last executing test programs: 7.152693926s ago: executing program 2 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) (async) signalfd(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040), 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x40, 0x9ffac2705d37b0b7, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) 6.964580581s ago: executing program 0 (id=1040): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00001100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x4, 0x8c, {0x8c, 0xe, "bfca1eac2b840df16dd55b314dd31a00476fb3bee07fba6b17874ee2c1b8c88a50beea1e2d87f5b8c74dcd63e3f35a3dab0bce4bbdd6a4d2da9c6ab95978e8a68be4f35316bb2078e2d83887dad57da592d36381c047d3a737025fb128d27204f70b504282c507938576b49edd0107366a3fb71aaed311c2b190ccba2e493c33349b70ed8dca41275c05"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x104f}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x0, 0x10, "de5d6ab6358677a18bc1df07d56e2518"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x81, 0x2, '\x00\x00'}, &(0x7f0000000300)={0x20, 0x82, 0x3, "8c1205"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "0da020"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "967f805f"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, 'Y*R'}}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x8200003, 0x801, 0x4, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000a40)={0x33, 0xd, 0x19, "7bcacc76b9d7b226fe9c966928d85d41e81762fe1dd1bd48c979c6bf3cfe577926277cef407c03661f42491215f01630357692"}) 6.815481616s ago: executing program 2 (id=1041): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)={'raw\x00', 0x0, [0x7, 0x81, 0x8, 0x7]}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="480002000308010104d80164a00000000000000606000240803500491db8720d002c0004800800064000000002080005400000d44008000340"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x124, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "05d7a8c2307cc401431e76c4d85825373cdbde1437d4e6bd943c95"}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed4a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x695c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x84000, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002840)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000880)={r5, 0x800, 0xfffb}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/119, 0x77}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x8}, 0x228}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x3, 0x40, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 6.512045962s ago: executing program 2 (id=1045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x18302, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x28}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9be, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x100, 0x0, 0x0, 0xae8e72bc314bb4aa, 0x7, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0x9}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000900)=""/4096, &(0x7f0000000000)=0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x3c) 5.179047298s ago: executing program 3 (id=1051): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0113180000000000000018000000180000000a0000000000000006040000000900000000000085000000e0002e320061615f302e00fdf8d3e28faac70d2028c29439746cc67d2d14468f201f17bb91fb716e35f3729b7dda0b5ea62585ec9803f1b013d74f13d0ac2e792bd18654267bf11285fb4467fb6c528b75c732805401a08a2a4f02268dc0a2fc7fbb5625490440b49acad5d4190a988696fc6064d857da2364491088ebec6941eeb1520a80aa3d98494bf05564a8bac97fb61cae7e55b4e9ce1a49efaad573b81a22a3943fb9e0b6f7f1cad16bed59e97caf5eaf32ba086e445bfc2e200e000000bf8f2dd0b65cab068c32282c91d1c033d9d04f6af36b714f0923b9f6f936b534718deffb9463f913741cebe3b2ad397fd63baca0347149c3042f3afd1ac88a86b325e3515e1ac869093eedee2129b66fa864d592cfb89a328dcf36ca6ac8e931d7cdcc"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0113180000000000000018000000180000000a0000000000000006040000000900000000000085000000e0002e320061615f302e00fdf8d3e28faac70d2028c29439746cc67d2d14468f201f17bb91fb716e35f3729b7dda0b5ea62585ec9803f1b013d74f13d0ac2e792bd18654267bf11285fb4467fb6c528b75c732805401a08a2a4f02268dc0a2fc7fbb5625490440b49acad5d4190a988696fc6064d857da2364491088ebec6941eeb1520a80aa3d98494bf05564a8bac97fb61cae7e55b4e9ce1a49efaad573b81a22a3943fb9e0b6f7f1cad16bed59e97caf5eaf32ba086e445bfc2e200e000000bf8f2dd0b65cab068c32282c91d1c033d9d04f6af36b714f0923b9f6f936b534718deffb9463f913741cebe3b2ad397fd63baca0347149c3042f3afd1ac88a86b325e3515e1ac869093eedee2129b66fa864d592cfb89a328dcf36ca6ac8e931d7cdcc"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e44", 0x4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) 5.036468949s ago: executing program 2 (id=1052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 4.950465806s ago: executing program 3 (id=1054): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x18, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) 4.76349022s ago: executing program 3 (id=1057): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000186000/0x4000)=nil, 0x4000, 0x1000000, 0x50, 0xffffffffffffffff, 0xeb7c6000) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) removexattr(0x0, 0x0) (async) removexattr(0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1, 0x1}, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) (async) bind$tipc(r1, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) read$FUSE(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) socket(0x1, 0x803, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400030000000000020000c155a071b7621142277a1a5a4487120000", @ANYRES16=r7, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001e0000000f00000006000100fe0f000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x4008000) 4.739413842s ago: executing program 2 (id=1058): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000001f80)=""/229, 0x1a, 0xe5, 0x2}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$amidi(0x0, 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x64}}, 0x10000) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x6000001c}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') r5 = syz_io_uring_setup(0x1648, &(0x7f0000000580)={0x0, 0x9, 0x10100, 0x0, 0x3d6}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r5, 0x207a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x50, 0xf, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0xaa, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x4, 0xf7}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x6, 0x3, 0x4, 0x10, 0xb}, 0xa5, &(0x7f00000000c0)={0x5, 0xf, 0xa5, 0x6, [@generic={0x56, 0x10, 0x4, "578326630ca375186891583a3a39d6fdfc1fe26c09b357b9e0c806eddfd027a4558647cdc51b3aafde6b7af64f3688ee7537c489cd074e2d897dca1c7672442cc9f6d880c82002e924f09824c0db70605a6e72"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x0, 0x880, 0x5, [0xff000f, 0xc0c0, 0xc0c0, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "38838dcbc23a6e9d522fb1d985b2b966"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0x9, 0x7f}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x7ff, 0x0, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0xb, 0x3}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x72, &(0x7f0000000280)=@string={0x72, 0x3, "6904026aaa182b7f4327a75d5e05858215fd4f4770c0dfa5fb5b97db98de13568340992775da53ca0901a98378215c70c88a3a56c49d1a87b7e57fda01b2c99fb3203fa4045e2ecf4edd79aa75fcd15c77ec7039352dd6bea03486b2bfbec2492338db32205bfda0928c92d419b11ad3"}}, {0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="52034ec4f24d3a02a031f6ad9fea4c77615da9215efd5587754dcfe09eaa0a41f20436bb5f974850dbe78b899553fd66b2cb19d4d3215db1111a9c5e9ff98aee2555968cb072b9163af2087f2d368157e88e4e3e7234aabea655"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}, {0x37, &(0x7f0000000380)=@string={0x37, 0x3, "9d25d3e82758cc679276d14ed3de0c6a71dda2b0aafec13af1cba3f9fc67c4a504da2ecf1bc66b8d92ef756641f8762ad4899f751f"}}, {0xad, &(0x7f00000003c0)=@string={0xad, 0x3, "05f6764ee8daeead507408b551dffdc1717ff9157d9b7d9684dcfe8556da07868d47fa4548a8d40866b2fdc21f79a66185cfe785c4d188311b9390ffd6f184b30562470a66205894e94592e32e5573a464c1783b180c0b5658eb3085645ead166b4a3b8cc61176acb6a64e97ce41cd5c836a54e2d11dbdf2b751a290293552a8a875dca5ea512b3b2138cba8690a2332a09641f200875bf82405c00f4deeb51b1f1a60d5016f75edf2d8ac"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x812}}]}) 3.311673436s ago: executing program 3 (id=1080): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)={'raw\x00', 0x0, [0x7, 0x81, 0x8, 0x7]}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="480002000308010104d80164a00000000000000606000240803500491db8720d002c0004800800064000000002080005400000d44008000340"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x124, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f8b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "05d7a8c2307cc401431e76c4d85825373cdbde1437d4e6bd943c95"}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed4a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x695c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x84000, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002840)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000880)={r5, 0x800, 0xfffb}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/119, 0x77}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x8}, 0x228}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x3, 0x40, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.283138457s ago: executing program 0 (id=1081): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 2.987722424s ago: executing program 0 (id=1085): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4a, 0x6, 0x6}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}], 0x3, 0x8008800) sendto$inet6(r1, &(0x7f0000001d40)='W', 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @mcast1}, 0x1c) 2.986288547s ago: executing program 3 (id=1086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x18302, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x28}}, 0x0) pipe2$9p(&(0x7f00000001c0), 0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9be, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000400)='syzkaller\x00', 0x100, 0x0, 0x0, 0xae8e72bc314bb4aa, 0x7, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r1, r1, r0, r1, r1, r1], 0x0, 0x10, 0x9}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000900)=""/4096, &(0x7f0000000000)=0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x3c) 2.726028996s ago: executing program 1 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='9(', 0x2, 0x20004811, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, 0x0, 0x0, 0x41, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 2.690480275s ago: executing program 4 (id=1090): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbmon(&(0x7f00000001c0), 0x8, 0x204000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/140, 0x8c}], 0x1) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x28500e400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x3, &(0x7f0000000100)="8d8383", 0x9, 0x6, 0x2, 0x5508, 0xc328, 0x3, 0x7, 'syz0\x00'}) epoll_create1(0x80000) 2.566762452s ago: executing program 1 (id=1091): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00001100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x4, 0x8c, {0x8c, 0xe, "bfca1eac2b840df16dd55b314dd31a00476fb3bee07fba6b17874ee2c1b8c88a50beea1e2d87f5b8c74dcd63e3f35a3dab0bce4bbdd6a4d2da9c6ab95978e8a68be4f35316bb2078e2d83887dad57da592d36381c047d3a737025fb128d27204f70b504282c507938576b49edd0107366a3fb71aaed311c2b190ccba2e493c33349b70ed8dca41275c05"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x104f}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0x0, 0x10, "de5d6ab6358677a18bc1df07d56e2518"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x81, 0x2, '\x00\x00'}, &(0x7f0000000300)={0x20, 0x82, 0x3, "8c1205"}, &(0x7f0000000340)={0x20, 0x83, 0x3, "0da020"}, &(0x7f0000000480)={0x20, 0x84, 0x4, "967f805f"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, 'Y*R'}}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x8200003, 0x801, 0x4, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000a40)={0x33, 0xd, 0x19, "7bcacc76b9d7b226fe9c966928d85d41e81762fe1dd1bd48c979c6bf3cfe577926277cef407c03661f42491215f01630357692"}) 2.565519874s ago: executing program 4 (id=1092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x401, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 2.463002389s ago: executing program 0 (id=1093): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 2.360218989s ago: executing program 4 (id=1094): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) (fail_nth: 2) 2.192613727s ago: executing program 1 (id=1095): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_usbip_server_init(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) write$usbip_server(r4, &(0x7f0000000080)=@ret_unlink={{0x4, 0x9, 0x0, 0x1, 0xa9a}, {0x4}}, 0x30) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x1d, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) syz_usb_control_io$hid(r5, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060101"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = dup2(r6, r6) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x800810, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdmo=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x2010, r7, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x8000000, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000060d13f6e101b4b21ebc02fd7755ae5ef2aaf1ed39275bc7c0b4ecf43faadf3afa353a4cf540a271b8d202e4db0c52578651213cb6cde754906b67f17f7e0467090fba91b32b46d00000000acbb22dcf82be4d6d3b3b649ec308b3617ef3bef46fb0ca6ed2ad6eda9e17d3a9106ea6041674ff23278a386cfb5cd5889ac8b018b0cb313f5d8ca6dfd6f97028d15ca4067240dcdc4cf7761accd6969225a9aaf2105b39543b9d823203fd0fdbc8ac69fea578caac8f4e8f1d86a84889f62517ed191a60f853f27f190e4ddd21cecf274b447b67b2ba0e1a90917d766faf40e4868a35e4bf5289e157b828c6120398f0132b1af6eda194103", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff00"/28], 0x50) 1.236593696s ago: executing program 3 (id=1096): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x4) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}}}}]}}]}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x36) pread64(r2, &(0x7f0000000340)=""/77, 0x4d, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15931362060608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) prctl$PR_MCE_KILL(0x35, 0x1000000, 0x10) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022050000009a6ca54f"], 0x0}, 0x0) 1.235540756s ago: executing program 0 (id=1097): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07346706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af"], 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)={'raw\x00', 0x0, [0x7, 0x81, 0x8, 0x7]}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b80)=ANY=[@ANYBLOB="480002000308010104d80164a00000000000000606000240803500491db8720d002c0004800800064000000002080005400000d44008000340"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040010) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x124, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f8b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "05d7a8c2307cc401431e76c4d85825373cdbde1437d4e6bd943c95"}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed4a}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x695c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x84000, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002840)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r5}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000880)={r5, 0x800, 0xfffb}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/20, 0x14}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/171, 0xab}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/57, 0x39}, {&(0x7f0000002000)=""/119, 0x77}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002180)=""/137, 0x89}, {&(0x7f0000002240)=""/21, 0x15}, {&(0x7f0000002280)=""/10, 0xa}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/174, 0xae}, {&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/211, 0xd3}], 0x8}, 0x228}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003800)=""/218, 0xda}, {&(0x7f0000003900)=""/115, 0x73}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x3, 0x40, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 962.716571ms ago: executing program 4 (id=1098): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x6, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x200005, 0xd6fe2, 0x3ff69}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@upd={0xe0, 0x12, 0x400, 0x70bd28, 0x25dfdbfd, {{'drbg_nopr_sha1\x00'}, '\x00', '\x00', 0x400, 0x6c00}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) finit_module(0xffffffffffffffff, 0x0, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000280)) 962.153903ms ago: executing program 1 (id=1099): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xbf}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}]}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000840)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x8000, 0x48000010, 0xdcf, 0x3, 0xb, 0x2, 0x0, 0x0, 0x2, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 939.38078ms ago: executing program 2 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 615.916009ms ago: executing program 0 (id=1101): socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x60000000, 0xe, 0x0, &(0x7f00000001c0)="c1dfb08061a355915e7bc67515cd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x100, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x2, 0x9, 0x8, 0x9, 0x9, 0x3, 0x7, 0x40000, 0x1a, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x200, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xd, 0x7, 0x9, 0x80000000, 0x9, 0xb50, 0x40, 0x800, 0x3, 0x0, 0xff, 0xfffffffe, 0x5, 0x8, 0x2, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffffa, 0x3, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x6, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x3ff, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x7, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x7f, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xf3, 0x8e, 0x10001, 0x2004, 0x401, 0x80000001, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc7, 0x2, 0xe87, 0x0, 0x2, 0x8003, 0xc, 0x5, 0xb10, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x200, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xfdff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0xa, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x16], [0x10000010, 0x7, 0x7, 0x2, 0xa5e, 0xfe, 0xff, 0x8, 0x7ffffffe, 0x0, 0xe, 0x2, 0x4, 0x3, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xfffffff7, 0x4, 0x3, 0x103, 0x6, 0xd0, 0x6, 0x4000400, 0xffffffff, 0xfffffffa, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0xa, 0xffffffff, 0x0, 0x7, 0x4, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x1000000}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) close_range(r2, r2, 0x0) 615.599537ms ago: executing program 1 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) personality(0x87bf5ac905ea0f7f) brk(0x200000ffc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 613.675374ms ago: executing program 4 (id=1103): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4000000000000103, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x6) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8902, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xaf) r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff"], 0x4) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x8, 0x1, 0x0, "69c0161723fc3c13ca662342702d1a459380d13257a4bb97ce001c869ee8c942"}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe80000000000000000000000000000000040000000000000718"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020605000700000a00000000000000030c0007800800120000000000050004000300000005000500020000000900020073797a31000000000d000300686173683a6e6574000000000500010007"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20044454) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa10080}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3ac}}, 0x20008804) 141.770927ms ago: executing program 4 (id=1104): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000005c0)) close(0xffffffffffffffff) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="48edbdecc59bbbbbbbbbbbbb88a8240008ff3d00c56a518e8196f800"/38], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket(0x29, 0x2, 0x6) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000007240900019ade9fffff00ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) capset(&(0x7f0000000080)={0xf1504}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x8000000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000001600), 0x0}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000c96b00000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x8, 0xe, 0xa, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x10, 0x3ff, 0x7}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) read(r7, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0x2020) 0s ago: executing program 1 (id=1105): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00030400000004030a34489637f931af344580f78d55b5ec1177265b97c8ff628e7faea7c5d7721cbb5026ebc7"], &(0x7f0000000900)=ANY=[@ANYBLOB="0022050000083c2200375cce54224f9e8a2c2777734f43a1f3159fd147e198c17dd4bbabb42a95b49cfed2043b10a17f4fa4632a1641e0a7cd7618bb5127ee7c21d917f4b4799731469dfce1ba2fad8df2f645f53f011b06d460ea0f9377a46039db00c9f42a9b5205"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0xffffffffffffff55) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/17, 0x11}, 0x2}], 0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x8, 0x7fff7ffc}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYRES16=r3, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021500000000000c00439bd85f5658b039a8bf0c92662bee952ab98842e2b85e26eaa21364489fafeaf9b7fcb3cda2c23f8251f7afc032a3ad02371d0a3cb0704167b9d6471956fed3b80b2e6ed728565ae42b496c0431ba79ad50bdbfaf6d6aecad037d62adffc3a03cdce1882b4a92b8", @ANYRES8=r2, @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x48850) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x31, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x44, "4372070000001000476fb2940acf"}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r8 = syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000200abf93fc9ef79aacc07e240d81cca31c3a7f33f1dba96f0f0801343ea9cc4c9796385149b97a4f1b5eaa15ed8de9232d53f9fa4f18d7ffd824e8f3288afe851887b081fd0f1a5f38f8029b3831b8b9df63a1cbd937b1fac9bde7c22043532ce9d3e91979c96d1f7037c4764873b85b62d93137b95cc1b7c8cbf119d1aa169775db6a56a7320b901170752f4439bcf3c9f630454ea4f53bea7d8bc9af70f6a6e988bb8f0eb0219050959860a155f1dc003bd2047f725694235280678a9f01a"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r9, 0x708, 0x3) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000200)={0x0, 0x4, 0x3, &(0x7f0000000ac0)={0x6, "694b68174bf36f57ec48ed65bbb448371100"}}) r10 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r10, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r7, &(0x7f0000000980)=ANY=[@ANYRESOCT=r8, @ANYRES64=r5, @ANYRES8=r9, @ANYBLOB="ef1f83497efe2ed6b704e7be8fecf8f4ac1af56d490b23ee06e435ab001a91063f3babc81146fa10e27f0f2fb7ae2bfed40e86b66c33b36883c1ef7e6a77b4a3388aae85a7714094531a7be61d160115544fdfca54f7a856c4529677009330cbc6d3dd9b9531d754fb0e5b9160cba8eb1720886baef72042e6925404bb09cd01b3d86e1861f61ec3b2e71a4f46cbf7028fb6fd02007347ef8d10fae71f1ae247337c3c1bbfc7c9c92557cce8c8fcad4b04c953f4", @ANYRESOCT=r6], 0xc) syz_usb_connect(0x5, 0x27, &(0x7f0000000a80)=ANY=[@ANYRESHEX=r3, @ANYRES16], 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_RDWR(r11, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x0, 0x0}, {0x8, 0x601, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): 00001c0 R09: 0000000000000000 [ 358.690742][ T8073] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 358.690750][ T8073] R13: 00007fafd23d6038 R14: 00007fafd23d5fa0 R15: 00007ffc7c20eaf8 [ 358.690771][ T8073] [ 360.542160][ T5871] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 360.625238][ T5986] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 360.715050][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 360.725926][ T5871] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 360.725956][ T5871] usb 2-1: config 0 has no interface number 0 [ 360.726009][ T5871] usb 2-1: config 0 interface 12 has no altsetting 0 [ 360.728755][ T5871] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 360.728792][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.728811][ T5871] usb 2-1: Product: syz [ 360.728824][ T5871] usb 2-1: Manufacturer: syz [ 360.728838][ T5871] usb 2-1: SerialNumber: syz [ 360.743972][ T5871] usb 2-1: config 0 descriptor?? [ 360.812120][ T5986] usb 3-1: Using ep0 maxpacket: 8 [ 360.816583][ T5986] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 360.816603][ T5986] usb 3-1: config 0 has no interface number 0 [ 360.816638][ T5986] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 360.816655][ T5986] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 360.816715][ T5986] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 1525, setting to 1024 [ 360.821524][ T5986] usb 3-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 360.821546][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.821558][ T5986] usb 3-1: Product: syz [ 360.821567][ T5986] usb 3-1: Manufacturer: syz [ 360.821618][ T5986] usb 3-1: SerialNumber: syz [ 360.863301][ T5986] usb 3-1: config 0 descriptor?? [ 360.871155][ T8093] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.195101][ T5986] iowarrior 3-1:0.186: IOWarrior product=0x1500, serial= interface=186 now attached to iowarrior0 [ 361.336922][ T5986] usb 3-1: USB disconnect, device number 28 [ 361.483964][ T8101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.649'. [ 361.522179][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 361.695331][ T8102] netlink: 276 bytes leftover after parsing attributes in process `syz.0.648'. [ 361.705277][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 361.705314][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 361.705342][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 361.759582][ T31] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 361.759626][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.759649][ T31] usb 4-1: Product: syz [ 361.759665][ T31] usb 4-1: Manufacturer: syz [ 361.759681][ T31] usb 4-1: SerialNumber: syz [ 361.825905][ T31] usb 4-1: config 0 descriptor?? [ 361.835590][ T8096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 361.841444][ T8096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 361.953873][ T31] usb 4-1: ucan: probing device on interface #0 [ 362.112174][ T5871] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 362.112236][ T5871] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 362.112256][ T5871] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 362.112353][ T5871] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 362.229948][ T5871] usb 2-1: USB disconnect, device number 26 [ 362.709785][ T8111] sd 0:0:1:0: device reset [ 363.726547][ T31] usb 4-1: ucan: could not read protocol version, ret=-110 [ 363.726575][ T31] usb 4-1: ucan: probe failed; try to update the device firmware [ 363.823246][ T31] usb 4-1: USB disconnect, device number 23 [ 364.100173][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.672364][ T5892] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 365.092193][ T31] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 365.122295][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 366.143192][ T5892] usb 5-1: config 4 has an invalid descriptor of length 20, skipping remainder of the config [ 366.143225][ T5892] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 366.146703][ T5892] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=58.4c [ 366.146737][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.146759][ T5892] usb 5-1: Product: syz [ 366.146775][ T5892] usb 5-1: Manufacturer: syz [ 366.146791][ T5892] usb 5-1: SerialNumber: syz [ 366.219238][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 366.234426][ T31] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 366.234466][ T31] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 366.234493][ T31] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.234521][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 366.237989][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.238032][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.238054][ T31] usb 2-1: Product: Ї [ 366.238069][ T31] usb 2-1: Manufacturer: Ъ [ 366.238085][ T31] usb 2-1: SerialNumber: င [ 366.412952][ T5892] usb 5-1: can't set config #4, error -71 [ 366.414620][ T5892] usb 5-1: USB disconnect, device number 26 [ 366.453297][ T8120] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.453449][ T8120] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 367.037524][ T8138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.161158][ T5812] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 367.896862][ T8138] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 367.897090][ T8138] veth0_vlan: left promiscuous mode [ 367.897939][ T8138] veth0_vlan: entered promiscuous mode [ 367.900341][ T8138] team0: Device veth0_vlan failed to register rx_handler [ 367.962636][ T31] usb 2-1: bad CDC descriptors [ 368.075982][ T31] usb 2-1: USB disconnect, device number 27 [ 369.799510][ T8162] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 370.314090][ T5899] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 370.462033][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 370.477325][ T5871] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 370.501773][ T5899] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 370.501794][ T5899] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 370.530423][ T5899] usb 5-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 370.530459][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.530480][ T5899] usb 5-1: Product: syz [ 370.530495][ T5899] usb 5-1: Manufacturer: syz [ 370.530510][ T5899] usb 5-1: SerialNumber: syz [ 370.607010][ T5899] usb 5-1: config 0 descriptor?? [ 370.633022][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 370.634492][ T5871] usb 4-1: not running at top speed; connect to a high speed hub [ 370.638403][ T5871] usb 4-1: config 5 has an invalid interface number: 21 but max is 0 [ 370.638430][ T5871] usb 4-1: config 5 has no interface number 0 [ 370.638470][ T5871] usb 4-1: config 5 interface 21 has no altsetting 0 [ 370.710549][ T5871] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= a.07 [ 370.710607][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.710629][ T5871] usb 4-1: Product: syz [ 370.710645][ T5871] usb 4-1: Manufacturer: syz [ 370.710660][ T5871] usb 4-1: SerialNumber: syz [ 370.992402][ T8177] netlink: 64 bytes leftover after parsing attributes in process `syz.0.670'. [ 371.326721][ T5871] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 372.640270][ T5871] gspca_m5602: Failed to find a sensor [ 372.640288][ T5871] ALi m5602 4-1:5.21: ALi m5602 webcam failed [ 372.660379][ T5871] usb 4-1: USB disconnect, device number 24 [ 372.834885][ T8184] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.911054][ T8186] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 372.919975][ T8186] veth0_vlan: left promiscuous mode [ 372.941782][ T8186] veth0_vlan: entered promiscuous mode [ 372.960882][ T8186] team0: Device veth0_vlan failed to register rx_handler [ 373.682100][ T5819] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 373.842206][ T31] usb 5-1: USB disconnect, device number 27 [ 373.916495][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 373.916535][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 373.947607][ T5819] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 373.947630][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.947643][ T5819] usb 2-1: Product: syz [ 373.947651][ T5819] usb 2-1: Manufacturer: syz [ 373.947660][ T5819] usb 2-1: SerialNumber: syz [ 373.986797][ T5819] usb 2-1: config 0 descriptor?? [ 373.988159][ T8194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 373.988389][ T8194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.396738][ T8194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.396954][ T8194] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 374.441567][ T8201] FAULT_INJECTION: forcing a failure. [ 374.441567][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 374.441605][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.0.679 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.441632][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.441650][ T8201] Call Trace: [ 374.441659][ T8201] [ 374.441669][ T8201] dump_stack_lvl+0x189/0x250 [ 374.441704][ T8201] ? __pfx____ratelimit+0x10/0x10 [ 374.441732][ T8201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.441774][ T8201] ? __pfx__printk+0x10/0x10 [ 374.441824][ T8201] ? __pfx___might_resched+0x10/0x10 [ 374.441848][ T8201] ? fs_reclaim_acquire+0x7d/0x100 [ 374.441885][ T8201] should_fail_ex+0x46c/0x600 [ 374.441920][ T8201] ? __alloc_skb+0x112/0x2d0 [ 374.441947][ T8201] should_failslab+0xa8/0x100 [ 374.441978][ T8201] ? __alloc_skb+0x112/0x2d0 [ 374.441996][ T8201] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 374.442026][ T8201] ? __lock_acquire+0xab9/0xd20 [ 374.442059][ T8201] __alloc_skb+0x112/0x2d0 [ 374.442086][ T8201] alloc_skb_with_frags+0xca/0x890 [ 374.442113][ T8201] ? __local_bh_enable+0x27b/0x410 [ 374.442146][ T8201] ? __local_bh_enable+0x28c/0x410 [ 374.442176][ T8201] sock_alloc_send_pskb+0x859/0x990 [ 374.442233][ T8201] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 374.442261][ T8201] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 374.442287][ T8201] ? rt_spin_unlock+0x150/0x200 [ 374.442315][ T8201] ? rt_spin_unlock+0x161/0x200 [ 374.442342][ T8201] j1939_sk_sendmsg+0x788/0x1330 [ 374.442373][ T8201] ? rcu_is_watching+0x15/0xb0 [ 374.442402][ T8201] ? j1939_sk_sendmsg+0x531/0x1330 [ 374.442444][ T8201] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 374.442481][ T8201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.442511][ T8201] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 374.442546][ T8201] __sock_sendmsg+0x21c/0x270 [ 374.442583][ T8201] ____sys_sendmsg+0x534/0x820 [ 374.442618][ T8201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.442656][ T8201] ? import_iovec+0x74/0xa0 [ 374.442685][ T8201] ___sys_sendmsg+0x21f/0x2a0 [ 374.442713][ T8201] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.442779][ T8201] ? __fget_files+0x2a/0x420 [ 374.442808][ T8201] ? __fget_files+0x3a6/0x420 [ 374.442852][ T8201] __sys_sendmmsg+0x22d/0x430 [ 374.442884][ T8201] ? __pfx___sys_sendmmsg+0x10/0x10 [ 374.442922][ T8201] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 374.442975][ T8201] ? ksys_write+0x230/0x260 [ 374.443006][ T8201] ? __pfx_ksys_write+0x10/0x10 [ 374.443040][ T8201] __x64_sys_sendmmsg+0xa0/0xc0 [ 374.443070][ T8201] do_syscall_64+0xfa/0xfa0 [ 374.443098][ T8201] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.443126][ T8201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.443149][ T8201] ? clear_bhb_loop+0x60/0xb0 [ 374.443177][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.443198][ T8201] RIP: 0033:0x7f86ed6fefc9 [ 374.443218][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.443238][ T8201] RSP: 002b:00007f86eb966038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 374.443262][ T8201] RAX: ffffffffffffffda RBX: 00007f86ed955fa0 RCX: 00007f86ed6fefc9 [ 374.443278][ T8201] RDX: 0000000000000001 RSI: 000020000000a200 RDI: 0000000000000003 [ 374.443292][ T8201] RBP: 00007f86eb966090 R08: 0000000000000000 R09: 0000000000000000 [ 374.443306][ T8201] R10: 0000000060000800 R11: 0000000000000246 R12: 0000000000000001 [ 374.443320][ T8201] R13: 00007f86ed956038 R14: 00007f86ed955fa0 R15: 00007fff2df9aa78 [ 374.443358][ T8201] [ 374.981760][ T5819] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 375.298459][ T5819] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 375.396488][ T5819] usb 2-1: USB disconnect, device number 28 [ 378.652256][ T5819] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 378.839453][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 378.839477][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 378.839494][ T5819] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 378.898457][ T5819] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 378.898480][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.898492][ T5819] usb 2-1: Product: syz [ 378.898502][ T5819] usb 2-1: Manufacturer: syz [ 378.898510][ T5819] usb 2-1: SerialNumber: syz [ 378.916902][ T5819] usb 2-1: config 0 descriptor?? [ 378.919976][ T8225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.920247][ T8225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.946299][ T5819] usb 2-1: ucan: probing device on interface #0 [ 379.625699][ T8236] sd 0:0:1:0: device reset [ 380.679611][ T5819] usb 2-1: ucan: could not read protocol version, ret=-110 [ 380.679640][ T5819] usb 2-1: ucan: probe failed; try to update the device firmware [ 380.778012][ T5819] usb 2-1: USB disconnect, device number 29 [ 381.487389][ T8242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.602598][ T5871] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 381.654380][ T8245] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 381.754229][ T5871] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 381.754253][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.765052][ T8245] veth0_vlan: left promiscuous mode [ 381.766557][ T8245] veth0_vlan: entered promiscuous mode [ 381.769838][ T8245] team0: Device veth0_vlan failed to register rx_handler [ 381.893879][ T5871] usb 5-1: config 0 descriptor?? [ 382.347302][ T8253] sctp: [Deprecated]: syz.0.692 (pid 8253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.347302][ T8253] Use struct sctp_sack_info instead [ 383.192224][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 383.192409][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 383.252627][ T5871] usb 5-1: USB disconnect, device number 28 [ 384.287158][ T8267] FAULT_INJECTION: forcing a failure. [ 384.287158][ T8267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.287226][ T8267] CPU: 1 UID: 0 PID: 8267 Comm: syz.3.695 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.287252][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 384.287266][ T8267] Call Trace: [ 384.287274][ T8267] [ 384.287284][ T8267] dump_stack_lvl+0x189/0x250 [ 384.287324][ T8267] ? __pfx____ratelimit+0x10/0x10 [ 384.287352][ T8267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.287385][ T8267] ? __pfx__printk+0x10/0x10 [ 384.287409][ T8267] ? lock_acquire+0x175/0x360 [ 384.287454][ T8267] should_fail_ex+0x46c/0x600 [ 384.287488][ T8267] _copy_from_iter+0x1de/0x1790 [ 384.287541][ T8267] ? __pfx__copy_from_iter+0x10/0x10 [ 384.287575][ T8267] ? smack_socket_sendmsg+0x1a7/0x520 [ 384.287605][ T8267] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 384.287639][ T8267] bcm_sendmsg+0x15b/0x6a0 [ 384.287658][ T8267] ? rcu_is_watching+0x15/0xb0 [ 384.287685][ T8267] ? __pfx_bcm_sendmsg+0x10/0x10 [ 384.287728][ T8267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.287759][ T8267] ? __pfx_bcm_sendmsg+0x10/0x10 [ 384.287781][ T8267] __sock_sendmsg+0x21c/0x270 [ 384.287817][ T8267] ____sys_sendmsg+0x508/0x820 [ 384.287850][ T8267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.287887][ T8267] ? import_iovec+0x74/0xa0 [ 384.287916][ T8267] ___sys_sendmsg+0x21f/0x2a0 [ 384.287944][ T8267] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.288013][ T8267] ? __fget_files+0x2a/0x420 [ 384.288042][ T8267] ? __fget_files+0x3a6/0x420 [ 384.288085][ T8267] __x64_sys_sendmsg+0x1a1/0x260 [ 384.288115][ T8267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.288168][ T8267] do_syscall_64+0xfa/0xfa0 [ 384.288199][ T8267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.288220][ T8267] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 384.288242][ T8267] ? clear_bhb_loop+0x60/0xb0 [ 384.288269][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.288291][ T8267] RIP: 0033:0x7f087ffcefc9 [ 384.288309][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.288329][ T8267] RSP: 002b:00007f087e1ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.288353][ T8267] RAX: ffffffffffffffda RBX: 00007f0880226180 RCX: 00007f087ffcefc9 [ 384.288370][ T8267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 384.288384][ T8267] RBP: 00007f087e1ec090 R08: 0000000000000000 R09: 0000000000000000 [ 384.288397][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.288410][ T8267] R13: 00007f0880226218 R14: 00007f0880226180 R15: 00007ffde1733d78 [ 384.288447][ T8267] [ 386.733002][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.733077][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.522084][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 387.648083][ T8295] FAULT_INJECTION: forcing a failure. [ 387.648083][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 387.648122][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.4.707 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.648146][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.648159][ T8295] Call Trace: [ 387.648167][ T8295] [ 387.648177][ T8295] dump_stack_lvl+0x189/0x250 [ 387.648214][ T8295] ? __pfx____ratelimit+0x10/0x10 [ 387.648241][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.648273][ T8295] ? __pfx__printk+0x10/0x10 [ 387.648306][ T8295] ? __pfx___might_resched+0x10/0x10 [ 387.648328][ T8295] ? fs_reclaim_acquire+0x7d/0x100 [ 387.648363][ T8295] should_fail_ex+0x46c/0x600 [ 387.648399][ T8295] should_failslab+0xa8/0x100 [ 387.648432][ T8295] __kmalloc_noprof+0xcc/0x7d0 [ 387.648469][ T8295] ? tomoyo_encode+0x28b/0x550 [ 387.648503][ T8295] tomoyo_encode+0x28b/0x550 [ 387.648537][ T8295] tomoyo_realpath_from_path+0x58d/0x5d0 [ 387.648578][ T8295] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 387.648612][ T8295] tomoyo_path_number_perm+0x1e8/0x5a0 [ 387.648650][ T8295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.648690][ T8295] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 387.648719][ T8295] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.648785][ T8295] ? __fget_files+0x2a/0x420 [ 387.648821][ T8295] ? __fget_files+0x3a6/0x420 [ 387.648851][ T8295] ? __fget_files+0x2a/0x420 [ 387.648886][ T8295] security_file_ioctl+0xcb/0x2d0 [ 387.648910][ T8295] __se_sys_ioctl+0x47/0x170 [ 387.648939][ T8295] do_syscall_64+0xfa/0xfa0 [ 387.648967][ T8295] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.648995][ T8295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.649017][ T8295] ? clear_bhb_loop+0x60/0xb0 [ 387.649046][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.649067][ T8295] RIP: 0033:0x7f6a2c0fefc9 [ 387.649087][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.649106][ T8295] RSP: 002b:00007f6a2a345038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.649130][ T8295] RAX: ffffffffffffffda RBX: 00007f6a2c356090 RCX: 00007f6a2c0fefc9 [ 387.649146][ T8295] RDX: 0000200000000600 RSI: 00000000c0984124 RDI: 0000000000000005 [ 387.649161][ T8295] RBP: 00007f6a2a345090 R08: 0000000000000000 R09: 0000000000000000 [ 387.649174][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.649187][ T8295] R13: 00007f6a2c356128 R14: 00007f6a2c356090 R15: 00007fff575ca1a8 [ 387.649225][ T8295] [ 387.665512][ T8295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.792025][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 387.867806][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.912033][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 387.912082][ T31] usb 2-1: can't read configurations, error -71 [ 387.961025][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.708'. [ 388.092776][ T8300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.100347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.834236][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 389.962755][ T9] usb 4-1: device descriptor read/64, error -71 [ 390.204745][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 390.347951][ T9] usb 4-1: device descriptor read/64, error -71 [ 390.452701][ T9] usb usb4-port1: attempt power cycle [ 390.799748][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 391.409988][ T9] usb 4-1: device descriptor read/8, error -71 [ 391.664840][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 391.737391][ T9] usb 4-1: device descriptor read/8, error -71 [ 391.888562][ T9] usb usb4-port1: unable to enumerate USB device [ 391.972146][ T31] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 392.300557][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 392.336957][ T8362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 392.458566][ T5871] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 392.604944][ T5871] usb 1-1: not running at top speed; connect to a high speed hub [ 392.606544][ T5871] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 392.606580][ T5871] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 392.606607][ T5871] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.606636][ T5871] usb 1-1: config 1 interface 0 has no altsetting 0 [ 392.609343][ T5871] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.609381][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.609404][ T5871] usb 1-1: Product: Ї [ 392.609419][ T5871] usb 1-1: Manufacturer: Ъ [ 392.609435][ T5871] usb 1-1: SerialNumber: င [ 392.617099][ T8369] FAULT_INJECTION: forcing a failure. [ 392.617099][ T8369] name failslab, interval 1, probability 0, space 0, times 0 [ 392.617134][ T8369] CPU: 1 UID: 0 PID: 8369 Comm: syz.1.734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 392.617156][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.617172][ T8369] Call Trace: [ 392.617181][ T8369] [ 392.617189][ T8369] dump_stack_lvl+0x189/0x250 [ 392.617223][ T8369] ? __pfx____ratelimit+0x10/0x10 [ 392.617247][ T8369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.617275][ T8369] ? __pfx__printk+0x10/0x10 [ 392.617305][ T8369] ? __pfx___might_resched+0x10/0x10 [ 392.617327][ T8369] ? fs_reclaim_acquire+0x7d/0x100 [ 392.617359][ T8369] should_fail_ex+0x46c/0x600 [ 392.617389][ T8369] ? __alloc_skb+0x112/0x2d0 [ 392.617408][ T8369] should_failslab+0xa8/0x100 [ 392.617437][ T8369] ? __alloc_skb+0x112/0x2d0 [ 392.617453][ T8369] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 392.617480][ T8369] ? netlink_autobind+0xdb/0x300 [ 392.617507][ T8369] __alloc_skb+0x112/0x2d0 [ 392.617531][ T8369] netlink_sendmsg+0x5c6/0xb30 [ 392.617561][ T8369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.617591][ T8369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.617629][ T8369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.617651][ T8369] __sock_sendmsg+0x21c/0x270 [ 392.617683][ T8369] ____sys_sendmsg+0x508/0x820 [ 392.617712][ T8369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.617744][ T8369] ? import_iovec+0x74/0xa0 [ 392.617770][ T8369] ___sys_sendmsg+0x21f/0x2a0 [ 392.617795][ T8369] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.617855][ T8369] ? __fget_files+0x2a/0x420 [ 392.617881][ T8369] ? __fget_files+0x3a6/0x420 [ 392.617917][ T8369] __x64_sys_sendmsg+0x1a1/0x260 [ 392.617943][ T8369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.617983][ T8369] ? do_syscall_64+0xbe/0xfa0 [ 392.618012][ T8369] do_syscall_64+0xfa/0xfa0 [ 392.618035][ T8369] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.618059][ T8369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.618078][ T8369] ? clear_bhb_loop+0x60/0xb0 [ 392.618102][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.618123][ T8369] RIP: 0033:0x7f913a83efc9 [ 392.618143][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.618161][ T8369] RSP: 002b:00007f9138aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.618185][ T8369] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83efc9 [ 392.618199][ T8369] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 392.618212][ T8369] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 392.618246][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.618258][ T8369] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 392.618291][ T8369] [ 392.905515][ T8357] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 392.905665][ T8357] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 393.136191][ T5871] usb 1-1: bad CDC descriptors [ 393.223186][ T5871] usb 1-1: USB disconnect, device number 20 [ 394.062941][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 394.067853][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 394.067899][ T31] usb 3-1: can't read configurations, error -71 [ 395.072104][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 395.226336][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 395.246317][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.246357][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.246390][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.246439][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.246464][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.392334][ T9] usb 2-1: config 0 descriptor?? [ 395.554675][ T8407] binder: 8404:8407 ioctl c0306201 200000000040 returned -14 [ 396.600160][ T8400] kvm: kvm [8399]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1000901000005 [ 396.917067][ T9] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 396.918602][ T9] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 396.918623][ T9] microsoft 0003:045E:07DA.0001: usage index exceeded [ 396.918638][ T9] microsoft 0003:045E:07DA.0001: item 0 4 2 2 parsing failed [ 396.943910][ T9] microsoft 0003:045E:07DA.0001: parse failed [ 396.944025][ T9] microsoft 0003:045E:07DA.0001: probe with driver microsoft failed with error -22 [ 399.092547][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 399.171099][ T8434] FAULT_INJECTION: forcing a failure. [ 399.171099][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 399.171139][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 399.171164][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.171177][ T8434] Call Trace: [ 399.171187][ T8434] [ 399.171196][ T8434] dump_stack_lvl+0x189/0x250 [ 399.171234][ T8434] ? __pfx____ratelimit+0x10/0x10 [ 399.171263][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.171297][ T8434] ? __pfx__printk+0x10/0x10 [ 399.171330][ T8434] ? __pfx___might_resched+0x10/0x10 [ 399.171355][ T8434] ? fs_reclaim_acquire+0x7d/0x100 [ 399.171392][ T8434] should_fail_ex+0x46c/0x600 [ 399.171429][ T8434] should_failslab+0xa8/0x100 [ 399.171463][ T8434] __kmalloc_noprof+0xcc/0x7d0 [ 399.171492][ T8434] ? bpf_test_init+0x9f/0x150 [ 399.171520][ T8434] bpf_test_init+0x9f/0x150 [ 399.171547][ T8434] bpf_prog_test_run_xdp+0x503/0x10e0 [ 399.171597][ T8434] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 399.171627][ T8434] ? __fget_files+0x2a/0x420 [ 399.171664][ T8434] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 399.171689][ T8434] bpf_prog_test_run+0x2cd/0x340 [ 399.171726][ T8434] __sys_bpf+0x562/0x860 [ 399.171759][ T8434] ? __pfx___sys_bpf+0x10/0x10 [ 399.171786][ T8434] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 399.171830][ T8434] ? ksys_write+0x230/0x260 [ 399.171861][ T8434] ? __pfx_ksys_write+0x10/0x10 [ 399.171896][ T8434] __x64_sys_bpf+0x7c/0x90 [ 399.171929][ T8434] do_syscall_64+0xfa/0xfa0 [ 399.171954][ T8434] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.171980][ T8434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.172000][ T8434] ? clear_bhb_loop+0x60/0xb0 [ 399.172025][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.172047][ T8434] RIP: 0033:0x7f6a2c0fefc9 [ 399.172067][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.172087][ T8434] RSP: 002b:00007f6a2a366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.172111][ T8434] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fefc9 [ 399.172128][ T8434] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 399.172142][ T8434] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 399.172156][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.172169][ T8434] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 399.172207][ T8434] [ 399.298075][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 399.322139][ T31] usb 2-1: USB disconnect, device number 32 [ 399.575318][ T5812] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 399.726896][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.918083][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.217778][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.678260][ C0] vkms_vblank_simulate: vblank timer overrun [ 400.705496][ T8442] IPVS: length: 4096 != 24 [ 400.740177][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.559729][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 401.560888][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 401.560921][ T9] usb 4-1: can't read configurations, error -71 [ 402.249640][ T8463] FAULT_INJECTION: forcing a failure. [ 402.249640][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.249679][ T8463] CPU: 1 UID: 0 PID: 8463 Comm: syz.3.763 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.249703][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.249717][ T8463] Call Trace: [ 402.249726][ T8463] [ 402.249735][ T8463] dump_stack_lvl+0x189/0x250 [ 402.249774][ T8463] ? __pfx____ratelimit+0x10/0x10 [ 402.249801][ T8463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.249834][ T8463] ? __pfx__printk+0x10/0x10 [ 402.249878][ T8463] should_fail_ex+0x46c/0x600 [ 402.249915][ T8463] _copy_to_user+0x31/0xb0 [ 402.249941][ T8463] simple_read_from_buffer+0xe1/0x170 [ 402.249977][ T8463] proc_fail_nth_read+0x1b6/0x220 [ 402.250006][ T8463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.250035][ T8463] ? rw_verify_area+0x2ac/0x4e0 [ 402.250061][ T8463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.250087][ T8463] vfs_read+0x206/0xa30 [ 402.250125][ T8463] ? __pfx_vfs_read+0x10/0x10 [ 402.250148][ T8463] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 402.250184][ T8463] ? mutex_lock_nested+0x154/0x1d0 [ 402.250205][ T8463] ? fdget_pos+0x253/0x320 [ 402.250246][ T8463] ksys_read+0x14b/0x260 [ 402.250276][ T8463] ? __pfx_ksys_read+0x10/0x10 [ 402.250309][ T8463] ? do_syscall_64+0xbe/0xfa0 [ 402.250344][ T8463] do_syscall_64+0xfa/0xfa0 [ 402.250371][ T8463] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.250400][ T8463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.250422][ T8463] ? clear_bhb_loop+0x60/0xb0 [ 402.250450][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.250471][ T8463] RIP: 0033:0x7f087ffcd9dc [ 402.250505][ T8463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 402.250524][ T8463] RSP: 002b:00007f087e1a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 402.250548][ T8463] RAX: ffffffffffffffda RBX: 00007f0880226090 RCX: 00007f087ffcd9dc [ 402.250564][ T8463] RDX: 000000000000000f RSI: 00007f087e1a80a0 RDI: 0000000000000005 [ 402.250578][ T8463] RBP: 00007f087e1a8090 R08: 0000000000000000 R09: 0000000000000000 [ 402.250592][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.250606][ T8463] R13: 00007f0880226128 R14: 00007f0880226090 R15: 00007ffde1733d78 [ 402.250646][ T8463] [ 402.642149][ T8466] FAULT_INJECTION: forcing a failure. [ 402.642149][ T8466] name failslab, interval 1, probability 0, space 0, times 0 [ 402.642219][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.642245][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.642259][ T8466] Call Trace: [ 402.642268][ T8466] [ 402.642277][ T8466] dump_stack_lvl+0x189/0x250 [ 402.642325][ T8466] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.642356][ T8466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.642389][ T8466] ? __pfx__printk+0x10/0x10 [ 402.642431][ T8466] should_fail_ex+0x46c/0x600 [ 402.642467][ T8466] should_failslab+0xa8/0x100 [ 402.642501][ T8466] __kmalloc_cache_node_noprof+0x78/0x700 [ 402.642533][ T8466] ? __get_vm_area_node+0x172/0x350 [ 402.642557][ T8466] ? __pfx___schedule+0x10/0x10 [ 402.642588][ T8466] __get_vm_area_node+0x172/0x350 [ 402.642622][ T8466] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 402.642653][ T8466] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.642687][ T8466] ? rcu_is_watching+0x15/0xb0 [ 402.642709][ T8466] ? trace_irq_disable+0x37/0x110 [ 402.642764][ T8466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.642809][ T8466] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.642837][ T8466] __vmalloc_noprof+0xb1/0xf0 [ 402.642866][ T8466] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.642901][ T8466] bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.642938][ T8466] bpf_prog_alloc+0x3c/0x1a0 [ 402.642972][ T8466] bpf_prog_load+0x735/0x19e0 [ 402.643019][ T8466] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.643069][ T8466] ? kasan_check_range+0x1c1/0x2c0 [ 402.643106][ T8466] ? bpf_lsm_bpf+0x9/0x20 [ 402.643126][ T8466] ? security_bpf+0x7e/0x300 [ 402.643154][ T8466] __sys_bpf+0x507/0x860 [ 402.643186][ T8466] ? __pfx___sys_bpf+0x10/0x10 [ 402.643235][ T8466] ? ksys_write+0x230/0x260 [ 402.643276][ T8466] __x64_sys_bpf+0x7c/0x90 [ 402.643312][ T8466] do_syscall_64+0xfa/0xfa0 [ 402.643343][ T8466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.643364][ T8466] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 402.643385][ T8466] ? clear_bhb_loop+0x60/0xb0 [ 402.643412][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.643433][ T8466] RIP: 0033:0x7f86ed6fefc9 [ 402.643452][ T8466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.643471][ T8466] RSP: 002b:00007f86eb924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.643496][ T8466] RAX: ffffffffffffffda RBX: 00007f86ed956180 RCX: 00007f86ed6fefc9 [ 402.643512][ T8466] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 402.643526][ T8466] RBP: 00007f86eb924090 R08: 0000000000000000 R09: 0000000000000000 [ 402.643541][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.643553][ T8466] R13: 00007f86ed956218 R14: 00007f86ed956180 R15: 00007fff2df9aa78 [ 402.643590][ T8466] [ 402.643634][ T8466] syz.0.766: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 402.647091][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.0.766 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.647118][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 402.647131][ T8466] Call Trace: [ 402.647141][ T8466] [ 402.647150][ T8466] dump_stack_lvl+0x189/0x250 [ 402.647187][ T8466] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 402.647217][ T8466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.647250][ T8466] ? __pfx__printk+0x10/0x10 [ 402.647278][ T8466] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 402.647312][ T8466] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 402.647347][ T8466] warn_alloc+0x22e/0x3b0 [ 402.647378][ T8466] ? should_fail_ex+0x344/0x600 [ 402.647414][ T8466] ? __pfx_warn_alloc+0x10/0x10 [ 402.647448][ T8466] ? __get_vm_area_node+0x172/0x350 [ 402.647482][ T8466] ? __get_vm_area_node+0x2e2/0x350 [ 402.647519][ T8466] __vmalloc_node_range_noprof+0x331/0x12d0 [ 402.647551][ T8466] ? rcu_is_watching+0x15/0xb0 [ 402.647572][ T8466] ? trace_irq_disable+0x37/0x110 [ 402.647628][ T8466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 402.647672][ T8466] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.647702][ T8466] __vmalloc_noprof+0xb1/0xf0 [ 402.647730][ T8466] ? bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.647765][ T8466] bpf_prog_alloc_no_stats+0x4a/0x530 [ 402.647803][ T8466] bpf_prog_alloc+0x3c/0x1a0 [ 402.647837][ T8466] bpf_prog_load+0x735/0x19e0 [ 402.647883][ T8466] ? __pfx_bpf_prog_load+0x10/0x10 [ 402.647934][ T8466] ? kasan_check_range+0x1c1/0x2c0 [ 402.647971][ T8466] ? bpf_lsm_bpf+0x9/0x20 [ 402.647991][ T8466] ? security_bpf+0x7e/0x300 [ 402.648019][ T8466] __sys_bpf+0x507/0x860 [ 402.648052][ T8466] ? __pfx___sys_bpf+0x10/0x10 [ 402.648101][ T8466] ? ksys_write+0x230/0x260 [ 402.648142][ T8466] __x64_sys_bpf+0x7c/0x90 [ 402.648172][ T8466] do_syscall_64+0xfa/0xfa0 [ 402.648203][ T8466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.648225][ T8466] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 402.648247][ T8466] ? clear_bhb_loop+0x60/0xb0 [ 402.648274][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.648296][ T8466] RIP: 0033:0x7f86ed6fefc9 [ 402.648323][ T8466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.648343][ T8466] RSP: 002b:00007f86eb924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.648366][ T8466] RAX: ffffffffffffffda RBX: 00007f86ed956180 RCX: 00007f86ed6fefc9 [ 402.648382][ T8466] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 402.648396][ T8466] RBP: 00007f86eb924090 R08: 0000000000000000 R09: 0000000000000000 [ 402.648411][ T8466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.648424][ T8466] R13: 00007f86ed956218 R14: 00007f86ed956180 R15: 00007fff2df9aa78 [ 402.648462][ T8466] [ 402.648502][ T8466] Mem-Info: [ 402.648583][ T8466] active_anon:259 inactive_anon:8855 isolated_anon:0 [ 402.648583][ T8466] active_file:17345 inactive_file:39547 isolated_file:0 [ 402.648583][ T8466] unevictable:768 dirty:367 writeback:0 [ 402.648583][ T8466] slab_reclaimable:11822 slab_unreclaimable:103417 [ 402.648583][ T8466] mapped:33220 shmem:4206 pagetables:1234 [ 402.648583][ T8466] sec_pagetables:0 bounce:0 [ 402.648583][ T8466] kernel_misc_reclaimable:0 [ 402.648583][ T8466] free:1316126 free_pcp:5426 free_cma:0 [ 402.648674][ T8466] Node 0 active_anon:1036kB inactive_anon:35420kB active_file:69184kB inactive_file:158184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132880kB dirty:1468kB writeback:0kB shmem:15288kB kernel_stack:13932kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 402.648756][ T8466] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 402.648836][ T8466] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.648963][ T8466] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 402.649221][ T8466] Node 0 DMA32 free:1348812kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1036kB inactive_anon:35420kB active_file:69184kB inactive_file:158184kB unevictable:1536kB writepending:1468kB zspages:0kB present:3129332kB managed:2576092kB mlocked:0kB bounce:0kB free_pcp:21476kB local_pcp:5144kB free_cma:0kB [ 402.649358][ T8466] lowmem_reserve[]: 0 0 1 1 1 [ 402.649487][ T8466] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 402.649609][ T8466] lowmem_reserve[]: 0 0 0 0 0 [ 402.649865][ T8466] Node 1 Normal free:3900332kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:4kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:0kB free_cma:0kB [ 402.649992][ T8466] lowmem_reserve[]: 0 0 0 0 0 [ 402.650247][ T8466] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.650938][ T8466] Node 0 DMA32: 4*4kB (UME) 320*8kB (UME) 150*16kB (UME) 210*32kB (UME) 114*64kB (UME) 124*128kB (UME) 64*256kB (UM) 32*512kB (UME) 29*1024kB (UM) 9*2048kB (UM) 301*4096kB (UM) = 1348656kB [ 402.651898][ T8466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 402.652497][ T8466] Node 1 Normal: 197*4kB (U) 53*8kB (UME) 41*16kB (UME) 215*32kB (UME) 106*64kB (UME) 28*128kB (UME) 11*256kB (UME) 7*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3900332kB [ 402.653489][ T8466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.653538][ T8466] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.653586][ T8466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 402.653635][ T8466] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 402.653683][ T8466] 61094 total pagecache pages [ 402.653723][ T8466] 0 pages in swap cache [ 402.653761][ T8466] Free swap = 124996kB [ 402.653800][ T8466] Total swap = 124996kB [ 402.653840][ T8466] 2097051 pages RAM [ 402.653878][ T8466] 0 pages HighMem/MovableOnly [ 402.653917][ T8466] 421002 pages reserved [ 402.653955][ T8466] 0 pages cma reserved [ 403.579467][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.052106][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 404.460334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.588790][ T8479] IPVS: length: 4096 != 24 [ 404.922977][ T5986] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 404.923298][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 405.062064][ T5986] usb 2-1: device descriptor read/64, error -32 [ 405.332193][ T5986] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 405.532200][ T5986] usb 2-1: Using ep0 maxpacket: 8 [ 405.534945][ T5986] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 405.534975][ T5986] usb 2-1: config 0 has no interface number 0 [ 405.535031][ T5986] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 405.535060][ T5986] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 405.535089][ T5986] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 1525, setting to 1024 [ 405.539838][ T5986] usb 2-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 405.539867][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.539889][ T5986] usb 2-1: Product: syz [ 405.539904][ T5986] usb 2-1: Manufacturer: syz [ 405.539920][ T5986] usb 2-1: SerialNumber: syz [ 405.645318][ T5986] usb 2-1: config 0 descriptor?? [ 405.675606][ T8477] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.823827][ T8493] syz.3.775 uses obsolete (PF_INET,SOCK_PACKET) [ 405.846877][ T8490] FAULT_INJECTION: forcing a failure. [ 405.846877][ T8490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.846916][ T8490] CPU: 1 UID: 0 PID: 8490 Comm: syz.3.775 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.846941][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.846954][ T8490] Call Trace: [ 405.846963][ T8490] [ 405.846972][ T8490] dump_stack_lvl+0x189/0x250 [ 405.847012][ T8490] ? __pfx____ratelimit+0x10/0x10 [ 405.847041][ T8490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.847074][ T8490] ? __pfx__printk+0x10/0x10 [ 405.847101][ T8490] ? __might_fault+0xb0/0x130 [ 405.847145][ T8490] should_fail_ex+0x46c/0x600 [ 405.847180][ T8490] _copy_from_iter+0x1de/0x1790 [ 405.847218][ T8490] ? __lock_acquire+0xab9/0xd20 [ 405.847336][ T8490] ? __pfx__copy_from_iter+0x10/0x10 [ 405.847389][ T8490] tun_get_user+0x488/0x3ec0 [ 405.847427][ T8490] ? __lock_acquire+0xab9/0xd20 [ 405.847469][ T8490] ? __might_fault+0xb0/0x130 [ 405.847499][ T8490] ? __pfx_tun_get_user+0x10/0x10 [ 405.847526][ T8490] ? _parse_integer_limit+0x1ae/0x1f0 [ 405.847566][ T8490] ? __lock_acquire+0xab9/0xd20 [ 405.847601][ T8490] ? ref_tracker_alloc+0x2fe/0x450 [ 405.847630][ T8490] ? __lock_acquire+0xab9/0xd20 [ 405.847661][ T8490] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 405.847698][ T8490] ? tun_get+0x1c/0x2f0 [ 405.847731][ T8490] ? tun_get+0x1c/0x2f0 [ 405.847757][ T8490] ? tun_get+0x1c/0x2f0 [ 405.847790][ T8490] tun_chr_write_iter+0x119/0x200 [ 405.847822][ T8490] vfs_write+0x5d5/0xb40 [ 405.847856][ T8490] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 405.847883][ T8490] ? __pfx_vfs_write+0x10/0x10 [ 405.847922][ T8490] ? __fget_files+0x2a/0x420 [ 405.847965][ T8490] ksys_write+0x14b/0x260 [ 405.847996][ T8490] ? __pfx_ksys_write+0x10/0x10 [ 405.848026][ T8490] ? do_syscall_64+0xbe/0xfa0 [ 405.848059][ T8490] do_syscall_64+0xfa/0xfa0 [ 405.848086][ T8490] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.848114][ T8490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.848137][ T8490] ? clear_bhb_loop+0x60/0xb0 [ 405.848164][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.848185][ T8490] RIP: 0033:0x7f087ffcefc9 [ 405.848205][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.848225][ T8490] RSP: 002b:00007f087e22e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 405.848258][ T8490] RAX: ffffffffffffffda RBX: 00007f0880225fa0 RCX: 00007f087ffcefc9 [ 405.848275][ T8490] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 405.848289][ T8490] RBP: 00007f087e22e090 R08: 0000000000000000 R09: 0000000000000000 [ 405.848303][ T8490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.848316][ T8490] R13: 00007f0880226038 R14: 00007f0880225fa0 R15: 00007ffde1733d78 [ 405.848353][ T8490] [ 406.101589][ T5986] iowarrior 2-1:0.186: IOWarrior product=0x1500, serial= interface=186 now attached to iowarrior0 [ 406.212586][ T5986] usb 2-1: USB disconnect, device number 34 [ 406.485895][ T8499] FAULT_INJECTION: forcing a failure. [ 406.485895][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 406.485964][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.2.779 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 406.485991][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.486004][ T8499] Call Trace: [ 406.486013][ T8499] [ 406.486023][ T8499] dump_stack_lvl+0x189/0x250 [ 406.486062][ T8499] ? __pfx____ratelimit+0x10/0x10 [ 406.486090][ T8499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.486123][ T8499] ? __pfx__printk+0x10/0x10 [ 406.486157][ T8499] ? __pfx___might_resched+0x10/0x10 [ 406.486179][ T8499] ? fs_reclaim_acquire+0x7d/0x100 [ 406.486216][ T8499] should_fail_ex+0x46c/0x600 [ 406.486261][ T8499] should_failslab+0xa8/0x100 [ 406.486294][ T8499] __kmalloc_noprof+0xcc/0x7d0 [ 406.486324][ T8499] ? tomoyo_encode+0x28b/0x550 [ 406.486356][ T8499] tomoyo_encode+0x28b/0x550 [ 406.486390][ T8499] tomoyo_realpath_from_path+0x58d/0x5d0 [ 406.486430][ T8499] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 406.486465][ T8499] tomoyo_path_number_perm+0x1e8/0x5a0 [ 406.486502][ T8499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 406.486534][ T8499] ? trace_sched_exit_tp+0x36/0x110 [ 406.486566][ T8499] ? __schedule+0x1709/0x4c20 [ 406.486610][ T8499] ? preempt_schedule_irq+0xde/0x150 [ 406.486670][ T8499] ? security_file_ioctl+0x19/0x2d0 [ 406.486700][ T8499] security_file_ioctl+0xcb/0x2d0 [ 406.486725][ T8499] __se_sys_ioctl+0x47/0x170 [ 406.486753][ T8499] do_syscall_64+0xfa/0xfa0 [ 406.486785][ T8499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.486805][ T8499] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 406.486825][ T8499] ? clear_bhb_loop+0x60/0xb0 [ 406.486853][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.486874][ T8499] RIP: 0033:0x7fafd217efc9 [ 406.486894][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.486915][ T8499] RSP: 002b:00007fafd03a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.486940][ T8499] RAX: ffffffffffffffda RBX: 00007fafd23d6180 RCX: 00007fafd217efc9 [ 406.486957][ T8499] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 406.486972][ T8499] RBP: 00007fafd03a4090 R08: 0000000000000000 R09: 0000000000000000 [ 406.486987][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.487001][ T8499] R13: 00007fafd23d6218 R14: 00007fafd23d6180 R15: 00007ffc7c20eaf8 [ 406.487039][ T8499] [ 406.487183][ T8499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.276263][ T8525] IPVS: length: 4096 != 24 [ 410.999672][ T8554] FAULT_INJECTION: forcing a failure. [ 410.999672][ T8554] name failslab, interval 1, probability 0, space 0, times 0 [ 410.999740][ T8554] CPU: 1 UID: 0 PID: 8554 Comm: syz.4.796 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.999766][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.999779][ T8554] Call Trace: [ 410.999788][ T8554] [ 410.999798][ T8554] dump_stack_lvl+0x189/0x250 [ 410.999838][ T8554] ? __pfx____ratelimit+0x10/0x10 [ 410.999867][ T8554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.999900][ T8554] ? __pfx__printk+0x10/0x10 [ 410.999933][ T8554] ? __pfx___might_resched+0x10/0x10 [ 410.999959][ T8554] ? fs_reclaim_acquire+0x7d/0x100 [ 410.999995][ T8554] should_fail_ex+0x46c/0x600 [ 411.000029][ T8554] ? __alloc_skb+0x112/0x2d0 [ 411.000052][ T8554] should_failslab+0xa8/0x100 [ 411.000085][ T8554] ? __alloc_skb+0x112/0x2d0 [ 411.000103][ T8554] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 411.000142][ T8554] __alloc_skb+0x112/0x2d0 [ 411.000182][ T8554] netlink_sendmsg+0x5c6/0xb30 [ 411.000204][ T8554] ? rcu_is_watching+0x15/0xb0 [ 411.000235][ T8554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.000268][ T8554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.000299][ T8554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.000324][ T8554] __sock_sendmsg+0x21c/0x270 [ 411.000359][ T8554] ____sys_sendmsg+0x508/0x820 [ 411.000392][ T8554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.000428][ T8554] ? import_iovec+0x74/0xa0 [ 411.000457][ T8554] ___sys_sendmsg+0x21f/0x2a0 [ 411.000486][ T8554] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.000563][ T8554] ? __fget_files+0x2a/0x420 [ 411.000598][ T8554] ? __fget_files+0x3a6/0x420 [ 411.000641][ T8554] __x64_sys_sendmsg+0x1a1/0x260 [ 411.000671][ T8554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.000703][ T8554] ? irqentry_exit+0x74/0x90 [ 411.000758][ T8554] do_syscall_64+0xfa/0xfa0 [ 411.000789][ T8554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.000810][ T8554] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 411.000831][ T8554] ? clear_bhb_loop+0x60/0xb0 [ 411.000858][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.000879][ T8554] RIP: 0033:0x7f6a2c0fefc9 [ 411.000899][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.000918][ T8554] RSP: 002b:00007f6a2a324038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.000943][ T8554] RAX: ffffffffffffffda RBX: 00007f6a2c356180 RCX: 00007f6a2c0fefc9 [ 411.000959][ T8554] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 411.000973][ T8554] RBP: 00007f6a2a324090 R08: 0000000000000000 R09: 0000000000000000 [ 411.000987][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.001001][ T8554] R13: 00007f6a2c356218 R14: 00007f6a2c356180 R15: 00007fff575ca1a8 [ 411.001038][ T8554] [ 413.364319][ T5986] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 413.538477][ T5986] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 413.538515][ T5986] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 413.538543][ T5986] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 413.541350][ T5986] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 413.541382][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.541404][ T5986] usb 3-1: Product: syz [ 413.541419][ T5986] usb 3-1: Manufacturer: syz [ 413.541435][ T5986] usb 3-1: SerialNumber: syz [ 413.567247][ T5986] usb 3-1: config 0 descriptor?? [ 413.570669][ T8572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.570835][ T8572] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.582687][ T5986] usb 3-1: ucan: probing device on interface #0 [ 414.261611][ T8586] sd 0:0:1:0: device reset [ 415.240862][ T5986] usb 3-1: ucan: could not read protocol version, ret=-110 [ 415.240893][ T5986] usb 3-1: ucan: probe failed; try to update the device firmware [ 415.332388][ T31] usb 3-1: USB disconnect, device number 31 [ 418.020810][ T8624] FAULT_INJECTION: forcing a failure. [ 418.020810][ T8624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.020851][ T8624] CPU: 0 UID: 0 PID: 8624 Comm: syz.4.817 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.020877][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.020891][ T8624] Call Trace: [ 418.020901][ T8624] [ 418.020911][ T8624] dump_stack_lvl+0x189/0x250 [ 418.020952][ T8624] ? __pfx____ratelimit+0x10/0x10 [ 418.020982][ T8624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.021015][ T8624] ? __pfx__printk+0x10/0x10 [ 418.021044][ T8624] ? __might_fault+0xb0/0x130 [ 418.021090][ T8624] should_fail_ex+0x46c/0x600 [ 418.021126][ T8624] _copy_to_iter+0x404/0x1790 [ 418.021171][ T8624] ? trace_kmalloc+0x1f/0xd0 [ 418.021206][ T8624] ? __pfx__copy_to_iter+0x10/0x10 [ 418.021239][ T8624] ? single_next+0xd/0x40 [ 418.021262][ T8624] ? single_stop+0x9/0x10 [ 418.021286][ T8624] ? traverse+0x544/0x580 [ 418.021327][ T8624] seq_read_iter+0x2ea/0xe20 [ 418.021355][ T8624] ? _parse_integer_limit+0x1ae/0x1f0 [ 418.021459][ T8624] ? __asan_memset+0x22/0x50 [ 418.021494][ T8624] seq_read+0x36c/0x480 [ 418.021531][ T8624] ? __pfx_seq_read+0x10/0x10 [ 418.021572][ T8624] ? rw_verify_area+0x2ac/0x4e0 [ 418.021604][ T8624] vfs_readv+0x5b3/0x850 [ 418.021638][ T8624] ? __pfx_seq_read+0x10/0x10 [ 418.021666][ T8624] ? __pfx_vfs_readv+0x10/0x10 [ 418.021718][ T8624] ? __fget_files+0x2a/0x420 [ 418.021756][ T8624] ? __fget_files+0x3a6/0x420 [ 418.021785][ T8624] ? __fget_files+0x2a/0x420 [ 418.021827][ T8624] __x64_sys_preadv+0x19a/0x2a0 [ 418.021861][ T8624] ? __pfx___x64_sys_preadv+0x10/0x10 [ 418.021897][ T8624] ? do_syscall_64+0xbe/0xfa0 [ 418.021936][ T8624] do_syscall_64+0xfa/0xfa0 [ 418.021962][ T8624] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.021992][ T8624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.022014][ T8624] ? clear_bhb_loop+0x60/0xb0 [ 418.022043][ T8624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.022064][ T8624] RIP: 0033:0x7f6a2c0fefc9 [ 418.022085][ T8624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.022104][ T8624] RSP: 002b:00007f6a2a324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 418.022128][ T8624] RAX: ffffffffffffffda RBX: 00007f6a2c356180 RCX: 00007f6a2c0fefc9 [ 418.022144][ T8624] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 418.022159][ T8624] RBP: 00007f6a2a324090 R08: 000000000000000f R09: 0000000000000000 [ 418.022173][ T8624] R10: 00000000000000e7 R11: 0000000000000246 R12: 0000000000000001 [ 418.022186][ T8624] R13: 00007f6a2c356218 R14: 00007f6a2c356180 R15: 00007fff575ca1a8 [ 418.022225][ T8624] [ 419.052893][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 419.486695][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 419.486735][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 419.486764][ T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 419.650086][ T31] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 419.650121][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.650142][ T31] usb 1-1: Product: syz [ 419.650158][ T31] usb 1-1: Manufacturer: syz [ 419.650172][ T31] usb 1-1: SerialNumber: syz [ 419.700117][ T31] usb 1-1: config 0 descriptor?? [ 419.716414][ T8618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.717315][ T8618] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 419.746908][ T31] usb 1-1: ucan: probing device on interface #0 [ 420.526050][ T8629] sd 0:0:1:0: device reset [ 421.503326][ T31] usb 1-1: ucan: could not read protocol version, ret=-110 [ 421.503355][ T31] usb 1-1: ucan: probe failed; try to update the device firmware [ 421.635883][ T31] usb 1-1: USB disconnect, device number 21 [ 421.658042][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 421.816351][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 421.828521][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 421.829412][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 421.829436][ T10] usb 2-1: can't read configurations, error -71 [ 422.565595][ T37] audit: type=1326 audit(1762096499.798:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.565656][ T37] audit: type=1326 audit(1762096499.808:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.576773][ T37] audit: type=1326 audit(1762096499.818:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.576833][ T37] audit: type=1326 audit(1762096499.818:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.576886][ T37] audit: type=1326 audit(1762096499.818:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.584434][ T37] audit: type=1326 audit(1762096499.828:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.584495][ T37] audit: type=1326 audit(1762096499.828:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.584838][ T37] audit: type=1326 audit(1762096499.828:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.589417][ T37] audit: type=1326 audit(1762096499.828:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 422.607936][ T37] audit: type=1326 audit(1762096499.828:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8642 comm="syz.3.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f087ffcefc9 code=0x7ffc0000 [ 423.036216][ T8653] IPVS: length: 4096 != 24 [ 423.868499][ T8668] FAULT_INJECTION: forcing a failure. [ 423.868499][ T8668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.868536][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.1.831 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 423.868558][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.868571][ T8668] Call Trace: [ 423.868578][ T8668] [ 423.868586][ T8668] dump_stack_lvl+0x189/0x250 [ 423.868621][ T8668] ? __pfx____ratelimit+0x10/0x10 [ 423.868646][ T8668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.868674][ T8668] ? __pfx__printk+0x10/0x10 [ 423.868713][ T8668] should_fail_ex+0x46c/0x600 [ 423.868746][ T8668] strncpy_from_user+0x36/0x290 [ 423.868775][ T8668] getname_flags+0xf3/0x540 [ 423.868807][ T8668] __x64_sys_mknod+0x79/0xa0 [ 423.868831][ T8668] do_syscall_64+0xfa/0xfa0 [ 423.868855][ T8668] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.868879][ T8668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.868898][ T8668] ? clear_bhb_loop+0x60/0xb0 [ 423.868921][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.868940][ T8668] RIP: 0033:0x7f913a83efc9 [ 423.868957][ T8668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.868974][ T8668] RSP: 002b:00007f9138aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 423.868996][ T8668] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83efc9 [ 423.869010][ T8668] RDX: 0000000000000702 RSI: 0000000000001000 RDI: 00002000000002c0 [ 423.869023][ T8668] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 423.869036][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.869047][ T8668] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 423.869082][ T8668] [ 423.923305][ T8670] FAULT_INJECTION: forcing a failure. [ 423.923305][ T8670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.923341][ T8670] CPU: 0 UID: 0 PID: 8670 Comm: syz.0.833 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 423.923364][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 423.923376][ T8670] Call Trace: [ 423.923385][ T8670] [ 423.923393][ T8670] dump_stack_lvl+0x189/0x250 [ 423.923427][ T8670] ? __pfx____ratelimit+0x10/0x10 [ 423.923452][ T8670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.923480][ T8670] ? __pfx__printk+0x10/0x10 [ 423.923504][ T8670] ? __might_fault+0xb0/0x130 [ 423.923542][ T8670] should_fail_ex+0x46c/0x600 [ 423.923574][ T8670] _copy_from_iter+0x404/0x1790 [ 423.923618][ T8670] ? rtlock_slowlock_locked+0xd8/0x4010 [ 423.923640][ T8670] ? __pfx__copy_from_iter+0x10/0x10 [ 423.923671][ T8670] ? __lock_acquire+0xab9/0xd20 [ 423.923716][ T8670] ping_common_sendmsg+0xb9/0x2c0 [ 423.923748][ T8670] ping_v6_sendmsg+0x1cd/0x1210 [ 423.923777][ T8670] ? __local_bh_enable+0x28c/0x410 [ 423.923800][ T8670] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 423.923820][ T8670] ? __pfx___local_bh_enable+0x10/0x10 [ 423.923851][ T8670] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 423.923873][ T8670] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.923902][ T8670] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.923932][ T8670] ? rt_spin_unlock+0x161/0x200 [ 423.923955][ T8670] ? release_sock+0x192/0x210 [ 423.923971][ T8670] ? release_sock+0x2f/0x210 [ 423.923991][ T8670] ? inet_sendmsg+0x2f4/0x370 [ 423.924023][ T8670] __sock_sendmsg+0x19c/0x270 [ 423.924062][ T8670] sock_write_iter+0x27f/0x370 [ 423.924091][ T8670] ? __pfx_sock_write_iter+0x10/0x10 [ 423.924114][ T8670] ? __might_fault+0xb0/0x130 [ 423.924164][ T8670] do_iter_readv_writev+0x635/0x8d0 [ 423.924197][ T8670] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 423.924233][ T8670] ? rw_verify_area+0x25b/0x4e0 [ 423.924260][ T8670] vfs_writev+0x323/0x970 [ 423.924293][ T8670] ? __lock_acquire+0xab9/0xd20 [ 423.924320][ T8670] ? __pfx_vfs_writev+0x10/0x10 [ 423.924370][ T8670] ? __fget_files+0x2a/0x420 [ 423.924401][ T8670] ? __fget_files+0x3a6/0x420 [ 423.924426][ T8670] ? __fget_files+0x2a/0x420 [ 423.924462][ T8670] do_writev+0x153/0x2d0 [ 423.924492][ T8670] ? __pfx_do_writev+0x10/0x10 [ 423.924524][ T8670] ? do_syscall_64+0xbe/0xfa0 [ 423.924552][ T8670] do_syscall_64+0xfa/0xfa0 [ 423.924575][ T8670] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.924599][ T8670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.924618][ T8670] ? clear_bhb_loop+0x60/0xb0 [ 423.924641][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.924660][ T8670] RIP: 0033:0x7f86ed6fefc9 [ 423.924678][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.924695][ T8670] RSP: 002b:00007f86eb966038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 423.924717][ T8670] RAX: ffffffffffffffda RBX: 00007f86ed955fa0 RCX: 00007f86ed6fefc9 [ 423.924731][ T8670] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000003 [ 423.924743][ T8670] RBP: 00007f86eb966090 R08: 0000000000000000 R09: 0000000000000000 [ 423.924756][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.924767][ T8670] R13: 00007f86ed956038 R14: 00007f86ed955fa0 R15: 00007fff2df9aa78 [ 423.924800][ T8670] [ 425.096726][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 425.585232][ T5871] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 425.752575][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 425.811740][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.816486][ T5871] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 425.846942][ T5871] usb 2-1: can't read configurations, error -71 [ 426.390859][ T8712] FAULT_INJECTION: forcing a failure. [ 426.390859][ T8712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.390929][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.4.847 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.390955][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.390968][ T8712] Call Trace: [ 426.390977][ T8712] [ 426.390987][ T8712] dump_stack_lvl+0x189/0x250 [ 426.391025][ T8712] ? __pfx____ratelimit+0x10/0x10 [ 426.391052][ T8712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.391085][ T8712] ? __pfx__printk+0x10/0x10 [ 426.391129][ T8712] should_fail_ex+0x46c/0x600 [ 426.391165][ T8712] strncpy_from_user+0x36/0x290 [ 426.391198][ T8712] getname_flags+0xf3/0x540 [ 426.391229][ T8712] ? preempt_schedule_irq+0xde/0x150 [ 426.391261][ T8712] user_path_at+0x24/0x60 [ 426.391285][ T8712] do_fchownat+0x105/0x270 [ 426.391324][ T8712] ? irqentry_exit+0x74/0x90 [ 426.391354][ T8712] ? __pfx_do_fchownat+0x10/0x10 [ 426.391400][ T8712] __x64_sys_fchownat+0xb5/0xd0 [ 426.391435][ T8712] do_syscall_64+0xfa/0xfa0 [ 426.391466][ T8712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.391487][ T8712] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 426.391508][ T8712] ? clear_bhb_loop+0x60/0xb0 [ 426.391536][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.391557][ T8712] RIP: 0033:0x7f6a2c0fefc9 [ 426.391577][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.391596][ T8712] RSP: 002b:00007f6a2a324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 426.391621][ T8712] RAX: ffffffffffffffda RBX: 00007f6a2c356180 RCX: 00007f6a2c0fefc9 [ 426.391637][ T8712] RDX: ffffffffffffffff RSI: 0000200000000080 RDI: 0000000000000008 [ 426.391652][ T8712] RBP: 00007f6a2a324090 R08: 0000000000000000 R09: 0000000000000000 [ 426.391665][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.391678][ T8712] R13: 00007f6a2c356218 R14: 00007f6a2c356180 R15: 00007fff575ca1a8 [ 426.391716][ T8712] [ 427.855399][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 428.006099][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 428.175654][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 428.208705][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 428.208745][ T10] usb 4-1: config 0 has no interface number 0 [ 428.208807][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 428.237743][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 428.237887][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.237912][ T10] usb 4-1: Product: syz [ 428.237928][ T10] usb 4-1: Manufacturer: syz [ 428.237943][ T10] usb 4-1: SerialNumber: syz [ 428.299503][ T10] usb 4-1: config 0 descriptor?? [ 428.804327][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.811110][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.003086][ T5986] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 429.195508][ T5986] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 429.195548][ T5986] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 429.195699][ T5986] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.195724][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.474890][ T8732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 429.475074][ T8732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 429.508046][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 429.508074][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 429.585332][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 429.585397][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 429.585416][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 429.585524][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 429.608105][ T5986] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.659226][ T10] usb 4-1: USB disconnect, device number 31 [ 429.691801][ T8744] usb usb7: usbfs: process 8744 (syz.2.862) did not claim interface 0 before use [ 429.743781][ T8746] FAULT_INJECTION: forcing a failure. [ 429.743781][ T8746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.743818][ T8746] CPU: 1 UID: 0 PID: 8746 Comm: syz.1.861 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.743842][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 429.743855][ T8746] Call Trace: [ 429.743863][ T8746] [ 429.743873][ T8746] dump_stack_lvl+0x189/0x250 [ 429.743911][ T8746] ? __pfx____ratelimit+0x10/0x10 [ 429.743940][ T8746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.743982][ T8746] ? __pfx__printk+0x10/0x10 [ 429.744027][ T8746] should_fail_ex+0x46c/0x600 [ 429.744064][ T8746] _copy_to_user+0x31/0xb0 [ 429.744092][ T8746] simple_read_from_buffer+0xe1/0x170 [ 429.744129][ T8746] proc_fail_nth_read+0x1b6/0x220 [ 429.744157][ T8746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.744191][ T8746] ? rw_verify_area+0x2ac/0x4e0 [ 429.744217][ T8746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.744243][ T8746] vfs_read+0x206/0xa30 [ 429.744280][ T8746] ? __pfx_vfs_read+0x10/0x10 [ 429.744302][ T8746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 429.744337][ T8746] ? mutex_lock_nested+0x154/0x1d0 [ 429.744365][ T8746] ? fdget_pos+0x253/0x320 [ 429.744406][ T8746] ksys_read+0x14b/0x260 [ 429.744437][ T8746] ? __pfx_ksys_read+0x10/0x10 [ 429.744468][ T8746] ? do_syscall_64+0xbe/0xfa0 [ 429.744500][ T8746] do_syscall_64+0xfa/0xfa0 [ 429.744526][ T8746] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.744552][ T8746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.744573][ T8746] ? clear_bhb_loop+0x60/0xb0 [ 429.744599][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.744619][ T8746] RIP: 0033:0x7f913a83d9dc [ 429.744640][ T8746] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 429.744657][ T8746] RSP: 002b:00007f9138aa6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.744680][ T8746] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83d9dc [ 429.744696][ T8746] RDX: 000000000000000f RSI: 00007f9138aa60a0 RDI: 0000000000000003 [ 429.744709][ T8746] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.744722][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.744735][ T8746] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 429.744773][ T8746] [ 429.792123][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 430.033904][ T5986] usb 5-1: USB disconnect, device number 29 [ 430.112525][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 430.115598][ T31] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 430.115617][ T31] usb 1-1: config 0 has no interface number 0 [ 430.115649][ T31] usb 1-1: config 0 interface 12 has no altsetting 0 [ 430.358602][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.400760][ T31] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 430.400793][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.400815][ T31] usb 1-1: Product: syz [ 430.400829][ T31] usb 1-1: Manufacturer: syz [ 430.400843][ T31] usb 1-1: SerialNumber: syz [ 430.448700][ T31] usb 1-1: config 0 descriptor?? [ 430.593232][ T8752] FAULT_INJECTION: forcing a failure. [ 430.593232][ T8752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.593316][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.1.865 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.593343][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 430.593356][ T8752] Call Trace: [ 430.593365][ T8752] [ 430.593374][ T8752] dump_stack_lvl+0x189/0x250 [ 430.593413][ T8752] ? __pfx____ratelimit+0x10/0x10 [ 430.593440][ T8752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.593473][ T8752] ? __pfx__printk+0x10/0x10 [ 430.593495][ T8752] ? lock_acquire+0x175/0x360 [ 430.593539][ T8752] should_fail_ex+0x46c/0x600 [ 430.593574][ T8752] _copy_from_user+0x2d/0xb0 [ 430.593600][ T8752] __copy_msghdr+0x3c5/0x5b0 [ 430.593631][ T8752] ___sys_sendmsg+0x1a5/0x2a0 [ 430.593660][ T8752] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.593725][ T8752] ? __fget_files+0x2a/0x420 [ 430.593755][ T8752] ? __fget_files+0x3a6/0x420 [ 430.593797][ T8752] __sys_sendmmsg+0x22d/0x430 [ 430.593829][ T8752] ? __pfx___sys_sendmmsg+0x10/0x10 [ 430.593888][ T8752] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 430.593932][ T8752] __x64_sys_sendmmsg+0xa0/0xc0 [ 430.593960][ T8752] do_syscall_64+0xfa/0xfa0 [ 430.593991][ T8752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.594011][ T8752] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 430.594041][ T8752] ? clear_bhb_loop+0x60/0xb0 [ 430.594068][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.594089][ T8752] RIP: 0033:0x7f913a83efc9 [ 430.594109][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.594127][ T8752] RSP: 002b:00007f9138aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 430.594150][ T8752] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83efc9 [ 430.594167][ T8752] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 430.594181][ T8752] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.594195][ T8752] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 430.594208][ T8752] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 430.594245][ T8752] [ 431.152474][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.683807][ T8758] IPVS: length: 4096 != 24 [ 432.340705][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.120267][ T31] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 433.120306][ T31] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 433.120317][ T31] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 433.120376][ T31] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 433.168450][ T31] usb 1-1: USB disconnect, device number 22 [ 434.512914][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 434.527179][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.866741][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 435.572132][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 435.591693][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 435.591726][ T10] usb 3-1: config 0 has no interface number 0 [ 435.591790][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 435.648937][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 435.648969][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.648982][ T10] usb 3-1: Product: syz [ 435.648991][ T10] usb 3-1: Manufacturer: syz [ 435.648999][ T10] usb 3-1: SerialNumber: syz [ 435.689799][ T10] usb 3-1: config 0 descriptor?? [ 437.178775][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 437.178816][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 437.178830][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 437.178891][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 437.262508][ T10] usb 3-1: USB disconnect, device number 32 [ 437.990742][ T8852] sock: sock_timestamping_bind_phc: sock not bind to device [ 438.005709][ T8853] FAULT_INJECTION: forcing a failure. [ 438.005709][ T8853] name failslab, interval 1, probability 0, space 0, times 0 [ 438.005747][ T8853] CPU: 0 UID: 0 PID: 8853 Comm: syz.4.903 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 438.005773][ T8853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.005787][ T8853] Call Trace: [ 438.005796][ T8853] [ 438.005806][ T8853] dump_stack_lvl+0x189/0x250 [ 438.005845][ T8853] ? __pfx____ratelimit+0x10/0x10 [ 438.005874][ T8853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.005908][ T8853] ? __pfx__printk+0x10/0x10 [ 438.005941][ T8853] ? __pfx___might_resched+0x10/0x10 [ 438.005966][ T8853] ? fs_reclaim_acquire+0x7d/0x100 [ 438.006004][ T8853] should_fail_ex+0x46c/0x600 [ 438.006039][ T8853] ? __alloc_skb+0x112/0x2d0 [ 438.006060][ T8853] should_failslab+0xa8/0x100 [ 438.006093][ T8853] ? __alloc_skb+0x112/0x2d0 [ 438.006112][ T8853] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 438.006141][ T8853] ? do_raw_spin_lock+0x121/0x290 [ 438.006184][ T8853] __alloc_skb+0x112/0x2d0 [ 438.006212][ T8853] pfkey_sendmsg+0x1dd/0x1090 [ 438.006243][ T8853] ? __lock_acquire+0xab9/0xd20 [ 438.006282][ T8853] ? smack_socket_sendmsg+0x1a7/0x520 [ 438.006312][ T8853] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 438.006340][ T8853] ? __lock_acquire+0xab9/0xd20 [ 438.006388][ T8853] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 438.006427][ T8853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.006459][ T8853] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 438.006490][ T8853] __sock_sendmsg+0x21c/0x270 [ 438.006526][ T8853] ____sys_sendmsg+0x534/0x820 [ 438.006560][ T8853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.006598][ T8853] ? import_iovec+0x74/0xa0 [ 438.006627][ T8853] ___sys_sendmsg+0x21f/0x2a0 [ 438.006657][ T8853] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.006726][ T8853] ? __fget_files+0x2a/0x420 [ 438.006757][ T8853] ? __fget_files+0x3a6/0x420 [ 438.006800][ T8853] __sys_sendmmsg+0x22d/0x430 [ 438.006834][ T8853] ? __pfx___sys_sendmmsg+0x10/0x10 [ 438.006872][ T8853] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 438.006916][ T8853] ? ksys_write+0x230/0x260 [ 438.006946][ T8853] ? __pfx_ksys_write+0x10/0x10 [ 438.006979][ T8853] __x64_sys_sendmmsg+0xa0/0xc0 [ 438.007009][ T8853] do_syscall_64+0xfa/0xfa0 [ 438.007038][ T8853] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.007066][ T8853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.007088][ T8853] ? clear_bhb_loop+0x60/0xb0 [ 438.007116][ T8853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.007137][ T8853] RIP: 0033:0x7f6a2c0fefc9 [ 438.007157][ T8853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.007184][ T8853] RSP: 002b:00007f6a2a366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.007209][ T8853] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fefc9 [ 438.007226][ T8853] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000003 [ 438.007240][ T8853] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 438.007254][ T8853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.007267][ T8853] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 438.007304][ T8853] [ 438.226556][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 438.226576][ T37] audit: type=1326 audit(1762096515.468:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.226628][ T37] audit: type=1326 audit(1762096515.468:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.228966][ T37] audit: type=1326 audit(1762096515.468:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.229024][ T37] audit: type=1326 audit(1762096515.468:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.230970][ T37] audit: type=1326 audit(1762096515.468:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.231593][ T37] audit: type=1326 audit(1762096515.468:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.231640][ T37] audit: type=1326 audit(1762096515.468:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.234415][ T37] audit: type=1326 audit(1762096515.468:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.235027][ T37] audit: type=1326 audit(1762096515.478:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.235082][ T37] audit: type=1326 audit(1762096515.478:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8827 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ed6fefc9 code=0x7ffc0000 [ 438.288664][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 438.376143][ T5891] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 438.532257][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 438.535497][ T5891] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 438.535529][ T5891] usb 3-1: config 0 has no interface number 0 [ 438.535618][ T5891] usb 3-1: config 0 interface 12 has no altsetting 0 [ 438.539056][ T5891] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 438.539091][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.539111][ T5891] usb 3-1: Product: syz [ 438.539125][ T5891] usb 3-1: Manufacturer: syz [ 438.539138][ T5891] usb 3-1: SerialNumber: syz [ 438.572852][ T5891] usb 3-1: config 0 descriptor?? [ 438.971196][ T8868] FAULT_INJECTION: forcing a failure. [ 438.971196][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 438.971236][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.1.910 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 438.971262][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.971276][ T8868] Call Trace: [ 438.971285][ T8868] [ 438.971295][ T8868] dump_stack_lvl+0x189/0x250 [ 438.971333][ T8868] ? __pfx____ratelimit+0x10/0x10 [ 438.971359][ T8868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.971392][ T8868] ? __pfx__printk+0x10/0x10 [ 438.971424][ T8868] ? __pfx___might_resched+0x10/0x10 [ 438.971445][ T8868] ? fs_reclaim_acquire+0x7d/0x100 [ 438.971478][ T8868] should_fail_ex+0x46c/0x600 [ 438.971507][ T8868] ? __alloc_skb+0x112/0x2d0 [ 438.971526][ T8868] should_failslab+0xa8/0x100 [ 438.971555][ T8868] ? __alloc_skb+0x112/0x2d0 [ 438.971570][ T8868] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 438.971594][ T8868] ? netlink_autobind+0xdb/0x300 [ 438.971619][ T8868] __alloc_skb+0x112/0x2d0 [ 438.971642][ T8868] netlink_sendmsg+0x5c6/0xb30 [ 438.971659][ T8868] ? is_bpf_text_address+0x26/0x2b0 [ 438.971696][ T8868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.971724][ T8868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.971749][ T8868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.971767][ T8868] __sock_sendmsg+0x21c/0x270 [ 438.971799][ T8868] ____sys_sendmsg+0x508/0x820 [ 438.971826][ T8868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.971856][ T8868] ? import_iovec+0x74/0xa0 [ 438.971879][ T8868] ___sys_sendmsg+0x21f/0x2a0 [ 438.971908][ T8868] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.971967][ T8868] ? __fget_files+0x2a/0x420 [ 438.971990][ T8868] ? __fget_files+0x3a6/0x420 [ 438.972024][ T8868] __x64_sys_sendmsg+0x1a1/0x260 [ 438.972048][ T8868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.972079][ T8868] ? __pfx_ksys_write+0x10/0x10 [ 438.972115][ T8868] ? do_syscall_64+0xbe/0xfa0 [ 438.972143][ T8868] do_syscall_64+0xfa/0xfa0 [ 438.972165][ T8868] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.972188][ T8868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.972206][ T8868] ? clear_bhb_loop+0x60/0xb0 [ 438.972228][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.972245][ T8868] RIP: 0033:0x7f913a83efc9 [ 438.972262][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.972278][ T8868] RSP: 002b:00007f9138aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.972298][ T8868] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83efc9 [ 438.972312][ T8868] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 438.972322][ T8868] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.972333][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.972344][ T8868] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 438.972375][ T8868] [ 440.879300][ T5891] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 440.879345][ T5891] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 440.879356][ T5891] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 440.879414][ T5891] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 440.905740][ T5891] usb 3-1: USB disconnect, device number 33 [ 441.129233][ T8900] FAULT_INJECTION: forcing a failure. [ 441.129233][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.129271][ T8900] CPU: 1 UID: 0 PID: 8900 Comm: syz.4.924 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 441.129295][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.129308][ T8900] Call Trace: [ 441.129317][ T8900] [ 441.129327][ T8900] dump_stack_lvl+0x189/0x250 [ 441.129367][ T8900] ? __pfx____ratelimit+0x10/0x10 [ 441.129397][ T8900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.129431][ T8900] ? __pfx__printk+0x10/0x10 [ 441.129477][ T8900] should_fail_ex+0x46c/0x600 [ 441.129514][ T8900] _copy_to_user+0x31/0xb0 [ 441.129542][ T8900] simple_read_from_buffer+0xe1/0x170 [ 441.129578][ T8900] proc_fail_nth_read+0x1b6/0x220 [ 441.129607][ T8900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.129635][ T8900] ? rw_verify_area+0x2ac/0x4e0 [ 441.129661][ T8900] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.129687][ T8900] vfs_read+0x206/0xa30 [ 441.129725][ T8900] ? __pfx_vfs_read+0x10/0x10 [ 441.129748][ T8900] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 441.129784][ T8900] ? mutex_lock_nested+0x154/0x1d0 [ 441.129806][ T8900] ? fdget_pos+0x253/0x320 [ 441.129847][ T8900] ksys_read+0x14b/0x260 [ 441.129878][ T8900] ? __pfx_ksys_read+0x10/0x10 [ 441.129910][ T8900] ? do_syscall_64+0xbe/0xfa0 [ 441.129945][ T8900] do_syscall_64+0xfa/0xfa0 [ 441.129970][ T8900] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.129994][ T8900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.130016][ T8900] ? clear_bhb_loop+0x60/0xb0 [ 441.130043][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.130073][ T8900] RIP: 0033:0x7f6a2c0fd9dc [ 441.130093][ T8900] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 441.130113][ T8900] RSP: 002b:00007f6a2a366030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.130138][ T8900] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fd9dc [ 441.130154][ T8900] RDX: 000000000000000f RSI: 00007f6a2a3660a0 RDI: 0000000000000004 [ 441.130168][ T8900] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 441.130182][ T8900] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 441.130196][ T8900] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 441.130235][ T8900] [ 441.572787][ T8908] FAULT_INJECTION: forcing a failure. [ 441.572787][ T8908] name failslab, interval 1, probability 0, space 0, times 0 [ 441.572814][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.4.926 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 441.572829][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.572837][ T8908] Call Trace: [ 441.572842][ T8908] [ 441.572848][ T8908] dump_stack_lvl+0x189/0x250 [ 441.572886][ T8908] ? __pfx____ratelimit+0x10/0x10 [ 441.572903][ T8908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.572922][ T8908] ? __pfx__printk+0x10/0x10 [ 441.572942][ T8908] ? __pfx___might_resched+0x10/0x10 [ 441.572954][ T8908] ? fs_reclaim_acquire+0x7d/0x100 [ 441.572975][ T8908] should_fail_ex+0x46c/0x600 [ 441.572996][ T8908] should_failslab+0xa8/0x100 [ 441.573015][ T8908] __kmalloc_noprof+0xcc/0x7d0 [ 441.573031][ T8908] ? tomoyo_encode+0x28b/0x550 [ 441.573050][ T8908] tomoyo_encode+0x28b/0x550 [ 441.573068][ T8908] tomoyo_realpath_from_path+0x58d/0x5d0 [ 441.573116][ T8908] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 441.573143][ T8908] tomoyo_path_number_perm+0x1e8/0x5a0 [ 441.573164][ T8908] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 441.573187][ T8908] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 441.573210][ T8908] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.573246][ T8908] ? __fget_files+0x2a/0x420 [ 441.573266][ T8908] ? __fget_files+0x3a6/0x420 [ 441.573282][ T8908] ? __fget_files+0x2a/0x420 [ 441.573302][ T8908] security_file_ioctl+0xcb/0x2d0 [ 441.573316][ T8908] __se_sys_ioctl+0x47/0x170 [ 441.573332][ T8908] do_syscall_64+0xfa/0xfa0 [ 441.573348][ T8908] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.573364][ T8908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.573376][ T8908] ? clear_bhb_loop+0x60/0xb0 [ 441.573391][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.573403][ T8908] RIP: 0033:0x7f6a2c0fefc9 [ 441.573415][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.573426][ T8908] RSP: 002b:00007f6a2a366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.573441][ T8908] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fefc9 [ 441.573450][ T8908] RDX: 0000200000000380 RSI: 00000000c008aec1 RDI: 0000000000000003 [ 441.573458][ T8908] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 441.573466][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.573473][ T8908] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 441.573494][ T8908] [ 441.577030][ T8908] ERROR: Out of memory at tomoyo_realpath_from_path. [ 442.280599][ T8915] FAULT_INJECTION: forcing a failure. [ 442.280599][ T8915] name failslab, interval 1, probability 0, space 0, times 0 [ 442.281869][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.4.932 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 442.281903][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.281917][ T8915] Call Trace: [ 442.281926][ T8915] [ 442.281935][ T8915] dump_stack_lvl+0x189/0x250 [ 442.281983][ T8915] ? __pfx____ratelimit+0x10/0x10 [ 442.282012][ T8915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.282044][ T8915] ? __pfx__printk+0x10/0x10 [ 442.282079][ T8915] ? __pfx___might_resched+0x10/0x10 [ 442.282104][ T8915] ? fs_reclaim_acquire+0x7d/0x100 [ 442.282142][ T8915] should_fail_ex+0x46c/0x600 [ 442.282177][ T8915] ? __alloc_skb+0x112/0x2d0 [ 442.282199][ T8915] should_failslab+0xa8/0x100 [ 442.282232][ T8915] ? __alloc_skb+0x112/0x2d0 [ 442.282251][ T8915] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 442.282281][ T8915] ? netlink_autobind+0xdb/0x300 [ 442.282313][ T8915] __alloc_skb+0x112/0x2d0 [ 442.282341][ T8915] netlink_sendmsg+0x5c6/0xb30 [ 442.282363][ T8915] ? is_bpf_text_address+0x26/0x2b0 [ 442.282417][ T8915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.282450][ T8915] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.282482][ T8915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.282507][ T8915] __sock_sendmsg+0x21c/0x270 [ 442.282543][ T8915] ____sys_sendmsg+0x508/0x820 [ 442.282578][ T8915] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.282616][ T8915] ? import_iovec+0x74/0xa0 [ 442.282645][ T8915] ___sys_sendmsg+0x21f/0x2a0 [ 442.282676][ T8915] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.282748][ T8915] ? __fget_files+0x2a/0x420 [ 442.282799][ T8915] ? __fget_files+0x3a6/0x420 [ 442.282843][ T8915] __x64_sys_sendmsg+0x1a1/0x260 [ 442.282872][ T8915] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.282911][ T8915] ? __pfx_ksys_write+0x10/0x10 [ 442.282944][ T8915] ? do_syscall_64+0xbe/0xfa0 [ 442.282979][ T8915] do_syscall_64+0xfa/0xfa0 [ 442.283007][ T8915] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.283035][ T8915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.283057][ T8915] ? clear_bhb_loop+0x60/0xb0 [ 442.283084][ T8915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.283106][ T8915] RIP: 0033:0x7f6a2c0fefc9 [ 442.283127][ T8915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.283146][ T8915] RSP: 002b:00007f6a2a366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.283171][ T8915] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fefc9 [ 442.283187][ T8915] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 442.283201][ T8915] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 442.283216][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.283229][ T8915] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 442.283267][ T8915] [ 443.252704][ T5819] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 443.402215][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 443.405042][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.405106][ T5819] usb 4-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 443.405132][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.454014][ T5819] usb 4-1: config 0 descriptor?? [ 444.621652][ T8940] bond0: Error: Cannot enslave bond to itself. [ 445.152732][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.159167][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.430818][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.430901][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.905230][ T8990] FAULT_INJECTION: forcing a failure. [ 445.905230][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 445.905268][ T8990] CPU: 1 UID: 0 PID: 8990 Comm: syz.1.963 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.905294][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.905306][ T8990] Call Trace: [ 445.905314][ T8990] [ 445.905324][ T8990] dump_stack_lvl+0x189/0x250 [ 445.905363][ T8990] ? __pfx____ratelimit+0x10/0x10 [ 445.905397][ T8990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.905430][ T8990] ? __pfx__printk+0x10/0x10 [ 445.905461][ T8990] ? __pfx___might_resched+0x10/0x10 [ 445.905488][ T8990] should_fail_ex+0x46c/0x600 [ 445.905522][ T8990] ? io_submit_one+0x11f/0x1310 [ 445.905542][ T8990] should_failslab+0xa8/0x100 [ 445.905573][ T8990] ? io_submit_one+0x11f/0x1310 [ 445.905590][ T8990] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 445.905626][ T8990] io_submit_one+0x11f/0x1310 [ 445.905665][ T8990] ? __pfx_io_submit_one+0x10/0x10 [ 445.905687][ T8990] ? __might_fault+0xb0/0x130 [ 445.905727][ T8990] ? __might_fault+0xb0/0x130 [ 445.905755][ T8990] __se_sys_io_submit+0x185/0x2f0 [ 445.905782][ T8990] ? __pfx___se_sys_io_submit+0x10/0x10 [ 445.905814][ T8990] ? ksys_write+0x230/0x260 [ 445.905852][ T8990] ? do_syscall_64+0xbe/0xfa0 [ 445.905885][ T8990] do_syscall_64+0xfa/0xfa0 [ 445.905910][ T8990] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.905939][ T8990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.905960][ T8990] ? clear_bhb_loop+0x60/0xb0 [ 445.905987][ T8990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.906008][ T8990] RIP: 0033:0x7f913a83efc9 [ 445.906027][ T8990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.906044][ T8990] RSP: 002b:00007f9138aa6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 445.906069][ T8990] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83efc9 [ 445.906086][ T8990] RDX: 0000200000000840 RSI: 2000000000000211 RDI: 00007f913b5d2000 [ 445.906100][ T8990] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 445.906115][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.906128][ T8990] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 445.906166][ T8990] [ 446.143470][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 446.322455][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 446.348688][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 446.348710][ T9] usb 3-1: config 0 has no interface number 0 [ 446.353982][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 446.354013][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.354034][ T9] usb 3-1: Product: syz [ 446.354047][ T9] usb 3-1: Manufacturer: syz [ 446.354070][ T9] usb 3-1: SerialNumber: syz [ 446.384242][ T9] usb 3-1: config 0 descriptor?? [ 446.438347][ T9] smsc95xx v2.0.0 [ 446.484062][ T5891] usb 4-1: USB disconnect, device number 32 [ 446.961155][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 446.961193][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 447.067660][ T9011] FAULT_INJECTION: forcing a failure. [ 447.067660][ T9011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.067728][ T9011] CPU: 0 UID: 0 PID: 9011 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 447.067755][ T9011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.067769][ T9011] Call Trace: [ 447.067778][ T9011] [ 447.067788][ T9011] dump_stack_lvl+0x189/0x250 [ 447.067825][ T9011] ? __pfx____ratelimit+0x10/0x10 [ 447.067854][ T9011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.067888][ T9011] ? __pfx__printk+0x10/0x10 [ 447.067934][ T9011] should_fail_ex+0x46c/0x600 [ 447.067970][ T9011] _copy_to_user+0x31/0xb0 [ 447.067998][ T9011] simple_read_from_buffer+0xe1/0x170 [ 447.068034][ T9011] proc_fail_nth_read+0x1b6/0x220 [ 447.068072][ T9011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.068100][ T9011] ? rw_verify_area+0x2ac/0x4e0 [ 447.068126][ T9011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.068152][ T9011] vfs_read+0x206/0xa30 [ 447.068187][ T9011] ? __pfx_vfs_read+0x10/0x10 [ 447.068209][ T9011] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 447.068245][ T9011] ? mutex_lock_nested+0x154/0x1d0 [ 447.068265][ T9011] ? fdget_pos+0x253/0x320 [ 447.068306][ T9011] ksys_read+0x14b/0x260 [ 447.068337][ T9011] ? __pfx_ksys_read+0x10/0x10 [ 447.068376][ T9011] do_syscall_64+0xfa/0xfa0 [ 447.068407][ T9011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.068427][ T9011] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 447.068448][ T9011] ? clear_bhb_loop+0x60/0xb0 [ 447.068475][ T9011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.068497][ T9011] RIP: 0033:0x7f86ed6fd9dc [ 447.068517][ T9011] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 447.068537][ T9011] RSP: 002b:00007f86eb924030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.068562][ T9011] RAX: ffffffffffffffda RBX: 00007f86ed956180 RCX: 00007f86ed6fd9dc [ 447.068580][ T9011] RDX: 000000000000000f RSI: 00007f86eb9240a0 RDI: 0000000000000007 [ 447.068594][ T9011] RBP: 00007f86eb924090 R08: 0000000000000000 R09: 0000000000000000 [ 447.068608][ T9011] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000001 [ 447.068622][ T9011] R13: 00007f86ed956218 R14: 00007f86ed956180 R15: 00007fff2df9aa78 [ 447.068661][ T9011] [ 449.070130][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 449.070499][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 449.263735][ T9] usb 3-1: USB disconnect, device number 34 [ 449.715179][ T9026] FAULT_INJECTION: forcing a failure. [ 449.715179][ T9026] name failslab, interval 1, probability 0, space 0, times 0 [ 449.715218][ T9026] CPU: 0 UID: 0 PID: 9026 Comm: syz.4.978 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 449.715243][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.715256][ T9026] Call Trace: [ 449.715265][ T9026] [ 449.715274][ T9026] dump_stack_lvl+0x189/0x250 [ 449.715321][ T9026] ? __pfx____ratelimit+0x10/0x10 [ 449.715349][ T9026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.715381][ T9026] ? __pfx__printk+0x10/0x10 [ 449.715415][ T9026] ? __pfx___might_resched+0x10/0x10 [ 449.715444][ T9026] should_fail_ex+0x46c/0x600 [ 449.715479][ T9026] ? io_submit_one+0x11f/0x1310 [ 449.715500][ T9026] should_failslab+0xa8/0x100 [ 449.715532][ T9026] ? io_submit_one+0x11f/0x1310 [ 449.715551][ T9026] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 449.715588][ T9026] io_submit_one+0x11f/0x1310 [ 449.715628][ T9026] ? __pfx_io_submit_one+0x10/0x10 [ 449.715651][ T9026] ? __might_fault+0xb0/0x130 [ 449.715697][ T9026] ? __might_fault+0xb0/0x130 [ 449.715739][ T9026] __se_sys_io_submit+0x185/0x2f0 [ 449.715775][ T9026] ? __pfx___se_sys_io_submit+0x10/0x10 [ 449.715804][ T9026] ? ksys_write+0x230/0x260 [ 449.715843][ T9026] ? do_syscall_64+0xbe/0xfa0 [ 449.715876][ T9026] do_syscall_64+0xfa/0xfa0 [ 449.715903][ T9026] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.715931][ T9026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.715962][ T9026] ? clear_bhb_loop+0x60/0xb0 [ 449.715989][ T9026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.716011][ T9026] RIP: 0033:0x7f6a2c0fefc9 [ 449.716030][ T9026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.716049][ T9026] RSP: 002b:00007f6a2a366038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 449.716073][ T9026] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fefc9 [ 449.716090][ T9026] RDX: 0000200000000840 RSI: 2000000000000211 RDI: 00007f6a2ce94000 [ 449.716104][ T9026] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 449.716117][ T9026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.716130][ T9026] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 449.716164][ T9026] [ 450.912041][ T5899] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 451.082557][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 451.082594][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 451.082624][ T5899] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 451.085297][ T5899] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 451.085324][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.085347][ T5899] usb 3-1: Product: syz [ 451.085362][ T5899] usb 3-1: Manufacturer: syz [ 451.085378][ T5899] usb 3-1: SerialNumber: syz [ 451.182055][ T5899] usb 3-1: config 0 descriptor?? [ 451.183134][ T9050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.183311][ T9050] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.186507][ T5899] usb 3-1: ucan: probing device on interface #0 [ 452.216916][ T5899] usb 3-1: ucan: could not read protocol version, ret=-110 [ 452.217088][ T5899] usb 3-1: ucan: probe failed; try to update the device firmware [ 453.003156][ T9086] sd 0:0:1:0: device reset [ 453.524918][ T9099] FAULT_INJECTION: forcing a failure. [ 453.524918][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 453.524991][ T9099] CPU: 0 UID: 0 PID: 9099 Comm: syz.4.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.525016][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.525029][ T9099] Call Trace: [ 453.525038][ T9099] [ 453.525047][ T9099] dump_stack_lvl+0x189/0x250 [ 453.525086][ T9099] ? __pfx____ratelimit+0x10/0x10 [ 453.525115][ T9099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.525147][ T9099] ? __pfx__printk+0x10/0x10 [ 453.525182][ T9099] ? __pfx___might_resched+0x10/0x10 [ 453.525205][ T9099] ? fs_reclaim_acquire+0x7d/0x100 [ 453.525242][ T9099] should_fail_ex+0x46c/0x600 [ 453.525279][ T9099] should_failslab+0xa8/0x100 [ 453.525312][ T9099] __kmalloc_noprof+0xcc/0x7d0 [ 453.525341][ T9099] ? tomoyo_encode+0x28b/0x550 [ 453.525374][ T9099] tomoyo_encode+0x28b/0x550 [ 453.525407][ T9099] tomoyo_realpath_from_path+0x58d/0x5d0 [ 453.525447][ T9099] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 453.525482][ T9099] tomoyo_path_number_perm+0x1e8/0x5a0 [ 453.525519][ T9099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.525558][ T9099] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 453.525587][ T9099] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.525636][ T9099] ? __fget_files+0x2a/0x420 [ 453.525671][ T9099] ? __fget_files+0x3a6/0x420 [ 453.525692][ T9099] ? __fget_files+0x2a/0x420 [ 453.525718][ T9099] security_file_ioctl+0xcb/0x2d0 [ 453.525738][ T9099] __se_sys_ioctl+0x47/0x170 [ 453.525759][ T9099] do_syscall_64+0xfa/0xfa0 [ 453.525779][ T9099] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.525800][ T9099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.525816][ T9099] ? clear_bhb_loop+0x60/0xb0 [ 453.525837][ T9099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.525852][ T9099] RIP: 0033:0x7f6a2c0fefc9 [ 453.525868][ T9099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.525882][ T9099] RSP: 002b:00007f6a2a324038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.525901][ T9099] RAX: ffffffffffffffda RBX: 00007f6a2c356180 RCX: 00007f6a2c0fefc9 [ 453.525914][ T9099] RDX: 0000200000000340 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 453.525925][ T9099] RBP: 00007f6a2a324090 R08: 0000000000000000 R09: 0000000000000000 [ 453.525936][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.525945][ T9099] R13: 00007f6a2c356218 R14: 00007f6a2c356180 R15: 00007fff575ca1a8 [ 453.525984][ T9099] [ 453.526101][ T9099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.299085][ T9102] fuse: Bad value for 'fd' [ 454.822677][ T5812] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 457.446479][ T9118] program syz.3.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.151780][ T9138] FAULT_INJECTION: forcing a failure. [ 458.151780][ T9138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.151818][ T9138] CPU: 0 UID: 0 PID: 9138 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 458.151844][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.151858][ T9138] Call Trace: [ 458.151868][ T9138] [ 458.151877][ T9138] dump_stack_lvl+0x189/0x250 [ 458.151927][ T9138] ? __pfx____ratelimit+0x10/0x10 [ 458.151955][ T9138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.151984][ T9138] ? __pfx__printk+0x10/0x10 [ 458.152008][ T9138] ? __might_fault+0xb0/0x130 [ 458.152052][ T9138] should_fail_ex+0x46c/0x600 [ 458.152089][ T9138] _copy_from_user+0x2d/0xb0 [ 458.152115][ T9138] __sys_sendto+0x262/0x520 [ 458.152144][ T9138] ? __pfx___sys_sendto+0x10/0x10 [ 458.152195][ T9138] ? exc_page_fault+0x82/0x100 [ 458.152228][ T9138] ? do_user_addr_fault+0xc85/0x1380 [ 458.152259][ T9138] __x64_sys_sendto+0xde/0x100 [ 458.152286][ T9138] do_syscall_64+0xfa/0xfa0 [ 458.152315][ T9138] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.152344][ T9138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.152365][ T9138] ? clear_bhb_loop+0x60/0xb0 [ 458.152393][ T9138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.152415][ T9138] RIP: 0033:0x7f913a840e5c [ 458.152434][ T9138] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 458.152452][ T9138] RSP: 002b:00007f9138aa4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 458.152476][ T9138] RAX: ffffffffffffffda RBX: 00007f9138aa4fc0 RCX: 00007f913a840e5c [ 458.152493][ T9138] RDX: 0000000000000020 RSI: 00007f9138aa5010 RDI: 0000000000000005 [ 458.152507][ T9138] RBP: 0000000000000000 R08: 00007f9138aa4f14 R09: 000000000000000c [ 458.152521][ T9138] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 458.152534][ T9138] R13: 00007f9138aa4f68 R14: 00007f9138aa5010 R15: 0000000000000000 [ 458.152571][ T9138] [ 459.648690][ T5899] usb 3-1: USB disconnect, device number 35 [ 460.872075][ T5891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 461.050603][ T5891] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 461.050648][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.050669][ T5891] usb 1-1: Product: syz [ 461.050685][ T5891] usb 1-1: Manufacturer: syz [ 461.050701][ T5891] usb 1-1: SerialNumber: syz [ 461.386350][ T5891] usb 1-1: config 0 descriptor?? [ 461.499382][ T9198] IPVS: length: 4096 != 24 [ 462.444593][ T5891] hso 1-1:0.0: Failed to find BULK IN ep [ 462.454651][ T5891] usb-storage 1-1:0.0: USB Mass Storage device detected [ 463.032026][ T5891] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 463.032046][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 463.187347][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 463.187381][ T5891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 463.187409][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 463.187453][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 463.187478][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.211688][ T5891] usb 4-1: config 0 descriptor?? [ 463.212005][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 463.235393][ T9246] tty tty3: ldisc open failed (-12), clearing slot 2 [ 463.239641][ T5891] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 463.239739][ T5891] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 463.311318][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 463.311351][ T9] usb 3-1: config 0 has no interface number 0 [ 463.311407][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 463.341234][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 463.341269][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.341291][ T9] usb 3-1: Product: syz [ 463.341307][ T9] usb 3-1: Manufacturer: syz [ 463.341322][ T9] usb 3-1: SerialNumber: syz [ 463.394751][ T9] usb 3-1: config 0 descriptor?? [ 463.459295][ T9223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1057'. [ 463.493743][ T5891] usb 4-1: USB disconnect, device number 33 [ 463.841743][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 463.841810][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 463.841829][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 463.842143][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 463.879722][ T9] usb 3-1: USB disconnect, device number 36 [ 464.113626][ T9] usb 1-1: USB disconnect, device number 23 [ 464.462914][ T9281] FAULT_INJECTION: forcing a failure. [ 464.462914][ T9281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.462954][ T9281] CPU: 0 UID: 0 PID: 9281 Comm: syz.4.1083 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.462979][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.462993][ T9281] Call Trace: [ 464.463002][ T9281] [ 464.463011][ T9281] dump_stack_lvl+0x189/0x250 [ 464.463050][ T9281] ? __pfx____ratelimit+0x10/0x10 [ 464.463080][ T9281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.463113][ T9281] ? __pfx__printk+0x10/0x10 [ 464.463141][ T9281] ? __might_fault+0xb0/0x130 [ 464.463185][ T9281] should_fail_ex+0x46c/0x600 [ 464.463223][ T9281] _copy_to_iter+0x1de/0x1790 [ 464.463257][ T9281] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 464.463300][ T9281] ? __lock_acquire+0xab9/0xd20 [ 464.463334][ T9281] ? __pfx__copy_to_iter+0x10/0x10 [ 464.463369][ T9281] ? __lock_acquire+0xab9/0xd20 [ 464.463412][ T9281] __skb_datagram_iter+0xf8/0x990 [ 464.463443][ T9281] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 464.463481][ T9281] skb_copy_datagram_iter+0xc5/0x230 [ 464.463515][ T9281] tcp_recvmsg_locked+0xeb2/0x35c0 [ 464.463565][ T9281] ? rtlock_slowlock_locked+0xd8/0x4010 [ 464.463640][ T9281] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 464.463676][ T9281] ? __local_bh_enable+0x28c/0x410 [ 464.463701][ T9281] ? reacquire_held_locks+0x127/0x1d0 [ 464.463737][ T9281] ? __pfx___local_bh_enable+0x10/0x10 [ 464.463774][ T9281] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 464.463800][ T9281] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.463834][ T9281] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 464.463859][ T9281] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 464.463894][ T9281] ? rt_spin_unlock+0x161/0x200 [ 464.463918][ T9281] ? lock_sock_nested+0x5f/0x130 [ 464.463949][ T9281] ? lock_sock_nested+0xdd/0x130 [ 464.463984][ T9281] tcp_recvmsg+0xec/0x560 [ 464.464029][ T9281] ? __pfx_tcp_recvmsg+0x10/0x10 [ 464.464076][ T9281] ? is_bpf_text_address+0x26/0x2b0 [ 464.464111][ T9281] ? __pfx_tcp_recvmsg+0x10/0x10 [ 464.464142][ T9281] inet6_recvmsg+0x138/0x6b0 [ 464.464181][ T9281] ? __pfx_inet6_recvmsg+0x10/0x10 [ 464.464210][ T9281] ? __lock_acquire+0xab9/0xd20 [ 464.464239][ T9281] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 464.464269][ T9281] ? security_socket_recvmsg+0x7e/0x2e0 [ 464.464305][ T9281] sock_recvmsg+0x105/0x270 [ 464.464341][ T9281] ____sys_recvmsg+0x1ce/0x470 [ 464.464378][ T9281] ? __pfx_____sys_recvmsg+0x10/0x10 [ 464.464425][ T9281] ? import_iovec+0x74/0xa0 [ 464.464453][ T9281] ___sys_recvmsg+0x1b5/0x510 [ 464.464487][ T9281] ? __pfx____sys_recvmsg+0x10/0x10 [ 464.464546][ T9281] ? __fget_files+0x3a6/0x420 [ 464.464589][ T9281] __x64_sys_recvmsg+0x19e/0x260 [ 464.464629][ T9281] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 464.464669][ T9281] ? __pfx_ksys_write+0x10/0x10 [ 464.464702][ T9281] ? do_syscall_64+0xbe/0xfa0 [ 464.464734][ T9281] do_syscall_64+0xfa/0xfa0 [ 464.464762][ T9281] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.464796][ T9281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.464819][ T9281] ? clear_bhb_loop+0x60/0xb0 [ 464.464847][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.464866][ T9281] RIP: 0033:0x7f6a2c0fefc9 [ 464.464886][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.464905][ T9281] RSP: 002b:00007f6a2a366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 464.464929][ T9281] RAX: ffffffffffffffda RBX: 00007f6a2c355fa0 RCX: 00007f6a2c0fefc9 [ 464.464946][ T9281] RDX: 0000000000000142 RSI: 00002000000006c0 RDI: 0000000000000003 [ 464.464961][ T9281] RBP: 00007f6a2a366090 R08: 0000000000000000 R09: 0000000000000000 [ 464.464975][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.464989][ T9281] R13: 00007f6a2c356038 R14: 00007f6a2c355fa0 R15: 00007fff575ca1a8 [ 464.465027][ T9281] [ 465.576121][ T9306] IPVS: length: 4096 != 24 [ 466.712099][ T5871] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 466.875586][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 466.886099][ T5871] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.886135][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 466.886168][ T5871] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 466.886189][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.907461][ T5871] usb 4-1: config 0 descriptor?? [ 467.027553][ T9328] FAULT_INJECTION: forcing a failure. [ 467.027553][ T9328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.028691][ T9328] CPU: 0 UID: 0 PID: 9328 Comm: syz.1.1102 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.028719][ T9328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.028732][ T9328] Call Trace: [ 467.028746][ T9328] [ 467.028755][ T9328] dump_stack_lvl+0x189/0x250 [ 467.028802][ T9328] ? __pfx____ratelimit+0x10/0x10 [ 467.028830][ T9328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.028860][ T9328] ? __pfx__printk+0x10/0x10 [ 467.028886][ T9328] ? __might_fault+0xb0/0x130 [ 467.028926][ T9328] should_fail_ex+0x46c/0x600 [ 467.028962][ T9328] _copy_from_user+0x2d/0xb0 [ 467.028987][ T9328] __sys_bpf+0x1e3/0x860 [ 467.029021][ T9328] ? __pfx___sys_bpf+0x10/0x10 [ 467.029044][ T9328] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 467.029087][ T9328] ? ksys_write+0x230/0x260 [ 467.029116][ T9328] ? __pfx_ksys_write+0x10/0x10 [ 467.029150][ T9328] __x64_sys_bpf+0x7c/0x90 [ 467.029177][ T9328] do_syscall_64+0xfa/0xfa0 [ 467.029205][ T9328] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.029233][ T9328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.029254][ T9328] ? clear_bhb_loop+0x60/0xb0 [ 467.029279][ T9328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.029299][ T9328] RIP: 0033:0x7f913a83efc9 [ 467.029319][ T9328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.029338][ T9328] RSP: 002b:00007f9138aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.029362][ T9328] RAX: ffffffffffffffda RBX: 00007f913aa95fa0 RCX: 00007f913a83efc9 [ 467.029378][ T9328] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 467.029392][ T9328] RBP: 00007f9138aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 467.029405][ T9328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.029418][ T9328] R13: 00007f913aa96038 R14: 00007f913aa95fa0 R15: 00007ffd4e70b3f8 [ 467.029454][ T9328] [ 467.050770][ T9326] input: syz0 as /devices/virtual/input/input15 [ 467.572792][ T5871] hid-u2fzero 0003:20A0:4287.0002: item fetching failed at offset 3/5 [ 467.586688][ T5871] hid-u2fzero 0003:20A0:4287.0002: probe with driver hid-u2fzero failed with error -22 [ 467.641247][ T5871] 1024-page vmalloc region starting at 0xffffc9000db42000 allocated at kcov_ioctl+0x58/0x650 [ 467.641301][ T5871] list_add corruption. next->prev should be prev (ffffffff8d5fda40), but wa[ 467.641301][ T5871] list_add corruption. next->prev should be prev (ffffffff8d5fda40), but was 0000000000000000. (next=ffffc9000db42000). [ 467.641943][ T5871] ------------[ cut here ]------------ [ 467.641952][ T5871] kernel BUG at lib/list_debug.c:31! [ 467.659135][ T5871] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 467.659164][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.659187][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.659201][ T5871] Workqueue: usb_hub_wq hub_event [ 467.659228][ T5871] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 467.659256][ T5871] Code: c3 7d fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 43 c3 9d fd 48 8b 53 08 48 c7 c7 20 df 3d 8b 4c 89 f6 48 89 d9 e8 bd 87 a4 fc 90 <0f> 0b 4c 89 f7 e8 e2 c2 7d fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 13 [ 467.659273][ T5871] RSP: 0018:ffffc90004f176f0 EFLAGS: 00010246 [ 467.659289][ T5871] RAX: 0000000000000075 RBX: ffffc9000db42000 RCX: 75b326da0db8ab00 [ 467.659305][ T5871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.659317][ T5871] RBP: 1ffff92001b68401 R08: 0000000000000000 R09: 0000000000000000 [ 467.659329][ T5871] R10: dffffc0000000000 R11: ffffed101710487b R12: ffffc9000db42008 [ 467.659344][ T5871] R13: dffffc0000000000 R14: ffffffff8d5fda40 R15: ffffc9001a78c000 [ 467.659358][ T5871] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 467.659374][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.659388][ T5871] CR2: 00007ffe6712ecb8 CR3: 0000000034fea000 CR4: 00000000003526f0 [ 467.659406][ T5871] Call Trace: [ 467.659413][ T5871] [ 467.659422][ T5871] kcov_remote_stop+0x52d/0x660 [ 467.659451][ T5871] hub_event+0x45d2/0x4a20 [ 467.659489][ T5871] ? __pfx_hub_event+0x10/0x10 [ 467.659509][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 467.659534][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.659558][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 467.659579][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 467.659601][ T5871] process_scheduled_works+0xae1/0x17b0 [ 467.659649][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.659677][ T5871] worker_thread+0x8a0/0xda0 [ 467.659701][ T5871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.659728][ T5871] ? __kthread_parkme+0x7b/0x200 [ 467.659764][ T5871] kthread+0x711/0x8a0 [ 467.659791][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 467.659814][ T5871] ? __pfx_kthread+0x10/0x10 [ 467.659838][ T5871] ? rt_spin_unlock+0x150/0x200 [ 467.659860][ T5871] ? rt_spin_unlock+0x161/0x200 [ 467.659878][ T5871] ? __pfx_kthread+0x10/0x10 [ 467.659903][ T5871] ret_from_fork+0x4bc/0x870 [ 467.659927][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 467.659960][ T5871] ? __switch_to_asm+0x39/0x70 [ 467.659986][ T5871] ? __switch_to_asm+0x33/0x70 [ 467.660004][ T5871] ? __pfx_kthread+0x10/0x10 [ 467.660030][ T5871] ret_from_fork_asm+0x1a/0x30 [ 467.660055][ T5871] [ 467.660061][ T5871] Modules linked in: [ 467.660074][ T5871] ---[ end trace 0000000000000000 ]--- [ 467.660084][ T5871] RIP: 0010:__list_add_valid_or_report+0xf4/0x130 [ 467.660109][ T5871] Code: c3 7d fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 43 c3 9d fd 48 8b 53 08 48 c7 c7 20 df 3d 8b 4c 89 f6 48 89 d9 e8 bd 87 a4 fc 90 <0f> 0b 4c 89 f7 e8 e2 c2 7d fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 13 [ 467.660125][ T5871] RSP: 0018:ffffc90004f176f0 EFLAGS: 00010246 [ 467.660210][ T5871] RAX: 0000000000000075 RBX: ffffc9000db42000 RCX: 75b326da0db8ab00 [ 467.660225][ T5871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.660237][ T5871] RBP: 1ffff92001b68401 R08: 0000000000000000 R09: 0000000000000000 [ 467.660249][ T5871] R10: dffffc0000000000 R11: ffffed101710487b R12: ffffc9000db42008 [ 467.660264][ T5871] R13: dffffc0000000000 R14: ffffffff8d5fda40 R15: ffffc9001a78c000 [ 467.660278][ T5871] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 467.660294][ T5871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.660308][ T5871] CR2: 00007ffe6712ecb8 CR3: 000000002ff46000 CR4: 00000000003526f0 [ 467.660327][ T5871] Kernel panic - not syncing: Fatal exception [ 467.660489][ T5871] Kernel Offset: disabled