last executing test programs: 9.452443354s ago: executing program 4 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000005000000020000000100000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000bd2e31758d0c8da7c3ec15d590686296c415caec7a59c1f0e55300a6c9797f33e4e8c47c4f1aadc318757622991cc450c812d4e6653452b0fdcae356c6fd2651bca5f22d99acf6080c3abd56b3e9a894d901a2aeb15f1121", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0xa, 0x3, "3258c5c0008faa001b0000f4ff4000", 0x32314142}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000565a6037b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500001c3866149b1db5da000000000055ab3b64294f53d90e109f9f83fc4a1757bf16d9130f55e28d69f3042c3964d03577361dbd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0x247, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0xca, 0xe5, 0xe9, 0x20, 0x1608, 0x217, 0x3a9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x235, 0x1, 0xff, 0x0, 0xc0, 0x7, [{{0x9, 0x4, 0xdb, 0x8, 0xc, 0x7c, 0xfd, 0x7d, 0x8b, [@hid_hid={0x9, 0x21, 0x6, 0xc6, 0x1, {0x22, 0x57e}}], [{{0x9, 0x5, 0xa, 0x1, 0x40, 0x1, 0xd, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x40, 0x2b, 0x0, 0x8, [@generic={0xc9, 0x31, "5f9c9c2dbc202783c99085ccd3d5578bb9115534a3c54e04d0a929be3028a86d4f6688af2e1714df5a6ab6984477b8da9ef2e4bb50f88442e4c242b1d5dd45f84490b23b8a514528b157cc0714fb15a88dad32162a2d8031e899dbf12ce47fdbb3b7d5f4ef58da5f1a26b74b8c5733d60225c5b12321d90b2b23a6d901970b9a7bea04379ef1aa67f0d7621a19d7056ccc0a3446af3718151bc8acb1d22a99378437a7553ad70431ff18538d40095b6579ff015e92eba941de427f2944cdd5740a48e93c170639"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x8, 0x4, 0x2, [@generic={0x23, 0x9, "d87bcd79c11294e3f390daa4dfb8c062e514b2642ca5151e03324575712d961fb6"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x7, 0xf, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x7, 0x1, 0x5, [@generic={0x1c, 0xf, "2954067e66261d34aca6b19415e1fe20287c829afeee6f658a4c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xe}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x8, 0xf4, 0x82}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x6}, @generic={0x3e, 0xd, "257167ea666439ef26057d34115fadb87db8694c70ff9c220244163fc6c8875691543bfc5c3eeeb35085a695990ea47aad2f4601143467ae3d87f87d"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x5, 0x81, 0x8f}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x6f, 0xc2, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0x228, 0x6, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x2}, @generic={0x45, 0x30, "93e415e30fe039e1d642bc3d9ef3ad95900d67607185c7c3069bd76fe92d990e4db5d1819ed494828ef6582d3d75dba0b423d1a31dc7cec96e92f3e211f83a465b0750"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0xe, 0xf0, 0x65}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x300, 0x5, 0x6, 0xce, 0x40, 0x1}, 0x3d, &(0x7f0000000780)={0x5, 0xf, 0x3d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x9, 0x800, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0x3, 0xe674}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0xcb, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0xe, 0xd2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x85, 0x40, 0x1, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x3}]}, 0x8, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x820}}, {0x58, &(0x7f0000000800)=@string={0x58, 0x3, "fd3b8a87f2f9b28e95c197bd794dfe59648b1cb5c36aa97f11990a48ac5e8b188a9c243703377e174cdd3edb2f2e468dde360d75c81da5a235489882bb4a57d686410ecd67390e31d944fc28b9badf56d022b09343b6"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x459}}, {0xd2, &(0x7f00000008c0)=@string={0xd2, 0x3, "9d0b14008385fa8844f1f3f491540960c43c384b12634e59158f602dee1d90a5205492cdf6396c184f02d2ca8a24a963c7eeeff1162920e3c79dead4c4107c72e85974fb972d642f65fc9a737fcf0682fe733b355cb3ffd5ffe5eace521b22c37656ab6bd11be5c215966124acea875ec56415cfb1a9a42d36f4d35153dfbf3f04a9a6dc9413980dd4b98a39211d7aa854ead04e4b6f04288bcdbb849a91b7d41c2bf717721bff3ccae82123eec89479de746b5e35b5f02c886e2c4e87b55fcaea52dfbb5e4218693e321896622f0db6"}}, {0x8d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="8d038fac55c2b8df9052ffe9aaa505d6e387b42d82dfdec29a6fa965727c2bf1b6145fea2fbe79586f97a0d725a3e8ff51dccf7e1b0087f2c5a9b38582f491fd00609a465ce9114eacf4eb58a5ceecb4b28cba57cef56d3bcb73df4d1726b6986c437a1a03407c0ffb98a179513a33c7417f9b5cd5cf9bfcb62630f694576a9d78de9d7b9ef7d5e7b5c2178ae9c3bd8c928f2c98aa5ae2d2f0c80000"]}, {0x25, &(0x7f0000000a80)=@string={0x25, 0x3, "8161dff9a5da89085185de23721c6da7086b29eec4ddd03da77b185be7ed8e23487b08"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x44d}}, {0x3d, &(0x7f00000009c0)=ANY=[@ANYBLOB="3d034a7be11d3ecccb091422f7b8e2e5343688d1296e0a912253b1606f39dddc01b25c4d858274c39ad65ad4078a1e798cc20d009899a94d171ab04efad9218b1857db8a2bf9cd6eeb9157e8d452da8a40c51151b5ed1b7f60c4c945887642bcfb5c66cbbb520d94f0c40d6d7138d927188bea71c33b0a952582946bc994c6c979aeec32b40446665101beda766e59d3c8a799f7a633b63f13a71421bb2bc08f68f4e70b42074ad903b7432b42a509d5cc747d2c069d"]}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = msgget$private(0x0, 0x790) msgsnd(r8, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r9 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b000000090000000100009301000000030000000c0000000f00000000712e2e200030615f61"], 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) ioctl$FIONCLEX(r2, 0x5450) 8.507768485s ago: executing program 0 (id=876): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32]) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 8.402941228s ago: executing program 2 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000e300000000007b8af8ff00000000bfa200000000000047020000f8ffffffb703000008050000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.17654868s ago: executing program 2 (id=880): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000400)={0x54, r8, 0x1, 0x70bd2a, 0x5dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x4, @val={0x8c, 0x18, {0x69b, "7f0bb75200", @long}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r10 = epoll_create(0x3) r11 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000001c0)={0x40000001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0xe, 0x8, 0x0, 0x8, 0x1, 0xe, 0x80, 0xe, 0x7, 0x4, 0x9, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x40, 0x6ea93ba1}) 6.958944491s ago: executing program 2 (id=890): getdents64(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x104}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0x293c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e25, 0x58, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6fb}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xad}], 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r5 = syz_usbip_server_init(0x1) (async) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000080)=0x1000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000002ce86e000003e000"/20, @ANYRESHEX=r5, @ANYRES16=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x50) (async) close(0x3) 6.471068655s ago: executing program 0 (id=891): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000002bc0)={0x2020}, 0x2020) (fail_nth: 1) tkill(r0, 0x11) 5.675219547s ago: executing program 0 (id=895): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/45, 0x2d}], 0x5}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 4.885099546s ago: executing program 0 (id=899): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/230, 0xe6}, 0x1) (fail_nth: 1) 4.260405958s ago: executing program 0 (id=902): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000020bd2803190000000000010902240001000020000904ff800603000100092105006d0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="2db5414df7a73437236bc680d08a251338f45285caaec0540623467f43cd393fbffeccef9c8e9f5640e1", 0x2a}], 0x1, 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000080)="caa7", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x1d) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200900003e000b0100ff83fa7deca63d55e900080036800400d6000400018000"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba80102030109022702010200100009"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x300, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8, 0x1, 0x6, 0x2, 0x1, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x3, 0x8, 0x1ff, 0x6, 0x0, 0x7, 0x74ba, 0x40, 0x35e, 0x6, 0xc, 0x6, 0x6, 0x5, 0x3, 0x3, 0x0, 0xc66, 0x7fff, 0xc5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x2, 0xd, 0x5, 0x400, 0xc, 0x0, 0xfff, 0x1, 0x7, 0x7, 0x2, 0xbce6, 0x1, 0x4, 0x9, 0xfff, 0xfffff801, 0xc, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xa, 0x5f72, 0x80000000, 0x5, 0x3, 0x4b1, 0xc, 0xfffffffd, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0xfffffffa, 0x20009, 0x3, 0x6, 0x1ff, 0x1ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x40, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x6, 0x9, 0x3a9, 0xfc7, 0xd, 0x7, 0x80000001, 0x9, 0x6, 0x7, 0xffffb6d4, 0x8, 0x100, 0x7, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x8001, 0x3, 0xcf800, 0x2b9c, 0x1000, 0xfffffff8, 0x3, 0x1, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf1, 0x3, 0x6ea, 0x4, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0x5248, 0x6, 0xe08b, 0x5, 0x7ff, 0xce, 0x5, 0x2, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x200, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x80, 0x2, 0x200, 0x8, 0xb56, 0x5, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0xfffffff7, 0x9, 0xfffffff6, 0x0, 0x2, 0x7fff, 0x9a, 0x1, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x4, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x1, 0x0, 0x1, 0xd2f3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000000)={@remote, r11}, 0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x8085) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10) 3.370210705s ago: executing program 2 (id=910): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585"], 0x0) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="1a6f9f325e43651aba66512fb11276f4a52c2c8229451ca504", 0x19}, {&(0x7f00000006c0)="b2c5c79f07ab3d9614d5c058db4a274ad23734c2", 0x14}], 0x2}}], 0x2, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x5, @loopback, 0xd}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000900)="8319689cb9ac0147ffb7252d680ca229d04419bbcd867b334753c3a2b1538d67c4b42fc8e4a96858e4112bfe93d3ee0202531c0b830ed9b4334959bfc5781d3b2441b7eba546994c8b1dc4a1ce4282e0892938382233acc68810bc6d61e05ebf7191adcb412671545fe5aa5b67d6c788e845d6f06d7a37aa37e20e2b6b52fd2560e184b2a93482dd442c5d86d345292e39fd3d55e6d580a47ed319d9221a9d2a5e1b4905759b37c037142abb1bfd129a01157fc785a841cf16aa6797f1740ca303a00d77d28baa5321288b9919d6172a40dd645f076994435849c6bfa98574e613af94e44d06914876b18aa02d3e1424", 0xf0}, {&(0x7f0000000200)="f952b3b1de75e50593f2904ac6098d2a329747f8f1435aae3fe48723cc416f9ceca8bd802e10b42933965a367f39118e4f9260c3f2e066069503827ff0a59f97ca0c5b8a07dc36dcbf2866b7d7a780f953636af9cb7c", 0x56}, {&(0x7f0000000300)="4dc93669dd74aa6754d8d97989f15d8c2eab774e494202ef9c62cf53a670a733c996fa5b5a1917205064cd73001328607c41a83600705634ec", 0x39}, {&(0x7f0000000780)="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", 0x142}, {&(0x7f0000000480)="a12256c0dd19503874cd53e8bd09cf776c2e75ab3fadec4fa62f334646dbeb77ec677d36507b77df71dffeee4e7937c2504d690a3d079bf6dba7e372ec49c5a2809b782bef660a396b2979bab982451164135620d931af1fc599d1d5479363fecf75189516a66912588657fdbf1089e1fbcab8bcb2842c12bb336b44ab8a1c7cd942c63236d21a3890362e78f3e85814b424d67abdbaea", 0x97}, {&(0x7f0000000400)="d59d48a429c7cdc92ee013787e973b8be4e10b2a969a4178", 0x18}], 0x6}}], 0x2, 0x20044008) 3.369452026s ago: executing program 4 (id=911): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() sendmsg$unix(r0, 0x0, 0x4004881) 3.016964838s ago: executing program 3 (id=914): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xffffffee}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.121851671s ago: executing program 3 (id=916): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0), &(0x7f0000000040)=0x8) 1.922036831s ago: executing program 3 (id=918): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000028c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xffc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='fscache_relinquish\x00', r1, 0x0, 0x1}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000080)=0x8) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002"], 0x58}}, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r3, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r3, 0x97, "f47b78a4811fee2923738496055cb3f77d2a4abe60c589b7b8acc01743380af9f7d56baccdb42883e5040e36173a32174fe9f446b6b81135c7f4acbc1f92643267f1007ebd9290527154e540503bd8d49db93727d8d8f7648d61450839672dd301b3ff40c59ae749aca00c08318219af84e0c1184e90a6f0fab7f800c58f030f71c8a63f4d95583a86d936dac2c40c3591feb14fa02a0e"}, &(0x7f0000000000)=0x9f) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r7, &(0x7f00000007c0)={&(0x7f0000000340)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000980)="3eef", 0x2}], 0x1, &(0x7f0000000740)=[@dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x18, 0x8000}, 0x40) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0), &(0x7f0000000040)=0x8) 1.864390208s ago: executing program 4 (id=920): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 1) 1.681640024s ago: executing program 4 (id=921): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2, 0x0, 0xa5, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "3f6a873751c99d82143c99a36afb90de26a2084a1166c32f", "ffe7d41c2e20586c35eb15d148f45fea8e2d97cb87fcd3148e92489869d934c2"}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.539885461s ago: executing program 3 (id=923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="11", 0x1}, {&(0x7f00000004c0)="66b90ccb35db9d3557600dda5eaf6b4afc7317ca5306131b2ccfd2109eeb5636dc5cc3383a2aa9aa60995b695c7ef55f26e3d967ba42974cf0cd15b958216ed4304e04704b1a1a8956b7ffaa7302b9bc3713ea7dbebc7dc9ae4e9f70d850b8b6decba4a55b4cee9b418250a2839447db40a3a66a417ffbae3dd0729dfd7cddf2a580f882d5f6b90d54480b549deaa817049c03a6f5c33986bfa1cb60d99d6bec9f068ba448fd9388b6151dc4f1eb5e4044fd3c493ebd2ba5a329c3b355f5947b8dce6c11", 0xc4}, {&(0x7f00000002c0)="091101a259f8b843be51275b7e5cd9e112821fddc0a4f1843b70961060989c950f1bf7d84c232498991f5885339816331156721b8e02c092fdda5613429353effbfd7808a4fd2b4cf173af137e19a9322aa4e28951de43e104409df54527e8f0fe99f7a684282f473a4d3621de63dcebdd104c1b5b5aa71f7a7d0e89ba8bb970d7dce952c1b44e8d48f98025374e370cf6a396b100cc815a7040", 0x9a}, {&(0x7f0000000780)="d101f19fde1e6d92bbe749f20277a70779b63cacc1c32305570e68b8679a2bd22e5f8702f19df25808cc4420d03bf1bff73f506ede361914698eb3735a7c09e1cb0bbee5c6231f7beffac711509d09d1455d9535dea87b29ecd1e54778f5754701aea5d047611dec52901c0b2c9eb1c940972370880c3002c2eed2358dd771b9e52aa3e35af557685bb29d65720b4724b7225ae06fdd7416cc09a9f7a660867842b6b8c1", 0xa4}, {&(0x7f0000000000)="26eb2d71df0376382f3cb6dadadb0b58887dcad0749c", 0x16}], 0x5}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a8", 0xab}, {&(0x7f00000005c0)="e26720e16aae858478df03560eb83aac4db01908cbd3140afe5d10120066c607350886ee667c97423f611a438b7a536f19d08b0554e1a6a8d7cd98f8c9888a946b8ee30cd3a38ff56506dbcf581e76981a61f453ac3001bf60d0200e0dcb44e7b012c0b508d54b265fa59502a3e5416269a98178c21fefa4ae2915ba2b14b77fc718f394f9cae62152c0afd5828bbed47223c6ee59a3faab261c981d6c3c657876954dfda6295d55a01db3d100dd7a9daf1db48e6d47e57f1fc4a67569c13b688278f4052fc301ece35b0c9009812b9246e9880bda78f4db6a2c1cbff39167c74c87d2d30af20ea4195468af5e2ed3e2002343aee9d11586d7b47bd8c06ad57dcfad78c271e36507a61f9fdc3e6abb10ac7e954583b9d8913b38b9e7373a0dec53581834ccfdf4ba6603af616c70856c84183a34d8192acb5bbbe6c9f0ca5047c62195692d1de3d636d66f776f6f45f805498bf35e9a27171a9774c980accc4cc759e397dbd5d7eed8753186a580e9d25778abbf1afd7455ae1530e4ee8cc62d5391d4c1e88ffa259700734b1db4647588a54480507a", 0x196}], 0x2}}], 0x1, 0x95) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002a00)={0x2020}, 0x2020) write$UHID_CREATE2(r1, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xff, 0x5, 0x2, 0x0, 0x8000, 0x7, "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"}}, 0x217) 1.282126123s ago: executing program 3 (id=925): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000040)=0xffffffffffff8001, 0x8) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r5, 0x6, 0x25, &(0x7f0000000040), 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9f) symlink(&(0x7f0000000880)='.\x00', 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x4}, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000a40)={{0x7, 0x0, 0x0, 0x5, 'syz0\x00', 0x3}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xeb2f, 0xffffffffffffff52, 0x53ad, 0x1, 0x0, 0x8, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x85, 0x4000000000000000, 0x0, 0xe09, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x0, 0x5e, 0x9, 0x100000000000000, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x200000000000, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000003, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x4, 0x200, 0x9, 0x5, 0xffffffffffffffff, 0xfffffffffffffff8, 0x4, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x0, 0x750, 0x5, 0x0, 0x66, 0x7, 0x10000000, 0x101, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x10008003, 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0xf32, 0x3, 0x2, 0x0, 0x0, 0x0, 0xa563, 0x0, 0x80000005, 0x4, 0x0, 0x6, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0xfffffffffffffffe, 0x1553, 0x40, 0x0, 0x1, 0xffffffffffffffff, 0xf65, 0x2]}) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000140)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x400a, 0x2}, 0xc) syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b5, 0x400, 0x2, 0x20000fe}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) 1.266815348s ago: executing program 4 (id=926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="11", 0x1}, {&(0x7f00000004c0)="66b90ccb35db9d3557600dda5eaf6b4afc7317ca5306131b2ccfd2109eeb5636dc5cc3383a2aa9aa60995b695c7ef55f26e3d967ba42974cf0cd15b958216ed4304e04704b1a1a8956b7ffaa7302b9bc3713ea7dbebc7dc9ae4e9f70d850b8b6decba4a55b4cee9b418250a2839447db40a3a66a417ffbae3dd0729dfd7cddf2a580f882d5f6b90d54480b549deaa817049c03a6f5c33986bfa1cb60d99d6bec9f068ba448fd9388b6151dc4f1eb5e4044fd3c493ebd2ba5a329c3b355f5947b8dce6c11", 0xc4}, {&(0x7f00000002c0)="091101a259f8b843be51275b7e5cd9e112821fddc0a4f1843b70961060989c950f1bf7d84c232498991f5885339816331156721b8e02c092fdda5613429353effbfd7808a4fd2b4cf173af137e19a9322aa4e28951de43e104409df54527e8f0fe99f7a684282f473a4d3621de63dcebdd104c1b5b5aa71f7a7d0e89ba8bb970d7dce952c1b44e8d48f98025374e370cf6a396b100cc815a7040", 0x9a}, {&(0x7f0000000780)="d101f19fde1e6d92bbe749f20277a70779b63cacc1c32305570e68b8679a2bd22e5f8702f19df25808cc4420d03bf1bff73f506ede361914698eb3735a7c09e1cb0bbee5c6231f7beffac711509d09d1455d9535dea87b29ecd1e54778f5754701aea5d047611dec52901c0b2c9eb1c940972370880c3002c2eed2358dd771b9e52aa3e35af557685bb29d65720b4724b7225ae06fdd7416cc09a9f7a660867842b6b8c1", 0xa4}, {&(0x7f0000000000)="26eb2d71df0376382f3cb6dadadb0b58887dcad0749c", 0x16}], 0x5}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002a00)={0x2020}, 0x2020) write$UHID_CREATE2(r1, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x2, 0x0, 0x8000, 0x7}}, 0x118) 1.014619871s ago: executing program 3 (id=928): r0 = io_uring_setup(0x178d, &(0x7f00000000c0)={0x0, 0x7fff, 0x8, 0x0, 0x1}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 985.190281ms ago: executing program 2 (id=929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100a) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x2, 0x0, 0x2, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x5, 0xeeeeb006, 0x1, r2, 0x1}) 886.64936ms ago: executing program 4 (id=931): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) 690.187409ms ago: executing program 2 (id=932): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000014c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x40000000, 0x200, 0x1, 0x7, 0x9bd, 0x7fff, 0x80000001, 0xfff, 0x8001, 0xfffffff7, 0x8, 0x0, 0x6, 0x0, 0x8a80, 0x8, 0x3, 0xfffffffc, 0x1, 0x3, 0x8, 0xfffffffe, 0x76f, 0x7, 0x9, 0x4, 0x23, 0xa4, 0x8001, 0x5, 0x9, 0x5, 0x7, 0x78c, 0x1ff, 0x6, 0x8, 0x6, 0xe8, 0x2, 0x1, 0x6, 0xffff8000, 0xfffffffa, 0x3ff, 0x7, 0x800, 0x8, 0xffffffff, 0x9, 0xa074, 0x40, 0x3, 0xd0de, 0x0, 0x6, 0x6, 0x80, 0x7c2, 0xb, 0x4000000, 0x1, 0x2, 0x9, 0x9, 0xa, 0x0, 0x40, 0x3, 0xfffffffe, 0x6, 0x2323, 0xa, 0x6, 0x7, 0xff, 0x200, 0x3, 0x0, 0x5, 0x80000000, 0x5cf4, 0x29400000, 0xfffffffd, 0x8, 0x579, 0x10, 0x4, 0x0, 0x7, 0x2, 0x9, 0x7, 0x0, 0x1, 0x4, 0x10001, 0x39a, 0x101, 0x9c66, 0x9, 0x10000, 0x8, 0x9, 0x3, 0xc3fc, 0xf600, 0x401, 0x0, 0x4, 0x0, 0x2, 0x1, 0x3, 0x9, 0x7, 0x901, 0x6, 0x3, 0x1000, 0x10, 0x1, 0x3, 0x4, 0x3, 0x80000001, 0x4], "9e7c0d0953645ef8a9c71f94646342f3935988be82f178b74186d1f90632a9f585c940959c52f0ed3d55b670aa"}}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x80000000000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) r7 = io_uring_setup(0x57e, &(0x7f0000000440)={0x0, 0x372, 0x10, 0x0, 0x2c4}) close(r7) listen(r6, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) readv(r7, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "5526fe9c2a0e6de1", "9d9bc7db070cbaa45b4468b99ff16a8a", "f373bb60", "d697a2776fd24e96"}, 0x28) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="7f113259b0b2476910e63b17e24f8c571bcd1e81980b74b55a4a9b4f504656a0f1059b7c7ff3e3698c87e92f8eb8f4260673fa00d3261c12bbf7e27b630597f1a22afee66c8079653829b739009139aa6c98200510eaa9edd73e3dc32a0ce716f5770ac75c66e8c99754158aedac72ef105beab154551b75ed25c1f1c23c0157f17d41a4efbf49d4", @ANYRES16=r12, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa", @ANYRES16=0x0, @ANYRES64=r5], 0x28}}, 0x0) 566.004148ms ago: executing program 1 (id=935): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x4c, 0x12, 0x4, 0x70bd25, 0x25dfdbfb, {0x3, 0xb, 0x7, 0x5, {0x4e21, 0x4e24, [0x1ff, 0x100, 0x2, 0x3], [0x3, 0x8, 0x6], 0x0, [0xd2d6, 0x7]}, 0xe52c, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c1}, 0x40000) 290.562886ms ago: executing program 1 (id=936): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008"], 0x20}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = accept$unix(r6, 0x0, &(0x7f0000000040)) mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES8=r8, @ANYRES16=r8, @ANYRES64=r6, @ANYRES16=0x0, @ANYRESOCT=r7, @ANYRES16=r7, @ANYRES64=r7, @ANYRES16=r8, @ANYRES16=0x0], 0x528}, 0x1, 0x0, 0x0, 0xc040}, 0x41000) 238.579498ms ago: executing program 1 (id=937): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000400)={0x54, r8, 0x1, 0x70bd2a, 0x5dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x4, @val={0x8c, 0x18, {0x69b, "7f0bb75200", @long}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) r10 = epoll_create(0x3) r11 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f00000001c0)={0x40000001}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0xe, 0x8, 0x0, 0x8, 0x1, 0xe, 0x80, 0xe, 0x7, 0x4, 0x9, 0x0, 0x5, 0x3, 0x3, 0x7, 0x0, 0xdb, '\x00', 0x40, 0x6ea93ba1}) 190.12336ms ago: executing program 1 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000480001002cbd7000ffdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="2c08000014000100ff2600000000000000000000000000010800"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 81.344952ms ago: executing program 1 (id=939): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0xfffffffd, 0xe, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x64, 0x0, 0xf8, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0xf, "7c3dd12824a066fdf2e7ce588a"}, @rr={0x7, 0x7, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0xfb, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r0, 0x8, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40044804}, 0x2004c084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000540)=[{0xfff9, 0x6e, 0xe7, 0x80000001}]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000005c0), 0x410080, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000600)={0x9, 0x953, 0x3, 0x8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r7, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r8, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5d}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x80}, @NL80211_ATTR_IE={0x29, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x29}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x8, 0x1ff9, 0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x6, 0x5}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000840)={0x4, &(0x7f0000000800)=[{0x1, 0x0, 0x86, 0x7}, {0x8, 0x6, 0xb, 0x2}, {0x5, 0xe, 0x81, 0x101}, {0xfc1, 0x7, 0x80, 0x3}]}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SMI(r10, 0xaeb7) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r11, 0x89fb, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@ipv4={'\x00', '\xff\xff', @local}, @local, 0x14, 0xf}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x505}}, './file0\x00'}) ioctl$KVM_SET_PIT(r12, 0x8048ae66, &(0x7f0000000940)={[{0x7, 0x9, 0xc, 0x9, 0xc, 0x7, 0x2, 0x1, 0x8, 0x5, 0x6, 0x80, 0x2}, {0x1ff, 0x9, 0x7f, 0xf9, 0x5, 0x2, 0x3, 0xb, 0x5, 0x8, 0x38, 0x2, 0xffffffffffffffff}, {0x5, 0x6, 0x2, 0x3, 0x40, 0x3, 0x8, 0x81, 0x3, 0x1, 0x7, 0x3a, 0x6}], 0x6}) ioctl$sock_inet_tcp_SIOCATMARK(r12, 0x8905, &(0x7f00000009c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@multicast1, 0x4e22, 0x1, 0x4e22, 0x4010, 0x8, 0x1a0, 0x80, 0x2f, r2, r13}, {0x37af79dc, 0x7ff, 0x4, 0x9, 0x47, 0x9, 0x2}, {0x0, 0x779d20c1, 0xffffffffffff8000, 0x2dac00000000000}, 0xf, 0x6e6bbd, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x3504, 0x2, 0x2, 0x5, 0x5, 0xffff, 0x7fff}}, 0xe8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000001140)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000000c80)={0x460, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x17c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1f, 0x2, "fbcafe16cbc4cb28bc5fbc31c49c9ff7abc7542a126d4fa3963cc4"}, @NL80211_BAND_2GHZ={0xc8, 0x0, "d7e7b3d5c487b2b7b3accfa24accf4c95830bd9dddedad870739429b496ee01be8d52013e2c0d900b382b9ca171fc008c40dfcec8839107e99533870c56eb2841586d309ef3dfd8d07f337d47b55fefa7de3474bd435582cad51b0d20d24fce684190a0197db77cd9cf6a113afe9d58b4d45e84d68fe90861eb05d5e4fa5b77949bef4ab170ae47436498689849df76f49d937a39a596f893c478a8564582c34301236e09351a20d8fd4316c25e4207d387454351edfa9f84e8f5ae3f74f107742d7b92a"}, @NL80211_BAND_5GHZ={0x24, 0x1, "d1fdf6b2ce8ae731da17f13d032df2ebd13f9fbd1662a2f10302b78bd94f9fbf"}, @NL80211_BAND_6GHZ={0x6a, 0x3, "89e196a6dda3012c6a7fa5b9aa2a83cf85d76b182c3ae16303080e155476e7506e58a33f99fecee9c4bca09ee65f33c623741f93be0634d0783f1a3d42dbaa61ca87081354955e60bf0e3ce6f1c8ba30951f1995eef6216b8b60af68de993f3edad43abfda7b"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1ff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x290, 0x84, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bbd0aa8a3d84"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_60GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xc15}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6a19}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x65}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x9, 0x1, @random="258eaafe47"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x34e29fee}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xd08}, @NL80211_BAND_LC={0x8, 0x5, 0x70}, @NL80211_BAND_LC={0x8, 0x5, 0x3}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x10}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff7fff}, @NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0xa}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x101}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="634839b0079be70e0085"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xf, 0x1, @random="f6883071e0a8bd3cc2ab7d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff0001}, @NL80211_BAND_LC={0x8, 0x5, 0x81}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1ff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="f32d036ccc304557ef991cb683768ed7fa805324a9ec072f357f33d333182b44"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0x460}, 0x1, 0x0, 0x0, 0x48000}, 0x200084d0) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r12) sendmsg$BATADV_CMD_SET_HARDIF(r12, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8010800}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r14, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008180}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sched_wake_idle_without_ipi\x00', r12, 0x0, 0x2}, 0x18) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000002600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000025c0)={&(0x7f0000001380)={0x1218, 0x12, 0x10, 0x70bd2d, 0x25dfdbfd, {0x1f, 0x2, 0x0, 0x9, {0x4e20, 0x4e22, [0xde4c, 0x7, 0x2, 0x3], [0xe, 0x7f, 0xc98, 0xfffffffe], 0x0, [0x0, 0x8b6]}, 0xd, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "94689e04e2f14310f6e26e0615a8887eb5b8c49e9d3ae6b12bca52b0fdd20fdddbe6a32e718be6218e4ac21e6cc976427fed7704fca2b13f59966ca062fa2eec62604c4b853df35790b6b190aa41b0d87149660ab8f5117e8e779755afa3f4faacb6318c765b42bee993efd1371bc06bfc262589742bf18171146ffb4b57c982d17b8d3476069a382d9512838402cd798c57ce50c9b16c72249df50528e33c2436a2b89483dfda91b2baf075e69067f88d76e1b194dc9fb06966c55f7f9fd67dec5f163f7688b0a0872a1d2fa7686587aed6f521a8"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "32c7447f3cf466784ea7cb07d69bb702fdac7ab77af061b5ef6d7830af399e6dc25c101010950f19ce8f4fe91ef451387e7836bf16"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "f11c1189b57a93c521e2d1a87393abcc421ac6ecd01e8f6e316360ea2270e0446214187b27943c126ae98a9736855a6e239b5f682308692a061def5bfe9578177d552882611704a75fc24901fc43661ec9445175c8b7d1d8c12e0f62fbc3658d6fd3633cb76d2a2051a67e4244391dd2b5f128bddebdaca43523a7864a4a66753b4bcd535cf3dccb27ec72b071e166c6d2ea8372dca6509a17de31b285aecfa6f6e812cc7a7fcd16c53747"}]}, 0x1218}, 0x1, 0x0, 0x0, 0x10}, 0x10) 66.296696ms ago: executing program 0 (id=940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="6f0f210ac4c1ff116c0400b9b80900000f323e3e3e0fc7b9c42b0000b9c30a00000f32c744240016000000c7442402f7ffffffff2c24c4e2fd9cb3ae4549ab8f0978d1492d36470f78141b", 0x4b}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x2000}}, "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", "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"}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="11", 0x1}, {&(0x7f00000004c0)="66b90ccb35db9d3557600dda5eaf6b4afc7317ca5306131b2ccfd2109eeb5636dc5cc3383a2aa9aa60995b695c7ef55f26e3d967ba42974cf0cd15b958216ed4304e04704b1a1a8956b7ffaa7302b9bc3713ea7dbebc7dc9ae4e9f70d850b8b6decba4a55b4cee9b418250a2839447db40a3a66a417ffbae3dd0729dfd7cddf2a580f882d5f6b90d54480b549deaa817049c03a6f5c33986bfa1cb60d99d6bec9f068ba448fd9388b6151dc4f1eb5e4044fd3c493ebd2ba5a329c3b355f5947b8dce6c11", 0xc4}, {&(0x7f00000002c0)="091101a259f8b843be51275b7e5cd9e112821fddc0a4f1843b70961060989c950f1bf7d84c232498991f5885339816331156721b8e02c092fdda5613429353effbfd7808a4fd2b4cf173af137e19a9322aa4e28951de43e104409df54527e8f0fe99f7a684282f473a4d3621de63dcebdd104c1b5b5aa71f7a7d0e89ba8bb970d7dce952c1b44e8d48f98025374e370cf6a396b100cc815a7040", 0x9a}, {&(0x7f0000000780)="d101f19fde1e6d92bbe749f20277a70779b63cacc1c32305570e68b8679a2bd22e5f8702f19df25808cc4420d03bf1bff73f506ede361914698eb3735a7c09e1cb0bbee5c6231f7beffac711509d09d1455d9535dea87b29ecd1e54778f5754701aea5d047611dec52901c0b2c9eb1c940972370880c3002c2eed2358dd771b9e52aa3e35af557685bb29d65720b4724b7225ae06fdd7416cc09a9f7a660867842b6b8c1", 0xa4}, {&(0x7f0000000000)="26eb2d71df0376382f3cb6dadadb0b58887dcad0749c", 0x16}], 0x5}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x80000001, 0x4) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000002a00)={0x2020}, 0x2020) write$UHID_CREATE2(r1, &(0x7f0000000940)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x2, 0x0, 0x8000, 0x7}}, 0x118) kernel console output (not intermixed with test programs): X: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 201.669763][ T7221] RDX: 0000200000000280 RSI: 0000000000005412 RDI: 0000000000000003 [ 201.669774][ T7221] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 201.669785][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.669795][ T7221] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 201.669822][ T7221] [ 201.669830][ T7221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.746568][ T7226] mmap: syz.0.492 (7226) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.768018][ T5902] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 202.008028][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 202.014456][ T5902] usb 5-1: config 255 has an invalid interface number: 219 but max is 0 [ 202.014488][ T5902] usb 5-1: config 255 has no interface number 0 [ 202.014565][ T5902] usb 5-1: config 255 interface 219 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 202.014594][ T5902] usb 5-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 202.014619][ T5902] usb 5-1: config 255 interface 219 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 202.014645][ T5902] usb 5-1: config 255 interface 219 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 202.014674][ T5902] usb 5-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 202.014696][ T5902] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 202.014721][ T5902] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 202.014744][ T5902] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 202.014768][ T5902] usb 5-1: config 255 interface 219 has no altsetting 0 [ 202.020525][ T5902] usb 5-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=3a.9f [ 202.020556][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.020577][ T5902] usb 5-1: Product: љ [ 202.020592][ T5902] usb 5-1: Manufacturer: 㯽螊鱗躲솕붗䵹姾譤딜櫃義餑䠊庬ᢋ鲊㜤㜃᝾ⸯ赆㛞甍᷈ꊥ䠵芘䪻홗䆆촎㥧ㄎ䓙⣼몹囟⋐鎰뙃 [ 202.020615][ T5902] usb 5-1: SerialNumber: ஝薃裺咑怉㳄䬸挒奎輕ⵠᷮꖐ吠춒㧶ᡬɏ쫒⒊掩⤖鷇퓪Ⴤ牼姨ﭴ⶗⽤ﱥ玚콿舆現㔻덜헿컪᭒쌢噶殫ᯑ싥阕②庇擅켕ꦱⶤ凓㾿꤄᎔඘맔㦊ᴡ꡺仐潋⠄춋蒻醚풷⬜៷᭲㳿⌡죮禔瓞幫딵⳰溈丬떇쩟勪믟䉞椘㈾阘⽢똍 [ 202.077545][ T7216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.080695][ T7234] FAULT_INJECTION: forcing a failure. [ 202.080695][ T7234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.080730][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.1.496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.080756][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.080770][ T7234] Call Trace: [ 202.080779][ T7234] [ 202.080790][ T7234] dump_stack_lvl+0x189/0x250 [ 202.080830][ T7234] ? __pfx____ratelimit+0x10/0x10 [ 202.080859][ T7234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.080903][ T7234] ? __pfx__printk+0x10/0x10 [ 202.080931][ T7234] ? __might_fault+0xb0/0x130 [ 202.080978][ T7234] should_fail_ex+0x46c/0x600 [ 202.081012][ T7234] _copy_from_user+0x2d/0xb0 [ 202.081034][ T7234] __sys_bpf+0x1e3/0x860 [ 202.081069][ T7234] ? __pfx___sys_bpf+0x10/0x10 [ 202.081099][ T7234] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 202.081153][ T7234] ? ksys_write+0x230/0x260 [ 202.081185][ T7234] ? __pfx_ksys_write+0x10/0x10 [ 202.081210][ T7234] ? rcu_is_watching+0x15/0xb0 [ 202.081241][ T7234] __x64_sys_bpf+0x7c/0x90 [ 202.081272][ T7234] do_syscall_64+0xfa/0x3b0 [ 202.081300][ T7234] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.081328][ T7234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.081350][ T7234] ? clear_bhb_loop+0x60/0xb0 [ 202.081375][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.081397][ T7234] RIP: 0033:0x7f7c91c2eec9 [ 202.081416][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.081436][ T7234] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.081458][ T7234] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 202.081474][ T7234] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 000000000000001c [ 202.081487][ T7234] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.081499][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.081511][ T7234] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 202.081545][ T7234] [ 202.348110][ T5991] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 202.500062][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 202.509337][ T5991] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 202.509366][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.509387][ T5991] usb 1-1: config 0 has no interface number 0 [ 202.509442][ T5991] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.509473][ T5991] usb 1-1: config 0 interface 85 has no altsetting 0 [ 202.513942][ T5991] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 202.513970][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.513989][ T5991] usb 1-1: Product: syz [ 202.514003][ T5991] usb 1-1: Manufacturer: syz [ 202.514017][ T5991] usb 1-1: SerialNumber: syz [ 202.551287][ T5991] usb 1-1: config 0 descriptor?? [ 203.062926][ T7251] netlink: 80 bytes leftover after parsing attributes in process `syz.2.503'. [ 203.416780][ T7264] FAULT_INJECTION: forcing a failure. [ 203.416780][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.416814][ T7264] CPU: 0 UID: 0 PID: 7264 Comm: syz.3.509 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.416844][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.416855][ T7264] Call Trace: [ 203.416862][ T7264] [ 203.416870][ T7264] dump_stack_lvl+0x189/0x250 [ 203.416900][ T7264] ? __pfx____ratelimit+0x10/0x10 [ 203.416928][ T7264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.416953][ T7264] ? __pfx__printk+0x10/0x10 [ 203.416984][ T7264] should_fail_ex+0x46c/0x600 [ 203.417009][ T7264] _copy_to_user+0x31/0xb0 [ 203.417027][ T7264] simple_read_from_buffer+0xe1/0x170 [ 203.417073][ T7264] proc_fail_nth_read+0x1b6/0x220 [ 203.417096][ T7264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.417118][ T7264] ? rw_verify_area+0x2ac/0x4e0 [ 203.417139][ T7264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.417159][ T7264] vfs_read+0x203/0xa30 [ 203.417188][ T7264] ? __pfx_vfs_read+0x10/0x10 [ 203.417206][ T7264] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 203.417231][ T7264] ? mutex_lock_nested+0x154/0x1d0 [ 203.417247][ T7264] ? fdget_pos+0x253/0x320 [ 203.417279][ T7264] ksys_read+0x14b/0x260 [ 203.417303][ T7264] ? __pfx_ksys_read+0x10/0x10 [ 203.417322][ T7264] ? rcu_is_watching+0x15/0xb0 [ 203.417345][ T7264] ? do_syscall_64+0xbe/0x3b0 [ 203.417373][ T7264] do_syscall_64+0xfa/0x3b0 [ 203.417396][ T7264] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.417418][ T7264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.417436][ T7264] ? clear_bhb_loop+0x60/0xb0 [ 203.417458][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.417475][ T7264] RIP: 0033:0x7f70c52dd8dc [ 203.417491][ T7264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 203.417506][ T7264] RSP: 002b:00007f70c351d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.417524][ T7264] RAX: ffffffffffffffda RBX: 00007f70c5536090 RCX: 00007f70c52dd8dc [ 203.417537][ T7264] RDX: 000000000000000f RSI: 00007f70c351d0a0 RDI: 0000000000000006 [ 203.417547][ T7264] RBP: 00007f70c351d090 R08: 0000000000000000 R09: 0000000000000000 [ 203.417557][ T7264] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 203.417567][ T7264] R13: 00007f70c5536128 R14: 00007f70c5536090 R15: 00007fffa0154768 [ 203.417593][ T7264] [ 204.188258][ T7282] FAULT_INJECTION: forcing a failure. [ 204.188258][ T7282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.188298][ T7282] CPU: 0 UID: 0 PID: 7282 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.188332][ T7282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.188345][ T7282] Call Trace: [ 204.188354][ T7282] [ 204.188364][ T7282] dump_stack_lvl+0x189/0x250 [ 204.188402][ T7282] ? __pfx____ratelimit+0x10/0x10 [ 204.188431][ T7282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.188464][ T7282] ? __pfx__printk+0x10/0x10 [ 204.188495][ T7282] ? __might_fault+0xb0/0x130 [ 204.188537][ T7282] should_fail_ex+0x46c/0x600 [ 204.188568][ T7282] _copy_from_user+0x2d/0xb0 [ 204.188590][ T7282] __sys_bpf+0x1e3/0x860 [ 204.188624][ T7282] ? __pfx___sys_bpf+0x10/0x10 [ 204.188652][ T7282] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 204.188693][ T7282] ? ksys_write+0x230/0x260 [ 204.188724][ T7282] ? __pfx_ksys_write+0x10/0x10 [ 204.188777][ T7282] ? rcu_is_watching+0x15/0xb0 [ 204.188809][ T7282] __x64_sys_bpf+0x7c/0x90 [ 204.188839][ T7282] do_syscall_64+0xfa/0x3b0 [ 204.188868][ T7282] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.188896][ T7282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.188917][ T7282] ? clear_bhb_loop+0x60/0xb0 [ 204.188944][ T7282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.188967][ T7282] RIP: 0033:0x7f70c52deec9 [ 204.188985][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.189004][ T7282] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.189026][ T7282] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 204.189042][ T7282] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c [ 204.189055][ T7282] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 204.189069][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.189081][ T7282] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 204.189116][ T7282] [ 204.468043][ T5807] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 204.503327][ T5902] io_ti 5-1:255.219: required endpoints missing [ 204.548117][ T5902] usb 5-1: USB disconnect, device number 21 [ 204.628026][ T5807] usb 3-1: device descriptor read/64, error -71 [ 204.684309][ T7295] netlink: 104 bytes leftover after parsing attributes in process `syz.4.523'. [ 204.733980][ T7299] FAULT_INJECTION: forcing a failure. [ 204.733980][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.734014][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.1.525 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.734038][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.734051][ T7299] Call Trace: [ 204.734059][ T7299] [ 204.734069][ T7299] dump_stack_lvl+0x189/0x250 [ 204.734111][ T7299] ? __pfx____ratelimit+0x10/0x10 [ 204.734140][ T7299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.734172][ T7299] ? __pfx__printk+0x10/0x10 [ 204.734197][ T7299] ? __might_fault+0xb0/0x130 [ 204.734238][ T7299] should_fail_ex+0x46c/0x600 [ 204.734270][ T7299] _copy_from_user+0x2d/0xb0 [ 204.734291][ T7299] __sys_bpf+0x1e3/0x860 [ 204.734325][ T7299] ? __pfx___sys_bpf+0x10/0x10 [ 204.734353][ T7299] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 204.734391][ T7299] ? ksys_write+0x230/0x260 [ 204.734420][ T7299] ? __pfx_ksys_write+0x10/0x10 [ 204.734444][ T7299] ? rcu_is_watching+0x15/0xb0 [ 204.734474][ T7299] __x64_sys_bpf+0x7c/0x90 [ 204.734503][ T7299] do_syscall_64+0xfa/0x3b0 [ 204.734531][ T7299] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.734559][ T7299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.734599][ T7299] ? clear_bhb_loop+0x60/0xb0 [ 204.734627][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.734649][ T7299] RIP: 0033:0x7f7c91c2eec9 [ 204.734667][ T7299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.734687][ T7299] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.734709][ T7299] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 204.734725][ T7299] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 204.734739][ T7299] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 204.734752][ T7299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.734765][ T7299] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 204.734797][ T7299] [ 205.078020][ T5807] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 205.102335][ T7302] program syz.4.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.128478][ T5910] usb 1-1: USB disconnect, device number 21 [ 205.209682][ T5807] usb 3-1: device descriptor read/64, error -71 [ 205.323378][ T5807] usb usb3-port1: attempt power cycle [ 205.367135][ T7315] overlayfs: empty lowerdir [ 205.668036][ T5807] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 205.701528][ T5807] usb 3-1: device descriptor read/8, error -71 [ 205.818013][ T5910] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 205.937962][ T5807] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 205.958777][ T5807] usb 3-1: device descriptor read/8, error -71 [ 205.971082][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 205.976530][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 205.976571][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.976598][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.976639][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 205.976681][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.976728][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 205.976755][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.019290][ T5910] usb 1-1: config 0 descriptor?? [ 206.021515][ T7321] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.068559][ T5807] usb usb3-port1: unable to enumerate USB device [ 206.253548][ T62] Bluetooth: hci5: unexpected event 0x12 length: 0 < 8 [ 206.256020][ T62] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 206.256162][ T62] Bluetooth: hci5: unexpected event 0x07 length: 0 < 255 [ 206.256244][ T62] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 206.256984][ T62] Bluetooth: hci5: unexpected event 0x04 length: 0 < 10 [ 206.257127][ T62] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 206.258104][ T62] Bluetooth: hci5: unexpected event 0x02 length: 0 < 1 [ 206.258276][ T62] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 206.258424][ T62] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 206.258585][ T62] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 206.350861][ T7349] FAULT_INJECTION: forcing a failure. [ 206.350861][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 206.350899][ T7349] CPU: 1 UID: 0 PID: 7349 Comm: syz.1.544 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.350924][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.350938][ T7349] Call Trace: [ 206.350947][ T7349] [ 206.350956][ T7349] dump_stack_lvl+0x189/0x250 [ 206.350995][ T7349] ? __pfx____ratelimit+0x10/0x10 [ 206.351027][ T7349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.351060][ T7349] ? __pfx__printk+0x10/0x10 [ 206.351092][ T7349] ? __lock_acquire+0xab9/0xd20 [ 206.351136][ T7349] should_fail_ex+0x46c/0x600 [ 206.351170][ T7349] should_failslab+0xa8/0x100 [ 206.351205][ T7349] __kmalloc_cache_noprof+0x6f/0x6c0 [ 206.351235][ T7349] ? do_raw_spin_lock+0x121/0x290 [ 206.351263][ T7349] ? bdi_split_work_to_wbs+0x4fc/0x8c0 [ 206.351294][ T7349] bdi_split_work_to_wbs+0x4fc/0x8c0 [ 206.351322][ T7349] ? bdi_split_work_to_wbs+0x103/0x8c0 [ 206.351358][ T7349] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 206.351395][ T7349] ? down_read+0x181/0x1f0 [ 206.351432][ T7349] sync_inodes_sb+0x1aa/0xa50 [ 206.351461][ T7349] ? super_lock+0x2fb/0x3b0 [ 206.351495][ T7349] ? __pfx_sync_inodes_sb+0x10/0x10 [ 206.351531][ T7349] ? rt_spin_unlock+0x161/0x200 [ 206.351557][ T7349] __iterate_supers+0x13a/0x290 [ 206.351583][ T7349] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 206.351623][ T7349] ksys_sync+0x94/0x150 [ 206.351667][ T7349] ? __pfx_ksys_sync+0x10/0x10 [ 206.351698][ T7349] ? rcu_is_watching+0x15/0xb0 [ 206.351728][ T7349] ? do_syscall_64+0xbe/0x3b0 [ 206.351762][ T7349] __ia32_sys_sync+0xe/0x20 [ 206.351797][ T7349] do_syscall_64+0xfa/0x3b0 [ 206.351826][ T7349] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.351855][ T7349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.351878][ T7349] ? clear_bhb_loop+0x60/0xb0 [ 206.351905][ T7349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.351927][ T7349] RIP: 0033:0x7f7c91c2eec9 [ 206.351946][ T7349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.351966][ T7349] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 206.351990][ T7349] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 206.352007][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.352020][ T7349] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.352033][ T7349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.352046][ T7349] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 206.352083][ T7349] [ 206.597290][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.652405][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.722299][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.730614][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.771285][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.771862][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.780852][ T7354] FAULT_INJECTION: forcing a failure. [ 206.780852][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.781309][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 206.781339][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.781356][ T7354] Call Trace: [ 206.781366][ T7354] [ 206.781376][ T7354] dump_stack_lvl+0x189/0x250 [ 206.781423][ T7354] ? __pfx____ratelimit+0x10/0x10 [ 206.781458][ T7354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.781496][ T7354] ? __pfx__printk+0x10/0x10 [ 206.781525][ T7354] ? __might_fault+0xb0/0x130 [ 206.781577][ T7354] should_fail_ex+0x46c/0x600 [ 206.781612][ T7354] _copy_from_user+0x2d/0xb0 [ 206.781635][ T7354] __sys_bpf+0x1e3/0x860 [ 206.781675][ T7354] ? __pfx___sys_bpf+0x10/0x10 [ 206.781708][ T7354] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 206.781754][ T7354] ? ksys_write+0x230/0x260 [ 206.781788][ T7354] ? __pfx_ksys_write+0x10/0x10 [ 206.781819][ T7354] ? rcu_is_watching+0x15/0xb0 [ 206.781855][ T7354] __x64_sys_bpf+0x7c/0x90 [ 206.781895][ T7354] do_syscall_64+0xfa/0x3b0 [ 206.781930][ T7354] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.781961][ T7354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.781987][ T7354] ? clear_bhb_loop+0x60/0xb0 [ 206.782017][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.782042][ T7354] RIP: 0033:0x7f70c52deec9 [ 206.782064][ T7354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.782085][ T7354] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.782111][ T7354] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 206.782130][ T7354] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 206.782146][ T7354] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 206.782162][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.782176][ T7354] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 206.782213][ T7354] [ 207.021141][ T5131] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 207.052038][ T5991] usb 1-1: USB disconnect, device number 22 [ 207.118136][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 207.258220][ T10] usb 5-1: device descriptor read/64, error -71 [ 207.330014][ T7364] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 207.508095][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 207.611756][ T7375] FAULT_INJECTION: forcing a failure. [ 207.611756][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.611793][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.611819][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.611836][ T7375] Call Trace: [ 207.611845][ T7375] [ 207.611855][ T7375] dump_stack_lvl+0x189/0x250 [ 207.611893][ T7375] ? __pfx____ratelimit+0x10/0x10 [ 207.611923][ T7375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.611957][ T7375] ? __pfx__printk+0x10/0x10 [ 207.611982][ T7375] ? __might_fault+0xb0/0x130 [ 207.612028][ T7375] should_fail_ex+0x46c/0x600 [ 207.612061][ T7375] _copy_from_user+0x2d/0xb0 [ 207.612083][ T7375] __sys_bpf+0x1e3/0x860 [ 207.612117][ T7375] ? __pfx___sys_bpf+0x10/0x10 [ 207.612146][ T7375] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 207.612187][ T7375] ? ksys_write+0x230/0x260 [ 207.612217][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 207.612252][ T7375] __x64_sys_bpf+0x7c/0x90 [ 207.612280][ T7375] do_syscall_64+0xfa/0x3b0 [ 207.612309][ T7375] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.612337][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.612359][ T7375] ? clear_bhb_loop+0x60/0xb0 [ 207.612386][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.612406][ T7375] RIP: 0033:0x7fefd6d2eec9 [ 207.612425][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.612443][ T7375] RSP: 002b:00007fefd4f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.612466][ T7375] RAX: ffffffffffffffda RBX: 00007fefd6f85fa0 RCX: 00007fefd6d2eec9 [ 207.612482][ T7375] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000005 [ 207.612496][ T7375] RBP: 00007fefd4f96090 R08: 0000000000000000 R09: 0000000000000000 [ 207.612509][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.612522][ T7375] R13: 00007fefd6f86038 R14: 00007fefd6f85fa0 R15: 00007ffd90ec5728 [ 207.612561][ T7375] [ 207.657916][ T10] usb 5-1: device descriptor read/64, error -71 [ 207.769048][ T10] usb usb5-port1: attempt power cycle [ 207.928928][ T7383] FAULT_INJECTION: forcing a failure. [ 207.928928][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.928964][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.2.562 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.928988][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.929002][ T7383] Call Trace: [ 207.929010][ T7383] [ 207.929020][ T7383] dump_stack_lvl+0x189/0x250 [ 207.929059][ T7383] ? __pfx____ratelimit+0x10/0x10 [ 207.929088][ T7383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.929122][ T7383] ? __pfx__printk+0x10/0x10 [ 207.929148][ T7383] ? __might_fault+0xb0/0x130 [ 207.929193][ T7383] should_fail_ex+0x46c/0x600 [ 207.929226][ T7383] _copy_from_user+0x2d/0xb0 [ 207.929248][ T7383] __sys_bpf+0x1e3/0x860 [ 207.929283][ T7383] ? __pfx___sys_bpf+0x10/0x10 [ 207.929313][ T7383] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 207.929353][ T7383] ? ksys_write+0x230/0x260 [ 207.929384][ T7383] ? __pfx_ksys_write+0x10/0x10 [ 207.929421][ T7383] __x64_sys_bpf+0x7c/0x90 [ 207.929452][ T7383] do_syscall_64+0xfa/0x3b0 [ 207.929482][ T7383] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.929511][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.929540][ T7383] ? clear_bhb_loop+0x60/0xb0 [ 207.929568][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.929589][ T7383] RIP: 0033:0x7fefd6d2eec9 [ 207.929608][ T7383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.929628][ T7383] RSP: 002b:00007fefd4f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.929651][ T7383] RAX: ffffffffffffffda RBX: 00007fefd6f85fa0 RCX: 00007fefd6d2eec9 [ 207.929667][ T7383] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 207.929680][ T7383] RBP: 00007fefd4f96090 R08: 0000000000000000 R09: 0000000000000000 [ 207.929694][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.929706][ T7383] R13: 00007fefd6f86038 R14: 00007fefd6f85fa0 R15: 00007ffd90ec5728 [ 207.929739][ T7383] [ 208.108237][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 208.129326][ T10] usb 5-1: device descriptor read/8, error -71 [ 208.308083][ T5910] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 208.368497][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 208.388728][ T10] usb 5-1: device descriptor read/8, error -71 [ 208.453307][ T5910] usb 1-1: device descriptor read/64, error -71 [ 208.499055][ T10] usb usb5-port1: unable to enumerate USB device [ 208.597619][ T7404] FAULT_INJECTION: forcing a failure. [ 208.597619][ T7404] name failslab, interval 1, probability 0, space 0, times 0 [ 208.597655][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.3.573 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.597680][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 208.597693][ T7404] Call Trace: [ 208.597702][ T7404] [ 208.597711][ T7404] dump_stack_lvl+0x189/0x250 [ 208.597749][ T7404] ? __pfx____ratelimit+0x10/0x10 [ 208.597785][ T7404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.597823][ T7404] ? __pfx__printk+0x10/0x10 [ 208.597854][ T7404] ? __pfx___might_resched+0x10/0x10 [ 208.597885][ T7404] should_fail_ex+0x46c/0x600 [ 208.597917][ T7404] should_failslab+0xa8/0x100 [ 208.597951][ T7404] __kmalloc_noprof+0xcc/0x7d0 [ 208.597978][ T7404] ? rcu_read_lock_any_held+0xb3/0x120 [ 208.598001][ T7404] ? kernfs_fop_write_iter+0x159/0x540 [ 208.598029][ T7404] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 208.598057][ T7404] kernfs_fop_write_iter+0x159/0x540 [ 208.598095][ T7404] vfs_write+0x5d2/0xb40 [ 208.598127][ T7404] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 208.598158][ T7404] ? __pfx_vfs_write+0x10/0x10 [ 208.598182][ T7404] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 208.598214][ T7404] ? mutex_lock_nested+0x154/0x1d0 [ 208.598233][ T7404] ? fdget_pos+0x253/0x320 [ 208.598274][ T7404] ksys_write+0x14b/0x260 [ 208.598305][ T7404] ? __pfx_ksys_write+0x10/0x10 [ 208.598329][ T7404] ? rcu_is_watching+0x15/0xb0 [ 208.598356][ T7404] ? do_syscall_64+0xbe/0x3b0 [ 208.598389][ T7404] do_syscall_64+0xfa/0x3b0 [ 208.598418][ T7404] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.598446][ T7404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.598467][ T7404] ? clear_bhb_loop+0x60/0xb0 [ 208.598493][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.598514][ T7404] RIP: 0033:0x7f70c52deec9 [ 208.598533][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.598551][ T7404] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.598573][ T7404] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 208.598589][ T7404] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: 0000000000000004 [ 208.598602][ T7404] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.598615][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.598627][ T7404] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 208.598661][ T7404] [ 208.698197][ T5910] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 208.839768][ T5910] usb 1-1: device descriptor read/64, error -71 [ 208.962278][ T5910] usb usb1-port1: attempt power cycle [ 209.317999][ T5910] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 209.343798][ T5910] usb 1-1: device descriptor read/8, error -71 [ 209.505906][ T7430] Zero length message leads to an empty skb [ 209.587758][ T7432] FAULT_INJECTION: forcing a failure. [ 209.587758][ T7432] name failslab, interval 1, probability 0, space 0, times 0 [ 209.587793][ T7432] CPU: 1 UID: 0 PID: 7432 Comm: syz.3.584 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.587823][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.587836][ T7432] Call Trace: [ 209.587844][ T7432] [ 209.587853][ T7432] dump_stack_lvl+0x189/0x250 [ 209.587889][ T7432] ? __pfx____ratelimit+0x10/0x10 [ 209.587937][ T7432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.587968][ T7432] ? __pfx__printk+0x10/0x10 [ 209.588000][ T7432] ? __pfx___might_resched+0x10/0x10 [ 209.588028][ T7432] ? fs_reclaim_acquire+0x7d/0x100 [ 209.588064][ T7432] should_fail_ex+0x46c/0x600 [ 209.588094][ T7432] ? getname_flags+0xb8/0x540 [ 209.588128][ T7432] should_failslab+0xa8/0x100 [ 209.588162][ T7432] ? getname_flags+0xb8/0x540 [ 209.588194][ T7432] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 209.588223][ T7432] ? __pfx_vfs_write+0x10/0x10 [ 209.588246][ T7432] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 209.588274][ T7432] getname_flags+0xb8/0x540 [ 209.588309][ T7432] do_sys_openat2+0xbc/0x1c0 [ 209.588332][ T7432] ? __pfx_do_sys_openat2+0x10/0x10 [ 209.588355][ T7432] ? ksys_write+0x230/0x260 [ 209.588384][ T7432] ? __pfx_ksys_write+0x10/0x10 [ 209.588430][ T7432] ? rcu_is_watching+0x15/0xb0 [ 209.588458][ T7432] __x64_sys_open+0x11e/0x150 [ 209.588484][ T7432] do_syscall_64+0xfa/0x3b0 [ 209.588513][ T7432] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.588541][ T7432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.588563][ T7432] ? clear_bhb_loop+0x60/0xb0 [ 209.588590][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.588611][ T7432] RIP: 0033:0x7f70c52deec9 [ 209.588631][ T7432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.588649][ T7432] RSP: 002b:00007f70c351d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 209.588672][ T7432] RAX: ffffffffffffffda RBX: 00007f70c5536090 RCX: 00007f70c52deec9 [ 209.588688][ T7432] RDX: 0000000000000040 RSI: 0000000000080040 RDI: 0000200000000380 [ 209.588702][ T7432] RBP: 00007f70c351d090 R08: 0000000000000000 R09: 0000000000000000 [ 209.588716][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.588736][ T7432] R13: 00007f70c5536128 R14: 00007f70c5536090 R15: 00007fffa0154768 [ 209.588769][ T7432] [ 209.643103][ T5910] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 209.661223][ T7427] fuse: root generation should be zero [ 209.669890][ T5910] usb 1-1: device descriptor read/8, error -71 [ 209.789569][ T5910] usb usb1-port1: unable to enumerate USB device [ 209.812106][ T7434] FAULT_INJECTION: forcing a failure. [ 209.812106][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.812147][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.2.586 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.812192][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.812209][ T7434] Call Trace: [ 209.812218][ T7434] [ 209.812229][ T7434] dump_stack_lvl+0x189/0x250 [ 209.812273][ T7434] ? __pfx____ratelimit+0x10/0x10 [ 209.812307][ T7434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.812345][ T7434] ? __pfx__printk+0x10/0x10 [ 209.812395][ T7434] should_fail_ex+0x46c/0x600 [ 209.812432][ T7434] _copy_to_user+0x31/0xb0 [ 209.812466][ T7434] simple_read_from_buffer+0xe1/0x170 [ 209.812508][ T7434] proc_fail_nth_read+0x1b6/0x220 [ 209.812539][ T7434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.812572][ T7434] ? rw_verify_area+0x2ac/0x4e0 [ 209.812603][ T7434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.812634][ T7434] vfs_read+0x203/0xa30 [ 209.812682][ T7434] ? __pfx_vfs_read+0x10/0x10 [ 209.812710][ T7434] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 209.812747][ T7434] ? mutex_lock_nested+0x154/0x1d0 [ 209.812769][ T7434] ? fdget_pos+0x253/0x320 [ 209.812816][ T7434] ksys_read+0x14b/0x260 [ 209.812851][ T7434] ? __pfx_ksys_read+0x10/0x10 [ 209.812901][ T7434] ? do_syscall_64+0xbe/0x3b0 [ 209.812939][ T7434] do_syscall_64+0xfa/0x3b0 [ 209.812971][ T7434] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.813001][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.813026][ T7434] ? clear_bhb_loop+0x60/0xb0 [ 209.813055][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.813079][ T7434] RIP: 0033:0x7fefd6d2d8dc [ 209.813100][ T7434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.813121][ T7434] RSP: 002b:00007fefd4f96030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.813147][ T7434] RAX: ffffffffffffffda RBX: 00007fefd6f85fa0 RCX: 00007fefd6d2d8dc [ 209.813165][ T7434] RDX: 000000000000000f RSI: 00007fefd4f960a0 RDI: 0000000000000005 [ 209.813181][ T7434] RBP: 00007fefd4f96090 R08: 0000000000000000 R09: 0000000000000000 [ 209.813195][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.813209][ T7434] R13: 00007fefd6f86038 R14: 00007fefd6f85fa0 R15: 00007ffd90ec5728 [ 209.813247][ T7434] [ 212.179572][ T7484] program syz.2.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.428121][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 212.445277][ T7500] FAULT_INJECTION: forcing a failure. [ 212.445277][ T7500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.445318][ T7500] CPU: 0 UID: 0 PID: 7500 Comm: syz.1.611 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.445345][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.445361][ T7500] Call Trace: [ 212.445371][ T7500] [ 212.445380][ T7500] dump_stack_lvl+0x189/0x250 [ 212.445422][ T7500] ? __pfx____ratelimit+0x10/0x10 [ 212.445452][ T7500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.445486][ T7500] ? __pfx__printk+0x10/0x10 [ 212.445513][ T7500] ? __might_fault+0xb0/0x130 [ 212.445563][ T7500] should_fail_ex+0x46c/0x600 [ 212.445611][ T7500] _copy_from_user+0x2d/0xb0 [ 212.445636][ T7500] ___sys_sendmsg+0x158/0x2a0 [ 212.445675][ T7500] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.445773][ T7500] ? __fget_files+0x2a/0x420 [ 212.445809][ T7500] ? __fget_files+0x3a6/0x420 [ 212.445857][ T7500] __x64_sys_sendmsg+0x1a1/0x260 [ 212.445899][ T7500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.445948][ T7500] ? __pfx_ksys_write+0x10/0x10 [ 212.445976][ T7500] ? rcu_is_watching+0x15/0xb0 [ 212.446010][ T7500] ? do_syscall_64+0xbe/0x3b0 [ 212.446049][ T7500] do_syscall_64+0xfa/0x3b0 [ 212.446082][ T7500] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.446116][ T7500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.446142][ T7500] ? clear_bhb_loop+0x60/0xb0 [ 212.446173][ T7500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.446200][ T7500] RIP: 0033:0x7f7c91c2eec9 [ 212.446221][ T7500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.446244][ T7500] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.446270][ T7500] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 212.446289][ T7500] RDX: 0000000000008000 RSI: 0000200000000a40 RDI: 0000000000000003 [ 212.446304][ T7500] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 212.446321][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.446333][ T7500] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 212.446371][ T7500] [ 212.599905][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 212.604855][ T5910] usb 5-1: config 255 has an invalid interface number: 219 but max is 0 [ 212.604889][ T5910] usb 5-1: config 255 has no interface number 0 [ 212.604946][ T5910] usb 5-1: config 255 interface 219 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 212.604978][ T5910] usb 5-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 212.605007][ T5910] usb 5-1: config 255 interface 219 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 212.605036][ T5910] usb 5-1: config 255 interface 219 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 212.605069][ T5910] usb 5-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 212.605093][ T5910] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 212.605120][ T5910] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 212.605147][ T5910] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 212.605174][ T5910] usb 5-1: config 255 interface 219 has no altsetting 0 [ 212.637395][ T5910] usb 5-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=3a.9f [ 212.637433][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.637458][ T5910] usb 5-1: Product: љ [ 212.637475][ T5910] usb 5-1: Manufacturer: 㯽螊鱗躲솕붗䵹姾譤딜櫃義餑䠊庬ᢋ鲊㜤㜃᝾ⸯ赆㛞甍᷈ꊥ䠵芘䪻홗䆆촎㥧ㄎ䓙⣼몹囟⋐鎰뙃 [ 212.637502][ T5910] usb 5-1: SerialNumber: ஝薃裺咑怉㳄䬸挒奎輕ⵠᷮꖐ吠춒㧶ᡬɏ쫒⒊掩⤖鷇퓪Ⴤ牼姨ﭴ⶗⽤ﱥ玚콿舆現㔻덜헿컪᭒쌢噶殫ᯑ싥阕②庇擅켕ꦱⶤ凓㾿꤄᎔඘맔㦊ᴡ꡺仐潋⠄춋蒻醚풷⬜៷᭲㳿⌡죮禔瓞幫딵⳰溈丬떇쩟勪믟䉞椘㈾阘⽢똍 [ 212.695191][ T7490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 215.361790][ T7548] FAULT_INJECTION: forcing a failure. [ 215.361790][ T7548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.361846][ T7548] CPU: 1 UID: 0 PID: 7548 Comm: syz.3.629 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 215.361871][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.361886][ T7548] Call Trace: [ 215.361894][ T7548] [ 215.361904][ T7548] dump_stack_lvl+0x189/0x250 [ 215.361942][ T7548] ? __pfx____ratelimit+0x10/0x10 [ 215.361971][ T7548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.362007][ T7548] ? __pfx__printk+0x10/0x10 [ 215.362034][ T7548] ? __might_fault+0xb0/0x130 [ 215.362078][ T7548] should_fail_ex+0x46c/0x600 [ 215.362113][ T7548] _copy_from_user+0x2d/0xb0 [ 215.362135][ T7548] __sys_bpf+0x1e3/0x860 [ 215.362171][ T7548] ? __pfx___sys_bpf+0x10/0x10 [ 215.362202][ T7548] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 215.362244][ T7548] ? ksys_write+0x230/0x260 [ 215.362274][ T7548] ? __pfx_ksys_write+0x10/0x10 [ 215.362298][ T7548] ? rcu_is_watching+0x15/0xb0 [ 215.362339][ T7548] __x64_sys_bpf+0x7c/0x90 [ 215.362370][ T7548] do_syscall_64+0xfa/0x3b0 [ 215.362400][ T7548] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.362428][ T7548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.362450][ T7548] ? clear_bhb_loop+0x60/0xb0 [ 215.362477][ T7548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.362499][ T7548] RIP: 0033:0x7f70c52deec9 [ 215.362519][ T7548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.362544][ T7548] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.362567][ T7548] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 215.362583][ T7548] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 215.362597][ T7548] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 215.362611][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.362625][ T7548] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 215.362659][ T7548] [ 215.588084][ T5902] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 215.717988][ T5902] usb 1-1: device descriptor read/64, error -71 [ 215.976008][ T5902] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 216.108326][ T5902] usb 1-1: device descriptor read/64, error -71 [ 216.218586][ T5902] usb usb1-port1: attempt power cycle [ 216.557970][ T5902] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 216.578748][ T5902] usb 1-1: device descriptor read/8, error -71 [ 216.672484][ T7570] program syz.2.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.760209][ T5910] io_ti 5-1:255.219: required endpoints missing [ 216.818065][ T5902] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 216.842331][ T5902] usb 1-1: device descriptor read/8, error -71 [ 216.934719][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 216.934759][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 216.934886][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 216.934982][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 216.947565][ T5910] usb 5-1: USB disconnect, device number 26 [ 216.958128][ T5902] usb usb1-port1: unable to enumerate USB device [ 217.319502][ T7587] FAULT_INJECTION: forcing a failure. [ 217.319502][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.319539][ T7587] CPU: 0 UID: 0 PID: 7587 Comm: syz.4.649 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.319564][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.319578][ T7587] Call Trace: [ 217.319587][ T7587] [ 217.319596][ T7587] dump_stack_lvl+0x189/0x250 [ 217.319634][ T7587] ? __pfx____ratelimit+0x10/0x10 [ 217.319665][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.319698][ T7587] ? __pfx__printk+0x10/0x10 [ 217.319724][ T7587] ? __might_fault+0xb0/0x130 [ 217.319771][ T7587] should_fail_ex+0x46c/0x600 [ 217.319804][ T7587] _copy_from_user+0x2d/0xb0 [ 217.319825][ T7587] do_sock_getsockopt+0x17d/0x450 [ 217.319862][ T7587] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 217.319904][ T7587] ? do_syscall_64+0xa0/0x3b0 [ 217.319964][ T7587] ? __fget_files+0x3a6/0x420 [ 217.319995][ T7587] ? __fget_files+0x2a/0x420 [ 217.320033][ T7587] __x64_sys_getsockopt+0x1ab/0x250 [ 217.320062][ T7587] ? do_syscall_64+0xa0/0x3b0 [ 217.320093][ T7587] ? do_syscall_64+0xa0/0x3b0 [ 217.320127][ T7587] do_syscall_64+0xfa/0x3b0 [ 217.320154][ T7587] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.320181][ T7587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.320203][ T7587] ? clear_bhb_loop+0x60/0xb0 [ 217.320229][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.320249][ T7587] RIP: 0033:0x7fe943a8eec9 [ 217.320268][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.320286][ T7587] RSP: 002b:00007fe941cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 217.320309][ T7587] RAX: ffffffffffffffda RBX: 00007fe943ce5fa0 RCX: 00007fe943a8eec9 [ 217.320324][ T7587] RDX: 0000000000000050 RSI: 0000000000000029 RDI: 0000000000000003 [ 217.320337][ T7587] RBP: 00007fe941cee090 R08: 0000200000000040 R09: 0000000000000000 [ 217.320350][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.320362][ T7587] R13: 00007fe943ce6038 R14: 00007fe943ce5fa0 R15: 00007fffe589b658 [ 217.320395][ T7587] [ 217.847176][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.654'. [ 217.858191][ T7598] netlink: 60 bytes leftover after parsing attributes in process `syz.4.654'. [ 219.611505][ T7623] FAULT_INJECTION: forcing a failure. [ 219.611505][ T7623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.611543][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.3.664 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.611568][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 219.611582][ T7623] Call Trace: [ 219.611590][ T7623] [ 219.611600][ T7623] dump_stack_lvl+0x189/0x250 [ 219.611639][ T7623] ? __pfx____ratelimit+0x10/0x10 [ 219.611670][ T7623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.611704][ T7623] ? __pfx__printk+0x10/0x10 [ 219.611730][ T7623] ? __might_fault+0xb0/0x130 [ 219.611776][ T7623] should_fail_ex+0x46c/0x600 [ 219.611810][ T7623] _copy_from_user+0x2d/0xb0 [ 219.611840][ T7623] __sys_bpf+0x1e3/0x860 [ 219.611876][ T7623] ? __pfx___sys_bpf+0x10/0x10 [ 219.611904][ T7623] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 219.611947][ T7623] ? ksys_write+0x230/0x260 [ 219.611980][ T7623] ? __pfx_ksys_write+0x10/0x10 [ 219.612004][ T7623] ? rcu_is_watching+0x15/0xb0 [ 219.612037][ T7623] __x64_sys_bpf+0x7c/0x90 [ 219.612066][ T7623] do_syscall_64+0xfa/0x3b0 [ 219.612096][ T7623] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.612124][ T7623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.612147][ T7623] ? clear_bhb_loop+0x60/0xb0 [ 219.612175][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.612196][ T7623] RIP: 0033:0x7f70c52deec9 [ 219.612216][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.612236][ T7623] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.612259][ T7623] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 219.612275][ T7623] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 219.612289][ T7623] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 219.612302][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.612315][ T7623] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 219.612350][ T7623] [ 220.248071][ T5991] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 220.328082][ T44] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.373989][ T7648] FAULT_INJECTION: forcing a failure. [ 220.373989][ T7648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.374024][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.3.676 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 220.374066][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.374080][ T7648] Call Trace: [ 220.374089][ T7648] [ 220.374099][ T7648] dump_stack_lvl+0x189/0x250 [ 220.374137][ T7648] ? __pfx____ratelimit+0x10/0x10 [ 220.374167][ T7648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.374201][ T7648] ? __pfx__printk+0x10/0x10 [ 220.374243][ T7648] should_fail_ex+0x46c/0x600 [ 220.374276][ T7648] _copy_to_user+0x31/0xb0 [ 220.374300][ T7648] simple_read_from_buffer+0xe1/0x170 [ 220.374335][ T7648] proc_fail_nth_read+0x1b6/0x220 [ 220.374365][ T7648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.374406][ T7648] ? rw_verify_area+0x2ac/0x4e0 [ 220.374431][ T7648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.374456][ T7648] vfs_read+0x203/0xa30 [ 220.374491][ T7648] ? __pfx_vfs_read+0x10/0x10 [ 220.374514][ T7648] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 220.374545][ T7648] ? mutex_lock_nested+0x154/0x1d0 [ 220.374565][ T7648] ? fdget_pos+0x253/0x320 [ 220.374606][ T7648] ksys_read+0x14b/0x260 [ 220.374636][ T7648] ? __pfx_ksys_read+0x10/0x10 [ 220.374670][ T7648] ? do_syscall_64+0xbe/0x3b0 [ 220.374704][ T7648] do_syscall_64+0xfa/0x3b0 [ 220.374732][ T7648] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.374785][ T7648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.374807][ T7648] ? clear_bhb_loop+0x60/0xb0 [ 220.374834][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.374855][ T7648] RIP: 0033:0x7f70c52dd8dc [ 220.374874][ T7648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.374894][ T7648] RSP: 002b:00007f70c353e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.374917][ T7648] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52dd8dc [ 220.374932][ T7648] RDX: 000000000000000f RSI: 00007f70c353e0a0 RDI: 0000000000000004 [ 220.374946][ T7648] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 220.374959][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.374971][ T7648] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 220.375005][ T7648] [ 220.408045][ T5910] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 220.408208][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 220.430564][ T5991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.448714][ T5991] usb 5-1: config 70 has an invalid interface number: 143 but max is 0 [ 220.448748][ T5991] usb 5-1: config 70 has no interface number 0 [ 220.448805][ T5991] usb 5-1: config 70 interface 143 has no altsetting 0 [ 220.480271][ T5991] usb 5-1: New USB device found, idVendor=07c4, idProduct=a003, bcdDevice=12.f6 [ 220.480307][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.480331][ T5991] usb 5-1: Product: syz [ 220.480348][ T5991] usb 5-1: Manufacturer: syz [ 220.480366][ T5991] usb 5-1: SerialNumber: syz [ 220.558448][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 220.575024][ T5910] usb 1-1: config 255 has an invalid interface number: 219 but max is 0 [ 220.575055][ T5910] usb 1-1: config 255 has no interface number 0 [ 220.575189][ T5910] usb 1-1: config 255 interface 219 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 220.575223][ T5910] usb 1-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 220.575253][ T5910] usb 1-1: config 255 interface 219 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 220.575344][ T5910] usb 1-1: config 255 interface 219 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 220.575377][ T5910] usb 1-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 220.575402][ T5910] usb 1-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 220.575429][ T5910] usb 1-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 220.575514][ T5910] usb 1-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 220.575541][ T5910] usb 1-1: config 255 interface 219 has no altsetting 0 [ 220.637893][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 220.706547][ T5910] usb 1-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=3a.9f [ 220.706584][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.707022][ T5910] usb 1-1: Product: љ [ 220.707044][ T5910] usb 1-1: Manufacturer: 㯽螊鱗躲솕붗䵹姾譤딜櫃義餑䠊庬ᢋ鲊㜤㜃᝾ⸯ赆㛞甍᷈ꊥ䠵芘䪻홗䆆촎㥧ㄎ䓙⣼몹囟⋐鎰뙃 [ 220.707070][ T5910] usb 1-1: SerialNumber: ஝薃裺咑怉㳄䬸挒奎輕ⵠᷮꖐ吠춒㧶ᡬɏ쫒⒊掩⤖鷇퓪Ⴤ牼姨ﭴ⶗⽤ﱥ玚콿舆現㔻덜헿컪᭒쌢噶殫ᯑ싥阕②庇擅켕ꦱⶤ凓㾿꤄᎔඘맔㦊ᴡ꡺仐潋⠄춋蒻醚풷⬜៷᭲㳿⌡죮禔瓞幫딵⳰溈丬떇쩟勪믟䉞椘㈾阘⽢똍 [ 220.757930][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.757957][ T44] usb 3-1: config 0 has no interfaces? [ 220.809731][ T5991] ums-datafab 5-1:70.143: USB Mass Storage device detected [ 220.816947][ T7638] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 220.821099][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 220.821129][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.821150][ T44] usb 3-1: Product: syz [ 220.821165][ T44] usb 3-1: Manufacturer: syz [ 220.821180][ T44] usb 3-1: SerialNumber: syz [ 220.978035][ T44] usb 3-1: config 0 descriptor?? [ 221.018401][ T5991] ums-datafab 5-1:70.143: This device (07c4,a003,12f6 S 24 P f2) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 221.018401][ T5991] Please send a copy of this message to and [ 222.419245][ T5991] usb 5-1: USB disconnect, device number 27 [ 223.058297][ T5991] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 223.249221][ T5991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.253856][ T5991] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 223.253948][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.253970][ T5991] usb 5-1: Product: syz [ 223.253986][ T5991] usb 5-1: Manufacturer: syz [ 223.254002][ T5991] usb 5-1: SerialNumber: syz [ 223.324830][ T5991] usb 5-1: config 0 descriptor?? [ 223.440669][ T5991] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 223.477965][ T5902] usb 3-1: USB disconnect, device number 26 [ 223.554899][ T7687] FAULT_INJECTION: forcing a failure. [ 223.554899][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.554935][ T7687] CPU: 1 UID: 0 PID: 7687 Comm: syz.2.693 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.554959][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.554972][ T7687] Call Trace: [ 223.554981][ T7687] [ 223.554990][ T7687] dump_stack_lvl+0x189/0x250 [ 223.555033][ T7687] ? __pfx____ratelimit+0x10/0x10 [ 223.555061][ T7687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.555093][ T7687] ? __pfx__printk+0x10/0x10 [ 223.555118][ T7687] ? __might_fault+0xb0/0x130 [ 223.555161][ T7687] should_fail_ex+0x46c/0x600 [ 223.555193][ T7687] _copy_from_user+0x2d/0xb0 [ 223.555213][ T7687] __sys_bpf+0x1e3/0x860 [ 223.555265][ T7687] ? __pfx___sys_bpf+0x10/0x10 [ 223.555294][ T7687] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 223.555336][ T7687] ? ksys_write+0x230/0x260 [ 223.555369][ T7687] ? __pfx_ksys_write+0x10/0x10 [ 223.555394][ T7687] ? rcu_is_watching+0x15/0xb0 [ 223.555426][ T7687] __x64_sys_bpf+0x7c/0x90 [ 223.555457][ T7687] do_syscall_64+0xfa/0x3b0 [ 223.555486][ T7687] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.555514][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.555536][ T7687] ? clear_bhb_loop+0x60/0xb0 [ 223.555563][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.555592][ T7687] RIP: 0033:0x7fefd6d2eec9 [ 223.555623][ T7687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.555642][ T7687] RSP: 002b:00007fefd4f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.555664][ T7687] RAX: ffffffffffffffda RBX: 00007fefd6f85fa0 RCX: 00007fefd6d2eec9 [ 223.555680][ T7687] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000000 [ 223.555693][ T7687] RBP: 00007fefd4f96090 R08: 0000000000000000 R09: 0000000000000000 [ 223.555706][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.555718][ T7687] R13: 00007fefd6f86038 R14: 00007fefd6f85fa0 R15: 00007ffd90ec5728 [ 223.555770][ T7687] [ 223.640009][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.681'. [ 223.640045][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.681'. [ 223.758551][ T5910] io_ti 1-1:255.219: required endpoints missing [ 223.956700][ T5910] usb 1-1: USB disconnect, device number 31 [ 223.985975][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'. [ 224.101502][ T7692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.694'. [ 224.102010][ T7691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.694'. [ 224.141235][ T7702] program syz.2.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.167443][ T5827] usb 5-1: USB disconnect, device number 28 [ 224.256880][ T7705] unsupported nla_type 52263 [ 224.509386][ T7716] FAULT_INJECTION: forcing a failure. [ 224.509386][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.509421][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.3.706 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.509457][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.509471][ T7716] Call Trace: [ 224.509479][ T7716] [ 224.509488][ T7716] dump_stack_lvl+0x189/0x250 [ 224.509534][ T7716] ? __pfx____ratelimit+0x10/0x10 [ 224.509564][ T7716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.509597][ T7716] ? __pfx__printk+0x10/0x10 [ 224.509623][ T7716] ? __might_fault+0xb0/0x130 [ 224.509664][ T7716] should_fail_ex+0x46c/0x600 [ 224.509695][ T7716] _copy_from_user+0x2d/0xb0 [ 224.509715][ T7716] udp_lib_setsockopt+0x1ef/0x970 [ 224.509747][ T7716] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 224.509788][ T7716] udpv6_setsockopt+0x77/0xc0 [ 224.509814][ T7716] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 224.509840][ T7716] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 224.509868][ T7716] do_sock_setsockopt+0x17c/0x1b0 [ 224.509904][ T7716] __x64_sys_setsockopt+0x145/0x1b0 [ 224.509939][ T7716] do_syscall_64+0xfa/0x3b0 [ 224.509967][ T7716] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.509994][ T7716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.510015][ T7716] ? clear_bhb_loop+0x60/0xb0 [ 224.510041][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.510060][ T7716] RIP: 0033:0x7f70c52deec9 [ 224.510078][ T7716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.510096][ T7716] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 224.510118][ T7716] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 224.510133][ T7716] RDX: 000000100000000a RSI: 0000000000000011 RDI: 0000000000000003 [ 224.510146][ T7716] RBP: 00007f70c353e090 R08: 0000000000000004 R09: 0000000000000000 [ 224.510158][ T7716] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 224.510171][ T7716] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 224.510202][ T7716] [ 224.797944][ T5902] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 224.821044][ T7717] mkiss: ax0: crc mode is auto. [ 224.959066][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 224.965806][ T5902] usb 3-1: config 255 has an invalid interface number: 219 but max is 0 [ 224.965837][ T5902] usb 3-1: config 255 has no interface number 0 [ 224.965884][ T5902] usb 3-1: config 255 interface 219 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 224.965910][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 224.965934][ T5902] usb 3-1: config 255 interface 219 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 224.965959][ T5902] usb 3-1: config 255 interface 219 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 224.965986][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 224.966008][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 224.966033][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 224.966056][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 224.966077][ T5902] usb 3-1: config 255 interface 219 has no altsetting 0 [ 225.058944][ T7730] FAULT_INJECTION: forcing a failure. [ 225.058944][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.058988][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.1.712 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 225.059016][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.059033][ T7730] Call Trace: [ 225.059042][ T7730] [ 225.059053][ T7730] dump_stack_lvl+0x189/0x250 [ 225.059097][ T7730] ? __pfx____ratelimit+0x10/0x10 [ 225.059132][ T7730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.059176][ T7730] ? __pfx__printk+0x10/0x10 [ 225.059206][ T7730] ? __might_fault+0xb0/0x130 [ 225.059256][ T7730] should_fail_ex+0x46c/0x600 [ 225.059294][ T7730] _copy_from_user+0x2d/0xb0 [ 225.059319][ T7730] get_nodes+0x29c/0x390 [ 225.059348][ T7730] ? __pfx_get_nodes+0x10/0x10 [ 225.059385][ T7730] __se_sys_migrate_pages+0x9d/0x650 [ 225.059427][ T7730] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 225.059461][ T7730] ? rcu_is_watching+0x15/0xb0 [ 225.059493][ T7730] ? do_syscall_64+0xbe/0x3b0 [ 225.059533][ T7730] do_syscall_64+0xfa/0x3b0 [ 225.059567][ T7730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.059592][ T7730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.059619][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 225.059655][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.059678][ T7730] RIP: 0033:0x7f7c91c2eec9 [ 225.059701][ T7730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.059722][ T7730] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 225.059748][ T7730] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 225.059772][ T7730] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000 [ 225.059788][ T7730] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.059804][ T7730] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 225.059819][ T7730] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 225.059859][ T7730] [ 225.068059][ T5902] usb 3-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=3a.9f [ 225.068089][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.068110][ T5902] usb 3-1: Product: љ [ 225.068124][ T5902] usb 3-1: Manufacturer: 㯽螊鱗躲솕붗䵹姾譤딜櫃義餑䠊庬ᢋ鲊㜤㜃᝾ⸯ赆㛞甍᷈ꊥ䠵芘䪻홗䆆촎㥧ㄎ䓙⣼몹囟⋐鎰뙃 [ 225.068149][ T5902] usb 3-1: SerialNumber: ஝薃裺咑怉㳄䬸挒奎輕ⵠᷮꖐ吠춒㧶ᡬɏ쫒⒊掩⤖鷇퓪Ⴤ牼姨ﭴ⶗⽤ﱥ玚콿舆現㔻덜헿컪᭒쌢噶殫ᯑ싥阕②庇擅켕ꦱⶤ凓㾿꤄᎔඘맔㦊ᴡ꡺仐潋⠄춋蒻醚풷⬜៷᭲㳿⌡죮禔瓞幫딵⳰溈丬떇쩟勪믟䉞椘㈾阘⽢똍 [ 225.492841][ T7713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.511019][ T7757] FAULT_INJECTION: forcing a failure. [ 227.511019][ T7757] name failslab, interval 1, probability 0, space 0, times 0 [ 227.511056][ T7757] CPU: 1 UID: 0 PID: 7757 Comm: syz.3.720 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 227.511080][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.511094][ T7757] Call Trace: [ 227.511107][ T7757] [ 227.511117][ T7757] dump_stack_lvl+0x189/0x250 [ 227.511156][ T7757] ? __pfx____ratelimit+0x10/0x10 [ 227.511185][ T7757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.511217][ T7757] ? __pfx__printk+0x10/0x10 [ 227.511249][ T7757] ? __pfx___might_resched+0x10/0x10 [ 227.511281][ T7757] should_fail_ex+0x46c/0x600 [ 227.511313][ T7757] should_failslab+0xa8/0x100 [ 227.511349][ T7757] __kmalloc_noprof+0xcc/0x7d0 [ 227.511378][ T7757] ? kfree+0x51/0x950 [ 227.511402][ T7757] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.511433][ T7757] tomoyo_realpath_from_path+0xe3/0x5d0 [ 227.511460][ T7757] ? tomoyo_domain+0xda/0x130 [ 227.511491][ T7757] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 227.511523][ T7757] tomoyo_path_number_perm+0x1e8/0x5a0 [ 227.511562][ T7757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.511619][ T7757] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 227.511650][ T7757] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.511686][ T7757] ? __lock_acquire+0xab9/0xd20 [ 227.511739][ T7757] ? __fget_files+0x2a/0x420 [ 227.511773][ T7757] ? __fget_files+0x2a/0x420 [ 227.511812][ T7757] ? __fget_files+0x3a6/0x420 [ 227.511839][ T7757] ? __fget_files+0x2a/0x420 [ 227.511872][ T7757] security_file_ioctl+0xcb/0x2d0 [ 227.511906][ T7757] __se_sys_ioctl+0x47/0x170 [ 227.511932][ T7757] do_syscall_64+0xfa/0x3b0 [ 227.511979][ T7757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.512013][ T7757] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.512033][ T7757] ? clear_bhb_loop+0x60/0xb0 [ 227.512058][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.512077][ T7757] RIP: 0033:0x7f70c52deec9 [ 227.512095][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.512113][ T7757] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.512133][ T7757] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 227.512147][ T7757] RDX: 0000000000000000 RSI: 000000000000aec7 RDI: 0000000000000004 [ 227.512159][ T7757] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.512170][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.512181][ T7757] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 227.512213][ T7757] [ 227.512280][ T7757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 227.530668][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.722'. [ 227.945117][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 227.945144][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 227.945161][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.721'. [ 228.164015][ T5902] io_ti 3-1:255.219: required endpoints missing [ 228.193224][ T5902] usb 3-1: USB disconnect, device number 27 [ 228.774108][ T7786] FAULT_INJECTION: forcing a failure. [ 228.774108][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.774142][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.1.731 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 228.774166][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.774179][ T7786] Call Trace: [ 228.774188][ T7786] [ 228.774197][ T7786] dump_stack_lvl+0x189/0x250 [ 228.774234][ T7786] ? __pfx____ratelimit+0x10/0x10 [ 228.774269][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.774303][ T7786] ? __pfx__printk+0x10/0x10 [ 228.774327][ T7786] ? __might_fault+0xb0/0x130 [ 228.774371][ T7786] should_fail_ex+0x46c/0x600 [ 228.774408][ T7786] _copy_from_user+0x2d/0xb0 [ 228.774429][ T7786] __sys_bpf+0x1e3/0x860 [ 228.774463][ T7786] ? __pfx___sys_bpf+0x10/0x10 [ 228.774490][ T7786] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 228.774530][ T7786] ? ksys_write+0x230/0x260 [ 228.774559][ T7786] ? __pfx_ksys_write+0x10/0x10 [ 228.774582][ T7786] ? rcu_is_watching+0x15/0xb0 [ 228.774613][ T7786] __x64_sys_bpf+0x7c/0x90 [ 228.774642][ T7786] do_syscall_64+0xfa/0x3b0 [ 228.774671][ T7786] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.774698][ T7786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.774720][ T7786] ? clear_bhb_loop+0x60/0xb0 [ 228.774746][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.774766][ T7786] RIP: 0033:0x7f7c91c2eec9 [ 228.774785][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.774803][ T7786] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.774825][ T7786] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 228.774840][ T7786] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 228.774853][ T7786] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.774866][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.774878][ T7786] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 228.774910][ T7786] [ 229.534927][ T7798] netlink: 104 bytes leftover after parsing attributes in process `syz.2.737'. [ 230.296134][ T7821] FAULT_INJECTION: forcing a failure. [ 230.296134][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.296285][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.3.746 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.296310][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.296324][ T7821] Call Trace: [ 230.296333][ T7821] [ 230.296343][ T7821] dump_stack_lvl+0x189/0x250 [ 230.296381][ T7821] ? __pfx____ratelimit+0x10/0x10 [ 230.296411][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.296444][ T7821] ? __pfx__printk+0x10/0x10 [ 230.296486][ T7821] should_fail_ex+0x46c/0x600 [ 230.296519][ T7821] _copy_to_user+0x31/0xb0 [ 230.296560][ T7821] simple_read_from_buffer+0xe1/0x170 [ 230.296597][ T7821] proc_loginuid_read+0x1f6/0x270 [ 230.296625][ T7821] ? __pfx_proc_loginuid_read+0x10/0x10 [ 230.296653][ T7821] ? rw_verify_area+0x2ac/0x4e0 [ 230.296686][ T7821] vfs_readv+0x5b0/0x850 [ 230.296706][ T7821] ? __pfx_proc_loginuid_read+0x10/0x10 [ 230.296733][ T7821] ? __pfx_vfs_readv+0x10/0x10 [ 230.296771][ T7821] ? __fget_files+0x2a/0x420 [ 230.296810][ T7821] ? __fget_files+0x3a6/0x420 [ 230.296841][ T7821] ? __fget_files+0x2a/0x420 [ 230.296883][ T7821] __x64_sys_preadv+0x19a/0x2a0 [ 230.296918][ T7821] ? __pfx___x64_sys_preadv+0x10/0x10 [ 230.296948][ T7821] ? rcu_is_watching+0x15/0xb0 [ 230.296989][ T7821] ? do_syscall_64+0xbe/0x3b0 [ 230.297024][ T7821] do_syscall_64+0xfa/0x3b0 [ 230.297051][ T7821] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.297080][ T7821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.297102][ T7821] ? clear_bhb_loop+0x60/0xb0 [ 230.297128][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.297156][ T7821] RIP: 0033:0x7f70c52deec9 [ 230.297175][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.297193][ T7821] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 230.297216][ T7821] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 230.297232][ T7821] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 230.297246][ T7821] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.297259][ T7821] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 230.297272][ T7821] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 230.297306][ T7821] [ 231.023370][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.322609][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.666520][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.105199][ T7844] netlink: 104 bytes leftover after parsing attributes in process `syz.2.753'. [ 232.738899][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.493344][ T7863] FAULT_INJECTION: forcing a failure. [ 233.493344][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.493378][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.1.762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.493403][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.493416][ T7863] Call Trace: [ 233.493424][ T7863] [ 233.493434][ T7863] dump_stack_lvl+0x189/0x250 [ 233.493471][ T7863] ? __pfx____ratelimit+0x10/0x10 [ 233.493500][ T7863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.493534][ T7863] ? __pfx__printk+0x10/0x10 [ 233.493560][ T7863] ? __might_fault+0xb0/0x130 [ 233.493603][ T7863] should_fail_ex+0x46c/0x600 [ 233.493636][ T7863] _copy_from_user+0x2d/0xb0 [ 233.493658][ T7863] __sys_bpf+0x1e3/0x860 [ 233.493693][ T7863] ? __pfx___sys_bpf+0x10/0x10 [ 233.493721][ T7863] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 233.493762][ T7863] ? ksys_write+0x230/0x260 [ 233.493793][ T7863] ? __pfx_ksys_write+0x10/0x10 [ 233.493817][ T7863] ? rcu_is_watching+0x15/0xb0 [ 233.493847][ T7863] __x64_sys_bpf+0x7c/0x90 [ 233.493877][ T7863] do_syscall_64+0xfa/0x3b0 [ 233.493905][ T7863] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.493932][ T7863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.493954][ T7863] ? clear_bhb_loop+0x60/0xb0 [ 233.493982][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.494002][ T7863] RIP: 0033:0x7f7c91c2eec9 [ 233.494020][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.494039][ T7863] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.494062][ T7863] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 233.494078][ T7863] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 233.494091][ T7863] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 233.494104][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.494117][ T7863] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 233.494150][ T7863] [ 233.836970][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.517958][ T44] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 234.537934][ T5902] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 234.677773][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.677800][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.679802][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 234.679831][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.679853][ T44] usb 2-1: SerialNumber: syz [ 234.688457][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 234.693236][ T5902] usb 3-1: config 255 has an invalid interface number: 219 but max is 0 [ 234.693265][ T5902] usb 3-1: config 255 has no interface number 0 [ 234.693320][ T5902] usb 3-1: config 255 interface 219 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 234.693349][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 234.693375][ T5902] usb 3-1: config 255 interface 219 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 234.693404][ T5902] usb 3-1: config 255 interface 219 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 234.693434][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 234.693458][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 234.693485][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 234.693509][ T5902] usb 3-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 234.693550][ T5902] usb 3-1: config 255 interface 219 has no altsetting 0 [ 234.702019][ T5902] usb 3-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=3a.9f [ 234.702050][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.702071][ T5902] usb 3-1: Product: љ [ 234.702086][ T5902] usb 3-1: Manufacturer: 㯽螊鱗躲솕붗䵹姾譤딜櫃義餑䠊庬ᢋ鲊㜤㜃᝾ⸯ赆㛞甍᷈ꊥ䠵芘䪻홗䆆촎㥧ㄎ䓙⣼몹囟⋐鎰뙃 [ 234.702111][ T5902] usb 3-1: SerialNumber: ஝薃裺咑怉㳄䬸挒奎輕ⵠᷮꖐ吠춒㧶ᡬɏ쫒⒊掩⤖鷇퓪Ⴤ牼姨ﭴ⶗⽤ﱥ玚콿舆現㔻덜헿컪᭒쌢噶殫ᯑ싥阕②庇擅켕ꦱⶤ凓㾿꤄᎔඘맔㦊ᴡ꡺仐潋⠄춋蒻醚풷⬜៷᭲㳿⌡죮禔瓞幫딵⳰溈丬떇쩟勪믟䉞椘㈾阘⽢똍 [ 234.745467][ T7873] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 234.876736][ T44] usb 2-1: 0:2 : does not exist [ 235.189184][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.527305][ T44] usb 2-1: USB disconnect, device number 12 [ 236.023617][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.758687][ T7903] program syz.0.779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.928549][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 238.078173][ T7939] netlink: 104 bytes leftover after parsing attributes in process `syz.0.793'. [ 238.440080][ T7947] netlink: 76 bytes leftover after parsing attributes in process `syz.0.796'. [ 238.440103][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 238.718270][ T5902] io_ti 3-1:255.219: required endpoints missing [ 238.766150][ T5902] usb 3-1: USB disconnect, device number 28 [ 238.891786][ T7960] FAULT_INJECTION: forcing a failure. [ 238.891786][ T7960] name failslab, interval 1, probability 0, space 0, times 0 [ 238.891823][ T7960] CPU: 0 UID: 0 PID: 7960 Comm: syz.3.802 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 238.891847][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.891861][ T7960] Call Trace: [ 238.891881][ T7960] [ 238.891890][ T7960] dump_stack_lvl+0x189/0x250 [ 238.891944][ T7960] ? __pfx____ratelimit+0x10/0x10 [ 238.891973][ T7960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.892006][ T7960] ? __pfx__printk+0x10/0x10 [ 238.892038][ T7960] ? __pfx___might_resched+0x10/0x10 [ 238.892070][ T7960] should_fail_ex+0x46c/0x600 [ 238.892103][ T7960] should_failslab+0xa8/0x100 [ 238.892139][ T7960] __kmalloc_noprof+0xcc/0x7d0 [ 238.892168][ T7960] ? kfree+0x51/0x950 [ 238.892192][ T7960] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.892223][ T7960] tomoyo_realpath_from_path+0xe3/0x5d0 [ 238.892249][ T7960] ? tomoyo_domain+0xda/0x130 [ 238.892280][ T7960] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 238.892314][ T7960] tomoyo_path_number_perm+0x1e8/0x5a0 [ 238.892350][ T7960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.892387][ T7960] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 238.892417][ T7960] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.892454][ T7960] ? __lock_acquire+0xab9/0xd20 [ 238.892509][ T7960] ? __fget_files+0x2a/0x420 [ 238.892544][ T7960] ? __fget_files+0x2a/0x420 [ 238.892574][ T7960] ? __fget_files+0x3a6/0x420 [ 238.892605][ T7960] ? __fget_files+0x2a/0x420 [ 238.892641][ T7960] security_file_ioctl+0xcb/0x2d0 [ 238.892677][ T7960] __se_sys_ioctl+0x47/0x170 [ 238.892704][ T7960] do_syscall_64+0xfa/0x3b0 [ 238.892733][ T7960] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.892760][ T7960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.892782][ T7960] ? clear_bhb_loop+0x60/0xb0 [ 238.892808][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.892829][ T7960] RIP: 0033:0x7f70c52deec9 [ 238.892848][ T7960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.892867][ T7960] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.892891][ T7960] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 238.892907][ T7960] RDX: 0000200000000180 RSI: 000000008080aea1 RDI: 0000000000000005 [ 238.892927][ T7960] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 238.892941][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.892954][ T7960] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 238.892988][ T7960] [ 238.893121][ T7960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.452526][ T7980] netlink: 60 bytes leftover after parsing attributes in process `syz.4.808'. [ 240.452982][ T7977] netlink: 60 bytes leftover after parsing attributes in process `syz.4.808'. [ 240.633647][ T7983] FAULT_INJECTION: forcing a failure. [ 240.633647][ T7983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.633683][ T7983] CPU: 0 UID: 0 PID: 7983 Comm: syz.2.811 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 240.633707][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 240.633743][ T7983] Call Trace: [ 240.633752][ T7983] [ 240.633762][ T7983] dump_stack_lvl+0x189/0x250 [ 240.633800][ T7983] ? __pfx____ratelimit+0x10/0x10 [ 240.633835][ T7983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.633867][ T7983] ? __pfx__printk+0x10/0x10 [ 240.633892][ T7983] ? __might_fault+0xb0/0x130 [ 240.633936][ T7983] should_fail_ex+0x46c/0x600 [ 240.633969][ T7983] _copy_from_user+0x2d/0xb0 [ 240.633991][ T7983] __sys_bpf+0x1e3/0x860 [ 240.634025][ T7983] ? __pfx___sys_bpf+0x10/0x10 [ 240.634053][ T7983] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 240.634093][ T7983] ? ksys_write+0x230/0x260 [ 240.634125][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 240.634150][ T7983] ? rcu_is_watching+0x15/0xb0 [ 240.634181][ T7983] __x64_sys_bpf+0x7c/0x90 [ 240.634210][ T7983] do_syscall_64+0xfa/0x3b0 [ 240.634238][ T7983] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.634266][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.634288][ T7983] ? clear_bhb_loop+0x60/0xb0 [ 240.634314][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.634335][ T7983] RIP: 0033:0x7fefd6d2eec9 [ 240.634354][ T7983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.634373][ T7983] RSP: 002b:00007fefd4f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.634396][ T7983] RAX: ffffffffffffffda RBX: 00007fefd6f85fa0 RCX: 00007fefd6d2eec9 [ 240.634412][ T7983] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 240.634425][ T7983] RBP: 00007fefd4f96090 R08: 0000000000000000 R09: 0000000000000000 [ 240.634438][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.634451][ T7983] R13: 00007fefd6f86038 R14: 00007fefd6f85fa0 R15: 00007ffd90ec5728 [ 240.634483][ T7983] [ 241.068641][ T7997] FAULT_INJECTION: forcing a failure. [ 241.068641][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.068679][ T7997] CPU: 0 UID: 0 PID: 7997 Comm: syz.1.816 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.068703][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.068717][ T7997] Call Trace: [ 241.068725][ T7997] [ 241.068734][ T7997] dump_stack_lvl+0x189/0x250 [ 241.068787][ T7997] ? __pfx____ratelimit+0x10/0x10 [ 241.068816][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.068848][ T7997] ? __pfx__printk+0x10/0x10 [ 241.068875][ T7997] ? __might_fault+0xb0/0x130 [ 241.068916][ T7997] should_fail_ex+0x46c/0x600 [ 241.068948][ T7997] _copy_from_user+0x2d/0xb0 [ 241.068970][ T7997] io_submit_one+0xc2/0x1310 [ 241.069008][ T7997] ? __pfx_io_submit_one+0x10/0x10 [ 241.069031][ T7997] ? __might_fault+0xb0/0x130 [ 241.069073][ T7997] ? __might_fault+0xb0/0x130 [ 241.069110][ T7997] __se_sys_io_submit+0x185/0x2f0 [ 241.069147][ T7997] ? __pfx___se_sys_io_submit+0x10/0x10 [ 241.069177][ T7997] ? ksys_write+0x230/0x260 [ 241.069217][ T7997] ? do_syscall_64+0xbe/0x3b0 [ 241.069250][ T7997] do_syscall_64+0xfa/0x3b0 [ 241.069278][ T7997] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.069306][ T7997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.069327][ T7997] ? clear_bhb_loop+0x60/0xb0 [ 241.069353][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.069374][ T7997] RIP: 0033:0x7f7c91c2eec9 [ 241.069393][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.069412][ T7997] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 241.069435][ T7997] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 241.069451][ T7997] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 00007f7c929be000 [ 241.069465][ T7997] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.069478][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.069490][ T7997] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 241.069518][ T7997] [ 241.648786][ T8015] FAULT_INJECTION: forcing a failure. [ 241.648786][ T8015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.648822][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.0.824 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.648847][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.648861][ T8015] Call Trace: [ 241.648869][ T8015] [ 241.648879][ T8015] dump_stack_lvl+0x189/0x250 [ 241.648919][ T8015] ? __pfx____ratelimit+0x10/0x10 [ 241.648949][ T8015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.648983][ T8015] ? __pfx__printk+0x10/0x10 [ 241.649025][ T8015] should_fail_ex+0x46c/0x600 [ 241.649057][ T8015] _copy_to_user+0x31/0xb0 [ 241.649081][ T8015] simple_read_from_buffer+0xe1/0x170 [ 241.649117][ T8015] proc_fail_nth_read+0x1b6/0x220 [ 241.649146][ T8015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.649174][ T8015] ? rw_verify_area+0x2ac/0x4e0 [ 241.649201][ T8015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 241.649227][ T8015] vfs_read+0x203/0xa30 [ 241.649265][ T8015] ? __pfx_vfs_read+0x10/0x10 [ 241.649289][ T8015] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 241.649320][ T8015] ? mutex_lock_nested+0x154/0x1d0 [ 241.649341][ T8015] ? fdget_pos+0x253/0x320 [ 241.649384][ T8015] ksys_read+0x14b/0x260 [ 241.649416][ T8015] ? __pfx_ksys_read+0x10/0x10 [ 241.649449][ T8015] ? do_syscall_64+0xbe/0x3b0 [ 241.649485][ T8015] do_syscall_64+0xfa/0x3b0 [ 241.649514][ T8015] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.649541][ T8015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.649563][ T8015] ? clear_bhb_loop+0x60/0xb0 [ 241.649589][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.649610][ T8015] RIP: 0033:0x7fb3ba2bd8dc [ 241.649630][ T8015] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.649656][ T8015] RSP: 002b:00007fb3b8505030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.649679][ T8015] RAX: ffffffffffffffda RBX: 00007fb3ba516090 RCX: 00007fb3ba2bd8dc [ 241.649695][ T8015] RDX: 000000000000000f RSI: 00007fb3b85050a0 RDI: 0000000000000004 [ 241.649708][ T8015] RBP: 00007fb3b8505090 R08: 0000000000000000 R09: 0000000000000000 [ 241.649722][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.649735][ T8015] R13: 00007fb3ba516128 R14: 00007fb3ba516090 R15: 00007ffcd8f47eb8 [ 241.649780][ T8015] [ 242.759428][ T8027] FAULT_INJECTION: forcing a failure. [ 242.759428][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.759465][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.3.830 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.759489][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.759503][ T8027] Call Trace: [ 242.759512][ T8027] [ 242.759522][ T8027] dump_stack_lvl+0x189/0x250 [ 242.759559][ T8027] ? __pfx____ratelimit+0x10/0x10 [ 242.759589][ T8027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.759621][ T8027] ? __pfx__printk+0x10/0x10 [ 242.759647][ T8027] ? __might_fault+0xb0/0x130 [ 242.759717][ T8027] should_fail_ex+0x46c/0x600 [ 242.759750][ T8027] _copy_from_user+0x2d/0xb0 [ 242.759772][ T8027] __sys_bpf+0x1e3/0x860 [ 242.759807][ T8027] ? __pfx___sys_bpf+0x10/0x10 [ 242.759834][ T8027] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 242.759876][ T8027] ? ksys_write+0x230/0x260 [ 242.759907][ T8027] ? __pfx_ksys_write+0x10/0x10 [ 242.759933][ T8027] ? rcu_is_watching+0x15/0xb0 [ 242.759966][ T8027] __x64_sys_bpf+0x7c/0x90 [ 242.759996][ T8027] do_syscall_64+0xfa/0x3b0 [ 242.760027][ T8027] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.760056][ T8027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.760079][ T8027] ? clear_bhb_loop+0x60/0xb0 [ 242.760106][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.760128][ T8027] RIP: 0033:0x7f70c52deec9 [ 242.760146][ T8027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.760166][ T8027] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.760189][ T8027] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 242.760205][ T8027] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 242.760219][ T8027] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 242.760233][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.760245][ T8027] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 242.760280][ T8027] [ 243.343627][ T8044] FAULT_INJECTION: forcing a failure. [ 243.343627][ T8044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.343671][ T8044] CPU: 0 UID: 0 PID: 8044 Comm: syz.4.837 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.343695][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.343709][ T8044] Call Trace: [ 243.343718][ T8044] [ 243.343728][ T8044] dump_stack_lvl+0x189/0x250 [ 243.343766][ T8044] ? __pfx____ratelimit+0x10/0x10 [ 243.343795][ T8044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.343828][ T8044] ? __pfx__printk+0x10/0x10 [ 243.343854][ T8044] ? __might_fault+0xb0/0x130 [ 243.343898][ T8044] should_fail_ex+0x46c/0x600 [ 243.343930][ T8044] _copy_from_user+0x2d/0xb0 [ 243.343951][ T8044] do_sock_getsockopt+0x17d/0x450 [ 243.343985][ T8044] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 243.344014][ T8044] ? do_syscall_64+0xa0/0x3b0 [ 243.344043][ T8044] ? __fget_files+0x3a6/0x420 [ 243.344073][ T8044] ? __fget_files+0x2a/0x420 [ 243.344110][ T8044] __x64_sys_getsockopt+0x1ab/0x250 [ 243.344141][ T8044] ? do_syscall_64+0xa0/0x3b0 [ 243.344172][ T8044] ? do_syscall_64+0xa0/0x3b0 [ 243.344206][ T8044] do_syscall_64+0xfa/0x3b0 [ 243.344234][ T8044] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.344262][ T8044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.344284][ T8044] ? clear_bhb_loop+0x60/0xb0 [ 243.344311][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.344332][ T8044] RIP: 0033:0x7fe943a8eec9 [ 243.344350][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.344369][ T8044] RSP: 002b:00007fe941cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 243.344392][ T8044] RAX: ffffffffffffffda RBX: 00007fe943ce5fa0 RCX: 00007fe943a8eec9 [ 243.344407][ T8044] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 243.344420][ T8044] RBP: 00007fe941cee090 R08: 0000200000000100 R09: 0000000000000000 [ 243.344434][ T8044] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 243.344447][ T8044] R13: 00007fe943ce6038 R14: 00007fe943ce5fa0 R15: 00007fffe589b658 [ 243.344480][ T8044] [ 244.958001][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.128394][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 245.130789][ T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 245.130816][ T10] usb 1-1: config 0 has no interface number 0 [ 245.130868][ T10] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.130895][ T10] usb 1-1: config 0 interface 85 has no altsetting 0 [ 245.157949][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 245.157980][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.158000][ T10] usb 1-1: Product: syz [ 245.158016][ T10] usb 1-1: Manufacturer: syz [ 245.158030][ T10] usb 1-1: SerialNumber: syz [ 245.221145][ T10] usb 1-1: config 0 descriptor?? [ 245.262337][ T8079] FAULT_INJECTION: forcing a failure. [ 245.262337][ T8079] name failslab, interval 1, probability 0, space 0, times 0 [ 245.262372][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.4.853 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.262395][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.262410][ T8079] Call Trace: [ 245.262418][ T8079] [ 245.262428][ T8079] dump_stack_lvl+0x189/0x250 [ 245.262466][ T8079] ? __pfx____ratelimit+0x10/0x10 [ 245.262503][ T8079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.262536][ T8079] ? __pfx__printk+0x10/0x10 [ 245.262569][ T8079] ? __pfx___might_resched+0x10/0x10 [ 245.262600][ T8079] should_fail_ex+0x46c/0x600 [ 245.262631][ T8079] should_failslab+0xa8/0x100 [ 245.262665][ T8079] __kmalloc_noprof+0xcc/0x7d0 [ 245.262694][ T8079] ? kfree+0x51/0x950 [ 245.262718][ T8079] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 245.262750][ T8079] tomoyo_realpath_from_path+0xe3/0x5d0 [ 245.262776][ T8079] ? tomoyo_domain+0xda/0x130 [ 245.262806][ T8079] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 245.262836][ T8079] tomoyo_path_number_perm+0x1e8/0x5a0 [ 245.262872][ T8079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.262908][ T8079] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 245.262937][ T8079] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.262974][ T8079] ? __lock_acquire+0xab9/0xd20 [ 245.263029][ T8079] ? __fget_files+0x2a/0x420 [ 245.263066][ T8079] ? __fget_files+0x2a/0x420 [ 245.263095][ T8079] ? __fget_files+0x3a6/0x420 [ 245.263124][ T8079] ? __fget_files+0x2a/0x420 [ 245.263160][ T8079] security_file_ioctl+0xcb/0x2d0 [ 245.263197][ T8079] __se_sys_ioctl+0x47/0x170 [ 245.263226][ T8079] do_syscall_64+0xfa/0x3b0 [ 245.263254][ T8079] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.263281][ T8079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.263303][ T8079] ? clear_bhb_loop+0x60/0xb0 [ 245.263330][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.263351][ T8079] RIP: 0033:0x7fe943a8eec9 [ 245.263371][ T8079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.263390][ T8079] RSP: 002b:00007fe941cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.263413][ T8079] RAX: ffffffffffffffda RBX: 00007fe943ce5fa0 RCX: 00007fe943a8eec9 [ 245.263428][ T8079] RDX: 0000200000000080 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 245.263442][ T8079] RBP: 00007fe941cee090 R08: 0000000000000000 R09: 0000000000000000 [ 245.263454][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.263467][ T8079] R13: 00007fe943ce6038 R14: 00007fe943ce5fa0 R15: 00007fffe589b658 [ 245.263510][ T8079] [ 245.263519][ T8079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.328611][ T8074] netlink: 76 bytes leftover after parsing attributes in process `syz.2.851'. [ 245.508034][ T10] appletouch 1-1:0.85: Failed to read mode from device. [ 245.508252][ T10] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 245.626632][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 245.648915][ T10] usb 1-1: USB disconnect, device number 32 [ 245.821743][ T990] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 245.969824][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 245.972319][ T990] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 245.972343][ T990] usb 5-1: config 0 has no interface number 0 [ 245.972389][ T990] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.972412][ T990] usb 5-1: config 0 interface 85 has no altsetting 0 [ 245.974882][ T990] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 245.974910][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.974932][ T990] usb 5-1: Product: syz [ 245.974947][ T990] usb 5-1: Manufacturer: syz [ 245.974963][ T990] usb 5-1: SerialNumber: syz [ 246.006502][ T990] usb 5-1: config 0 descriptor?? [ 246.038795][ T990] appletouch 5-1:0.85: Could not find int-in endpoint [ 246.038838][ T990] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 246.040644][ T990] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 246.213462][ T990] usb 5-1: USB disconnect, device number 29 [ 246.409287][ T8107] netlink: 80 bytes leftover after parsing attributes in process `syz.0.865'. [ 246.471479][ T8114] FAULT_INJECTION: forcing a failure. [ 246.471479][ T8114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.471515][ T8114] CPU: 1 UID: 0 PID: 8114 Comm: syz.3.868 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.471538][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.471551][ T8114] Call Trace: [ 246.471559][ T8114] [ 246.471568][ T8114] dump_stack_lvl+0x189/0x250 [ 246.471605][ T8114] ? __pfx____ratelimit+0x10/0x10 [ 246.471635][ T8114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.471667][ T8114] ? __pfx__printk+0x10/0x10 [ 246.471693][ T8114] ? __might_fault+0xb0/0x130 [ 246.471734][ T8114] should_fail_ex+0x46c/0x600 [ 246.471766][ T8114] _copy_from_user+0x2d/0xb0 [ 246.471786][ T8114] ? semctl_main+0xee/0x1650 [ 246.471806][ T8114] semctl_main+0x700/0x1650 [ 246.471827][ T8114] ? semctl_main+0xee/0x1650 [ 246.471850][ T8114] ? __lock_acquire+0xab9/0xd20 [ 246.471889][ T8114] ? __pfx_semctl_main+0x10/0x10 [ 246.471964][ T8114] ? __pfx_vfs_write+0x10/0x10 [ 246.471988][ T8114] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 246.472019][ T8114] __se_sys_semctl+0x31c/0x3a0 [ 246.472055][ T8114] ? __pfx___se_sys_semctl+0x10/0x10 [ 246.472097][ T8114] ? __pfx_ksys_write+0x10/0x10 [ 246.472131][ T8114] ? do_syscall_64+0xbe/0x3b0 [ 246.472165][ T8114] do_syscall_64+0xfa/0x3b0 [ 246.472194][ T8114] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.472222][ T8114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.472242][ T8114] ? clear_bhb_loop+0x60/0xb0 [ 246.472268][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.472288][ T8114] RIP: 0033:0x7f70c52deec9 [ 246.472305][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.472323][ T8114] RSP: 002b:00007f70c351d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 246.472343][ T8114] RAX: ffffffffffffffda RBX: 00007f70c5536090 RCX: 00007f70c52deec9 [ 246.472358][ T8114] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.472370][ T8114] RBP: 00007f70c351d090 R08: 0000000000000000 R09: 0000000000000000 [ 246.472383][ T8114] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 246.472396][ T8114] R13: 00007f70c5536128 R14: 00007f70c5536090 R15: 00007fffa0154768 [ 246.472436][ T8114] [ 246.962461][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.180909][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.214799][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.659284][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.968718][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 248.000186][ T8131] FAULT_INJECTION: forcing a failure. [ 248.000186][ T8131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.000222][ T8131] CPU: 0 UID: 0 PID: 8131 Comm: syz.3.877 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.000245][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.000259][ T8131] Call Trace: [ 248.000267][ T8131] [ 248.000276][ T8131] dump_stack_lvl+0x189/0x250 [ 248.000314][ T8131] ? __pfx____ratelimit+0x10/0x10 [ 248.000343][ T8131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.000377][ T8131] ? __pfx__printk+0x10/0x10 [ 248.000403][ T8131] ? __might_fault+0xb0/0x130 [ 248.000447][ T8131] should_fail_ex+0x46c/0x600 [ 248.000479][ T8131] _copy_from_user+0x2d/0xb0 [ 248.000500][ T8131] __sys_bpf+0x1e3/0x860 [ 248.000533][ T8131] ? __pfx___sys_bpf+0x10/0x10 [ 248.000561][ T8131] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 248.000602][ T8131] ? ksys_write+0x230/0x260 [ 248.000633][ T8131] ? __pfx_ksys_write+0x10/0x10 [ 248.000658][ T8131] ? rcu_is_watching+0x15/0xb0 [ 248.000689][ T8131] __x64_sys_bpf+0x7c/0x90 [ 248.000718][ T8131] do_syscall_64+0xfa/0x3b0 [ 248.000747][ T8131] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.000775][ T8131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.000796][ T8131] ? clear_bhb_loop+0x60/0xb0 [ 248.000821][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.000842][ T8131] RIP: 0033:0x7f70c52deec9 [ 248.000860][ T8131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.000879][ T8131] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.000921][ T8131] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 248.000936][ T8131] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 248.000949][ T8131] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.000961][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.000974][ T8131] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 248.001006][ T8131] [ 248.196704][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 248.236718][ T10] usb 5-1: config 255 has an invalid interface number: 219 but max is 0 [ 248.236760][ T10] usb 5-1: config 255 has no interface number 0 [ 248.236814][ T10] usb 5-1: config 255 interface 219 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 248.236842][ T10] usb 5-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 248.236865][ T10] usb 5-1: config 255 interface 219 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 248.236890][ T10] usb 5-1: config 255 interface 219 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 248.236916][ T10] usb 5-1: config 255 interface 219 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 248.236938][ T10] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 248.236960][ T10] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 248.236984][ T10] usb 5-1: config 255 interface 219 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 248.237007][ T10] usb 5-1: config 255 interface 219 has no altsetting 0 [ 248.258076][ T10] usb 5-1: New USB device found, idVendor=1608, idProduct=0217, bcdDevice=3a.9f [ 248.258105][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.258136][ T10] usb 5-1: Product: љ [ 248.258151][ T10] usb 5-1: Manufacturer: 㯽螊鱗躲솕붗䵹姾譤딜櫃義餑䠊庬ᢋ鲊㜤㜃᝾ⸯ赆㛞甍᷈ꊥ䠵芘䪻홗䆆촎㥧ㄎ䓙⣼몹囟⋐鎰뙃 [ 248.258175][ T10] usb 5-1: SerialNumber: ஝薃裺咑怉㳄䬸挒奎輕ⵠᷮꖐ吠춒㧶ᡬɏ쫒⒊掩⤖鷇퓪Ⴤ牼姨ﭴ⶗⽤ﱥ玚콿舆現㔻덜헿컪᭒쌢噶殫ᯑ싥阕②庇擅켕ꦱⶤ凓㾿꤄᎔඘맔㦊ᴡ꡺仐潋⠄춋蒻醚풷⬜៷᭲㳿⌡죮禔瓞幫딵⳰溈丬떇쩟勪믟䉞椘㈾阘⽢똍 [ 248.328148][ T990] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 248.441486][ T8126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 248.483686][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 248.493796][ T990] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 248.493824][ T990] usb 1-1: config 0 has no interface number 0 [ 248.493873][ T990] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.493901][ T990] usb 1-1: config 0 interface 85 has no altsetting 0 [ 248.503631][ T990] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 248.503662][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.503686][ T990] usb 1-1: Product: syz [ 248.503702][ T990] usb 1-1: Manufacturer: syz [ 248.503719][ T990] usb 1-1: SerialNumber: syz [ 248.550156][ T990] usb 1-1: config 0 descriptor?? [ 248.584623][ T8139] netlink: 76 bytes leftover after parsing attributes in process `syz.2.880'. [ 248.762296][ T990] appletouch 1-1:0.85: Failed to read mode from device. [ 248.762541][ T990] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 249.171391][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 249.218392][ T990] usb 1-1: USB disconnect, device number 33 [ 249.271008][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 249.328568][ T8153] erspan0: entered promiscuous mode [ 249.357113][ T8153] erspan0: left promiscuous mode [ 249.572249][ T8160] FAULT_INJECTION: forcing a failure. [ 249.572249][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 249.572294][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.3.889 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 249.572318][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.572332][ T8160] Call Trace: [ 249.572340][ T8160] [ 249.572350][ T8160] dump_stack_lvl+0x189/0x250 [ 249.572389][ T8160] ? __pfx____ratelimit+0x10/0x10 [ 249.572419][ T8160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.572451][ T8160] ? __pfx__printk+0x10/0x10 [ 249.572487][ T8160] ? __pfx___might_resched+0x10/0x10 [ 249.572519][ T8160] should_fail_ex+0x46c/0x600 [ 249.572553][ T8160] should_failslab+0xa8/0x100 [ 249.572590][ T8160] __kmalloc_noprof+0xcc/0x7d0 [ 249.572618][ T8160] ? kfree+0x51/0x950 [ 249.572641][ T8160] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 249.572672][ T8160] tomoyo_realpath_from_path+0xe3/0x5d0 [ 249.572699][ T8160] ? tomoyo_domain+0xda/0x130 [ 249.572730][ T8160] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 249.572765][ T8160] tomoyo_path_number_perm+0x1e8/0x5a0 [ 249.572801][ T8160] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.572838][ T8160] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 249.572870][ T8160] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.572907][ T8160] ? __lock_acquire+0xab9/0xd20 [ 249.572961][ T8160] ? __fget_files+0x2a/0x420 [ 249.572996][ T8160] ? __fget_files+0x2a/0x420 [ 249.573027][ T8160] ? __fget_files+0x3a6/0x420 [ 249.573058][ T8160] ? __fget_files+0x2a/0x420 [ 249.573094][ T8160] security_file_ioctl+0xcb/0x2d0 [ 249.573131][ T8160] __se_sys_ioctl+0x47/0x170 [ 249.573159][ T8160] do_syscall_64+0xfa/0x3b0 [ 249.573188][ T8160] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.573217][ T8160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.573240][ T8160] ? clear_bhb_loop+0x60/0xb0 [ 249.573266][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.573302][ T8160] RIP: 0033:0x7f70c52deec9 [ 249.573322][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.573341][ T8160] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.573364][ T8160] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 249.573380][ T8160] RDX: 0000200000000140 RSI: 000000004040aea0 RDI: 0000000000000005 [ 249.573395][ T8160] RBP: 00007f70c353e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.573408][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.573421][ T8160] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 249.573455][ T8160] [ 249.573528][ T8160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.266846][ T8168] FAULT_INJECTION: forcing a failure. [ 250.266846][ T8168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.266888][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.266917][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.266932][ T8168] Call Trace: [ 250.266940][ T8168] [ 250.266950][ T8168] dump_stack_lvl+0x189/0x250 [ 250.266990][ T8168] ? __pfx____ratelimit+0x10/0x10 [ 250.267020][ T8168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.267055][ T8168] ? __pfx__printk+0x10/0x10 [ 250.267082][ T8168] ? __might_fault+0xb0/0x130 [ 250.267128][ T8168] should_fail_ex+0x46c/0x600 [ 250.267175][ T8168] _copy_to_iter+0x1de/0x1790 [ 250.267205][ T8168] ? __lock_acquire+0xab9/0xd20 [ 250.267280][ T8168] ? __pfx__copy_to_iter+0x10/0x10 [ 250.267312][ T8168] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 250.267337][ T8168] ? rt_spin_unlock+0x150/0x200 [ 250.267371][ T8168] signalfd_read_iter+0x79c/0x980 [ 250.267400][ T8168] ? signalfd_read_iter+0x341/0x980 [ 250.267427][ T8168] ? __pfx_signalfd_read_iter+0x10/0x10 [ 250.267469][ T8168] ? __lock_acquire+0xab9/0xd20 [ 250.267502][ T8168] ? __pfx_default_wake_function+0x10/0x10 [ 250.267552][ T8168] vfs_read+0x563/0xa30 [ 250.267590][ T8168] ? __pfx_vfs_read+0x10/0x10 [ 250.267630][ T8168] ? __fget_files+0x2a/0x420 [ 250.267671][ T8168] ksys_read+0x14b/0x260 [ 250.267703][ T8168] ? __pfx_ksys_read+0x10/0x10 [ 250.267728][ T8168] ? rcu_is_watching+0x15/0xb0 [ 250.267757][ T8168] ? do_syscall_64+0xbe/0x3b0 [ 250.267806][ T8168] do_syscall_64+0xfa/0x3b0 [ 250.267834][ T8168] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.267860][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.267881][ T8168] ? clear_bhb_loop+0x60/0xb0 [ 250.267908][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.267930][ T8168] RIP: 0033:0x7fb3ba2beec9 [ 250.267950][ T8168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.267969][ T8168] RSP: 002b:00007fb3b8526038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.267991][ T8168] RAX: ffffffffffffffda RBX: 00007fb3ba515fa0 RCX: 00007fb3ba2beec9 [ 250.268007][ T8168] RDX: 0000000000002020 RSI: 0000200000002bc0 RDI: 0000000000000003 [ 250.268021][ T8168] RBP: 00007fb3b8526090 R08: 0000000000000000 R09: 0000000000000000 [ 250.268034][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.268047][ T8168] R13: 00007fb3ba516038 R14: 00007fb3ba515fa0 R15: 00007ffcd8f47eb8 [ 250.268079][ T8168] [ 250.830167][ T8175] FAULT_INJECTION: forcing a failure. [ 250.830167][ T8175] name failslab, interval 1, probability 0, space 0, times 0 [ 250.830206][ T8175] CPU: 1 UID: 0 PID: 8175 Comm: syz.1.894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.830231][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.830246][ T8175] Call Trace: [ 250.830254][ T8175] [ 250.830264][ T8175] dump_stack_lvl+0x189/0x250 [ 250.830303][ T8175] ? __pfx____ratelimit+0x10/0x10 [ 250.830331][ T8175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.830365][ T8175] ? __pfx__printk+0x10/0x10 [ 250.830399][ T8175] ? __pfx___might_resched+0x10/0x10 [ 250.830432][ T8175] should_fail_ex+0x46c/0x600 [ 250.830465][ T8175] should_failslab+0xa8/0x100 [ 250.830501][ T8175] __kmalloc_noprof+0xcc/0x7d0 [ 250.830532][ T8175] ? kfree+0x51/0x950 [ 250.830556][ T8175] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.830589][ T8175] tomoyo_realpath_from_path+0xe3/0x5d0 [ 250.830616][ T8175] ? tomoyo_domain+0xda/0x130 [ 250.830646][ T8175] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 250.830681][ T8175] tomoyo_path_number_perm+0x1e8/0x5a0 [ 250.830719][ T8175] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.830759][ T8175] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 250.830790][ T8175] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.830827][ T8175] ? __lock_acquire+0xab9/0xd20 [ 250.830883][ T8175] ? __fget_files+0x2a/0x420 [ 250.830928][ T8175] ? __fget_files+0x2a/0x420 [ 250.830959][ T8175] ? __fget_files+0x3a6/0x420 [ 250.831006][ T8175] ? __fget_files+0x2a/0x420 [ 250.831043][ T8175] security_file_ioctl+0xcb/0x2d0 [ 250.831084][ T8175] __se_sys_ioctl+0x47/0x170 [ 250.831111][ T8175] do_syscall_64+0xfa/0x3b0 [ 250.831138][ T8175] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.831166][ T8175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.831189][ T8175] ? clear_bhb_loop+0x60/0xb0 [ 250.831216][ T8175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.831238][ T8175] RIP: 0033:0x7f7c91c2eec9 [ 250.831275][ T8175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.831294][ T8175] RSP: 002b:00007f7c8fe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.831316][ T8175] RAX: ffffffffffffffda RBX: 00007f7c91e85fa0 RCX: 00007f7c91c2eec9 [ 250.831331][ T8175] RDX: 0000200000000dc0 RSI: 000000008208ae63 RDI: 0000000000000004 [ 250.831345][ T8175] RBP: 00007f7c8fe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.831358][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.831371][ T8175] R13: 00007f7c91e86038 R14: 00007f7c91e85fa0 R15: 00007fff8f1db228 [ 250.831406][ T8175] [ 251.122525][ T8175] ERROR: Out of memory at tomoyo_realpath_from_path. [ 251.322642][ T8180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'. [ 251.339325][ T8177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.895'. [ 251.770850][ T8186] FAULT_INJECTION: forcing a failure. [ 251.770850][ T8186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.770897][ T8186] CPU: 1 UID: 0 PID: 8186 Comm: syz.0.899 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 251.770940][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.770954][ T8186] Call Trace: [ 251.770963][ T8186] [ 251.770973][ T8186] dump_stack_lvl+0x189/0x250 [ 251.771025][ T8186] ? __pfx____ratelimit+0x10/0x10 [ 251.771054][ T8186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.771085][ T8186] ? __pfx__printk+0x10/0x10 [ 251.771110][ T8186] ? __might_fault+0xb0/0x130 [ 251.771152][ T8186] should_fail_ex+0x46c/0x600 [ 251.771186][ T8186] _copy_from_user+0x2d/0xb0 [ 251.771207][ T8186] ___sys_recvmsg+0x12e/0x510 [ 251.771245][ T8186] ? __pfx____sys_recvmsg+0x10/0x10 [ 251.771302][ T8186] ? __fget_files+0x3a6/0x420 [ 251.771347][ T8186] __x64_sys_recvmsg+0x19e/0x260 [ 251.771385][ T8186] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 251.771428][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 251.771453][ T8186] ? rcu_is_watching+0x15/0xb0 [ 251.771483][ T8186] ? do_syscall_64+0xbe/0x3b0 [ 251.771517][ T8186] do_syscall_64+0xfa/0x3b0 [ 251.771546][ T8186] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.771574][ T8186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.771596][ T8186] ? clear_bhb_loop+0x60/0xb0 [ 251.771622][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.771662][ T8186] RIP: 0033:0x7fb3ba2beec9 [ 251.771682][ T8186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.771708][ T8186] RSP: 002b:00007fb3b8526038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 251.771732][ T8186] RAX: ffffffffffffffda RBX: 00007fb3ba515fa0 RCX: 00007fb3ba2beec9 [ 251.771749][ T8186] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003 [ 251.771763][ T8186] RBP: 00007fb3b8526090 R08: 0000000000000000 R09: 0000000000000000 [ 251.771776][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.771790][ T8186] R13: 00007fb3ba516038 R14: 00007fb3ba515fa0 R15: 00007ffcd8f47eb8 [ 251.771825][ T8186] [ 252.474227][ T10] io_ti 5-1:255.219: required endpoints missing [ 252.509741][ T8198] FAULT_INJECTION: forcing a failure. [ 252.509741][ T8198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.509776][ T8198] CPU: 1 UID: 0 PID: 8198 Comm: syz.3.904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.509799][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.509823][ T8198] Call Trace: [ 252.509831][ T8198] [ 252.509841][ T8198] dump_stack_lvl+0x189/0x250 [ 252.509878][ T8198] ? __pfx____ratelimit+0x10/0x10 [ 252.509908][ T8198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.509938][ T8198] ? __pfx__printk+0x10/0x10 [ 252.509964][ T8198] ? __might_fault+0xb0/0x130 [ 252.510006][ T8198] should_fail_ex+0x46c/0x600 [ 252.510039][ T8198] _copy_from_user+0x2d/0xb0 [ 252.510059][ T8198] do_ipv6_setsockopt+0x23e/0x2eb0 [ 252.510100][ T8198] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 252.510129][ T8198] ? __lock_acquire+0xab9/0xd20 [ 252.510167][ T8198] ? do_raw_spin_lock+0x121/0x290 [ 252.510207][ T8198] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 252.510235][ T8198] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.510269][ T8198] ? __lock_acquire+0xab9/0xd20 [ 252.510322][ T8198] ? __fget_files+0x2a/0x420 [ 252.510358][ T8198] ipv6_setsockopt+0x59/0x170 [ 252.510387][ T8198] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 252.510416][ T8198] do_sock_setsockopt+0x17c/0x1b0 [ 252.510453][ T8198] __x64_sys_setsockopt+0x145/0x1b0 [ 252.510490][ T8198] do_syscall_64+0xfa/0x3b0 [ 252.510518][ T8198] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.510545][ T8198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.510566][ T8198] ? clear_bhb_loop+0x60/0xb0 [ 252.510591][ T8198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.510612][ T8198] RIP: 0033:0x7f70c52deec9 [ 252.510630][ T8198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.510649][ T8198] RSP: 002b:00007f70c353e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.510672][ T8198] RAX: ffffffffffffffda RBX: 00007f70c5535fa0 RCX: 00007f70c52deec9 [ 252.510687][ T8198] RDX: 0000000000000048 RSI: 0000000000000029 RDI: 0000000000000003 [ 252.510700][ T8198] RBP: 00007f70c353e090 R08: 0000000000000004 R09: 0000000000000000 [ 252.510712][ T8198] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001 [ 252.510725][ T8198] R13: 00007f70c5536038 R14: 00007f70c5535fa0 R15: 00007fffa0154768 [ 252.510757][ T8198] [ 252.817512][ T10] usb 5-1: USB disconnect, device number 30 [ 252.859825][ T5991] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 253.008221][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 253.013693][ T5991] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 253.013718][ T5991] usb 1-1: config 0 has no interface number 0 [ 253.013764][ T5991] usb 1-1: config 0 interface 255 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.013788][ T5991] usb 1-1: config 0 interface 255 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.013808][ T5991] usb 1-1: config 0 interface 255 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 253.013826][ T5991] usb 1-1: config 0 interface 255 has no altsetting 0 [ 253.013848][ T5991] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 253.013863][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.017659][ T5991] usb 1-1: config 0 descriptor?? [ 253.406462][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.587349][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.678495][ T44] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 254.218254][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 254.221590][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 254.224634][ T44] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 254.224663][ T44] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 254.224685][ T44] usb 3-1: Product: syz [ 254.224699][ T44] usb 3-1: Manufacturer: syz [ 254.224714][ T44] usb 3-1: SerialNumber: syz [ 254.227385][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.580182][ T44] usb 3-1: config 0 descriptor?? [ 254.608615][ T8229] FAULT_INJECTION: forcing a failure. [ 254.608615][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.608652][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.4.920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.608676][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.608691][ T8229] Call Trace: [ 254.608699][ T8229] [ 254.608709][ T8229] dump_stack_lvl+0x189/0x250 [ 254.608753][ T8229] ? __pfx____ratelimit+0x10/0x10 [ 254.608783][ T8229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.608816][ T8229] ? __pfx__printk+0x10/0x10 [ 254.608842][ T8229] ? __might_fault+0xb0/0x130 [ 254.608887][ T8229] should_fail_ex+0x46c/0x600 [ 254.608931][ T8229] _copy_from_user+0x2d/0xb0 [ 254.608979][ T8229] __sys_sendto+0x262/0x520 [ 254.609013][ T8229] ? __pfx___sys_sendto+0x10/0x10 [ 254.609067][ T8229] ? ksys_write+0x230/0x260 [ 254.609097][ T8229] ? __pfx_ksys_write+0x10/0x10 [ 254.609123][ T8229] ? rcu_is_watching+0x15/0xb0 [ 254.609152][ T8229] __x64_sys_sendto+0xde/0x100 [ 254.609186][ T8229] do_syscall_64+0xfa/0x3b0 [ 254.609215][ T8229] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.609243][ T8229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.609265][ T8229] ? clear_bhb_loop+0x60/0xb0 [ 254.609291][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.609313][ T8229] RIP: 0033:0x7fe943a8eec9 [ 254.609332][ T8229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.609350][ T8229] RSP: 002b:00007fe941cee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 254.609374][ T8229] RAX: ffffffffffffffda RBX: 00007fe943ce5fa0 RCX: 00007fe943a8eec9 [ 254.609390][ T8229] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 254.609403][ T8229] RBP: 00007fe941cee090 R08: 000020000005ffe4 R09: 000000000000001c [ 254.609417][ T8229] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 254.609430][ T8229] R13: 00007fe943ce6038 R14: 00007fe943ce5fa0 R15: 00007fffe589b658 [ 254.609463][ T8229] [ 254.838033][ T44] usb 3-1: USB disconnect, device number 29 [ 254.840911][ T5991] uclogic 0003:28BD:1903.0001: interface is invalid, ignoring [ 255.086278][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.086836][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.408981][ T44] usb 1-1: USB disconnect, device number 34 [ 255.744804][ T8264] syz.2.932 uses obsolete (PF_INET,SOCK_PACKET) [ 255.848005][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 255.858968][ T44] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 256.025680][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 256.035442][ T44] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 256.035483][ T44] usb 5-1: config 0 has no interface number 0 [ 256.037237][ T44] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.037270][ T44] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.037364][ T44] usb 5-1: config 0 interface 85 has no altsetting 0 [ 256.106711][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 256.115485][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.115514][ T44] usb 5-1: Product: syz [ 256.115530][ T44] usb 5-1: Manufacturer: syz [ 256.115546][ T44] usb 5-1: SerialNumber: syz [ 256.316133][ T44] usb 5-1: config 0 descriptor?? [ 256.526944][ T44] appletouch 5-1:0.85: Failed to read mode from device. [ 256.527325][ T44] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 256.590801][ T44] usb 5-1: USB disconnect, device number 31 [ 256.768296][ T44] ================================================================== [ 256.768312][ T44] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 256.768345][ T44] Read of size 8 at addr ffffc9000ffa1008 by task kworker/1:1/44 [ 256.768362][ T44] [ 256.768375][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.768417][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.768432][ T44] Workqueue: usb_hub_wq hub_event [ 256.768472][ T44] Call Trace: [ 256.768481][ T44] [ 256.768490][ T44] dump_stack_lvl+0x189/0x250 [ 256.768545][ T44] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.768577][ T44] ? __pfx__printk+0x10/0x10 [ 256.768601][ T44] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 256.768632][ T44] ? __virt_addr_valid+0xdc/0x5c0 [ 256.768654][ T44] ? __virt_addr_valid+0xdc/0x5c0 [ 256.768676][ T44] print_report+0xca/0x240 [ 256.768706][ T44] ? __list_add_valid_or_report+0x4e/0x130 [ 256.768729][ T44] kasan_report+0x118/0x150 [ 256.768763][ T44] ? __list_add_valid_or_report+0x4e/0x130 [ 256.768801][ T44] __list_add_valid_or_report+0x4e/0x130 [ 256.768828][ T44] kcov_remote_stop+0x52d/0x660 [ 256.768864][ T44] hub_event+0x45d2/0x4a20 [ 256.768906][ T44] ? do_raw_spin_lock+0x121/0x290 [ 256.768936][ T44] ? register_lock_class+0x51/0x320 [ 256.768978][ T44] ? __pfx_hub_event+0x10/0x10 [ 256.769004][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 256.769038][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.769065][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 256.769094][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 256.769125][ T44] process_scheduled_works+0xae1/0x17b0 [ 256.769171][ T44] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.769211][ T44] worker_thread+0x8a0/0xda0 [ 256.769255][ T44] kthread+0x711/0x8a0 [ 256.769277][ T44] ? __pfx_worker_thread+0x10/0x10 [ 256.769307][ T44] ? __pfx_kthread+0x10/0x10 [ 256.769325][ T44] ? rt_spin_unlock+0x150/0x200 [ 256.769350][ T44] ? rt_spin_unlock+0x161/0x200 [ 256.769370][ T44] ? __pfx_kthread+0x10/0x10 [ 256.769392][ T44] ret_from_fork+0x439/0x7d0 [ 256.769421][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 256.769453][ T44] ? __switch_to_asm+0x39/0x70 [ 256.769473][ T44] ? __switch_to_asm+0x33/0x70 [ 256.769492][ T44] ? __pfx_kthread+0x10/0x10 [ 256.769514][ T44] ret_from_fork_asm+0x1a/0x30 [ 256.769543][ T44] [ 256.769552][ T44] [ 256.769558][ T44] The buggy address belongs to a vmalloc virtual mapping [ 256.769578][ T44] Memory state around the buggy address: [ 256.769591][ T44] ffffc9000ffa0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.769605][ T44] ffffc9000ffa0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.769621][ T44] >ffffc9000ffa1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.769633][ T44] ^ [ 256.769644][ T44] ffffc9000ffa1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.769659][ T44] ffffc9000ffa1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 256.769671][ T44] ================================================================== [ 256.769691][ T44] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 256.769707][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.769730][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.769745][ T44] Workqueue: usb_hub_wq hub_event [ 256.769771][ T44] Call Trace: [ 256.769778][ T44] [ 256.769787][ T44] dump_stack_lvl+0x99/0x250 [ 256.769827][ T44] ? __asan_memcpy+0x40/0x70 [ 256.769851][ T44] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.769883][ T44] ? __pfx__printk+0x10/0x10 [ 256.769915][ T44] vpanic+0x237/0x6d0 [ 256.769934][ T44] ? __pfx_vpanic+0x10/0x10 [ 256.769959][ T44] panic+0xb9/0xc0 [ 256.769977][ T44] ? __pfx_panic+0x10/0x10 [ 256.769997][ T44] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 256.770026][ T44] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.770056][ T44] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.770088][ T44] ? __list_add_valid_or_report+0x4e/0x130 [ 256.770112][ T44] check_panic_on_warn+0x89/0xb0 [ 256.770134][ T44] ? __list_add_valid_or_report+0x4e/0x130 [ 256.770158][ T44] end_report+0x78/0x160 [ 256.770189][ T44] kasan_report+0x129/0x150 [ 256.770223][ T44] ? __list_add_valid_or_report+0x4e/0x130 [ 256.770253][ T44] __list_add_valid_or_report+0x4e/0x130 [ 256.770279][ T44] kcov_remote_stop+0x52d/0x660 [ 256.770314][ T44] hub_event+0x45d2/0x4a20 [ 256.770355][ T44] ? do_raw_spin_lock+0x121/0x290 [ 256.770385][ T44] ? register_lock_class+0x51/0x320 [ 256.770437][ T44] ? __pfx_hub_event+0x10/0x10 [ 256.770463][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 256.770496][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.770523][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 256.770552][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 256.770581][ T44] process_scheduled_works+0xae1/0x17b0 [ 256.770625][ T44] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.770662][ T44] worker_thread+0x8a0/0xda0 [ 256.770704][ T44] kthread+0x711/0x8a0 [ 256.770725][ T44] ? __pfx_worker_thread+0x10/0x10 [ 256.770754][ T44] ? __pfx_kthread+0x10/0x10 [ 256.770772][ T44] ? rt_spin_unlock+0x150/0x200 [ 256.770801][ T44] ? rt_spin_unlock+0x161/0x200 [ 256.770827][ T44] ? __pfx_kthread+0x10/0x10 [ 256.770848][ T44] ret_from_fork+0x439/0x7d0 [ 256.770877][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 256.770907][ T44] ? __switch_to_asm+0x39/0x70 [ 256.770927][ T44] ? __switch_to_asm+0x33/0x70 [ 256.770947][ T44] ? __pfx_kthread+0x10/0x10 [ 256.770967][ T44] ret_from_fork_asm+0x1a/0x30 [ 256.771002][ T44] [ 256.771352][ T44] Kernel Offset: disabled