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 863.249967][T12183] RAX: ffffffffffffffda RBX: 00007f87147f5fa0 RCX: 00007f871459f749 [ 863.249981][T12183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020480 [ 863.249992][T12183] RBP: 00007f8712806090 R08: 0000000000000000 R09: 0000000000000000 [ 863.250002][T12183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.250013][T12183] R13: 00007f87147f6038 R14: 00007f87147f5fa0 R15: 00007ffe35174c18 [ 863.250045][T12183] [ 863.414293][ T5918] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 863.924420][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 864.139998][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 864.157795][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 864.157858][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 864.351386][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 864.351454][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.351473][ T9] usb 3-1: Product: syz [ 864.351486][ T9] usb 3-1: Manufacturer: syz [ 864.351537][ T9] usb 3-1: SerialNumber: syz [ 864.584390][ T9] usb 3-1: config 0 descriptor?? [ 864.754505][ T9] usb 3-1: no audio or video endpoints found [ 865.434357][ T9] usb 3-1: USB disconnect, device number 46 [ 865.921122][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 865.922189][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 865.922221][ T5918] usb 2-1: can't read configurations, error -71 [ 865.924384][ T5918] usb usb2-port1: attempt power cycle [ 866.390427][T12214] 9p: Unknown Cache mode or invalid value m [ 868.051075][T12227] FAULT_INJECTION: forcing a failure. [ 868.051075][T12227] name failslab, interval 1, probability 0, space 0, times 0 [ 868.051105][T12227] CPU: 0 UID: 0 PID: 12227 Comm: syz.0.1761 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 868.051125][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 868.051134][T12227] Call Trace: [ 868.051141][T12227] [ 868.051148][T12227] dump_stack_lvl+0x189/0x250 [ 868.051176][T12227] ? __pfx____ratelimit+0x10/0x10 [ 868.051198][T12227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.051228][T12227] ? __pfx__printk+0x10/0x10 [ 868.051254][T12227] ? __pfx___might_resched+0x10/0x10 [ 868.051270][T12227] ? fs_reclaim_acquire+0x7d/0x100 [ 868.051296][T12227] should_fail_ex+0x46c/0x600 [ 868.051324][T12227] should_failslab+0xa8/0x100 [ 868.051347][T12227] __kmalloc_noprof+0xcc/0x7d0 [ 868.051368][T12227] ? tomoyo_encode+0x28b/0x550 [ 868.051393][T12227] tomoyo_encode+0x28b/0x550 [ 868.051418][T12227] tomoyo_realpath_from_path+0x58d/0x5d0 [ 868.051439][T12227] ? tomoyo_domain+0xda/0x130 [ 868.051463][T12227] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 868.051487][T12227] tomoyo_path_number_perm+0x1e8/0x5a0 [ 868.051513][T12227] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 868.051540][T12227] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 868.051563][T12227] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.051614][T12227] ? __fget_files+0x2a/0x420 [ 868.051640][T12227] ? __fget_files+0x3a6/0x420 [ 868.051658][T12227] ? __fget_files+0x2a/0x420 [ 868.051683][T12227] security_file_ioctl+0xcb/0x2d0 [ 868.051704][T12227] __se_sys_ioctl+0x47/0x170 [ 868.051725][T12227] do_syscall_64+0xfa/0xfa0 [ 868.051745][T12227] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.051765][T12227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.051781][T12227] ? clear_bhb_loop+0x60/0xb0 [ 868.051801][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.051816][T12227] RIP: 0033:0x7f2f254bf749 [ 868.051832][T12227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.051846][T12227] RSP: 002b:00007f2f236fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 868.051865][T12227] RAX: ffffffffffffffda RBX: 00007f2f25716090 RCX: 00007f2f254bf749 [ 868.051877][T12227] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000007 [ 868.051888][T12227] RBP: 00007f2f236fd090 R08: 0000000000000000 R09: 0000000000000000 [ 868.051899][T12227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.051909][T12227] R13: 00007f2f25716128 R14: 00007f2f25716090 R15: 00007ffd1231c3e8 [ 868.051940][T12227] [ 868.051960][T12227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 868.052582][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 868.052598][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 869.826617][ T5918] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 870.057702][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.057745][ T5918] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 870.057765][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.106642][ T5918] usb 2-1: config 0 descriptor?? [ 870.122112][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.122183][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.552047][T12245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.553541][T12245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.716048][T12252] macsec0: entered promiscuous mode [ 870.933759][T12249] macsec0: left promiscuous mode [ 873.036336][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 873.036453][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 873.049097][ T5918] usb 2-1: USB disconnect, device number 39 [ 874.872244][T12282] FAULT_INJECTION: forcing a failure. [ 874.872244][T12282] name failslab, interval 1, probability 0, space 0, times 0 [ 874.872301][T12282] CPU: 0 UID: 0 PID: 12282 Comm: syz.2.1778 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 874.872322][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.872333][T12282] Call Trace: [ 874.872341][T12282] [ 874.872350][T12282] dump_stack_lvl+0x189/0x250 [ 874.872372][T12282] ? __pfx____ratelimit+0x10/0x10 [ 874.872386][T12282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.872400][T12282] ? __pfx__printk+0x10/0x10 [ 874.872415][T12282] ? __pfx___might_resched+0x10/0x10 [ 874.872426][T12282] ? fs_reclaim_acquire+0x7d/0x100 [ 874.872442][T12282] should_fail_ex+0x46c/0x600 [ 874.872458][T12282] ? getname_flags+0xb8/0x540 [ 874.872472][T12282] should_failslab+0xa8/0x100 [ 874.872486][T12282] ? getname_flags+0xb8/0x540 [ 874.872499][T12282] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 874.872515][T12282] getname_flags+0xb8/0x540 [ 874.872532][T12282] user_path_at+0x24/0x60 [ 874.872543][T12282] do_fchmodat+0xef/0x200 [ 874.872561][T12282] ? __pfx_do_fchmodat+0x10/0x10 [ 874.872576][T12282] __x64_sys_fchmodat+0x7d/0x90 [ 874.872592][T12282] do_syscall_64+0xfa/0xfa0 [ 874.872607][T12282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.872615][T12282] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 874.872625][T12282] ? clear_bhb_loop+0x60/0xb0 [ 874.872636][T12282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.872646][T12282] RIP: 0033:0x7f8f829ff749 [ 874.872656][T12282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.872664][T12282] RSP: 002b:00007f8f80c3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 874.872675][T12282] RAX: ffffffffffffffda RBX: 00007f8f82c56090 RCX: 00007f8f829ff749 [ 874.872682][T12282] RDX: 00000000fffffffb RSI: 0000200000000000 RDI: ffffffffffffff9c [ 874.872688][T12282] RBP: 00007f8f80c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 874.872694][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.872700][T12282] R13: 00007f8f82c56128 R14: 00007f8f82c56090 R15: 00007ffd53509b78 [ 874.872716][T12282] [ 878.784687][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1783'. [ 879.061373][T12302] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 880.127365][T12313] macsec0: entered promiscuous mode [ 880.206363][T12303] macsec0: left promiscuous mode [ 880.804154][ T5918] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 880.967126][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.967170][ T5918] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 880.967191][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.975129][ T5918] usb 6-1: config 0 descriptor?? [ 881.005651][ T5871] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 881.629883][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 881.780705][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 881.788257][ T5871] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.788287][ T5871] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.788308][ T5871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 881.788338][ T5871] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 881.788356][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.085177][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.085958][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.123616][ T5871] usb 2-1: config 0 descriptor?? [ 882.547800][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 882.622401][ T5871] nzxt-smart2 0003:1E71:2009.0024: item fetching failed at offset 2/5 [ 882.644235][ T5871] nzxt-smart2 0003:1E71:2009.0024: probe with driver nzxt-smart2 failed with error -22 [ 882.878295][ T10] usb 2-1: USB disconnect, device number 40 [ 884.035002][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1796'. [ 884.092474][ T5918] usbhid 6-1:0.0: can't add hid device: -71 [ 884.092604][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 884.112528][ T5918] usb 6-1: USB disconnect, device number 23 [ 884.223204][T12353] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 884.253695][T12353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1796'. [ 884.750905][T12376] macsec0: entered promiscuous mode [ 884.773644][T12364] macsec0: left promiscuous mode [ 885.574097][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 885.734163][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 887.449116][ T5814] Bluetooth: hci5: command 0x0c1a tx timeout [ 887.464058][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.464086][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.464105][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 887.464135][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 887.464154][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.535442][ T10] usb 4-1: config 0 descriptor?? [ 890.407135][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 890.407260][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 890.456915][ T10] usb 4-1: USB disconnect, device number 42 [ 890.668954][T12409] FAULT_INJECTION: forcing a failure. [ 890.668954][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 890.668987][T12409] CPU: 1 UID: 0 PID: 12409 Comm: syz.3.1810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 890.669008][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 890.669018][T12409] Call Trace: [ 890.669025][T12409] [ 890.669033][T12409] dump_stack_lvl+0x189/0x250 [ 890.669061][T12409] ? __pfx____ratelimit+0x10/0x10 [ 890.669084][T12409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.669106][T12409] ? __pfx__printk+0x10/0x10 [ 890.669132][T12409] ? __pfx___might_resched+0x10/0x10 [ 890.669151][T12409] ? fs_reclaim_acquire+0x7d/0x100 [ 890.669177][T12409] should_fail_ex+0x46c/0x600 [ 890.669203][T12409] ? __alloc_skb+0x112/0x2d0 [ 890.669221][T12409] should_failslab+0xa8/0x100 [ 890.669244][T12409] ? __alloc_skb+0x112/0x2d0 [ 890.669260][T12409] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 890.669282][T12409] ? netlink_autobind+0xdb/0x300 [ 890.669307][T12409] __alloc_skb+0x112/0x2d0 [ 890.669329][T12409] netlink_sendmsg+0x5c6/0xb30 [ 890.669345][T12409] ? is_bpf_text_address+0x26/0x2b0 [ 890.669377][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.669404][T12409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.669426][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.669445][T12409] __sock_sendmsg+0x21c/0x270 [ 890.669472][T12409] ____sys_sendmsg+0x508/0x820 [ 890.669499][T12409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.669530][T12409] ? import_iovec+0x74/0xa0 [ 890.669553][T12409] ___sys_sendmsg+0x21f/0x2a0 [ 890.669582][T12409] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.669641][T12409] ? __fget_files+0x2a/0x420 [ 890.669661][T12409] ? __fget_files+0x3a6/0x420 [ 890.669694][T12409] __x64_sys_sendmsg+0x1a1/0x260 [ 890.669717][T12409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.669748][T12409] ? __pfx_ksys_write+0x10/0x10 [ 890.669774][T12409] ? do_syscall_64+0xbe/0xfa0 [ 890.669800][T12409] do_syscall_64+0xfa/0xfa0 [ 890.669820][T12409] ? lockdep_hardirqs_on+0x9c/0x150 [ 890.669842][T12409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.669860][T12409] ? clear_bhb_loop+0x60/0xb0 [ 890.669881][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.669898][T12409] RIP: 0033:0x7f871459f749 [ 890.669914][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.669930][T12409] RSP: 002b:00007f8712806038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.669949][T12409] RAX: ffffffffffffffda RBX: 00007f87147f5fa0 RCX: 00007f871459f749 [ 890.669962][T12409] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 890.669972][T12409] RBP: 00007f8712806090 R08: 0000000000000000 R09: 0000000000000000 [ 890.669983][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.669993][T12409] R13: 00007f87147f6038 R14: 00007f87147f5fa0 R15: 00007ffe35174c18 [ 890.670025][T12409] [ 891.368884][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'. [ 891.474826][T12416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1812'. [ 891.534477][T12413] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 891.678145][T12423] cgroup: release_agent respecified [ 892.034817][T12425] macsec0: entered promiscuous mode [ 892.036212][T12424] macsec0: left promiscuous mode [ 893.334124][ T5871] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 893.494616][ T5871] usb 6-1: Using ep0 maxpacket: 16 [ 893.497267][ T5871] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.497295][ T5871] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.497315][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0 [ 893.497347][ T5871] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 893.497375][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.547837][ T5810] Bluetooth: hci5: command 0x0c1a tx timeout [ 893.576222][ T5871] usb 6-1: config 0 descriptor?? [ 894.904384][T12433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1809'. [ 895.244059][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 895.394165][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 895.396758][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.396787][ T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.396807][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 895.396839][ T10] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 895.396859][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.647481][ T5871] nzxt-smart2 0003:1E71:2009.0025: item fetching failed at offset 2/5 [ 895.648350][ T5871] nzxt-smart2 0003:1E71:2009.0025: probe with driver nzxt-smart2 failed with error -22 [ 896.232835][ T10] usb 2-1: config 0 descriptor?? [ 896.259809][ T5871] usb 6-1: USB disconnect, device number 24 [ 896.717820][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 897.730241][ T10] nzxt-smart2 0003:1E71:2009.0026: item fetching failed at offset 2/5 [ 897.730759][ T10] nzxt-smart2 0003:1E71:2009.0026: probe with driver nzxt-smart2 failed with error -22 [ 897.824130][ T5891] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 897.986434][ T5891] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 897.986461][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.002653][ T5918] usb 2-1: USB disconnect, device number 41 [ 898.076597][ T5891] usb 1-1: config 0 descriptor?? [ 898.289684][ T5891] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 898.373494][T12474] macsec0: entered promiscuous mode [ 898.391791][T12473] macsec0: left promiscuous mode [ 898.544318][ T5891] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 898.544342][ T5891] [drm] Initialized udl on minor 2 [ 898.695241][ T5891] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 898.716061][ T5891] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 899.141904][ T5871] usb 1-1: USB disconnect, device number 28 [ 899.307344][ T5917] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 899.308183][ T5917] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 900.017200][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 900.017269][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1832'. [ 900.842917][T12460] kexec: Could not allocate control_code_buffer [ 903.970915][ T5918] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 904.144074][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 904.146407][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.146448][ T5918] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 904.146469][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.151631][ T5918] usb 2-1: config 0 descriptor?? [ 904.299975][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.300026][ T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 904.300047][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.340450][ T10] usb 3-1: config 0 descriptor?? [ 904.575609][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.576720][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.810600][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.819477][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.307674][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 906.307794][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 907.275827][ T5918] usb 2-1: USB disconnect, device number 42 [ 909.278937][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 909.281446][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 909.317106][ T10] usb 3-1: USB disconnect, device number 47 [ 909.815112][T12571] 9p: Unknown Cache mode or invalid value m [ 910.486233][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 910.576541][T12563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1851'. [ 910.684716][T12569] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 911.464789][ T993] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 911.635148][T12595] 9p: Unknown Cache mode or invalid value m [ 911.650773][ T993] usb 6-1: Using ep0 maxpacket: 16 [ 912.041857][ T993] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.041944][ T993] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.041966][ T993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 912.041999][ T993] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 912.042019][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.236428][ T993] usb 6-1: config 0 descriptor?? [ 912.759000][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1859'. [ 912.847443][ T993] nzxt-smart2 0003:1E71:2009.0027: item fetching failed at offset 2/5 [ 912.848356][ T993] nzxt-smart2 0003:1E71:2009.0027: probe with driver nzxt-smart2 failed with error -22 [ 913.164851][ T993] usb 6-1: USB disconnect, device number 25 [ 914.177697][T12614] 9pnet: Could not find request transport: rama [ 914.899867][T12622] 9p: Unknown Cache mode or invalid value m [ 916.652541][T12634] 9p: Unknown Cache mode or invalid value m [ 917.358639][T12632] cgroup: release_agent respecified [ 919.716881][T12659] netlink: 'syz.1.1876': attribute type 1 has an invalid length. [ 919.758433][T12663] cgroup: release_agent respecified [ 919.774451][ T5917] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 919.837452][T12659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.843273][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 919.849799][T12664] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 919.861692][T12664] bond1: (slave batadv1): making interface the new active one [ 919.871670][T12664] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 919.987801][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.987827][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.991716][T12661] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 920.000842][ T5917] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 920.000870][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 920.000888][ T5917] usb 4-1: SerialNumber: syz [ 920.006905][T12661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1877'. [ 920.354278][ T993] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 920.354591][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 921.138669][ T993] usb 3-1: device descriptor read/64, error -32 [ 921.321215][T12681] macsec0: entered promiscuous mode [ 921.338222][T12677] macsec0: left promiscuous mode [ 921.384468][ T993] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 921.403544][ T5917] usb 4-1: 0:2 : does not exist [ 921.403629][ T5917] usb 4-1: unit 5 not found! [ 922.385925][ T5810] Bluetooth: hci5: command 0x0c1a tx timeout [ 922.429139][ T5917] usb 4-1: USB disconnect, device number 43 [ 922.484058][ T993] usb 3-1: Using ep0 maxpacket: 16 [ 922.486374][ T993] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 922.486403][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 922.564569][ T993] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 922.564597][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.564615][ T993] usb 3-1: Product: syz [ 922.564627][ T993] usb 3-1: Manufacturer: syz [ 922.564640][ T993] usb 3-1: SerialNumber: syz [ 922.610741][ T993] usb 3-1: config 0 descriptor?? [ 922.651948][ T993] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 922.651980][ T993] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 922.705226][T12325] udevd[12325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.675581][T12702] FAULT_INJECTION: forcing a failure. [ 923.675581][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.675730][T12702] CPU: 1 UID: 0 PID: 12702 Comm: syz.3.1887 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 923.675752][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 923.675762][T12702] Call Trace: [ 923.675770][T12702] [ 923.675778][T12702] dump_stack_lvl+0x189/0x250 [ 923.675806][T12702] ? __pfx____ratelimit+0x10/0x10 [ 923.675829][T12702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.675853][T12702] ? __pfx__printk+0x10/0x10 [ 923.675886][T12702] should_fail_ex+0x46c/0x600 [ 923.675914][T12702] strncpy_from_user+0x36/0x290 [ 923.675939][T12702] getname_flags+0xf3/0x540 [ 923.675967][T12702] do_sys_openat2+0xbc/0x1c0 [ 923.675989][T12702] ? __pfx_do_sys_openat2+0x10/0x10 [ 923.676011][T12702] ? ksys_write+0x230/0x260 [ 923.676033][T12702] ? __pfx_ksys_write+0x10/0x10 [ 923.676056][T12702] __x64_sys_openat+0x138/0x170 [ 923.676080][T12702] do_syscall_64+0xfa/0xfa0 [ 923.676103][T12702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.676120][T12702] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 923.676136][T12702] ? clear_bhb_loop+0x60/0xb0 [ 923.676157][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.676174][T12702] RIP: 0033:0x7f871459f749 [ 923.676190][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.676205][T12702] RSP: 002b:00007f87127c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 923.676225][T12702] RAX: ffffffffffffffda RBX: 00007f87147f6180 RCX: 00007f871459f749 [ 923.676238][T12702] RDX: 00000000001810bf RSI: 00002000000021c0 RDI: ffffffffffffff9c [ 923.676251][T12702] RBP: 00007f87127c4090 R08: 0000000000000000 R09: 0000000000000000 [ 923.676263][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.676274][T12702] R13: 00007f87147f6218 R14: 00007f87147f6180 R15: 00007ffe35174c18 [ 923.676312][T12702] [ 923.949329][T12692] macsec0: entered promiscuous mode [ 923.986026][T12686] macsec0: left promiscuous mode [ 924.180207][T12699] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 924.221747][T12711] cgroup: release_agent respecified [ 924.408376][ T993] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 924.409639][ T993] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 924.414853][ T5917] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 924.806351][ T5917] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 924.806379][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.839896][ T993] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 924.839918][ T993] em28xx 3-1:0.0: No AC97 audio processor [ 924.845709][ T5917] usb 2-1: config 0 descriptor?? [ 926.033783][ T993] usb 3-1: USB disconnect, device number 49 [ 926.043391][ T993] em28xx 3-1:0.0: Disconnecting em28xx [ 926.071272][ T5917] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 926.080334][ T993] em28xx 3-1:0.0: Freeing device [ 926.302286][ T5917] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 926.302310][ T5917] [drm] Initialized udl on minor 2 [ 926.324999][T12724] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 926.473325][ T5917] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 926.473670][ T5917] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 927.584204][ T7949] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 927.654138][ T993] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 927.660533][ T993] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 927.660766][ T993] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 927.662761][T12468] usb 2-1: USB disconnect, device number 43 [ 927.710518][T12739] FAULT_INJECTION: forcing a failure. [ 927.710518][T12739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.710553][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.3.1897 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 927.710573][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 927.710584][T12739] Call Trace: [ 927.710591][T12739] [ 927.710599][T12739] dump_stack_lvl+0x189/0x250 [ 927.710628][T12739] ? __pfx____ratelimit+0x10/0x10 [ 927.710651][T12739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.710674][T12739] ? __pfx__printk+0x10/0x10 [ 927.710694][T12739] ? __might_fault+0xb0/0x130 [ 927.710819][T12739] should_fail_ex+0x46c/0x600 [ 927.710849][T12739] _copy_from_user+0x2d/0xb0 [ 927.710869][T12739] memdup_user_nul+0x66/0x110 [ 927.710890][T12739] smk_write_relabel_self+0x14d/0x4e0 [ 927.710925][T12739] ? __pfx_smk_write_relabel_self+0x10/0x10 [ 927.710951][T12739] ? __pfx_smk_write_relabel_self+0x10/0x10 [ 927.710968][T12739] vfs_write+0x287/0xb40 [ 927.710997][T12739] ? __pfx_vfs_write+0x10/0x10 [ 927.711013][T12739] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 927.711044][T12739] ? mutex_lock_nested+0x154/0x1d0 [ 927.711061][T12739] ? fdget_pos+0x253/0x320 [ 927.711092][T12739] ksys_write+0x14b/0x260 [ 927.711115][T12739] ? __pfx_ksys_write+0x10/0x10 [ 927.711139][T12739] ? do_syscall_64+0xbe/0xfa0 [ 927.711166][T12739] do_syscall_64+0xfa/0xfa0 [ 927.711190][T12739] ? lockdep_hardirqs_on+0x9c/0x150 [ 927.711211][T12739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.711228][T12739] ? clear_bhb_loop+0x60/0xb0 [ 927.711248][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.711265][T12739] RIP: 0033:0x7f871459f749 [ 927.711280][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.711296][T12739] RSP: 002b:00007f8712806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.711315][T12739] RAX: ffffffffffffffda RBX: 00007f87147f5fa0 RCX: 00007f871459f749 [ 927.711328][T12739] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 927.711339][T12739] RBP: 00007f8712806090 R08: 0000000000000000 R09: 0000000000000000 [ 927.711350][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.711360][T12739] R13: 00007f87147f6038 R14: 00007f87147f5fa0 R15: 00007ffe35174c18 [ 927.711394][T12739] [ 928.104096][T12468] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 928.114267][ T7949] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.114290][ T7949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 928.121586][ T7949] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 928.121603][ T7949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 928.121613][ T7949] usb 1-1: SerialNumber: syz [ 928.269004][T12468] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 928.269032][T12468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.269050][T12468] usb 2-1: Product: syz [ 928.269062][T12468] usb 2-1: Manufacturer: syz [ 928.269075][T12468] usb 2-1: SerialNumber: syz [ 928.560553][T12468] usb 2-1: config 0 descriptor?? [ 928.863683][T12753] FAULT_INJECTION: forcing a failure. [ 928.863683][T12753] name failslab, interval 1, probability 0, space 0, times 0 [ 928.864990][T12753] CPU: 0 UID: 0 PID: 12753 Comm: syz.5.1901 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 928.865013][T12753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 928.865023][T12753] Call Trace: [ 928.865031][T12753] [ 928.865039][T12753] dump_stack_lvl+0x189/0x250 [ 928.865067][T12753] ? __pfx____ratelimit+0x10/0x10 [ 928.865091][T12753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.865113][T12753] ? __pfx__printk+0x10/0x10 [ 928.865140][T12753] ? __pfx___might_resched+0x10/0x10 [ 928.865159][T12753] ? fs_reclaim_acquire+0x7d/0x100 [ 928.865185][T12753] should_fail_ex+0x46c/0x600 [ 928.865212][T12753] ? __alloc_skb+0x112/0x2d0 [ 928.865229][T12753] should_failslab+0xa8/0x100 [ 928.865252][T12753] ? __alloc_skb+0x112/0x2d0 [ 928.865268][T12753] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 928.865288][T12753] ? smack_socket_sendmsg+0x1a7/0x520 [ 928.865315][T12753] __alloc_skb+0x112/0x2d0 [ 928.865337][T12753] netlink_sendmsg+0x5c6/0xb30 [ 928.865355][T12753] ? is_bpf_text_address+0x26/0x2b0 [ 928.865388][T12753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.865414][T12753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 928.865435][T12753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.865455][T12753] __sock_sendmsg+0x21c/0x270 [ 928.865482][T12753] ____sys_sendmsg+0x508/0x820 [ 928.865508][T12753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.865539][T12753] ? import_iovec+0x74/0xa0 [ 928.865569][T12753] ___sys_sendmsg+0x21f/0x2a0 [ 928.865592][T12753] ? __pfx____sys_sendmsg+0x10/0x10 [ 928.865652][T12753] ? __fget_files+0x2a/0x420 [ 928.865672][T12753] ? __fget_files+0x3a6/0x420 [ 928.865706][T12753] __x64_sys_sendmsg+0x1a1/0x260 [ 928.865728][T12753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 928.865759][T12753] ? __pfx_ksys_write+0x10/0x10 [ 928.865784][T12753] ? do_syscall_64+0xbe/0xfa0 [ 928.865810][T12753] do_syscall_64+0xfa/0xfa0 [ 928.865830][T12753] ? lockdep_hardirqs_on+0x9c/0x150 [ 928.865851][T12753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.865869][T12753] ? clear_bhb_loop+0x60/0xb0 [ 928.865889][T12753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.865906][T12753] RIP: 0033:0x7f1c9b2af749 [ 928.865921][T12753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.865936][T12753] RSP: 002b:00007f1c99516038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.865955][T12753] RAX: ffffffffffffffda RBX: 00007f1c9b505fa0 RCX: 00007f1c9b2af749 [ 928.865969][T12753] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 928.865984][T12753] RBP: 00007f1c99516090 R08: 0000000000000000 R09: 0000000000000000 [ 928.865994][T12753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.866004][T12753] R13: 00007f1c9b506038 R14: 00007f1c9b505fa0 R15: 00007ffe7ba37fb8 [ 928.866037][T12753] [ 930.118111][ T7949] usb 1-1: 0:2 : does not exist [ 930.140184][ T7949] usb 1-1: unit 5 not found! [ 930.181794][ T7949] usb 1-1: USB disconnect, device number 29 [ 930.281938][ T5810] Bluetooth: hci1: urb ffff8880262cd700 submission failed (2) [ 930.370700][T12455] udevd[12455]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.610224][T12765] cgroup: release_agent respecified [ 930.935623][T12767] cgroup: release_agent respecified [ 931.558598][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.558669][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.946532][T12710] kexec: Could not allocate control_code_buffer [ 933.041697][ T993] usb 2-1: USB disconnect, device number 44 [ 933.694810][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 933.874685][ T5871] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 934.024321][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 934.026883][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 934.026911][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 934.029933][ T5871] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 934.029958][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.029976][ T5871] usb 3-1: Product: syz [ 934.029988][ T5871] usb 3-1: Manufacturer: syz [ 934.030001][ T5871] usb 3-1: SerialNumber: syz [ 934.076171][ T5871] usb 3-1: config 0 descriptor?? [ 934.152639][ T5871] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 934.152672][ T5871] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 935.588739][T12814] cgroup: release_agent respecified [ 935.974274][ T5871] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 935.983230][ T5871] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 936.785185][ T5871] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 936.785205][ T5871] em28xx 3-1:0.0: No AC97 audio processor [ 938.678211][ T993] usb 3-1: USB disconnect, device number 50 [ 938.680757][ T993] em28xx 3-1:0.0: Disconnecting em28xx [ 938.706266][ T993] em28xx 3-1:0.0: Freeing device [ 938.760773][T12828] kthread_run failed with err -4 [ 942.855431][ T993] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 943.324177][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 943.327782][ T993] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 943.327809][ T993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 943.355726][ T993] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 943.355753][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.355771][ T993] usb 1-1: Product: syz [ 943.355783][ T993] usb 1-1: Manufacturer: syz [ 943.355795][ T993] usb 1-1: SerialNumber: syz [ 943.502694][ T993] usb 1-1: config 0 descriptor?? [ 943.523638][ T993] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 943.523657][ T993] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 944.281878][ T993] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 944.304298][ T993] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 944.523194][ T993] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 944.523214][ T993] em28xx 1-1:0.0: No AC97 audio processor [ 944.884839][T12891] macsec0: entered promiscuous mode [ 944.886193][T12890] macsec0: left promiscuous mode [ 945.244067][ T993] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 945.397289][ T993] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 945.397317][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.400325][ T993] usb 4-1: config 0 descriptor?? [ 945.618368][ T993] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 945.662239][ T7949] usb 1-1: USB disconnect, device number 30 [ 945.683169][ T7949] em28xx 1-1:0.0: Disconnecting em28xx [ 945.721424][ T7949] em28xx 1-1:0.0: Freeing device [ 945.931974][ T993] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 945.931997][ T993] [drm] Initialized udl on minor 2 [ 946.276566][ T993] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 946.276935][ T993] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 947.869471][ T5892] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.870948][ T5892] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 947.871114][ T5892] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 947.904404][ T993] usb 4-1: USB disconnect, device number 44 [ 948.478150][T12925] cgroup: release_agent respecified [ 949.024108][ T993] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 950.539697][T12901] kexec: Could not allocate control_code_buffer [ 951.097521][T12950] cgroup: release_agent respecified [ 953.974113][ T5892] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 954.127817][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 954.130147][ T5892] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.130184][ T5892] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.130204][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 954.130236][ T5892] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 954.130257][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.196297][ T5892] usb 6-1: config 0 descriptor?? [ 954.765393][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 955.171077][ T993] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 955.774069][ T993] usb 1-1: Using ep0 maxpacket: 16 [ 955.776749][ T993] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.776779][ T993] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.776800][ T993] usb 1-1: config 0 interface 0 has no altsetting 0 [ 955.776833][ T993] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 955.776854][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.844579][ T5892] nzxt-smart2 0003:1E71:2009.0028: item fetching failed at offset 2/5 [ 955.845496][ T5892] nzxt-smart2 0003:1E71:2009.0028: probe with driver nzxt-smart2 failed with error -22 [ 955.938206][ T993] usb 1-1: config 0 descriptor?? [ 955.942089][ T5892] usb 6-1: USB disconnect, device number 26 [ 956.922830][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 957.102727][ T993] nzxt-smart2 0003:1E71:2009.0029: item fetching failed at offset 2/5 [ 957.103664][ T993] nzxt-smart2 0003:1E71:2009.0029: probe with driver nzxt-smart2 failed with error -22 [ 957.514150][ T993] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 957.582163][ T5892] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 957.674575][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 957.679440][ T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.679485][ T993] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 957.679505][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.720847][ T993] usb 4-1: config 0 descriptor?? [ 957.734000][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 957.739638][ T5892] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.739723][ T5892] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.739744][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 957.739777][ T5892] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 957.739806][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.804703][ T5892] usb 6-1: config 0 descriptor?? [ 958.088314][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1973'. [ 958.231627][T11207] usb 1-1: USB disconnect, device number 31 [ 958.391558][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1975'. [ 958.427294][ T993] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 958.594345][ C0] ================================================================== [ 958.594367][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 958.594405][ C0] Read of size 1 at addr ffff888032b7ffff by task ktimers/0/16 [ 958.594431][ C0] [ 958.594445][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 958.594471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.594484][ C0] Call Trace: [ 958.594493][ C0] [ 958.594502][ C0] dump_stack_lvl+0x189/0x250 [ 958.594535][ C0] ? __kasan_check_byte+0x12/0x40 [ 958.594566][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.594595][ C0] ? lock_release+0x4b/0x3e0 [ 958.594625][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 958.594657][ C0] print_report+0xca/0x240 [ 958.594682][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 958.594694][ C0] kasan_report+0x118/0x150 [ 958.594710][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 958.594731][ C0] mcp2221_raw_event+0x106a/0x1240 [ 958.594745][ C0] ? down_trylock+0x50/0xb0 [ 958.594757][ C0] hid_input_report+0x40f/0x530 [ 958.594773][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 958.594786][ C0] hid_irq_in+0x47e/0x6d0 [ 958.594802][ C0] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 958.594819][ C0] dummy_timer+0x8a0/0x4610 [ 958.594848][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.594865][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 958.594880][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 958.594894][ C0] __hrtimer_run_queues+0x552/0xd40 [ 958.594916][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 958.594932][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 958.594948][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 958.594960][ C0] handle_softirqs+0x22f/0x710 [ 958.594976][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 958.594992][ C0] run_ktimerd+0xcf/0x190 [ 958.595007][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 958.595021][ C0] ? schedule+0x91/0x360 [ 958.595036][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 958.595050][ C0] smpboot_thread_fn+0x542/0xa60 [ 958.595064][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 958.595079][ C0] kthread+0x711/0x8a0 [ 958.595098][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 958.595123][ C0] ? __pfx_kthread+0x10/0x10 [ 958.595150][ C0] ? rt_spin_unlock+0x150/0x200 [ 958.595176][ C0] ? rt_spin_unlock+0x161/0x200 [ 958.595195][ C0] ? __pfx_kthread+0x10/0x10 [ 958.595224][ C0] ret_from_fork+0x4bc/0x870 [ 958.595242][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 958.595257][ C0] ? __switch_to_asm+0x39/0x70 [ 958.595268][ C0] ? __switch_to_asm+0x33/0x70 [ 958.595278][ C0] ? __pfx_kthread+0x10/0x10 [ 958.595294][ C0] ret_from_fork_asm+0x1a/0x30 [ 958.595309][ C0] [ 958.595314][ C0] [ 958.595324][ C0] Allocated by task 1497: [ 958.595331][ C0] kasan_save_track+0x3e/0x80 [ 958.595345][ C0] __kasan_slab_alloc+0x6c/0x80 [ 958.595358][ C0] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 958.595372][ C0] __alloc_skb+0x112/0x2d0 [ 958.595383][ C0] nsim_dev_trap_report_work+0x29f/0xbc0 [ 958.595397][ C0] process_scheduled_works+0xae1/0x17b0 [ 958.595410][ C0] worker_thread+0x8a0/0xda0 [ 958.595440][ C0] kthread+0x711/0x8a0 [ 958.595454][ C0] ret_from_fork+0x4bc/0x870 [ 958.595465][ C0] ret_from_fork_asm+0x1a/0x30 [ 958.595477][ C0] [ 958.595480][ C0] Freed by task 1497: [ 958.595485][ C0] kasan_save_track+0x3e/0x80 [ 958.595496][ C0] __kasan_save_free_info+0x46/0x50 [ 958.595507][ C0] __kasan_slab_free+0x5c/0x80 [ 958.595519][ C0] kmem_cache_free+0x19a/0x910 [ 958.595532][ C0] nsim_dev_trap_report_work+0x7fa/0xbc0 [ 958.595546][ C0] process_scheduled_works+0xae1/0x17b0 [ 958.595557][ C0] worker_thread+0x8a0/0xda0 [ 958.595569][ C0] kthread+0x711/0x8a0 [ 958.595582][ C0] ret_from_fork+0x4bc/0x870 [ 958.595593][ C0] ret_from_fork_asm+0x1a/0x30 [ 958.595603][ C0] [ 958.595606][ C0] The buggy address belongs to the object at ffff888032b7fdc0 [ 958.595606][ C0] which belongs to the cache skbuff_head_cache of size 240 [ 958.595617][ C0] The buggy address is located 335 bytes to the right of [ 958.595617][ C0] allocated 240-byte region [ffff888032b7fdc0, ffff888032b7feb0) [ 958.595630][ C0] [ 958.595632][ C0] The buggy address belongs to the physical page: [ 958.595642][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32b7f [ 958.595654][ C0] memcg:ffff888027c20e81 [ 958.595659][ C0] flags: 0x80000000000000(node=0|zone=1) [ 958.595672][ C0] page_type: f5(slab) [ 958.595684][ C0] raw: 0080000000000000 ffff888140ecc8c0 dead000000000100 dead000000000122 [ 958.595695][ C0] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888027c20e81 [ 958.595700][ C0] page dumped because: kasan: bad access detected [ 958.595709][ C0] page_owner tracks the page as allocated [ 958.595714][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 16, tgid 16 (ktimers/0), ts 60354524130, free_ts 60235378527 [ 958.595740][ C0] post_alloc_hook+0x234/0x290 [ 958.595754][ C0] get_page_from_freelist+0x28c0/0x2960 [ 958.595769][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 958.595785][ C0] alloc_pages_mpol+0xd1/0x380 [ 958.595800][ C0] allocate_slab+0x96/0x350 [ 958.595810][ C0] ___slab_alloc+0xb10/0x1400 [ 958.595820][ C0] __slab_alloc+0xc6/0x1f0 [ 958.595828][ C0] kmem_cache_alloc_node_noprof+0x1ac/0x6e0 [ 958.595841][ C0] __alloc_skb+0x112/0x2d0 [ 958.595851][ C0] lapb_send_control+0x38/0x3e0 [ 958.595865][ C0] lapb_t1timer_expiry+0x6b1/0xb10 [ 958.595879][ C0] call_timer_fn+0x17e/0x5f0 [ 958.595892][ C0] __run_timer_base+0x648/0x970 [ 958.595904][ C0] run_timer_softirq+0xb7/0x180 [ 958.595916][ C0] handle_softirqs+0x22f/0x710 [ 958.595929][ C0] run_ktimerd+0xcf/0x190 [ 958.595942][ C0] page last free pid 993 tgid 993 stack trace: [ 958.595949][ C0] __free_frozen_pages+0xfb6/0x1140 [ 958.595963][ C0] vfree+0x2ad/0x470 [ 958.595975][ C0] delayed_vfree_work+0x55/0x80 [ 958.595989][ C0] process_scheduled_works+0xae1/0x17b0 [ 958.596001][ C0] worker_thread+0x8a0/0xda0 [ 958.596013][ C0] kthread+0x711/0x8a0 [ 958.596027][ C0] ret_from_fork+0x4bc/0x870 [ 958.596038][ C0] ret_from_fork_asm+0x1a/0x30 [ 958.596049][ C0] [ 958.596051][ C0] Memory state around the buggy address: [ 958.596058][ C0] ffff888032b7fe80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 958.596065][ C0] ffff888032b7ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 958.596073][ C0] >ffff888032b7ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 958.596078][ C0] ^ [ 958.596086][ C0] ffff888032b80000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.596093][ C0] ffff888032b80080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 958.596099][ C0] ================================================================== [ 958.596112][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 958.596122][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 958.596136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.596143][ C0] Call Trace: [ 958.596148][ C0] [ 958.596152][ C0] dump_stack_lvl+0x99/0x250 [ 958.596170][ C0] ? __asan_memcpy+0x40/0x70 [ 958.596183][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.596199][ C0] ? __pfx__printk+0x10/0x10 [ 958.596216][ C0] vpanic+0x237/0x6d0 [ 958.596227][ C0] ? __pfx_vpanic+0x10/0x10 [ 958.596241][ C0] panic+0xb9/0xc0 [ 958.596250][ C0] ? __pfx_panic+0x10/0x10 [ 958.596260][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 958.596278][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 958.596295][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 958.596308][ C0] check_panic_on_warn+0x89/0xb0 [ 958.596319][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 958.596331][ C0] end_report+0x78/0x160 [ 958.596346][ C0] kasan_report+0x129/0x150 [ 958.596362][ C0] ? mcp2221_raw_event+0x106a/0x1240 [ 958.596377][ C0] mcp2221_raw_event+0x106a/0x1240 [ 958.596399][ C0] ? down_trylock+0x50/0xb0 [ 958.596419][ C0] hid_input_report+0x40f/0x530 [ 958.596448][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 958.596473][ C0] hid_irq_in+0x47e/0x6d0 [ 958.596492][ C0] __usb_hcd_giveback_urb+0x3b4/0x5e0 [ 958.596509][ C0] dummy_timer+0x8a0/0x4610 [ 958.596535][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.596552][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 958.596567][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 958.596580][ C0] __hrtimer_run_queues+0x552/0xd40 [ 958.596601][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 958.596617][ C0] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 958.596633][ C0] hrtimer_run_softirq+0x1a3/0x2e0 [ 958.596645][ C0] handle_softirqs+0x22f/0x710 [ 958.596661][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 958.596676][ C0] run_ktimerd+0xcf/0x190 [ 958.596690][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 958.596705][ C0] ? schedule+0x91/0x360 [ 958.596725][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 958.596740][ C0] smpboot_thread_fn+0x542/0xa60 [ 958.596754][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 958.596770][ C0] kthread+0x711/0x8a0 [ 958.596787][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 958.596800][ C0] ? __pfx_kthread+0x10/0x10 [ 958.596815][ C0] ? rt_spin_unlock+0x150/0x200 [ 958.596830][ C0] ? rt_spin_unlock+0x161/0x200 [ 958.596842][ C0] ? __pfx_kthread+0x10/0x10 [ 958.596858][ C0] ret_from_fork+0x4bc/0x870 [ 958.596871][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 958.596886][ C0] ? __switch_to_asm+0x39/0x70 [ 958.596896][ C0] ? __switch_to_asm+0x33/0x70 [ 958.596907][ C0] ? __pfx_kthread+0x10/0x10 [ 958.596922][ C0] ret_from_fork_asm+0x1a/0x30 [ 958.596937][ C0] [ 958.597091][ C0] Kernel Offset: disabled