last executing test programs: 5m31.287885521s ago: executing program 1 (id=1739): r0 = syz_usb_connect(0x2, 0xca9, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x6b, 0x54, 0x4c, 0x8, 0x19d2, 0x1264, 0xa36c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc97, 0x4, 0x0, 0x0, 0xa8, 0x0, [{{0x9, 0x4, 0x1a, 0x7, 0x9, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x2, 0x1e, 0x10, 0x6, 0x0, 0x4, [@generic={0x6, 0x23, "6ea822e1"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xfc, 0x2, 0x40}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x5, 0xd2, 0xd7}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0x3, 0x4, [@generic={0x37, 0x22, "2752e39fb41a3897fcfa92e9eb079a7a4bda0ed6201a40fccb5ede64aa4be778c628ed2fb92ff04e58d91617c5ed008f7cf67cd6e6"}, @generic={0x61, 0x4, "1eaa4d5c5c24571cb3f974b280ff0f79a5c462e53f4727f912afcd2e863ad1f9f446a959431f1ceb648e170cc3c1582a442425e011972c71a471ef911ad10453205612f7b9b16a4b7f013acfc12058439792a695267918883853193194a3be"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0x1, 0x2, [@generic={0xe0, 0xb, "8069f4728ae3ed2b6dd010a09b7cd5d2aa9603d8e97a46afd6d250ce548d3bf42db0dfd317f50ba383d2e77f5498287a9dd642a0b3b608521ec4767e4c6f53658bafb6bd53d021280a339c67faba3a5c3376986d64893c24738b129e3e632c2e477f6e5b51694fcb9d158e63d81700d4ed46824f2a41ebb99bc96b719dceffbd86c7d6a45d8d2090e5a5d0cb9d48bb4956bc90eaf21799d078b808fb35ea3364d05f70349b17bb5b5bd1d4407d6ad13fb28afcd95efeb99d6188ce1aca518c8e7fc926171234782c9509ae3c00e5fe26c0d0bc7226409521514677fb83c7"}, @generic={0xcf, 0x22, "e96e1d4dba1079604ea9a06f39536281c7de4f0e334fc90e3192bb95a625551daa137842151deaebaf74872911f4834901d0cba6d7bfedca4dc7500c1d6d061e7bef0ad14ddfe65a2b7bc7575dd1648cd4fb27c21822a04507d19d7eddc465e6e8ee2ce883f3fd93a0d1b70f79cab44fc2ba26460f76b50e62c79afc785302b1ad5eeeb54c74fd4c69fcc0f4f7116598fe09344d298ba26ac406335aa465de8578d706a55479c15f26027e148f11e3d018bdf3c2f413bba60d250bbee4e3cd91ccb4080fb4038e1ed63bff4baa"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x4, 0xe}}, {{0x9, 0x5, 0xa, 0x0, 0x240, 0x0, 0x26, 0x23}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x8, 0x6, 0x44, [@generic={0x7f, 0x7, "e45af6a244e61fa7b4432402e283a46343e4d3e405ca98710f9a2fb6bd773fabb5c299226f507ef6992377f5c65f7ee5203bab8204aea17a308b37e6abf28be00c5d9dd562cd496183313e83a001394197ac9fc70f07713b82db1bcc7d24cae562dd76fb581ce7d7969c7c23a0e815c4b2b135d1e3e204f922f18f29ee"}]}}, {{0x9, 0x5, 0x2, 0x13, 0x8, 0x8, 0x5, 0x3}}]}}, {{0x9, 0x4, 0xd7, 0x9, 0xb, 0xe, 0x1, 0x0, 0x5, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x40, 0x2, 0xe7, 0x9f, "f22b", "89"}]}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x3, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x40, 0x0, 0x5, [@generic={0xda, 0xb, "6dc32b9c82e0bb3a603f05d6037f206f203488e67cc12b008532a4bf1f690006dffc30bd9d3e15f72ffa1a68a4f58c8fac3fd0b70d11b27e0b94b39b722214b75ee00e26ea5c080f5900df8a4df80773e3dd9d321eb2d0769673c2736dc1a82534e0d7e6e1ebbe45c6b0fde457e5b626504cb86af75ca0cb1d58dc6078d26b244adcc039b0361e12ebb53416ab7e95e3b1c75f173fc684fa8e720745eed2f3b4a960eb0ae60ecda0a2c6698429abc040fd8da066a1f792374b7b86ccacb07e4080c69c153f4e7c9b9ac6f4bfe22738c490a1041e8949c121"}, @generic={0x53, 0xa, "84cff0dfbd076b1845f3e130454d4dfbd51a8424ae27bcc0f1fc28fd7d905860a10e5d7099dcd30f3cc50dea0792fbb1b6ad6ee05f1c022b8bde359ef97b75e6cf9f1aa92128442fae27add54a5750acf8"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x8, 0x8, 0x7, [@generic={0x6d, 0x31, "57612b40d87626c91ca85bf8a250e45483b4599a6ce464fdeb96f32ae31883851706b2d0663d247394a98d0b9ad52664029c80af95b14ba38ee16e6992c29d5ab19a789efc87c9a4a0145be166fd58a47927a443ec06f9ff4c2d7d693617e34807ecd1d2153f864c6dee23"}, @generic={0xd3, 0x31, "d558009a9edb78ec9d50a8e32c72a416c6e3c2741da81e0c2d51bc5c67424a0eb2a740a14c7a847d71e4f0804514b3258002c7f88e50475ba5acd56d57a5b729c18aedff7cc5d4a2735c6123b7031a96ce3bce08d5127a7d5e7fd62bc8db7ab78770a47a32105597de9287f36ec84a7d5e9af4acad4d242238bd0e579645f0f90eb2c7f31800e327be9a89566d1d055d61e9337a6ccd5c5507c54751c09cb8a03116dbf546393ddce4df1e120f5408e6fe5a8c4e6503ca9324e88056987d4600cc390a32b00241e95dc3a7e6d9e30e3133"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x1, 0xc, 0x27}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x6f, 0x5, [@generic={0x9d, 0x23, "55acd701df013e5e594bdd8e410a0159e56b449083e161d1bd15f89512950023e5687bcbff4de6b7798e052c72b8cf4dd5fb0c4dcd008ff033b08d379e7ebc469b3e899bafa0529de08a8e1df6419aa21c827d091fecea5873d3d1887a2a9a942488bd508f5f870d3e5f8edf41faa9223fa65d6c36135736ec210b30574c78a1f1852f3366297c59cb6b4bf1c5751e8309c3e8246454eb2797d6d0"}, @generic={0xd9, 0x0, "f78e0146563f033094d3a5e39e11fc35706203bb6a1043bf5b6ad3ecabdd942769c52754c09b698b0169c396c2f2361688ed94de7707954b73cd4f139c78737d9348f8d832dd74aa074b1b57b33918abf16dd39d1aa83f9f020cdbe0b9e600c9d6b1bde210996d9e666b817461e7328fe86f755b909cb6fd55d2a633e21e5c3a4b689d35fd080514aa1cf1955ec37e8d1b805e13063ab78a8ece8b79dfa7f27a5bac686fa0786dc58bb127d579f7a8e4ece76cc822446964c34d023b9e5fa6cf6e3fd9706237f80b1b1372d4f5af170509783d95a312ac"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x4, 0x4, 0xd8}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x0, 0xe, 0x8, [@generic={0x96, 0x5, "235eeced8f0553c1f31b9572c6f8ca7534e32f641e473ddbd03e557a2fa8c6624ec3964cd955585db25a072d3bc47204949a815b7ecc3d9372c46b1b60a80cd90c3f8ce3facf5e8d7d9796c51fcaa0ea6e3fe1cf4daaaf20658e1bc59b370e269f52774b670f554ed017c6500da26ccb04e494badfd1d3dd338300a0d5d68741fbf3c9ec9de3ce12d8ba655d8f4927fb5c842d99"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x100}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x5daf3a995ad2cd56, 0x2, 0xff80}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x3, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}, @generic={0xb, 0x8, "ca7afc5402da925fb5"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x57, 0x2, 0x7, [@generic={0xef, 0x23, "9772a62dc354b64de75ef9b147306b5846a978389257b33d9f972e2e7c5e1f0476adf9eb6977213923b4d258312fabcc09ad0502d30563329db54305235be6aadc76b2eff0bfe5a39e46a94aa4c5b7aab8e75c98cdd38bc340b1d19da9e075d9931cdcacafed66b97fd0bbcbfeca2eaf927cd0e515cc2f34c53149570abd7ff387e784722b9931907bb234bfc3d7489f2af54684cb53a6b000dfe77fc534e41a091fe579e7305a73ac3da9ea44c1918ae1ad8427801147a9420bb2ba37a66ce6ebb95fcef407497b5d39021b38cfa35d8af365ea25f502eec5e155b1f3a4ab1f4276185cbd001cef565e239097"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x98, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x4985}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x5}]}}]}}, {{0x9, 0x4, 0xae, 0x0, 0x6, 0x79, 0x13, 0xb7, 0xfb, [], [{{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x6, 0x10, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0xde, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x9}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x2, 0x1, 0xc0, [@generic={0xe7, 0xc, "03970879b93bd65aad387ac69cc5391a5e7a1ff4d44f2ddda70eb0fb3b03ba7583c33d6dd10c7fdf3f8cdbb6563cd400f228a129775c96a2b56be8f1b7fb88dc42b909c81dcbabc2abbbcd008e4c570729435e3ac40ca459d25fee58930bd3d4dee5da4bc525311f82e0ab41f8fdfea1200671252268d0b10d33a27eff75fbfa4cd987835b10af8e1087fc462a504926693f366f4a61fc4ab9bb9fcdcf537f92ffa14faa9507f1c17e66b78afb0fcbd7b0b66433994c1d5663fbe0bf1237c9b86fa8096f98b0969575c623d531a496f11905dd5a706ad8eca81c45c94f8fbfde8dc709dd1d"}, @generic={0x64, 0x30, "d5f05f6734b6208968c9764e42f2a998c07d857e3c0732a1d0a93c7b09b64bf0e9f7002c34e05f8476bbc9e195bdecf136f7c99510aedfb7ab98cc079c5535c68ea96b7563abbc3305f099e85f72549d879648ac2fd28b6d38ee208462ef1071c842"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x6, 0x63, 0xd, [@generic={0x90, 0xb, "b79762a38cf64ce8d6f3f50f9c8f3c8c20e64729439294a701348615e0628683414f4e64b7bff1e60f956c52a31edb55185c22ebb150170c71bc96a3881d6a3cc2594d67557eb065479a8081f051c642615cbbf48dc62c25772a288934ac1defac6f1726579a63b52d50f9443311d0c016afe548456b6886039413d2d805fa207b06ea3d0dd73d3045c826c725ff"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x0, 0x0, 0x40, 0x2, [@generic={0x6b, 0x22, "6c8a39b4347d2eb81c084d865c5e8563bc78042e09fb8dd009e320b6943c357c4e856d314e5e3d51bb3f93a9cedd3f7252162a6459fd8c8645db8515f8961227a7a28431abe8544701a806d960c68ac996c5f99febf03c31b8133ce1fde819d07c19c6053c39b300b1"}, @generic={0x3b, 0x0, "a17e4c78daf25a2ab2ea7ea285431d850ab33e3406a77e312eeba86fbf7d2d8ac21d62061ace9cdb460f58a18ee106e8ed05409c4673a9af36"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x2, 0xed, 0x7}}]}}, {{0x9, 0x4, 0xe, 0x8, 0x9, 0xed, 0xef, 0x68, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x4}]}], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0xc, 0x4, 0x0, [@generic={0x1e, 0x22, "5dddafb90ec12b0ff9c77aa4eef7bd1532becca1721639c1ba341118"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x7, 0x75, 0x1}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x79, 0x0, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xeb, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x0, 0x45, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x24, 0xe6, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x210, 0x7, 0x1, 0x6}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0xd9, 0x6, 0x6}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000000)={0x40, 0x15, 0x93, "24a80dc5e3d83d58cafa29ff192959d3be7bc448d44504a2ae8b3cecde478cd60a1ad81c0bfbfe7c1eba4af7d07be3c440786c3325474184faf73f1dbd941590b25a17717af516c56870857c2e5b41ee247ebd5f0ca416dbf90670e12ba26a21ff7dc026b9d528737917d408737c43e202858c6213576e62689bdaffffffff40a8e956166941358d9e7bfb277e367e5c3db3be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='io_uring_poll_arm\x00', r4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5m30.489934339s ago: executing program 1 (id=1740): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000001240)=ANY=[@ANYBLOB="0302fc"], 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0xb, 0x100000005, 0x80000, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0d062dbd7000fddbdf252b0000000c0005000202aaaaaaaaaaaa0a0001007770616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x404) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x281000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r9 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r10, r10, 0x0, 0x200000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0x7005, 0x0) 5m30.28726477s ago: executing program 1 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 5m30.231376523s ago: executing program 1 (id=1742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xa9, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @fd={0x73622a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x1001}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r7 = socket(0x2c, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ce6f0000040000400400000022bf0000ade50000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000580), &(0x7f0000000080)=@udp6=r7}, 0x20) 5m29.044529381s ago: executing program 1 (id=1743): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000002f00)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000380)='q', 0x1}], 0x1}}, {{&(0x7f0000000980)={0xa, 0x4e22, 0x3, @private2, 0x60000}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000009c0)='Z', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x4, 0x2}, 0x8) r6 = socket$inet(0x2, 0x3, 0x9) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5m27.410442433s ago: executing program 1 (id=1744): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000000000000003, 0x40) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x30040, 0x40) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x5d11d24) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'team_slave_1\x00'}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000140)={0x0, 0x68}) 5m11.74406507s ago: executing program 32 (id=1744): r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000000000000003, 0x40) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x30040, 0x40) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000040)=0x5d11d24) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'team_slave_1\x00'}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000140)={0x0, 0x68}) 29.201562337s ago: executing program 2 (id=2552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3ff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x0, 0x0}}, './file0\x00'}) r10 = getpid() sendmmsg$unix(r2, &(0x7f0000003ec0)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000580)="e15f8198f952d32809cd00ccb6620113eb25246defdf853aa602bb4f49b8b9d8dc104ec41c038b4126280c67738b1520e5b14e0660d14eebdeeaa0518da9fe7f2ae5fed01d74075f06e286cc15c55dc88ecaffe919cd2354ae69c544f9c87e7e07030d0acda52487c01a2367206ab2fb84422e84170863c86f64c8458a297c6bcd1fa916ee2842541dbeae03ac0e13", 0x8f}], 0x1, &(0x7f0000001680)=[@rights={{0x20, 0x1, 0x1, [r2, r1, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5, r9}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x78, 0x40}}, {{&(0x7f0000001700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001880)="9ec9e375c8469273e6c4e3c13f3bb6059db62b7625457c26f0cf7161ded88997bbf1dd6d22ee819255b1199caa43267b31964fbba4c3760dc4b54641d94e25fc73b5114ca64864d29dd4bb8416176e5dc50bb76ae8b528e0866195580c881f75c96a1ab24efbade016dcfbbbc2530b89d9ad52ec44621c945dea5b6fa6f896902d1276094aabd606678ac34d0d032275ed182b0e409cf1fddf6b6845c8d3f59a0fbece5e2e89758859c364ad5353a8af0e538e8717c59167c4f62c1a4be27760af7da0e1ff314e77b765c4953ff70a9b59d5fe1822", 0xd5}, {&(0x7f0000001980)="626290b0bc25051eba6dfc9969af38097100d075d545bf4e6316be4ec6a9d091ec34b398f303cc3ab7b3d462dc01b234d7f9668aeecd2c3beef55c47c6cf4fdeaab5c9f108a158e69ed53166d010118eb1b2068df28ee3d6ee4a949eab86d255072c09cbdfc05035f4a0e228979296ea985c887c6bebf0a9f65e9eec9dcecc35ac577dc07aa6f9cddf5e04093d10bef6e05317f75a1f7345993759fa3888a1af9c6526b4749b2f1bd89eca5678858945a1c45ee684c6dd47df33724757358ac1a7b9176c", 0xc4}], 0x2}}, {{&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001b00)="f9d79c818338de4d9dbd2d2bd15bacbc182133ac9f86ab8a2b1797cc4666ba8f3494a844c7a1b23ffcf0ed12abc5294470c3265a76f41472650e9ec4f5fc0d2595422f05575564994872d8c7128c7f06e0be2d9955cbb54e553ccf44856ce9eac5c9ea93d81987e10e4cf269e566b14a703c08b84f180f27de2436ecd2cc4d32eafd7c8218d1a419646c2f1fd13792fb962775ab2866c94117", 0x99}, {&(0x7f0000001bc0)="e89c83cd78535d2a0b4a08490d08e80e30c08e73d9d467322f41b3f99019bdfb31ab96840bd5294fba37aec551b4f6cfe3b72e3676a57ce9ba1bf661b501d0f89b1760b1275a6e1aee924dfae7053735aac350fdf0801990bc082796633d2d84b9ebf4132b281e563e802a3519048cb6c3052c2ab4ac25982e634ebb49597f80365b34590f056595c834e395e59bbd8f62d694cc063ddf541bce083c034afef13420b242707e03c34c74d37fdbabd672ba8f0cccf4f371b97a", 0xb9}, {&(0x7f0000001780)="fef5c62b70c29bd39468d6f22bbc8fab7a6f87b1bbe51c678aa6c81ce150d1eda5a38cea7481c086", 0x28}, {&(0x7f0000001c80)="df0e137b72b78fe15bf1f187bb2e84662bba2243a4eada4275de1f9ba8bae4ee1f7bb952fdf5afbe5285225437a2da2f5edd402102af98f7b63b6caf84cf219a37810dec68c382215e5417496cb571a6396048e860ccdea684b2baa579cb", 0x5e}, {&(0x7f0000001d00)="bb0f", 0x2}], 0x5, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {r10, r5, r9}}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r7, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r7, r1]}}], 0xa0, 0x40000}}, {{&(0x7f0000001f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000001f80)="cb828533c728ea81325799df6a36bea3ff78bb7fff79a6e89db2d634779aec0a672e02dfdd17ed9d", 0x28}, {&(0x7f0000001fc0)="1fb37113b5287c58215d2a958d1bca73465956e502ae3631dc9542512bbeae8080086331ddf661f72efce68c38853667622d484797106e98db88e24995edfbf4f1d1cb2c102557d1eb11dada70485eeab154ac93014071c9f19deceaaf310b6df5d088e196875b0c74725261e5a1ed1fc6eb6f699fec60d49026847351591d170b303c68928daa2d50f4a77a5e7da37756d56a61e7bc0761749f5d92053dcf113a135f2ff1e548bfbcae3ff65c2907c70ba6d6df5581476c34cc2d1feddc232ee454c744cb43b27574186e56b4f669c8fa", 0xd1}, {&(0x7f00000021c0)="e52100ddff89eaa0ba91726ed5a6f3ab6913d0a2a5400fb1851d47614a65942731eb064e451de72bb2060e2b91e4c4c60a7258c817979bc4c4f7644c43b63015e1834185e35eae3b4ad31d1fbd9cfe2687a22284f194b64cf1038a19950942dc9d38a8a45fa014b7dbd0c3f35ac71fa7cb3eab79a377969bea151eb8c6ab6fc7926b68fd", 0x84}, {&(0x7f0000002280)="ffe3a1384ff903dc4669953035c7999ad1261dfbc8a5893f7a75f50e0796b48768630897caa6b06c4dee85c3b8fac912a9c924ee1d5704d30e8d2bff0d730f0b53830a320e0a9b594a438c0cb365fbda852842c9396387d19938255780be0d35405a22068995128d2f80513b67be9b2c56e69d99f1b912a72785718abfbf1e73d99e76433b8ef6d79f2f3b0d2976593d736cc08fb4fd23737835010a4787649374082508ac1c05b7df4eba9d4c86a725d881da174d8c197ada7d4cc3394108cdd57c86641f0afc8813342365422eb2ab0e6e4c3e3cef4d0b27f10928564b", 0xde}, {&(0x7f00000020c0)="7f499d6983cbc8e5dc15f428a3d946fc548ea7f76bf4b3290ff9418a57bb6533bc8fe73d6c37be25f00ec48a5a6c3c6c1bad157ea850e9", 0x37}, {&(0x7f0000002440)="c60dcb0aebc58fd49d7cd009ba1c70d6ec3d037d41bfed9a6ff9f8eef7035e5d1e9e40dc13a796c418dfef2331e334e5fcea1e4ee97c9ce2f4e462b72f5a8ab555fe5051e689b633b0bf0aec6968209331ccf2106e1be24742cc75047c2c1be126cb8e420e7db004b4a522f57a3ab4309edab46698d25641ed9a10f957be5c379c82c8d3ec42b13cd2cac85d53655e7dc1c7f6c75bef9d0fec1453f3e50d6195", 0xa0}], 0x6, &(0x7f00000025c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, r5, r6}}}, @rights={{0x10}}], 0x48, 0x4000}}, {{&(0x7f0000002640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002780)=[{&(0x7f00000026c0)="ed328513e65855197b4cde18351c90b18dcac01796c34209d6c1", 0x1a}, {&(0x7f0000002700)="fdbdb47ddf8a5feac34f9ce23f91fd4dcd1dd431eee73efd98f0bbea1c98ea220ca6b2fc56484a66de5e2f9ac8817979d2237912e87de1526ab2de992195a0ebd8a29e220caaf5040865b33d12e9bfba1cdc894ff7366a449a4b68ea017da25914857b7636529af68b8ab5fe80d42b08b512a3998127e122", 0x78}], 0x2, &(0x7f00000027c0), 0x0, 0x20000001}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003b80)=[{0x0}, {&(0x7f0000003880)="5b77b8257febd3baa1235137e8f46b", 0xf}, {&(0x7f00000038c0)="6c12b1cde77be9401d75cc1339bca8de0803e8494df9e31fffdb58b881e720dd2d6378a1fafd4f69581d654584356ba25b71b0b8d4afd2c08728d784d115d0ebb26d14c559d033ea1f869f60baa5822f2aa06f12e01a4fe20970a49e455da395483aea6501314e89368e3ec88977c6f789720d0f0743bd7120dd54122bc363cbb663031f6decf779c4b2bd4d3c537138514d1e0c05181477e1f072148655c1a43fe2806951818205383715980b9772646a94def63504ce1ac29172e785b25f", 0xbf}, {&(0x7f0000003980)="e0a0cde1eb27040368ca114a0ea5c3666357b4bc7b1a028c1a4f43313d1a20b8ad505e87b80975e7a3dd8ba18a0e9a9d82c4af0a07703f1d4020c194b43f479c9f3ea20e0bd03c3453d25caaa95dcf04258be2ec9c69b5c3a33aaa03259bde4380a50b21a167e5f0fe301bf21e696fe74c7ecc5799d6e35a2db7ac42e74135fd5ed730d4b1abce1fc6eeb074328c5a074d8614eac84b20acb2df5c5b05122e339325002e17ea26cdb1468179d4f72df68b76e2345cf20a0e0725b7277b47b02177c8117772b6c1eceac54a4c9820df38b357a2ff889f009429", 0xd9}, {&(0x7f0000003a80)="1aa8cfe7c543793a31e7b31699de85cc4d0e13e07878eb80bd5dc4578677fbdb43f156b2980408007c9c569ed68856a3d103edc45cb3f9c784cdbb77ddada5cf932af6ae6e5e", 0x46}, {&(0x7f0000003b00)="68308b0cd2a5f16787a2d49024db4890cc9c8b921d73dfc67f63c785337b028962eb", 0x22}, {&(0x7f0000003b40)="d9dc254f", 0x4}, {&(0x7f0000008380)="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", 0x1000}], 0x8, &(0x7f0000003c00)=[@rights={{0x1c, 0x1, 0x1, [r7, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}], 0x40, 0x40}}, {{&(0x7f0000003c40)=@file={0xbe7ee2769f6b88a, './file0\x00'}, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003cc0)="3b154f76e0429c268029ef5a06504dca916914763ed476047f007ff600"/44, 0x2c}, {&(0x7f0000003d00)="c0bda4ea1b4bd105191c15b4840bdef632f14105807a9eb259b7c901829cd605648e11dd191f9861d89f7b970323653f31a10582760939159cb22b1cfdaed621e4f4d90622cd1fd58f370880ea654e9170944f1f6cb474d58fb1be526b6f03224cb91e062fc82796f7cacbf3d0bb4e4fa71ff863cff6e09e529f67453ac9d444f284f671d3c726e52f2740c3424fbb88f7d2cf87e8e975b6d844ed4ba179a453c7fd3e689440af8e9e76c6b21034b41ede04", 0xb2}, {&(0x7f0000003dc0)="4cce3ce03170a8babc0cc2d5a350fcafeeae1b822628de5029c4de5ebe850659cf7c7d38f6ab4b495dcba226edb79d0e991a60c56dcc01b85a0cef2b8d1a041ffd78d4b59bd7d50bd04239ca5d4f9493422c5c0265a30c4269ee021559e8f79a2a8ee3b00b5c9a4769616f86f8d03683c1d0fcf65678323ee63257de175c287ad136b09776", 0x85}], 0x3, 0x0, 0x0, 0x20000000}}], 0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_timeout(0xf, 0x0, 0x10001) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) shmdt(0x0) 27.574644665s ago: executing program 2 (id=2556): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 24.88135955s ago: executing program 2 (id=2568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000", @ANYRES16=r4, @ANYBLOB="010001bd7000fcdbdf2508000000980004800c00078008000400080000000c0007800800040001000000090001"], 0xac}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}}, 0x44084) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x800) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = getpgid(r0) syz_open_procfs$pagemap(r7, &(0x7f0000000440)) syz_genetlink_get_family_id$tipc(0x0, r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa0, 0x1d, 0xe9, 0x8, 0x5e3, 0x502, 0xf1ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd5, 0xff, 0x0, 0xdf, 0xcd, 0x83, 0xe0}}]}}]}}, 0x0) getsockopt$sock_int(r6, 0x1, 0x5, 0x0, &(0x7f00000000c0)) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) write$tun(r8, &(0x7f0000000100)=ANY=[], 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 21.467280007s ago: executing program 2 (id=2584): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r1 = syz_pidfd_open(r0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = memfd_create(0x0, 0x4) execveat(r5, 0x0, 0x0, 0x0, 0x1000) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000140)=@abs={0x1}, 0x6e) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 20.188594447s ago: executing program 2 (id=2588): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 17.440791999s ago: executing program 2 (id=2603): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000300000000000000f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) vmsplice(r2, &(0x7f0000000840)=[{&(0x7f0000000180)="bfa6", 0x2}], 0x1, 0x8) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000dac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 10.873353968s ago: executing program 5 (id=2639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') socketpair(0x25, 0x100000005, 0xfffff391, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x20040140) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000340)={0x0, 0x8001, 0x1, [0x2, 0x8, 0x750, 0x7, 0x6], [0x7, 0x5, 0x8000, 0x0, 0x81, 0x6, 0x0, 0x80, 0xd2, 0x100000000, 0x3, 0xff, 0x8000000000000001, 0x4, 0x5, 0x8000000000000000, 0x4, 0x0, 0x9, 0xfffffffffffffff7, 0x1, 0x9, 0x8, 0x3, 0x2, 0x0, 0x4, 0x57e9, 0x209c3d37, 0x8976, 0x9, 0x4, 0x1, 0x10001, 0x100, 0x7, 0x81, 0x81, 0x4, 0xdf, 0x2, 0x81, 0x2, 0x4, 0x6, 0x8000000000000001, 0x1c00, 0x4, 0x100, 0x5239, 0x2, 0x0, 0x2, 0xfffffffffffffffe, 0x1, 0x7, 0x40, 0xb82, 0x8, 0x7, 0x8, 0x3b5, 0x1da, 0x6, 0x8, 0x71, 0x84, 0x7, 0x6, 0xd, 0x7a, 0x8, 0x0, 0x3, 0x7, 0x8, 0xffff, 0x2, 0xfffffffffffffffe, 0x74000000000000, 0x0, 0xc, 0x10001, 0x9, 0xce, 0x9, 0x6, 0x8, 0x8000000000000000, 0x5, 0x8, 0x4, 0xfffffffffffff83b, 0x9, 0x8, 0x5, 0x3, 0x9, 0x80000001, 0x3bfb400000000000, 0x5, 0x2, 0x6, 0xb69, 0x100000000, 0x6, 0x3ff, 0x3, 0x33, 0x5, 0x9f, 0x6, 0x7f, 0x8, 0x80000001, 0x4, 0x10, 0x3, 0x6, 0x401, 0xe]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000780)={0x0, "7a0e3b8ee459dac0c9a1963644815c58"}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002440)={0x0, "354def34c9da6cf55ff79bc43499da4d"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001780)={0x12, 0x4, {0x7, @struct={0x8001, 0x144b}, r4, 0x80000000, 0x10, 0xfffffffffffffff9, 0x2, 0x7, 0xc4, @struct={0x4, 0x9}, 0x8, 0x10000, [0x800, 0x7, 0x4, 0xd5, 0x0, 0xdfc2]}, {0xd9eb, @struct={0x40, 0x2}, r5, 0xd54b, 0x9, 0x8000000000000000, 0xffffffffeae02dd9, 0x4, 0x0, @struct={0xffff0001, 0xd}, 0xfbc, 0x9, [0xe, 0x0, 0x1, 0x1, 0x6, 0x371374c4]}, {0x0, @struct={0x8, 0x3}, r6, 0xf, 0x2, 0x7dc80f5a, 0x1, 0x727, 0x4ac, @usage=0x7fffffff, 0x40, 0x7, [0x2, 0x6, 0x7f, 0x6, 0x5e45, 0xfffffffffffffffd]}, {0xf, 0x6}}) socket$nl_xfrm(0x10, 0x3, 0x6) listen(r0, 0xfff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) accept(r0, 0xfffffffffffffffd, &(0x7f00000000c0)) r8 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 10.645562683s ago: executing program 5 (id=2641): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026b0002010000000904000001020d0000052406000105240000000d240f0100000000030000000006241a0300000724140300070008241c0d000009000905810300040000000904010000020d00000904010102020d0000090582020002000008090583020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x13, 0x6b39, 0x10, 0x11e, 0x9, 0x5, 0xbe, 0x8, 0x3, 0x1, 0x7, 0x1c}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000000c000380"], 0x38}}, 0x0) 10.256685231s ago: executing program 0 (id=2646): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r1 = syz_pidfd_open(r0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = memfd_create(0x0, 0x4) execveat(r5, 0x0, 0x0, 0x0, 0x1000) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000140)=@abs={0x1}, 0x6e) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 8.615643001s ago: executing program 0 (id=2652): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r3, 0x0, 0x80000001}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000d8fe10245b91b64a9009aa558fb6142ba3d69873d12b64b1fb047d9a15b29ec3265fe36ad3c4c0e1207efd0916aacacd84ee4d32218966e09bacc30f48285f968a50cc47d8587b09c02153c0e231c54ff6c3b7a4343cffdbf247709dc9f6a7c7e73241d561ac74134005722c86d0f99cbfed85b260b025ca2f9f4eb17fa7325c7bba2a8a738668e2203550ad4c12362f6f77c022c94fdbccb7a707929d23c2d4bea552d3c4c292fed0e2f83a5df10084b96697b3bb6b50f13aa7d94e571c8907e2c2c165116119"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124"], 0x40}}, 0x0) 7.248482504s ago: executing program 0 (id=2666): r0 = socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x2, 0x4) 6.949367568s ago: executing program 5 (id=2671): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) clock_gettime(0x8, &(0x7f0000001ac0)) bind$can_raw(r0, &(0x7f00000005c0), 0x10) r2 = syz_usbip_server_init(0x4) read(r0, &(0x7f0000001480)=""/4073, 0xfe9) mbind(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x10000, 0x0, 0x7, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) pwritev2(r2, &(0x7f0000000540)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="47c20ec4e7ad8caffa86ea62ac9fceaa5f4e922024b3faa2111a6ddce157b96e6d", 0x21}, {&(0x7f0000000480)="1a25b7d6623236b055e8e26fb43a92c54f358b15207eff6dacd0f89591b022229241636ce4903b1d978bd05ad8a1f9c605ac9d51a13d210fde6ad20ca3fffb4afdea295c697d1e96d605daa982a74e1b58ffa061b35ae23dfa2ee9ab2af68e9311594c62a7de", 0x66}, {&(0x7f0000000600)="2dac02a0947dfd37112b51a3b0c1f5f5c799c22d90d1ca4a2089c7bd7ce25e9b8fc68fe9acc849690cb7ba5a4666e3ae7e2108df0bb236328f61736610be80c0c110c8a395ef9d337300d335ebcb9b7c5d9e99f103068f4aad78a4113d71790780f258074891431e3bf48ee20216d6999bd2f6630b6e8a9834b8b501ef6cfe11a4d02b3d1158a251b68454c30fb4cc98b13554f7f7e2883b9d6cf7285d248c49bedde6751fcfa9db739710db70aa587ffc05dd929837a6abd6d67f6d3dc3622275f00b0adf05347bbfeed6d818210c1d3eeacc9c5c856177f4", 0xd9}, {&(0x7f0000002480)="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", 0x1000}], 0x6, 0x7, 0x9, 0xb) r4 = accept4(r0, 0x0, 0x0, 0x80000) recvmmsg$unix(r4, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f00000001c0)=""/100, 0x64}], 0x2}}], 0x1, 0x2, 0x0) sendto$inet6(r4, &(0x7f0000000000)="a46f050021de49ce2181c4be1d11a9fe79bbf46f2be85058d2b24f245c88e542c4a48ec957bff1470a60be43479114268ef9755a5bffe8c46568312a1e35a6f6", 0x40, 0x24000014, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "f97003b3750e5566"}, 0x10}, 0x1, 0x0, 0x0, 0x80c4}, 0x24000800) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001440)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="c5847ff9fb6ce29e06130606938223d3c09a98b1d381e784e91cfd91eb31557618bfef60fbd1665c3aee1d01819e85f1fe8bcf75cf0860c83cc68ad84b5df1f6365f908c49d1fd6a032dd95281d975401fa6cba288370c707490adb4dc252623b32afb13b18f618de699e594fb50519d8f0aa95a017cffcd4c8a3af517d4869b395b8dbbd2d5724ad9047477b90a774502dc618f5cd95936232e74dc6906c8cd12e4539a", 0xa4}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 6.555792316s ago: executing program 3 (id=2672): pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500)={0x0, 0x0}) syz_pidfd_open(r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x4, 0x2) syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x40003, 0x4000, 0x3, 0xfffffffe}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, "24728203"}, 0x0, 0x1, {0x0}}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0xffff133a, 0x1], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x1}], 0xc}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) r6 = add_key(&(0x7f0000000580)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf25010000000c009900020000000a0000004a65e66fb558d7fe20d1ddb95278fab187ef22b702c374316362e2c0b16829a8dece2a44d3eab76bbaff010efb6db9491dfa049e39cd8ac61d747ab934d420a2a77f9278829a18930283f131977487299d871e3c7dc520f086a976ab"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x81) keyctl$set_timeout(0xf, r6, 0xa7c) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) shmctl$SHM_LOCK(0x0, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r8) 5.769975882s ago: executing program 3 (id=2675): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{}, @host, 0xd, 0x100000000, 0x2447, 0x0, 0x400000000005, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x19, 0xe, 0x1c}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x200000c1}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000140)=0x35e854fe, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0f00000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) 5.233622919s ago: executing program 3 (id=2679): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8048, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x106}, 0x17) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x101) getdents(r4, &(0x7f0000000100)=""/50, 0x32) getdents(r4, 0xfffffffffffffffd, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b0, &(0x7f0000000040)={'vlan0\x00', @random="180700000020"}) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000040)="9000e7f52a") 4.747481558s ago: executing program 0 (id=2683): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) readlink(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', &(0x7f00000012c0)=""/155, 0x9b) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0xffffffff, 0x3, {0xa}}, 0x1c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = epoll_create1(0x0) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r7, 0x0, 0x0, 0x7fffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000001c0)={0x1}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r9 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14, 0x3ed}, [], {0x14, 0x3ed}}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}}, 0x24}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x3, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x20, 0xf, 0x3e, {0x3e, 0x11, "4fb8bde438ea6e91dd66171b847ee4daf3dbc622268d8922cf20a2cb44f6011e1a54b9f916a37e516630566624bc23b0aacb6531152ed8c19539a1bb"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x40, 0x8, 0x92, "ac425610e752a4c40e6410b6bd9c9ff9b0b0c176bcccc08528df80134a7ebfe748ea4dbbb1b3a3d8b30cda822dfd61765cfea51af9d97be8f6a6a318d964285ba676e2e79d78f1bd0f919ab2b19e77917730dee88161d5d4c3b785f19e231cd0dc91e7bd60fbdd300e70e6335818f1d2b484e90ba0cf964ad8dec012312e5358f104da599fed769074163d871b2e853a4275"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000780)={0xc0, 0x5, 0x2, "51e0"}, &(0x7f00000007c0)}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x40, 0x1c, 0x10, {0x10, 0x1, "792165c22bf5825ce2372d93244e"}}, &(0x7f0000000380)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "944a4e6fa245e48bd9202a89d1f8cd0e930cd6c647ae5aa3eac9fdac46829c3c8ff393add34cb9feb2d4c4a0fcdcb6384ff482966943b08d046a12a2af7d429cddb1995ed4cdc9afc8b89834f553fa31350522038afd43bfe16decaa613bc7dc481f3d7e24090ec18bc3354aecb563954b653f8c16468b7ec39e47807e0242224fb6c95b1b08d5bbcbd65fe4341cc0dceb61eb8b5d9e59b6a64c6e476c5b3334d72a04950618a595412973dd14abafdda39eb2c57e4ab1de7e766b9917318b86"}}}, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x1c, 0xa2, "354063a65a6577286b96a5e1356b8978c12ca7c89a86643a98f03f8b210ea1fc9348633806e0129a94a180f34ddeef318599f5bad823c2c11730f5c1241dbd6d3270dbbabbc89ff744358a57363404453f4ed3eb08498d8585a1d612ee643f16445a523f553c5f18ab518d1fa8f51895c4a2ab562a1028ce01f3ee459c2485baf3e2f95bce65b559364efdd24e4c0dd8e143499cc40bfafc66085b38b8a32cdf006a"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0xc0, 0x5, 0x5, '\x00+\b[A'}, &(0x7f0000000480)}) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9a000000000000000000"}}, 0x0, 0x0}, 0x0) 4.592147333s ago: executing program 3 (id=2686): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5000000000003ad0d6a200000000c00095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0x1}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40011}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x3, 0x8, 0x2, "0b36b49f3fe090c44d47373e2d4236aa5a35ca521f7e1f3eb6b8297981e36d7c", 0x34565559}) 4.567877667s ago: executing program 5 (id=2687): syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.events\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x8, 0xffffffffffffffff, 'id1\x00'}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000005c0)={0x9, @win={{0x0, 0x8, 0x8, 0x100}, 0x1, 0x6, &(0x7f0000000140)={{0x199, 0x1, 0x61, 0x9}, &(0x7f0000000100)={{0xffffffff, 0x3, 0x7, 0xe0f8}, &(0x7f00000000c0)={{0x8, 0x2, 0x80000000, 0x8}}}}, 0x8, &(0x7f0000000180)="1584d44e94baea42cb9ef87f377c323885ffc7e6c47063fd1bfbd6a7ff5b3c5ffe615f7ce2917b270b58b05899ae9d9995a2e57b09c7acf7230d9f9a1a5978d6954b4acb808a9207746f3543f26c0da0d948ffbf261a7b88e696f695732d0ce498cf63031dcc4c12f736cf814e7e1ac22b2c389ea2df0dcd00ca6ad60985bc5fec4eca9d3805484e0d754717dd6d7380a92d23217ac0fe0c55e8d9702d380e832f629e089842da5f2f678ef926de55e49bb5e2990800e576376695b314cb5f", 0xb6}}) 4.450334181s ago: executing program 5 (id=2690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) fchown(r6, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000380), &(0x7f00000002c0)=r4}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x203, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4400, 0x100}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400400000fdffffff0000ffff", @ANYRESHEX=r0, @ANYBLOB="08010000000100000000128009000100766c616e0000000014000280100003800c00010009000000080000000500210001000000d305de56f60fedf46bac8e003ad4935fcad549780111e27197ae34273589c807e21531d4b66e6207c2b559526e05eff71bc0049bcbab8c0487cfb741598cd926d9d601d29d06e4f3d79534dc471a99477ffa0ae0f6"], 0x4c}}, 0x0) 4.080257176s ago: executing program 3 (id=2696): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x41, {0x41, 0x11, "5e1ab7e34802ba73a915451ea0b9939ffc674ac71406e3cb2ea3370eb2522ae0247899314c3d099a141a158e98ec34a87221e10a45b3f759161b882ef8bf4e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x5}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x41, {0x41, 0x11, "5e1ab7e34802ba73a915451ea0b9939ffc674ac71406e3cb2ea3370eb2522ae0247899314c3d099a141a158e98ec34a87221e10a45b3f759161b882ef8bf4e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 2.658890484s ago: executing program 5 (id=2697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x23}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf9f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x8804) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000140), 0x4) getsockname$tipc(r5, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x0, 0xbf5, "cf"}}}}}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000440)={0x8, 0x30314442, 0x1, @discrete={0x3c, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b"], 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000290, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x5d, 0xfffffffffffffffe, 0xc3000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d0001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x1a6101, 0x0) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000000)={0xa, @raw_data="5dd04c6a0590bce5483a56ec4e00f09645243da49d2623e3bf30f959b822330ebfbd9bc2bb4fca0c283f4118dc217c32b1af958573fd026b004a2b8f804c8231f1857a042cbd116b3ffc7a96a6e73d4145a18bba38c257a36401b810488260a816b80250b7167155384604b1ef3bb50cf41119eaa90b804f6f0c10c0fb3aec186a6e1b70b2741a094f8dd2c1416aef6eb886e37aca53606f519e9509488c45baee73ceb1e5427b6a8e36fbed21a6b6d92eea0adc4203984024785c92763286c0313140ab1b58b391"}) fcntl$lock(r6, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0xfffffffffffffffa, 0x6, r7}) 2.581976671s ago: executing program 3 (id=2699): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x288402, 0x43) r3 = dup3(r1, r2, 0x80000) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x2) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000100)={0x40, 0x22, 0x4f, {0x4f, 0x31, "623782eba84db77e317623f39d5ba63bf0720ea63bf37bd8862b3f439da27f8bce04f6cd886ef59e404554009e677cfdecab3210748403d3ac9e356105e9d932f0d6b80aad7501fdd85f103d62"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x9, 0x3, 0x280a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000640)={0x20, 0xb, 0xfffffcf0, '`'}, &(0x7f0000000200)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000780)={0x21, 0x0, 0x4, "0114d7a6"}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.260964955s ago: executing program 0 (id=2701): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{}, @host, 0xd, 0x100000000, 0x2447, 0x0, 0x400000000005, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x19, 0xe, 0x1c}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x200000c1}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000140)=0x35e854fe, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0f00000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) 1.815903235s ago: executing program 0 (id=2705): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001fd5ce620720c1100c03a0102030109021b0001000010"], 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000100000000000000000000000000000000000ac1414bb00000000000000000002000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00"], 0x13c}}, 0x4040000) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000080)=ANY=[@ANYBLOB="856b1200ff008baaaaaaaaaa86dd60381f3400462f00fc000000000000000000000000000000ff020000000000000000000000000001"], 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0xffffffe3, &(0x7f0000000000)=[{&(0x7f0000001340)={0x0, 0x20, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x0, 0x1c, 0x0, 0x0, @u32=0x5}, @nested={0x0, 0x147, 0x0, 0x1, [@nested={0x0, 0xd6}, @nested={0x0, 0xb}, @typed={0x0, 0x68, 0x0, 0x0, @u32=0x2}, @generic="a3488a39875a29913064bbe6edb9e322d8eb95ea2960ad26fe62aa22822b5defd6b1faf2714548175fa74ce4d2e49445154bf3fdcdbd7355baafa7d7126e4f4eaf5a57c3ef15d7c05c5af4e13df0369cdfe16f2b1d3c68e0b24e53ee8b4e23f195bf9e6d06dd89596fe5f6606f55f9afafaf19ee2d2cfc96cb33c55f8fbf1dec366c579387b12a48f77332", @typed={0x0, 0x12a, 0x0, 0x0, @str='.%,\x00'}, @typed={0x0, 0x25, 0x0, 0x0, @fd=r3}]}]}}, {&(0x7f0000001440)={0x0, 0x3a, 0x7909756822d52653, 0x70bd25, 0x25dfdbfd, "", [@nested={0x0, 0x6e, 0x0, 0x1, [@nested={0x0, 0x5}, @generic="8f1b4e7663a276ce6f1bfc79c4606ad2d2c08fdbbb2f7888f7331227496b1a211b7aabf1e66416849bab3559534e8ed77d2f64f2546aa29df33e69f588e27a2e0539115e6c2f161d85d47dc34d6e6c51545eec258e9701aeb0a4bb551d06351f7eb2d0d0d699a01122bc2de7c3e0ef799c645bb2706dc189ef7bb0faf186c72371a2305065b35a626cb1f69afe0f5273eb9221a5b1e511e537ceff8c350274a8c94105743b4e44dc50f31eaba3011d3f3570855b1f0c923223c0e2b2f1566c4f5cc7655c5e177d759bc1594a3fe1faf5e823ac0df2d751994ff3ccdcf00d69115de0fa156fcc4418a49a3a46b6", @typed={0x0, 0x114, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x0, 0x63, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x0, 0x7f, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x0, 0xab, 0x0, 0x0, @str='\x00'}, @nested={0x0, 0xe0, 0x0, 0x1, [@typed={0x0, 0xf9, 0x0, 0x0, @binary="526de1f4e1b822c8e3558274a81b7f36105e02f2b8cb24463e8f7a0767ede028892fb4d73bcfdb4277d15c378e6e000998933c8c9e8e1ba506eea5eb94156ce450500d1bcf0edbcad62f16e2091043a3d46b3a5063f3ba7203ff155204f419f170a36dc5f820f2fc52301f5d564cf5d4b9f9110f2bea76a2ee9d6a807f58800a211d390fc731485cb698114018c7c57f9c1a2d0b51e1775508"}, @nested={0x0, 0x16}]}, @typed={0x0, 0x70, 0x0, 0x0, @ipv4=@remote}, @generic="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"]}}], 0x1}, 0x24048044) 397.755507ms ago: executing program 4 (id=2715): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{}, @host, 0xd, 0x100000000, 0x2447, 0x0, 0x400000000005, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x19, 0xe, 0x1c}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x200000c1}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000140)=0x35e854fe, 0x4) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf0f00000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x50) 356.438107ms ago: executing program 4 (id=2716): r0 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r1 = syz_pidfd_open(r0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = memfd_create(0x0, 0x4) execveat(r5, 0x0, 0x0, 0x0, 0x1000) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000140)=@abs={0x1}, 0x6e) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, 0x0, 0x0) 271.818432ms ago: executing program 4 (id=2717): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5000000000003ad0d6a200000000c00095"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0x1}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40011}, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x3, 0x8, 0x2, "0b36b49f3fe090c44d47373e2d4236aa5a35ca521f7e1f3eb6b8297981e36d7c", 0x34565559}) 128.106289ms ago: executing program 4 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 118.656933ms ago: executing program 4 (id=2719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) fchown(r6, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r8, 0x707, &(0x7f0000000a40)={0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000380), &(0x7f00000002c0)=r4}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x203, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4400, 0x100}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400400000fdffffff0000ffff", @ANYRESHEX=r0, @ANYBLOB="08010000000100000000128009000100766c616e0000000014000280100003800c00010009000000080000000500210001000000d305de56f60fedf46bac8e003ad4935fcad549780111e27197ae34273589c807e21531d4b66e6207c2b559526e05eff71bc0049bcbab8c0487cfb741598cd926d9d601d29d06e4f3d79534dc471a99477ffa0ae0f6"], 0x4c}}, 0x0) 0s ago: executing program 4 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.900148][T10758] usb 6-1: Product: syz [ 1162.900162][T10758] usb 6-1: Manufacturer: syz [ 1162.900177][T10758] usb 6-1: SerialNumber: syz [ 1162.918906][ T5890] usb 4-1: config 0 descriptor?? [ 1162.920743][T10758] usb 6-1: config 0 descriptor?? [ 1163.026332][ T5985] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 1163.026361][ T5985] usb 1-1: config 0 has no interface number 0 [ 1163.039092][ T5985] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1163.039129][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.039150][ T5985] usb 1-1: Product: syz [ 1163.039165][ T5985] usb 1-1: Manufacturer: syz [ 1163.039180][ T5985] usb 1-1: SerialNumber: syz [ 1163.059559][ T5890] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1163.203433][ T5985] usb 1-1: config 0 descriptor?? [ 1163.229011][T10758] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1163.290264][ T5985] ljca 1-1:0.84: bulk endpoints not found [ 1163.484005][T10657] Bluetooth: hci1: command 0x0406 tx timeout [ 1163.582920][T14399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.689041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.047832][T14411] FAULT_INJECTION: forcing a failure. [ 1164.047832][T14411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.047866][T14411] CPU: 0 UID: 0 PID: 14411 Comm: syz.4.2450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1164.047890][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1164.047903][T14411] Call Trace: [ 1164.047915][T14411] [ 1164.047926][T14411] dump_stack_lvl+0x189/0x250 [ 1164.047963][T14411] ? __pfx____ratelimit+0x10/0x10 [ 1164.047995][T14411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.048021][T14411] ? __pfx__printk+0x10/0x10 [ 1164.048045][T14411] ? __might_fault+0xb0/0x130 [ 1164.048082][T14411] should_fail_ex+0x46c/0x600 [ 1164.048114][T14411] _copy_from_user+0x2d/0xb0 [ 1164.048135][T14411] ___sys_recvmsg+0x12e/0x510 [ 1164.048164][T14411] ? __pfx____sys_recvmsg+0x10/0x10 [ 1164.048212][T14411] ? __fget_files+0x3a6/0x420 [ 1164.048248][T14411] do_recvmmsg+0x30d/0x770 [ 1164.048281][T14411] ? __pfx_do_recvmmsg+0x10/0x10 [ 1164.048301][T14411] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1164.048328][T14411] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1164.048365][T14411] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1164.048403][T14411] __x64_sys_recvmmsg+0x190/0x240 [ 1164.048430][T14411] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1164.048457][T14411] ? do_syscall_64+0xbe/0xfa0 [ 1164.048486][T14411] do_syscall_64+0xfa/0xfa0 [ 1164.048513][T14411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.048531][T14411] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1164.048549][T14411] ? clear_bhb_loop+0x60/0xb0 [ 1164.048569][T14411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.048583][T14411] RIP: 0033:0x7f62e8e7f6c9 [ 1164.048597][T14411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.048610][T14411] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1164.048626][T14411] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1164.048638][T14411] RDX: 0000000000000001 RSI: 0000200000008ac0 RDI: 0000000000000003 [ 1164.048648][T14411] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.048658][T14411] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 1164.048668][T14411] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1164.048697][T14411] [ 1164.130054][ T3569] usb 4-1: Failed to submit usb control message: -110 [ 1164.130172][ T3569] usb 4-1: unable to send the bmi data to the device: -110 [ 1164.130191][ T3569] usb 4-1: unable to get target info from device [ 1164.130206][ T3569] usb 4-1: could not get target info (-110) [ 1164.131810][ T3569] usb 4-1: could not probe fw (-110) [ 1164.370518][T11482] usb 6-1: Failed to submit usb control message: -110 [ 1164.370552][T11482] usb 6-1: unable to send the bmi data to the device: -110 [ 1164.370569][T11482] usb 6-1: unable to get target info from device [ 1164.370584][T11482] usb 6-1: could not get target info (-110) [ 1164.370710][T11482] usb 6-1: could not probe fw (-110) [ 1164.448295][T14416] FAULT_INJECTION: forcing a failure. [ 1164.448295][T14416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.448329][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.4.2452 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1164.448352][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1164.448365][T14416] Call Trace: [ 1164.448372][T14416] [ 1164.448381][T14416] dump_stack_lvl+0x189/0x250 [ 1164.448413][T14416] ? __pfx____ratelimit+0x10/0x10 [ 1164.448438][T14416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.448468][T14416] ? __pfx__printk+0x10/0x10 [ 1164.448492][T14416] ? __might_fault+0xb0/0x130 [ 1164.448529][T14416] should_fail_ex+0x46c/0x600 [ 1164.448559][T14416] _copy_from_user+0x2d/0xb0 [ 1164.448581][T14416] __sys_bpf+0x1e3/0x860 [ 1164.448609][T14416] ? __pfx___sys_bpf+0x10/0x10 [ 1164.448630][T14416] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1164.448669][T14416] ? ksys_write+0x230/0x260 [ 1164.448694][T14416] ? __pfx_ksys_write+0x10/0x10 [ 1164.448724][T14416] __x64_sys_bpf+0x7c/0x90 [ 1164.448749][T14416] do_syscall_64+0xfa/0xfa0 [ 1164.448773][T14416] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.448798][T14416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.448817][T14416] ? clear_bhb_loop+0x60/0xb0 [ 1164.448841][T14416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.448860][T14416] RIP: 0033:0x7f62e8e7f6c9 [ 1164.448878][T14416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.448895][T14416] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1164.448922][T14416] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1164.448937][T14416] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 1164.448950][T14416] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.448963][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.448975][T14416] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1164.449009][T14416] [ 1164.468477][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.646531][T14420] FAULT_INJECTION: forcing a failure. [ 1164.646531][T14420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.646564][T14420] CPU: 0 UID: 0 PID: 14420 Comm: syz.2.2454 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1164.646587][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1164.646598][T14420] Call Trace: [ 1164.646607][T14420] [ 1164.646616][T14420] dump_stack_lvl+0x189/0x250 [ 1164.646648][T14420] ? __pfx____ratelimit+0x10/0x10 [ 1164.646673][T14420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.646700][T14420] ? __pfx__printk+0x10/0x10 [ 1164.646731][T14420] ? __might_fault+0xb0/0x130 [ 1164.646770][T14420] should_fail_ex+0x46c/0x600 [ 1164.646801][T14420] _copy_from_user+0x2d/0xb0 [ 1164.646823][T14420] do_ip_vs_set_ctl+0x2d3/0xa60 [ 1164.646858][T14420] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1164.646887][T14420] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.646919][T14420] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1164.646953][T14420] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1164.647037][T14420] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1164.647067][T14420] ? nf_setsockopt+0x221/0x290 [ 1164.647098][T14420] nf_setsockopt+0x26f/0x290 [ 1164.647134][T14420] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1164.647163][T14420] do_sock_setsockopt+0x17c/0x1b0 [ 1164.647189][T14420] __x64_sys_setsockopt+0x145/0x1b0 [ 1164.647216][T14420] do_syscall_64+0xfa/0xfa0 [ 1164.647241][T14420] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.647264][T14420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.647283][T14420] ? clear_bhb_loop+0x60/0xb0 [ 1164.647311][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.647329][T14420] RIP: 0033:0x7fb219f7f6c9 [ 1164.647349][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.647365][T14420] RSP: 002b:00007fb2181de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1164.647387][T14420] RAX: ffffffffffffffda RBX: 00007fb21a1d5fa0 RCX: 00007fb219f7f6c9 [ 1164.647401][T14420] RDX: 0000000000000489 RSI: 0000000000000000 RDI: 0000000000000003 [ 1164.647414][T14420] RBP: 00007fb2181de090 R08: 0000000000000044 R09: 0000000000000000 [ 1164.647426][T14420] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1164.647439][T14420] R13: 00007fb21a1d6038 R14: 00007fb21a1d5fa0 R15: 00007ffe236f0a08 [ 1164.647471][T14420] [ 1164.994018][T10758] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1165.147993][T10758] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1165.148022][T10758] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1165.148043][T10758] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.148063][T10758] usb 3-1: config 220 has no interface number 2 [ 1165.148139][T10758] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1165.148159][T10758] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1165.148169][T10758] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1165.148179][T10758] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1165.150800][T10758] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1165.150830][T10758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.150852][T10758] usb 3-1: Product: syz [ 1165.150865][T10758] usb 3-1: Manufacturer: syz [ 1165.150873][T10758] usb 3-1: SerialNumber: syz [ 1165.416876][T10758] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1165.416899][T10758] uvcvideo 3-1:220.0: No valid video chain found. [ 1165.416936][T10758] usb 3-1: selecting invalid altsetting 0 [ 1165.441949][T10758] usb 3-1: selecting invalid altsetting 0 [ 1165.441986][T10758] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1165.482818][ T44] usb 1-1: USB disconnect, device number 70 [ 1165.486391][ T5807] usb 4-1: USB disconnect, device number 84 [ 1165.502660][T10758] usb 3-1: USB disconnect, device number 117 [ 1165.766157][T11439] usb 6-1: USB disconnect, device number 39 [ 1166.017352][T14442] FAULT_INJECTION: forcing a failure. [ 1166.017352][T14442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.017385][T14442] CPU: 1 UID: 0 PID: 14442 Comm: syz.0.2466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1166.017407][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1166.017419][T14442] Call Trace: [ 1166.017427][T14442] [ 1166.017436][T14442] dump_stack_lvl+0x189/0x250 [ 1166.017467][T14442] ? __pfx____ratelimit+0x10/0x10 [ 1166.017493][T14442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.017519][T14442] ? __pfx__printk+0x10/0x10 [ 1166.017541][T14442] ? __might_fault+0xb0/0x130 [ 1166.017585][T14442] should_fail_ex+0x46c/0x600 [ 1166.017615][T14442] _copy_from_user+0x2d/0xb0 [ 1166.017636][T14442] ___sys_sendmsg+0x158/0x2a0 [ 1166.017662][T14442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1166.017722][T14442] ? __fget_files+0x2a/0x420 [ 1166.017746][T14442] ? __fget_files+0x3a6/0x420 [ 1166.017781][T14442] __sys_sendmmsg+0x22d/0x430 [ 1166.017807][T14442] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1166.017840][T14442] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1166.017880][T14442] ? ksys_write+0x230/0x260 [ 1166.017906][T14442] ? __pfx_ksys_write+0x10/0x10 [ 1166.017934][T14442] __x64_sys_sendmmsg+0xa0/0xc0 [ 1166.017959][T14442] do_syscall_64+0xfa/0xfa0 [ 1166.017983][T14442] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.018007][T14442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.018027][T14442] ? clear_bhb_loop+0x60/0xb0 [ 1166.018050][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.018069][T14442] RIP: 0033:0x7f3465a1f6c9 [ 1166.018086][T14442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.018104][T14442] RSP: 002b:00007f3463c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1166.018124][T14442] RAX: ffffffffffffffda RBX: 00007f3465c75fa0 RCX: 00007f3465a1f6c9 [ 1166.018139][T14442] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000003 [ 1166.018151][T14442] RBP: 00007f3463c86090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.018163][T14442] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001 [ 1166.018175][T14442] R13: 00007f3465c76038 R14: 00007f3465c75fa0 R15: 00007fff78b49348 [ 1166.018206][T14442] [ 1166.444374][T14454] FAULT_INJECTION: forcing a failure. [ 1166.444374][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.444402][T14454] CPU: 1 UID: 0 PID: 14454 Comm: syz.5.2471 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1166.444418][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1166.444427][T14454] Call Trace: [ 1166.444433][T14454] [ 1166.444440][T14454] dump_stack_lvl+0x189/0x250 [ 1166.444465][T14454] ? __pfx____ratelimit+0x10/0x10 [ 1166.444485][T14454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.444504][T14454] ? __pfx__printk+0x10/0x10 [ 1166.444522][T14454] ? __might_fault+0xb0/0x130 [ 1166.444550][T14454] should_fail_ex+0x46c/0x600 [ 1166.444581][T14454] _copy_from_user+0x2d/0xb0 [ 1166.444599][T14454] __sys_connect+0x124/0x450 [ 1166.444615][T14454] ? do_sys_openat2+0x154/0x1c0 [ 1166.444628][T14454] ? __pfx___sys_connect+0x10/0x10 [ 1166.444652][T14454] ? __pfx_ksys_write+0x10/0x10 [ 1166.444674][T14454] __x64_sys_connect+0x7a/0x90 [ 1166.444689][T14454] do_syscall_64+0xfa/0xfa0 [ 1166.444707][T14454] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.444725][T14454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.444739][T14454] ? clear_bhb_loop+0x60/0xb0 [ 1166.444756][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.444769][T14454] RIP: 0033:0x7fc81c60f6c9 [ 1166.444783][T14454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.444796][T14454] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1166.444812][T14454] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1166.444824][T14454] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000004 [ 1166.444833][T14454] RBP: 00007fc81a86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.444842][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.444851][T14454] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1166.444876][T14454] [ 1166.488246][T14451] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1166.488442][T14451] syzkaller1: linktype set to 776 [ 1166.555724][T14449] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2468'. [ 1166.856137][T14466] FAULT_INJECTION: forcing a failure. [ 1166.856137][T14466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.856174][T14466] CPU: 1 UID: 0 PID: 14466 Comm: syz.5.2475 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1166.856197][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1166.856209][T14466] Call Trace: [ 1166.856218][T14466] [ 1166.856227][T14466] dump_stack_lvl+0x189/0x250 [ 1166.856259][T14466] ? __pfx____ratelimit+0x10/0x10 [ 1166.856285][T14466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.856311][T14466] ? __pfx__printk+0x10/0x10 [ 1166.856334][T14466] ? __might_fault+0xb0/0x130 [ 1166.856370][T14466] should_fail_ex+0x46c/0x600 [ 1166.856401][T14466] _copy_from_user+0x2d/0xb0 [ 1166.856420][T14466] llc_ui_setsockopt+0x137/0x5f0 [ 1166.856444][T14466] ? __pfx_llc_ui_setsockopt+0x10/0x10 [ 1166.856463][T14466] ? __fget_files+0x2a/0x420 [ 1166.856481][T14466] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1166.856505][T14466] ? __pfx_llc_ui_setsockopt+0x10/0x10 [ 1166.856528][T14466] do_sock_setsockopt+0x17c/0x1b0 [ 1166.856555][T14466] __x64_sys_setsockopt+0x145/0x1b0 [ 1166.856583][T14466] do_syscall_64+0xfa/0xfa0 [ 1166.856607][T14466] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.856631][T14466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.856651][T14466] ? clear_bhb_loop+0x60/0xb0 [ 1166.856675][T14466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.856691][T14466] RIP: 0033:0x7fc81c60f6c9 [ 1166.856708][T14466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.856724][T14466] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1166.856744][T14466] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1166.856759][T14466] RDX: 0000000000000009 RSI: 000000000000010c RDI: 0000000000000004 [ 1166.856770][T14466] RBP: 00007fc81a86e090 R08: 0000000000000004 R09: 0000000000000000 [ 1166.856781][T14466] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 1166.856799][T14466] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1166.856830][T14466] [ 1166.994075][ T5807] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1167.154148][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 1167.156210][T14472] FAULT_INJECTION: forcing a failure. [ 1167.156210][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.156243][T14472] CPU: 0 UID: 0 PID: 14472 Comm: syz.5.2477 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1167.156264][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1167.156276][T14472] Call Trace: [ 1167.156284][T14472] [ 1167.156293][T14472] dump_stack_lvl+0x189/0x250 [ 1167.156325][T14472] ? __pfx____ratelimit+0x10/0x10 [ 1167.156349][T14472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.156376][T14472] ? __pfx__printk+0x10/0x10 [ 1167.156399][T14472] ? __might_fault+0xb0/0x130 [ 1167.156434][T14472] should_fail_ex+0x46c/0x600 [ 1167.156464][T14472] _copy_from_user+0x2d/0xb0 [ 1167.156485][T14472] __sys_bpf+0x1e3/0x860 [ 1167.156522][T14472] ? __pfx___sys_bpf+0x10/0x10 [ 1167.156543][T14472] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1167.156581][T14472] ? ksys_write+0x230/0x260 [ 1167.156605][T14472] ? __pfx_ksys_write+0x10/0x10 [ 1167.156633][T14472] __x64_sys_bpf+0x7c/0x90 [ 1167.156658][T14472] do_syscall_64+0xfa/0xfa0 [ 1167.156681][T14472] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.156705][T14472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.156725][T14472] ? clear_bhb_loop+0x60/0xb0 [ 1167.156753][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.156772][T14472] RIP: 0033:0x7fc81c60f6c9 [ 1167.156789][T14472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.156806][T14472] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1167.156827][T14472] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1167.156842][T14472] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1167.156854][T14472] RBP: 00007fc81a86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.156867][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.156879][T14472] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1167.156897][ T5807] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1167.156912][T14472] [ 1167.156922][ T5807] usb 4-1: config 0 has no interface number 0 [ 1167.160010][ T5807] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1167.160037][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.160057][ T5807] usb 4-1: Product: syz [ 1167.160070][ T5807] usb 4-1: Manufacturer: syz [ 1167.160084][ T5807] usb 4-1: SerialNumber: syz [ 1167.178259][ T5807] usb 4-1: config 0 descriptor?? [ 1167.193229][ T5807] smsc95xx v2.0.0 [ 1167.193250][ T5807] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1167.193520][ T5807] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1167.462902][T11439] usb 4-1: USB disconnect, device number 85 [ 1167.494202][ T5807] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1167.662639][T14486] FAULT_INJECTION: forcing a failure. [ 1167.662639][T14486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.662682][T14486] CPU: 0 UID: 0 PID: 14486 Comm: syz.4.2485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1167.662705][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1167.662717][T14486] Call Trace: [ 1167.662726][T14486] [ 1167.662734][T14486] dump_stack_lvl+0x189/0x250 [ 1167.662770][T14486] ? __pfx____ratelimit+0x10/0x10 [ 1167.662795][T14486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1167.662821][T14486] ? __pfx__printk+0x10/0x10 [ 1167.662843][T14486] ? __might_fault+0xb0/0x130 [ 1167.662880][T14486] should_fail_ex+0x46c/0x600 [ 1167.662910][T14486] _copy_from_user+0x2d/0xb0 [ 1167.662930][T14486] ___sys_sendmsg+0x158/0x2a0 [ 1167.662955][T14486] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.663015][T14486] ? __fget_files+0x2a/0x420 [ 1167.663039][T14486] ? __fget_files+0x3a6/0x420 [ 1167.663072][T14486] __x64_sys_sendmsg+0x1a1/0x260 [ 1167.663098][T14486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.663129][T14486] ? __pfx_ksys_write+0x10/0x10 [ 1167.663153][T14486] ? do_syscall_64+0xbe/0xfa0 [ 1167.663181][T14486] do_syscall_64+0xfa/0xfa0 [ 1167.663204][T14486] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.663228][T14486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.663248][T14486] ? clear_bhb_loop+0x60/0xb0 [ 1167.663272][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.663290][T14486] RIP: 0033:0x7f62e8e7f6c9 [ 1167.663307][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.663324][T14486] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.663345][T14486] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1167.663359][T14486] RDX: 0000000008000812 RSI: 0000200000000080 RDI: 0000000000000004 [ 1167.663372][T14486] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.663385][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.663398][T14486] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1167.663430][T14486] [ 1167.666558][ T5807] usb 3-1: config index 0 descriptor too short (expected 64051, got 10) [ 1167.666587][ T5807] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 1167.666608][ T5807] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1167.666628][ T5807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 1167.704323][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2481'. [ 1167.744638][ T5807] usb 3-1: New USB device found, idVendor=0456, idProduct=b000, bcdDevice=ab.07 [ 1167.744669][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.744691][ T5807] usb 3-1: Product: syz [ 1167.744706][ T5807] usb 3-1: Manufacturer: syz [ 1167.744721][ T5807] usb 3-1: SerialNumber: syz [ 1167.772058][ T5807] usb 3-1: config 0 descriptor?? [ 1167.998558][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.025881][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.082128][ T5807] usb 3-1: USB disconnect, device number 118 [ 1168.213484][T14499] FAULT_INJECTION: forcing a failure. [ 1168.213484][T14499] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.213516][T14499] CPU: 1 UID: 0 PID: 14499 Comm: syz.3.2489 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1168.213538][T14499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1168.213550][T14499] Call Trace: [ 1168.213559][T14499] [ 1168.213567][T14499] dump_stack_lvl+0x189/0x250 [ 1168.213598][T14499] ? __pfx____ratelimit+0x10/0x10 [ 1168.213622][T14499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.213647][T14499] ? __pfx__printk+0x10/0x10 [ 1168.213674][T14499] ? __pfx___might_resched+0x10/0x10 [ 1168.213698][T14499] should_fail_ex+0x46c/0x600 [ 1168.213729][T14499] should_failslab+0xa8/0x100 [ 1168.213757][T14499] __kmalloc_noprof+0xcc/0x7d0 [ 1168.213778][T14499] ? rcu_read_lock_any_held+0xb3/0x120 [ 1168.213796][T14499] ? kernfs_fop_write_iter+0x159/0x540 [ 1168.213819][T14499] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1168.213844][T14499] kernfs_fop_write_iter+0x159/0x540 [ 1168.213874][T14499] vfs_write+0x5d5/0xb40 [ 1168.213899][T14499] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1168.213924][T14499] ? __pfx_vfs_write+0x10/0x10 [ 1168.213943][T14499] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1168.213973][T14499] ? mutex_lock_nested+0x154/0x1d0 [ 1168.213992][T14499] ? fdget_pos+0x253/0x320 [ 1168.214023][T14499] ksys_write+0x14b/0x260 [ 1168.214047][T14499] ? __pfx_ksys_write+0x10/0x10 [ 1168.214073][T14499] ? do_syscall_64+0xbe/0xfa0 [ 1168.214102][T14499] do_syscall_64+0xfa/0xfa0 [ 1168.214124][T14499] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.214148][T14499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.214166][T14499] ? clear_bhb_loop+0x60/0xb0 [ 1168.214188][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.214206][T14499] RIP: 0033:0x7f5cc3c4f6c9 [ 1168.214223][T14499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.214239][T14499] RSP: 002b:00007f5cc1eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1168.214261][T14499] RAX: ffffffffffffffda RBX: 00007f5cc3ea5fa0 RCX: 00007f5cc3c4f6c9 [ 1168.214275][T14499] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000004 [ 1168.214289][T14499] RBP: 00007f5cc1eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.214301][T14499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.214314][T14499] R13: 00007f5cc3ea6038 R14: 00007f5cc3ea5fa0 R15: 00007ffc492e8428 [ 1168.214357][T14499] [ 1168.500463][T14503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.556948][T14503] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1168.724002][T10758] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1168.744864][T14516] netlink: 22615 bytes leftover after parsing attributes in process `syz.0.2495'. [ 1168.762388][T14521] FAULT_INJECTION: forcing a failure. [ 1168.762388][T14521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.762420][T14521] CPU: 1 UID: 0 PID: 14521 Comm: syz.4.2496 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1168.762443][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1168.762455][T14521] Call Trace: [ 1168.762463][T14521] [ 1168.762471][T14521] dump_stack_lvl+0x189/0x250 [ 1168.762502][T14521] ? __pfx____ratelimit+0x10/0x10 [ 1168.762526][T14521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.762552][T14521] ? __pfx__printk+0x10/0x10 [ 1168.762593][T14521] should_fail_ex+0x46c/0x600 [ 1168.762623][T14521] _copy_from_user+0x2d/0xb0 [ 1168.762645][T14521] copy_safe_from_sockptr+0x6c/0xd0 [ 1168.762667][T14521] l2cap_sock_setsockopt+0x4d9/0x1d20 [ 1168.762706][T14521] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 1168.762742][T14521] ? notify_change+0x30/0xf60 [ 1168.762766][T14521] ? __fget_files+0x2a/0x420 [ 1168.762790][T14521] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1168.762814][T14521] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 1168.762842][T14521] do_sock_setsockopt+0x17c/0x1b0 [ 1168.762869][T14521] __x64_sys_setsockopt+0x145/0x1b0 [ 1168.762896][T14521] do_syscall_64+0xfa/0xfa0 [ 1168.762919][T14521] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.762944][T14521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.762962][T14521] ? clear_bhb_loop+0x60/0xb0 [ 1168.762985][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.763003][T14521] RIP: 0033:0x7f62e8e7f6c9 [ 1168.763020][T14521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.763037][T14521] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1168.763059][T14521] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1168.763074][T14521] RDX: 000000000000000f RSI: 0000000000000112 RDI: 0000000000000004 [ 1168.763086][T14521] RBP: 00007f62e70e6090 R08: 0000000000000004 R09: 0000000000000000 [ 1168.763098][T14521] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1168.763111][T14521] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1168.763144][T14521] [ 1168.873970][T10758] usb 4-1: Using ep0 maxpacket: 32 [ 1168.904758][T10758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1168.904793][T10758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1168.954260][T10758] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1168.954513][T10758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.954538][T10758] usb 4-1: Product: syz [ 1168.954554][T10758] usb 4-1: Manufacturer: syz [ 1168.954570][T10758] usb 4-1: SerialNumber: syz [ 1169.049695][T10758] usb 4-1: config 0 descriptor?? [ 1169.096097][T10758] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1169.143001][T14531] FAULT_INJECTION: forcing a failure. [ 1169.143001][T14531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.143034][T14531] CPU: 0 UID: 0 PID: 14531 Comm: syz.2.2500 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1169.143056][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1169.143067][T14531] Call Trace: [ 1169.143075][T14531] [ 1169.143084][T14531] dump_stack_lvl+0x189/0x250 [ 1169.143116][T14531] ? __pfx____ratelimit+0x10/0x10 [ 1169.143140][T14531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.143167][T14531] ? __pfx__printk+0x10/0x10 [ 1169.143188][T14531] ? __might_fault+0xb0/0x130 [ 1169.143223][T14531] should_fail_ex+0x46c/0x600 [ 1169.143254][T14531] _copy_from_user+0x2d/0xb0 [ 1169.143276][T14531] ___sys_sendmsg+0x158/0x2a0 [ 1169.143301][T14531] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.143370][T14531] ? __fget_files+0x2a/0x420 [ 1169.143394][T14531] ? __fget_files+0x3a6/0x420 [ 1169.143429][T14531] __x64_sys_sendmsg+0x1a1/0x260 [ 1169.143454][T14531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1169.143485][T14531] ? __pfx_ksys_write+0x10/0x10 [ 1169.143513][T14531] ? do_syscall_64+0xbe/0xfa0 [ 1169.143541][T14531] do_syscall_64+0xfa/0xfa0 [ 1169.143564][T14531] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.143586][T14531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.143605][T14531] ? clear_bhb_loop+0x60/0xb0 [ 1169.143629][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.143648][T14531] RIP: 0033:0x7fb219f7f6c9 [ 1169.143664][T14531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.143679][T14531] RSP: 002b:00007fb2181de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.143696][T14531] RAX: ffffffffffffffda RBX: 00007fb21a1d5fa0 RCX: 00007fb219f7f6c9 [ 1169.143708][T14531] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1169.143718][T14531] RBP: 00007fb2181de090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.143728][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.143738][T14531] R13: 00007fb21a1d6038 R14: 00007fb21a1d5fa0 R15: 00007ffe236f0a08 [ 1169.143766][T14531] [ 1169.495603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.703977][T10758] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1169.761124][T14547] FAULT_INJECTION: forcing a failure. [ 1169.761124][T14547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.761159][T14547] CPU: 0 UID: 0 PID: 14547 Comm: syz.4.2507 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1169.761182][T14547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1169.761195][T14547] Call Trace: [ 1169.761204][T14547] [ 1169.761213][T14547] dump_stack_lvl+0x189/0x250 [ 1169.761246][T14547] ? __pfx____ratelimit+0x10/0x10 [ 1169.761261][T14547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1169.761276][T14547] ? __pfx__printk+0x10/0x10 [ 1169.761301][T14547] ? __might_fault+0xb0/0x130 [ 1169.761337][T14547] should_fail_ex+0x46c/0x600 [ 1169.761368][T14547] _copy_from_user+0x2d/0xb0 [ 1169.761390][T14547] ___sys_sendmsg+0x158/0x2a0 [ 1169.761411][T14547] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.761442][T14547] ? __fget_files+0x2a/0x420 [ 1169.761460][T14547] ? __fget_files+0x3a6/0x420 [ 1169.761495][T14547] __x64_sys_sendmsg+0x1a1/0x260 [ 1169.761521][T14547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1169.761554][T14547] ? __pfx_ksys_write+0x10/0x10 [ 1169.761580][T14547] ? do_syscall_64+0xbe/0xfa0 [ 1169.761598][T14547] do_syscall_64+0xfa/0xfa0 [ 1169.761611][T14547] ? lockdep_hardirqs_on+0x9c/0x150 [ 1169.761627][T14547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.761646][T14547] ? clear_bhb_loop+0x60/0xb0 [ 1169.761669][T14547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.761688][T14547] RIP: 0033:0x7f62e8e7f6c9 [ 1169.761706][T14547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1169.761723][T14547] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.761743][T14547] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1169.761753][T14547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1169.761760][T14547] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.761766][T14547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.761773][T14547] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1169.761790][T14547] [ 1169.895913][T10758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.895948][T10758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.929419][T10758] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1169.929443][T10758] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1169.929454][T10758] usb 1-1: Manufacturer: syz [ 1170.044212][T10758] usb 1-1: config 0 descriptor?? [ 1170.208491][ T13] usb 4-1: Failed to submit usb control message: -110 [ 1170.208517][ T13] usb 4-1: unable to send the bmi data to the device: -110 [ 1170.208527][ T13] usb 4-1: unable to get target info from device [ 1170.208536][ T13] usb 4-1: could not get target info (-110) [ 1170.208621][ T13] usb 4-1: could not probe fw (-110) [ 1170.350778][T14552] FAULT_INJECTION: forcing a failure. [ 1170.350778][T14552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.350814][T14552] CPU: 1 UID: 0 PID: 14552 Comm: syz.4.2509 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1170.350837][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1170.350849][T14552] Call Trace: [ 1170.350857][T14552] [ 1170.350866][T14552] dump_stack_lvl+0x189/0x250 [ 1170.350897][T14552] ? __pfx____ratelimit+0x10/0x10 [ 1170.350921][T14552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1170.350947][T14552] ? __pfx__printk+0x10/0x10 [ 1170.350970][T14552] ? __might_fault+0xb0/0x130 [ 1170.351004][T14552] should_fail_ex+0x46c/0x600 [ 1170.351034][T14552] _copy_from_user+0x2d/0xb0 [ 1170.351056][T14552] ___sys_recvmsg+0x12e/0x510 [ 1170.351084][T14552] ? __pfx____sys_recvmsg+0x10/0x10 [ 1170.351130][T14552] ? __fget_files+0x3a6/0x420 [ 1170.351164][T14552] do_recvmmsg+0x30d/0x770 [ 1170.351193][T14552] ? __pfx_do_recvmmsg+0x10/0x10 [ 1170.351211][T14552] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1170.351241][T14552] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1170.351277][T14552] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1170.351314][T14552] __x64_sys_recvmmsg+0x190/0x240 [ 1170.351341][T14552] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1170.351367][T14552] ? do_syscall_64+0xbe/0xfa0 [ 1170.351394][T14552] do_syscall_64+0xfa/0xfa0 [ 1170.351417][T14552] ? lockdep_hardirqs_on+0x9c/0x150 [ 1170.351441][T14552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.351467][T14552] ? clear_bhb_loop+0x60/0xb0 [ 1170.351491][T14552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.351510][T14552] RIP: 0033:0x7f62e8e7f6c9 [ 1170.351527][T14552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.351543][T14552] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1170.351563][T14552] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1170.351578][T14552] RDX: 000000000000072a RSI: 0000200000000080 RDI: 0000000000000004 [ 1170.351590][T14552] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.351602][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.351615][T14552] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1170.351646][T14552] [ 1170.523827][T14555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2508'. [ 1170.897175][T14559] wireguard0: entered promiscuous mode [ 1170.897204][T14559] wireguard0: entered allmulticast mode [ 1170.989548][T14572] FAULT_INJECTION: forcing a failure. [ 1170.989548][T14572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.989570][T14572] CPU: 0 UID: 0 PID: 14572 Comm: syz.4.2517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1170.989583][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1170.989590][T14572] Call Trace: [ 1170.989595][T14572] [ 1170.989601][T14572] dump_stack_lvl+0x189/0x250 [ 1170.989622][T14572] ? __pfx____ratelimit+0x10/0x10 [ 1170.989637][T14572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1170.989655][T14572] ? __pfx__printk+0x10/0x10 [ 1170.989669][T14572] ? __might_fault+0xb0/0x130 [ 1170.989690][T14572] should_fail_ex+0x46c/0x600 [ 1170.989708][T14572] _copy_from_user+0x2d/0xb0 [ 1170.989720][T14572] ___sys_sendmsg+0x158/0x2a0 [ 1170.989735][T14572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.989767][T14572] ? __fget_files+0x2a/0x420 [ 1170.989781][T14572] ? __fget_files+0x3a6/0x420 [ 1170.989801][T14572] __x64_sys_sendmsg+0x1a1/0x260 [ 1170.989815][T14572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1170.989833][T14572] ? __pfx_ksys_write+0x10/0x10 [ 1170.989849][T14572] ? do_syscall_64+0xbe/0xfa0 [ 1170.989866][T14572] do_syscall_64+0xfa/0xfa0 [ 1170.989879][T14572] ? lockdep_hardirqs_on+0x9c/0x150 [ 1170.989893][T14572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.989904][T14572] ? clear_bhb_loop+0x60/0xb0 [ 1170.989916][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.989926][T14572] RIP: 0033:0x7f62e8e7f6c9 [ 1170.989937][T14572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.989946][T14572] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1170.989958][T14572] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1170.989966][T14572] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1170.989973][T14572] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.989980][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.989987][T14572] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1170.990005][T14572] [ 1171.289226][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.347298][T10758] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0030/input/input99 [ 1171.432167][T10758] uclogic 0003:256C:006D.0030: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1171.474840][T10758] usb 4-1: USB disconnect, device number 86 [ 1171.531914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.619781][ T5827] usb 1-1: USB disconnect, device number 71 [ 1171.670496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.721891][T14583] fido_id[14583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1171.825214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.845615][T14587] FAULT_INJECTION: forcing a failure. [ 1171.845615][T14587] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.845650][T14587] CPU: 0 UID: 0 PID: 14587 Comm: syz.5.2524 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1171.845677][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1171.845690][T14587] Call Trace: [ 1171.845698][T14587] [ 1171.845707][T14587] dump_stack_lvl+0x189/0x250 [ 1171.845740][T14587] ? __pfx____ratelimit+0x10/0x10 [ 1171.845766][T14587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1171.845792][T14587] ? __pfx__printk+0x10/0x10 [ 1171.845822][T14587] ? __pfx___might_resched+0x10/0x10 [ 1171.845848][T14587] should_fail_ex+0x46c/0x600 [ 1171.845881][T14587] should_failslab+0xa8/0x100 [ 1171.845910][T14587] __kmalloc_noprof+0xcc/0x7d0 [ 1171.845933][T14587] ? kfree+0x51/0x950 [ 1171.845952][T14587] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1171.845983][T14587] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1171.846007][T14587] ? tomoyo_domain+0xda/0x130 [ 1171.846035][T14587] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1171.846064][T14587] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1171.846094][T14587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1171.846126][T14587] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1171.846152][T14587] ? lockdep_hardirqs_on+0x9c/0x150 [ 1171.846208][T14587] ? __fget_files+0x2a/0x420 [ 1171.846238][T14587] ? __fget_files+0x3a6/0x420 [ 1171.846261][T14587] ? __fget_files+0x2a/0x420 [ 1171.846290][T14587] security_file_ioctl+0xcb/0x2d0 [ 1171.846312][T14587] __se_sys_ioctl+0x47/0x170 [ 1171.846338][T14587] do_syscall_64+0xfa/0xfa0 [ 1171.846367][T14587] ? lockdep_hardirqs_on+0x9c/0x150 [ 1171.846391][T14587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.846411][T14587] ? clear_bhb_loop+0x60/0xb0 [ 1171.846434][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.846453][T14587] RIP: 0033:0x7fc81c60f6c9 [ 1171.846471][T14587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.846488][T14587] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.846509][T14587] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1171.846524][T14587] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1171.846537][T14587] RBP: 00007fc81a86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.846549][T14587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.846560][T14587] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1171.846594][T14587] [ 1171.846719][T14587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1172.180278][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.329279][ C1] vkms_vblank_simulate: vblank timer overrun [ 1172.672031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1173.115253][ T5807] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1173.895490][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.895548][ T5807] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1173.895573][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.901221][ T5807] usb 3-1: config 0 descriptor?? [ 1173.958525][ T5807] pwc: Askey VC010 type 2 USB webcam detected. [ 1174.028289][T14628] FAULT_INJECTION: forcing a failure. [ 1174.028289][T14628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.028322][T14628] CPU: 0 UID: 0 PID: 14628 Comm: syz.4.2538 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1174.028346][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1174.028358][T14628] Call Trace: [ 1174.028367][T14628] [ 1174.028376][T14628] dump_stack_lvl+0x189/0x250 [ 1174.028407][T14628] ? __pfx____ratelimit+0x10/0x10 [ 1174.028433][T14628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.028460][T14628] ? __pfx__printk+0x10/0x10 [ 1174.028500][T14628] should_fail_ex+0x46c/0x600 [ 1174.028532][T14628] _copy_to_user+0x31/0xb0 [ 1174.028556][T14628] simple_read_from_buffer+0xe1/0x170 [ 1174.028591][T14628] proc_fail_nth_read+0x1b6/0x220 [ 1174.028616][T14628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.028641][T14628] ? rw_verify_area+0x2ac/0x4e0 [ 1174.028664][T14628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.028687][T14628] vfs_read+0x206/0xa30 [ 1174.028720][T14628] ? __pfx_vfs_read+0x10/0x10 [ 1174.028739][T14628] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1174.028772][T14628] ? mutex_lock_nested+0x154/0x1d0 [ 1174.028792][T14628] ? fdget_pos+0x253/0x320 [ 1174.028826][T14628] ksys_read+0x14b/0x260 [ 1174.028853][T14628] ? __pfx_ksys_read+0x10/0x10 [ 1174.028879][T14628] ? do_syscall_64+0xbe/0xfa0 [ 1174.028908][T14628] do_syscall_64+0xfa/0xfa0 [ 1174.028932][T14628] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.028956][T14628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.028975][T14628] ? clear_bhb_loop+0x60/0xb0 [ 1174.028999][T14628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.029018][T14628] RIP: 0033:0x7f62e8e7e0dc [ 1174.029036][T14628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1174.029053][T14628] RSP: 002b:00007f62e70e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.029073][T14628] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7e0dc [ 1174.029088][T14628] RDX: 000000000000000f RSI: 00007f62e70e60a0 RDI: 0000000000000005 [ 1174.029101][T14628] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.029113][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.029125][T14628] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1174.029166][T14628] [ 1174.064002][ T5827] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1174.214007][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 1174.260530][ T5827] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1174.260561][ T5827] usb 1-1: config 0 has no interface number 0 [ 1174.301076][ T5827] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1174.301164][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.301187][ T5827] usb 1-1: Product: syz [ 1174.301203][ T5827] usb 1-1: Manufacturer: syz [ 1174.301219][ T5827] usb 1-1: SerialNumber: syz [ 1174.309925][ T5807] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1174.341034][ T5807] pwc: recv_control_msg error -32 req 02 val 2700 [ 1174.343369][ T5807] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1174.349195][T14609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.349927][T14609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.351452][ T5807] pwc: recv_control_msg error -32 req 04 val 1000 [ 1174.364014][ T5807] pwc: recv_control_msg error -32 req 04 val 1300 [ 1174.374040][ T5807] pwc: recv_control_msg error -32 req 04 val 1400 [ 1174.386549][ T5807] pwc: recv_control_msg error -32 req 02 val 2000 [ 1174.399698][ T5807] pwc: recv_control_msg error -32 req 02 val 2100 [ 1174.408571][ T5827] usb 1-1: config 0 descriptor?? [ 1174.419997][ T5827] smsc95xx v2.0.0 [ 1174.420017][ T5827] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1174.420449][ T5827] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1174.478444][T14636] FAULT_INJECTION: forcing a failure. [ 1174.478444][T14636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.478479][T14636] CPU: 0 UID: 0 PID: 14636 Comm: syz.4.2542 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1174.478502][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1174.478512][T14636] Call Trace: [ 1174.478519][T14636] [ 1174.478528][T14636] dump_stack_lvl+0x189/0x250 [ 1174.478558][T14636] ? __pfx____ratelimit+0x10/0x10 [ 1174.478584][T14636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.478611][T14636] ? __pfx__printk+0x10/0x10 [ 1174.478632][T14636] ? __might_fault+0xb0/0x130 [ 1174.478667][T14636] should_fail_ex+0x46c/0x600 [ 1174.478698][T14636] _copy_to_iter+0x1de/0x1790 [ 1174.478728][T14636] ? __local_bh_enable+0x27b/0x410 [ 1174.478758][T14636] ? reacquire_held_locks+0x127/0x1d0 [ 1174.478786][T14636] ? __pfx__copy_to_iter+0x10/0x10 [ 1174.478821][T14636] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 1174.478843][T14636] ? lockdep_hardirqs_on+0x9c/0x150 [ 1174.478880][T14636] __skb_datagram_iter+0x41a/0x990 [ 1174.478906][T14636] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1174.478940][T14636] skb_copy_datagram_iter+0xc5/0x230 [ 1174.478963][T14636] ? virtio_transport_seqpacket_dequeue+0x105/0xc90 [ 1174.478992][T14636] virtio_transport_seqpacket_dequeue+0x653/0xc90 [ 1174.479023][T14636] ? virtio_transport_seqpacket_dequeue+0x105/0xc90 [ 1174.479053][T14636] ? __pfx_virtio_transport_seqpacket_dequeue+0x10/0x10 [ 1174.479073][T14636] ? vsock_connectible_wait_data+0x4df/0x520 [ 1174.479114][T14636] __vsock_connectible_recvmsg+0x5a1/0xb70 [ 1174.479136][T14636] ? __lock_acquire+0xab9/0xd20 [ 1174.479168][T14636] ? __lock_acquire+0xab9/0xd20 [ 1174.479194][T14636] ? __pfx___vsock_connectible_recvmsg+0x10/0x10 [ 1174.479218][T14636] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1174.479257][T14636] ? __fget_files+0x2a/0x420 [ 1174.479286][T14636] ? vsock_connectible_recvmsg+0xba/0xe0 [ 1174.479309][T14636] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 1174.479333][T14636] sock_recvmsg+0x22c/0x270 [ 1174.479363][T14636] __sys_recvfrom+0x206/0x350 [ 1174.479387][T14636] ? __pfx___sys_recvfrom+0x10/0x10 [ 1174.479434][T14636] ? ksys_write+0x230/0x260 [ 1174.479459][T14636] ? __pfx_ksys_write+0x10/0x10 [ 1174.479486][T14636] __x64_sys_recvfrom+0xde/0x100 [ 1174.479511][T14636] do_syscall_64+0xfa/0xfa0 [ 1174.479537][T14636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.479556][T14636] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1174.479574][T14636] ? clear_bhb_loop+0x60/0xb0 [ 1174.479596][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.479614][T14636] RIP: 0033:0x7f62e8e7f6c9 [ 1174.479632][T14636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.479649][T14636] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1174.479670][T14636] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1174.479684][T14636] RDX: 0000000000000107 RSI: 0000200000000140 RDI: 0000000000000005 [ 1174.479697][T14636] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.479710][T14636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.479723][T14636] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1174.479758][T14636] [ 1174.601240][ T5807] pwc: recv_control_msg error -32 req 02 val 2500 [ 1174.601937][ T5807] pwc: recv_control_msg error -32 req 02 val 2400 [ 1174.602779][ T5807] pwc: recv_control_msg error -32 req 02 val 2600 [ 1174.603528][ T5807] pwc: recv_control_msg error -32 req 02 val 2900 [ 1174.684125][ T5985] usb 1-1: USB disconnect, device number 72 [ 1174.824149][ T5807] pwc: recv_control_msg error -71 req 04 val 1100 [ 1174.834101][ T5807] pwc: recv_control_msg error -71 req 04 val 1200 [ 1174.883509][ T5807] pwc: Registered as video103. [ 1174.894757][ T5807] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input100 [ 1174.945816][ T5807] usb 3-1: USB disconnect, device number 119 [ 1175.241246][T14651] FAULT_INJECTION: forcing a failure. [ 1175.241246][T14651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1175.241281][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.4.2548 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1175.241303][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1175.241315][T14651] Call Trace: [ 1175.241322][T14651] [ 1175.241332][T14651] dump_stack_lvl+0x189/0x250 [ 1175.241362][T14651] ? __pfx____ratelimit+0x10/0x10 [ 1175.241386][T14651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.241411][T14651] ? __pfx__printk+0x10/0x10 [ 1175.241434][T14651] ? __might_fault+0xb0/0x130 [ 1175.241467][T14651] should_fail_ex+0x46c/0x600 [ 1175.241497][T14651] _copy_from_user+0x2d/0xb0 [ 1175.241518][T14651] ___sys_sendmsg+0x158/0x2a0 [ 1175.241542][T14651] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.241601][T14651] ? __fget_files+0x2a/0x420 [ 1175.241624][T14651] ? __fget_files+0x3a6/0x420 [ 1175.241659][T14651] __x64_sys_sendmsg+0x1a1/0x260 [ 1175.241685][T14651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1175.241717][T14651] ? __pfx_ksys_write+0x10/0x10 [ 1175.241744][T14651] ? do_syscall_64+0xbe/0xfa0 [ 1175.241774][T14651] do_syscall_64+0xfa/0xfa0 [ 1175.241797][T14651] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.241822][T14651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.241849][T14651] ? clear_bhb_loop+0x60/0xb0 [ 1175.241872][T14651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.241891][T14651] RIP: 0033:0x7f62e8e7f6c9 [ 1175.241909][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.241925][T14651] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.241946][T14651] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1175.241961][T14651] RDX: 0000000000018800 RSI: 0000200000000640 RDI: 0000000000000003 [ 1175.241973][T14651] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.241986][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.241998][T14651] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1175.242031][T14651] [ 1175.664337][ T5985] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1175.804366][ T5985] usb 1-1: device descriptor read/64, error -71 [ 1176.013035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1176.109756][ T5985] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1176.301436][ T5985] usb 1-1: device descriptor read/64, error -71 [ 1176.405238][ T5985] usb usb1-port1: attempt power cycle [ 1176.774019][ T5985] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1176.811019][ T5985] usb 1-1: device descriptor read/8, error -71 [ 1177.133896][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.878299][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.007215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1178.015498][ T5985] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1178.035659][ T5985] usb 1-1: device descriptor read/8, error -71 [ 1178.151324][ T5985] usb usb1-port1: unable to enumerate USB device [ 1178.330071][T14686] netlink: 'syz.2.2556': attribute type 2 has an invalid length. [ 1178.330086][T14686] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1178.867121][T14689] netlink: 87 bytes leftover after parsing attributes in process `syz.3.2558'. [ 1178.934045][ T5964] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1179.084138][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 1179.086984][ T5964] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1179.087009][ T5964] usb 1-1: config 0 has no interface number 0 [ 1179.091178][ T5964] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1179.091208][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.091230][ T5964] usb 1-1: Product: syz [ 1179.091246][ T5964] usb 1-1: Manufacturer: syz [ 1179.091262][ T5964] usb 1-1: SerialNumber: syz [ 1179.203668][ T5964] usb 1-1: config 0 descriptor?? [ 1179.218891][ T5964] smsc95xx v2.0.0 [ 1179.218909][ T5964] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1179.219175][ T5964] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1179.447728][ T5985] usb 1-1: USB disconnect, device number 77 [ 1179.883962][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.215144][ C0] vkms_vblank_simulate: vblank timer overrun [ 1180.924842][ T5827] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1181.094603][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 1181.129797][ T5827] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 1181.129825][ T5827] usb 3-1: config 0 has no interface number 0 [ 1181.129858][ T5827] usb 3-1: config 0 interface 213 has no altsetting 0 [ 1181.130875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.132861][ T5827] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.ec [ 1181.132890][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.132913][ T5827] usb 3-1: Product: syz [ 1181.132927][ T5827] usb 3-1: Manufacturer: syz [ 1181.132943][ T5827] usb 3-1: SerialNumber: syz [ 1181.196759][ T5827] usb 3-1: config 0 descriptor?? [ 1181.483479][T14737] FAULT_INJECTION: forcing a failure. [ 1181.483479][T14737] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.483513][T14737] CPU: 0 UID: 0 PID: 14737 Comm: syz.4.2574 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1181.483537][T14737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1181.483549][T14737] Call Trace: [ 1181.483557][T14737] [ 1181.483567][T14737] dump_stack_lvl+0x189/0x250 [ 1181.483598][T14737] ? __pfx____ratelimit+0x10/0x10 [ 1181.483623][T14737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1181.483648][T14737] ? __pfx__printk+0x10/0x10 [ 1181.483677][T14737] ? __pfx___might_resched+0x10/0x10 [ 1181.483697][T14737] ? fs_reclaim_acquire+0x7d/0x100 [ 1181.483725][T14737] should_fail_ex+0x46c/0x600 [ 1181.483754][T14737] ? __alloc_skb+0x112/0x2d0 [ 1181.483773][T14737] should_failslab+0xa8/0x100 [ 1181.483800][T14737] ? __alloc_skb+0x112/0x2d0 [ 1181.483817][T14737] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 1181.483852][T14737] __alloc_skb+0x112/0x2d0 [ 1181.483873][T14737] alloc_skb_with_frags+0xca/0x890 [ 1181.483908][T14737] sock_alloc_send_pskb+0x859/0x990 [ 1181.483950][T14737] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1181.483973][T14737] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1181.484002][T14737] ? __might_fault+0xb0/0x130 [ 1181.484030][T14737] hci_sock_sendmsg+0x207/0xef0 [ 1181.484061][T14737] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1181.484092][T14737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1181.484116][T14737] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1181.484142][T14737] __sock_sendmsg+0x21c/0x270 [ 1181.484172][T14737] sock_write_iter+0x27f/0x370 [ 1181.484199][T14737] ? __pfx_sock_write_iter+0x10/0x10 [ 1181.484248][T14737] vfs_write+0x5d5/0xb40 [ 1181.484275][T14737] ? __pfx_sock_write_iter+0x10/0x10 [ 1181.484301][T14737] ? __pfx_vfs_write+0x10/0x10 [ 1181.484334][T14737] ? __fget_files+0x2a/0x420 [ 1181.484369][T14737] ksys_write+0x14b/0x260 [ 1181.484414][T14737] ? __pfx_ksys_write+0x10/0x10 [ 1181.484440][T14737] ? do_syscall_64+0xbe/0xfa0 [ 1181.484470][T14737] do_syscall_64+0xfa/0xfa0 [ 1181.484493][T14737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1181.484517][T14737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.484537][T14737] ? clear_bhb_loop+0x60/0xb0 [ 1181.484560][T14737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.484578][T14737] RIP: 0033:0x7f62e8e7f6c9 [ 1181.484595][T14737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.484611][T14737] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1181.484632][T14737] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1181.484646][T14737] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000004 [ 1181.484659][T14737] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1181.484672][T14737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1181.484683][T14737] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1181.484717][T14737] [ 1181.514089][T11439] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1181.848343][T14739] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2575'. [ 1181.939310][T11439] usb 1-1: Using ep0 maxpacket: 16 [ 1181.947769][T11439] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1181.947819][T11439] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1181.947842][T11439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.956381][T11439] usb 1-1: config 0 descriptor?? [ 1181.993167][T11439] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input102 [ 1182.014554][ T37] kauditd_printk_skb: 86 callbacks suppressed [ 1182.014573][ T37] audit: type=1800 audit(2000000949.728:969): pid=14743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2576" name="bus" dev="overlay" ino=715 res=0 errno=0 [ 1182.312590][T14730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1182.465559][T14730] vxcan2: entered promiscuous mode [ 1182.465711][T14730] vxcan2: entered allmulticast mode [ 1182.764625][T14756] FAULT_INJECTION: forcing a failure. [ 1182.764625][T14756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.764659][T14756] CPU: 0 UID: 0 PID: 14756 Comm: syz.5.2581 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1182.764681][T14756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1182.764693][T14756] Call Trace: [ 1182.764701][T14756] [ 1182.764710][T14756] dump_stack_lvl+0x189/0x250 [ 1182.764746][T14756] ? __pfx____ratelimit+0x10/0x10 [ 1182.764770][T14756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.764796][T14756] ? __pfx__printk+0x10/0x10 [ 1182.764818][T14756] ? __might_fault+0xb0/0x130 [ 1182.764855][T14756] should_fail_ex+0x46c/0x600 [ 1182.764885][T14756] _copy_from_user+0x2d/0xb0 [ 1182.764907][T14756] __sys_bpf+0x1e3/0x860 [ 1182.764934][T14756] ? __pfx___sys_bpf+0x10/0x10 [ 1182.764973][T14756] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 1182.765010][T14756] __x64_sys_bpf+0x7c/0x90 [ 1182.765034][T14756] do_syscall_64+0xfa/0xfa0 [ 1182.765060][T14756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.765076][T14756] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1182.765091][T14756] ? clear_bhb_loop+0x60/0xb0 [ 1182.765110][T14756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.765124][T14756] RIP: 0033:0x7fc81c60f6c9 [ 1182.765138][T14756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.765153][T14756] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1182.765172][T14756] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1182.765184][T14756] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1182.765194][T14756] RBP: 00007fc81a86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.765205][T14756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.765215][T14756] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1182.765241][T14756] [ 1183.214703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.268155][ T5827] gl620a 3-1:0.213: probe with driver gl620a failed with error -22 [ 1183.288570][ T5827] usb 3-1: USB disconnect, device number 120 [ 1184.516512][T10657] Bluetooth: hci0: command 0x0406 tx timeout [ 1184.517247][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.517417][T12448] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1184.748935][ T5171] bcm5974 1-1:0.0: could not read from device [ 1184.810142][T14770] FAULT_INJECTION: forcing a failure. [ 1184.810142][T14770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1184.810177][T14770] CPU: 0 UID: 0 PID: 14770 Comm: syz.4.2586 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1184.810200][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1184.810212][T14770] Call Trace: [ 1184.810220][T14770] [ 1184.810229][T14770] dump_stack_lvl+0x189/0x250 [ 1184.810262][T14770] ? __pfx____ratelimit+0x10/0x10 [ 1184.810287][T14770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1184.810314][T14770] ? __pfx__printk+0x10/0x10 [ 1184.810336][T14770] ? __might_fault+0xb0/0x130 [ 1184.810373][T14770] should_fail_ex+0x46c/0x600 [ 1184.810405][T14770] _copy_from_user+0x2d/0xb0 [ 1184.810427][T14770] __sys_bpf+0x1e3/0x860 [ 1184.810455][T14770] ? __pfx___sys_bpf+0x10/0x10 [ 1184.810477][T14770] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1184.810517][T14770] ? ksys_write+0x230/0x260 [ 1184.810543][T14770] ? __pfx_ksys_write+0x10/0x10 [ 1184.810572][T14770] __x64_sys_bpf+0x7c/0x90 [ 1184.810596][T14770] do_syscall_64+0xfa/0xfa0 [ 1184.810620][T14770] ? lockdep_hardirqs_on+0x9c/0x150 [ 1184.810645][T14770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.810665][T14770] ? clear_bhb_loop+0x60/0xb0 [ 1184.810688][T14770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.810707][T14770] RIP: 0033:0x7f62e8e7f6c9 [ 1184.810724][T14770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.810742][T14770] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1184.810764][T14770] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1184.810779][T14770] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1184.810792][T14770] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.810806][T14770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.810818][T14770] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1184.810852][T14770] [ 1184.884050][T11439] usb 1-1: USB disconnect, device number 78 [ 1185.002554][T14778] FAULT_INJECTION: forcing a failure. [ 1185.002554][T14778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.002590][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.0.2590 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1185.002613][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1185.002626][T14778] Call Trace: [ 1185.002634][T14778] [ 1185.002644][T14778] dump_stack_lvl+0x189/0x250 [ 1185.002677][T14778] ? __pfx____ratelimit+0x10/0x10 [ 1185.002702][T14778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.002728][T14778] ? __pfx__printk+0x10/0x10 [ 1185.002758][T14778] ? __might_fault+0xb0/0x130 [ 1185.002794][T14778] should_fail_ex+0x46c/0x600 [ 1185.002825][T14778] _copy_from_user+0x2d/0xb0 [ 1185.002848][T14778] ___sys_sendmsg+0x158/0x2a0 [ 1185.002874][T14778] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.002934][T14778] ? __fget_files+0x2a/0x420 [ 1185.002959][T14778] ? __fget_files+0x3a6/0x420 [ 1185.002995][T14778] __x64_sys_sendmsg+0x1a1/0x260 [ 1185.003024][T14778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1185.003058][T14778] ? __pfx_ksys_write+0x10/0x10 [ 1185.003092][T14778] ? do_syscall_64+0xbe/0xfa0 [ 1185.003121][T14778] do_syscall_64+0xfa/0xfa0 [ 1185.003147][T14778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.003166][T14778] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1185.003185][T14778] ? clear_bhb_loop+0x60/0xb0 [ 1185.003209][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.003228][T14778] RIP: 0033:0x7f3465a1f6c9 [ 1185.003246][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.003263][T14778] RSP: 002b:00007f3463c86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.003284][T14778] RAX: ffffffffffffffda RBX: 00007f3465c75fa0 RCX: 00007f3465a1f6c9 [ 1185.003299][T14778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1185.003311][T14778] RBP: 00007f3463c86090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.003324][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.003336][T14778] R13: 00007f3465c76038 R14: 00007f3465c75fa0 R15: 00007fff78b49348 [ 1185.003371][T14778] [ 1185.330482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1185.512915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1185.584372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1185.814562][T14784] wireguard0: entered promiscuous mode [ 1185.814591][T14784] wireguard0: entered allmulticast mode [ 1186.177843][T14804] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2602'. [ 1186.302828][T14812] FAULT_INJECTION: forcing a failure. [ 1186.302828][T14812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1186.302858][T14812] CPU: 0 UID: 0 PID: 14812 Comm: syz.4.2601 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1186.302878][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1186.302889][T14812] Call Trace: [ 1186.302896][T14812] [ 1186.302904][T14812] dump_stack_lvl+0x189/0x250 [ 1186.302932][T14812] ? __pfx____ratelimit+0x10/0x10 [ 1186.302954][T14812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1186.302986][T14812] ? __pfx__printk+0x10/0x10 [ 1186.303006][T14812] ? __might_fault+0xb0/0x130 [ 1186.303038][T14812] should_fail_ex+0x46c/0x600 [ 1186.303064][T14812] _copy_from_user+0x2d/0xb0 [ 1186.303083][T14812] ___sys_sendmsg+0x158/0x2a0 [ 1186.303105][T14812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1186.303155][T14812] ? __fget_files+0x2a/0x420 [ 1186.303179][T14812] ? __fget_files+0x3a6/0x420 [ 1186.303209][T14812] __x64_sys_sendmsg+0x1a1/0x260 [ 1186.303231][T14812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1186.303258][T14812] ? __pfx_ksys_write+0x10/0x10 [ 1186.303281][T14812] ? do_syscall_64+0xbe/0xfa0 [ 1186.303307][T14812] do_syscall_64+0xfa/0xfa0 [ 1186.303327][T14812] ? lockdep_hardirqs_on+0x9c/0x150 [ 1186.303347][T14812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.303364][T14812] ? clear_bhb_loop+0x60/0xb0 [ 1186.303383][T14812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.303399][T14812] RIP: 0033:0x7f62e8e7f6c9 [ 1186.303414][T14812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.303429][T14812] RSP: 002b:00007f62e70c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1186.303447][T14812] RAX: ffffffffffffffda RBX: 00007f62e90d6090 RCX: 00007f62e8e7f6c9 [ 1186.303459][T14812] RDX: 0000000000000004 RSI: 0000200000000680 RDI: 0000000000000003 [ 1186.303470][T14812] RBP: 00007f62e70c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.303480][T14812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.303491][T14812] R13: 00007f62e90d6128 R14: 00007f62e90d6090 R15: 00007ffe6d3e05a8 [ 1186.303519][T14812] [ 1186.463940][ T5827] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1186.664060][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 1186.704464][ T5827] usb 6-1: config 3 has an invalid interface number: 31 but max is 3 [ 1186.704483][ T5827] usb 6-1: config 3 has an invalid interface number: 44 but max is 3 [ 1186.704495][ T5827] usb 6-1: config 3 has an invalid interface number: 220 but max is 3 [ 1186.704507][ T5827] usb 6-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 1186.704516][ T5827] usb 6-1: config 3 has an invalid interface number: 203 but max is 3 [ 1186.704527][ T5827] usb 6-1: config 3 has an invalid descriptor of length 165, skipping remainder of the config [ 1186.704539][ T5827] usb 6-1: config 3 has 5 interfaces, different from the descriptor's value: 4 [ 1186.704606][ T5827] usb 6-1: config 3 has no interface number 0 [ 1186.704616][ T5827] usb 6-1: config 3 has no interface number 1 [ 1186.704626][ T5827] usb 6-1: config 3 has no interface number 3 [ 1186.704635][ T5827] usb 6-1: config 3 has no interface number 4 [ 1186.704711][ T5827] usb 6-1: config 3 interface 31 altsetting 109 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1186.704727][ T5827] usb 6-1: config 3 interface 31 altsetting 109 has a duplicate endpoint with address 0x4, skipping [ 1186.704740][ T5827] usb 6-1: config 3 interface 31 altsetting 109 has a duplicate endpoint with address 0x6, skipping [ 1186.704763][ T5827] usb 6-1: config 3 interface 44 altsetting 128 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1186.704790][ T5827] usb 6-1: config 3 interface 44 altsetting 128 has a duplicate endpoint with address 0x5, skipping [ 1186.704815][ T5827] usb 6-1: config 3 interface 44 altsetting 128 endpoint 0x8 has invalid maxpacket 80, setting to 64 [ 1186.704842][ T5827] usb 6-1: config 3 interface 44 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 1186.704866][ T5827] usb 6-1: config 3 interface 44 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1186.704888][ T5827] usb 6-1: config 3 interface 44 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 1186.704928][ T5827] usb 6-1: config 3 interface 220 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1186.704947][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1186.704960][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 1186.704972][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1186.704984][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1186.704997][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1186.705010][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 1186.705023][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1186.705036][ T5827] usb 6-1: config 3 interface 220 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1186.705050][ T5827] usb 6-1: config 3 interface 220 altsetting 3 endpoint 0xF has an invalid bInterval 40, changing to 7 [ 1186.705064][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1186.705077][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1186.705089][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1186.705101][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1186.705113][ T5827] usb 6-1: config 3 interface 220 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1186.705126][ T5827] usb 6-1: config 3 interface 220 altsetting 3 bulk endpoint 0xE has invalid maxpacket 64 [ 1186.705156][ T5827] usb 6-1: config 3 interface 203 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1186.705177][ T5827] usb 6-1: too many endpoints for config 3 interface 2 altsetting 9: 235, using maximum allowed: 30 [ 1186.705201][ T5827] usb 6-1: config 3 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 1186.705215][ T5827] usb 6-1: config 3 interface 31 has no altsetting 0 [ 1186.705225][ T5827] usb 6-1: config 3 interface 44 has no altsetting 0 [ 1186.705235][ T5827] usb 6-1: config 3 interface 220 has no altsetting 0 [ 1186.705245][ T5827] usb 6-1: config 3 interface 203 has no altsetting 0 [ 1186.705255][ T5827] usb 6-1: config 3 interface 2 has no altsetting 0 [ 1186.710951][ T5827] usb 6-1: New USB device found, idVendor=0664, idProduct=0309, bcdDevice=1b.50 [ 1186.710969][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.710981][ T5827] usb 6-1: Product: ␙澘刘奇瞡湃Ⱞ㝈繧貃毙鱳즟絧骻蛗哭㈛怪㲓뇫捋쁃⏉覴뷎걷冘㪤軈褂눺ꦙ덛ૺ僦歩抎俍疇꺪ﳧꑯꇺẮ먜ꗖⰢ潼㌭郞葈꣤ᦵ䥮䣎ꖿ푬컘踫骁岁ﾬﯯ‵饎䍬ₛಌ൯褶鳦傣⧳봆ⳑ촆힙좌螦耆᝱ꇛ뎍ﵫ艃멎庅벴ꏓ博붞 [ 1186.710998][ T5827] usb 6-1: Manufacturer: Ǭ讟ঙꀉ뒜࣎Ꮊ뛇蛅벓蓊ꢂŻ馁折숣㇦ᴫ㷎ꦎ얻庇䆄뾜罴訧覆㢨푑㶷㡁ᤊ吐弔䵦訓旗ᗫᨯ偋艤 [ 1186.711011][ T5827] usb 6-1: SerialNumber: syz [ 1187.593267][T14815] FAULT_INJECTION: forcing a failure. [ 1187.593267][T14815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.593302][T14815] CPU: 0 UID: 0 PID: 14815 Comm: syz.4.2604 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.593324][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1187.593334][T14815] Call Trace: [ 1187.593341][T14815] [ 1187.593349][T14815] dump_stack_lvl+0x189/0x250 [ 1187.593381][T14815] ? __pfx____ratelimit+0x10/0x10 [ 1187.593404][T14815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.593430][T14815] ? __pfx__printk+0x10/0x10 [ 1187.593452][T14815] ? __might_fault+0xb0/0x130 [ 1187.593487][T14815] should_fail_ex+0x46c/0x600 [ 1187.593518][T14815] _copy_from_user+0x2d/0xb0 [ 1187.593538][T14815] ___sys_sendmsg+0x158/0x2a0 [ 1187.593564][T14815] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.593623][T14815] ? __fget_files+0x2a/0x420 [ 1187.593647][T14815] ? __fget_files+0x3a6/0x420 [ 1187.593680][T14815] __x64_sys_sendmsg+0x1a1/0x260 [ 1187.593716][T14815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1187.593746][T14815] ? __pfx_ksys_write+0x10/0x10 [ 1187.593772][T14815] ? do_syscall_64+0xbe/0xfa0 [ 1187.593824][T14815] do_syscall_64+0xfa/0xfa0 [ 1187.593850][T14815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1187.593872][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.593890][T14815] ? clear_bhb_loop+0x60/0xb0 [ 1187.593911][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.593929][T14815] RIP: 0033:0x7f62e8e7f6c9 [ 1187.593947][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.593964][T14815] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.593985][T14815] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1187.593999][T14815] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1187.594011][T14815] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.594023][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.594034][T14815] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1187.594069][T14815] [ 1188.434015][ T5903] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1188.587971][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.588091][ T5903] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1188.588118][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.628231][ T5903] usb 4-1: config 0 descriptor?? [ 1188.706985][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 1188.857956][T10657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1188.877677][T10657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.879160][T10657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.880267][T10657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.881572][T10657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1189.049211][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1189.112875][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 1189.126360][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1189.128907][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.132437][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.134883][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 1189.165235][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 1189.186934][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 1189.307371][T14830] chnl_net:caif_netlink_parms(): no params data found [ 1189.318007][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 1189.320914][ T5903] pwc: recv_control_msg error -32 req 02 val 2100 [ 1189.523574][ T5903] pwc: recv_control_msg error -32 req 02 val 2500 [ 1189.533357][ T5903] pwc: recv_control_msg error -32 req 02 val 2400 [ 1189.538903][ T5903] pwc: recv_control_msg error -32 req 02 val 2600 [ 1189.541487][ T5903] pwc: recv_control_msg error -32 req 02 val 2900 [ 1189.598556][T14838] FAULT_INJECTION: forcing a failure. [ 1189.598556][T14838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.598589][T14838] CPU: 0 UID: 0 PID: 14838 Comm: syz.5.2613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1189.598612][T14838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1189.598624][T14838] Call Trace: [ 1189.598632][T14838] [ 1189.598641][T14838] dump_stack_lvl+0x189/0x250 [ 1189.598681][T14838] ? __pfx____ratelimit+0x10/0x10 [ 1189.598706][T14838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1189.598732][T14838] ? __pfx__printk+0x10/0x10 [ 1189.598755][T14838] ? __might_fault+0xb0/0x130 [ 1189.598790][T14838] should_fail_ex+0x46c/0x600 [ 1189.598821][T14838] _copy_from_user+0x2d/0xb0 [ 1189.598843][T14838] ___sys_sendmsg+0x158/0x2a0 [ 1189.598870][T14838] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.598928][T14838] ? __fget_files+0x2a/0x420 [ 1189.598952][T14838] ? __fget_files+0x3a6/0x420 [ 1189.598985][T14838] __sys_sendmmsg+0x22d/0x430 [ 1189.599013][T14838] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1189.599047][T14838] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1189.599086][T14838] ? ksys_write+0x230/0x260 [ 1189.599110][T14838] ? __pfx_ksys_write+0x10/0x10 [ 1189.599138][T14838] __x64_sys_sendmmsg+0xa0/0xc0 [ 1189.599162][T14838] do_syscall_64+0xfa/0xfa0 [ 1189.599185][T14838] ? lockdep_hardirqs_on+0x9c/0x150 [ 1189.599209][T14838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.599228][T14838] ? clear_bhb_loop+0x60/0xb0 [ 1189.599251][T14838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.599269][T14838] RIP: 0033:0x7fc81c60f6c9 [ 1189.599287][T14838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.599303][T14838] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1189.599324][T14838] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1189.599339][T14838] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 1189.599357][T14838] RBP: 00007fc81a86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.599370][T14838] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 1189.599382][T14838] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1189.599415][T14838] [ 1189.706035][ T5827] usbhid 6-1:3.44: couldn't find an input interrupt endpoint [ 1189.756494][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 1189.756983][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 1189.816242][ T5903] pwc: Registered as video103. [ 1189.829778][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input104 [ 1189.899040][ T5903] usb 4-1: USB disconnect, device number 87 [ 1190.108675][ T5827] usb 6-1: USB disconnect, device number 40 [ 1190.430737][T14860] sctp: [Deprecated]: syz.5.2617 (pid 14860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1190.430737][T14860] Use struct sctp_sack_info instead [ 1190.432449][T14860] FAULT_INJECTION: forcing a failure. [ 1190.432449][T14860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.432479][T14860] CPU: 1 UID: 0 PID: 14860 Comm: syz.5.2617 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1190.432502][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1190.432514][T14860] Call Trace: [ 1190.432522][T14860] [ 1190.432531][T14860] dump_stack_lvl+0x189/0x250 [ 1190.432563][T14860] ? __pfx____ratelimit+0x10/0x10 [ 1190.432589][T14860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1190.432615][T14860] ? __pfx__printk+0x10/0x10 [ 1190.432637][T14860] ? __might_fault+0xb0/0x130 [ 1190.432674][T14860] should_fail_ex+0x46c/0x600 [ 1190.432705][T14860] _copy_from_user+0x2d/0xb0 [ 1190.432728][T14860] do_sock_getsockopt+0x17d/0x450 [ 1190.432754][T14860] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1190.432775][T14860] ? do_syscall_64+0xa0/0xfa0 [ 1190.432798][T14860] ? __fget_files+0x2a/0x420 [ 1190.432822][T14860] ? __fget_files+0x3a6/0x420 [ 1190.432845][T14860] ? __fget_files+0x2a/0x420 [ 1190.432880][T14860] __x64_sys_getsockopt+0x1ab/0x250 [ 1190.432899][T14860] ? do_syscall_64+0xa0/0xfa0 [ 1190.432923][T14860] ? do_syscall_64+0xa0/0xfa0 [ 1190.432949][T14860] do_syscall_64+0xfa/0xfa0 [ 1190.432971][T14860] ? lockdep_hardirqs_on+0x9c/0x150 [ 1190.432994][T14860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.433014][T14860] ? clear_bhb_loop+0x60/0xb0 [ 1190.433036][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.433054][T14860] RIP: 0033:0x7fc81c60f6c9 [ 1190.433072][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1190.433088][T14860] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1190.433109][T14860] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1190.433124][T14860] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 1190.433136][T14860] RBP: 00007fc81a86e090 R08: 00002000000001c0 R09: 0000000000000000 [ 1190.433149][T14860] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 1190.433162][T14860] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1190.433194][T14860] [ 1190.433481][T14860] sctp: [Deprecated]: syz.5.2617 (pid 14860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1190.433481][T14860] Use struct sctp_sack_info instead [ 1190.758733][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1190.758951][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1190.778024][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1190.778221][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1190.816171][T14830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.819680][T14830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.819932][T14830] bridge_slave_0: entered allmulticast mode [ 1190.835848][T14830] bridge_slave_0: entered promiscuous mode [ 1190.847520][T14830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.847641][T14830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.847883][T14830] bridge_slave_1: entered allmulticast mode [ 1190.861108][T14830] bridge_slave_1: entered promiscuous mode [ 1190.927456][T14859] ceph: No mds server is up or the cluster is laggy [ 1191.014341][T12448] Bluetooth: hci1: command tx timeout [ 1191.034448][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1191.034665][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1191.093264][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.142920][T14877] FAULT_INJECTION: forcing a failure. [ 1191.142920][T14877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.142953][T14877] CPU: 0 UID: 0 PID: 14877 Comm: syz.4.2625 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1191.142976][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1191.142989][T14877] Call Trace: [ 1191.142997][T14877] [ 1191.143006][T14877] dump_stack_lvl+0x189/0x250 [ 1191.143038][T14877] ? __pfx____ratelimit+0x10/0x10 [ 1191.143063][T14877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1191.143091][T14877] ? __pfx__printk+0x10/0x10 [ 1191.143115][T14877] ? __might_fault+0xb0/0x130 [ 1191.143151][T14877] should_fail_ex+0x46c/0x600 [ 1191.143182][T14877] _copy_from_user+0x2d/0xb0 [ 1191.143205][T14877] ___sys_sendmsg+0x158/0x2a0 [ 1191.143232][T14877] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.143293][T14877] ? __fget_files+0x2a/0x420 [ 1191.143318][T14877] ? __fget_files+0x3a6/0x420 [ 1191.143353][T14877] __x64_sys_sendmsg+0x1a1/0x260 [ 1191.143379][T14877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.143413][T14877] ? __pfx_ksys_write+0x10/0x10 [ 1191.143440][T14877] ? do_syscall_64+0xbe/0xfa0 [ 1191.143469][T14877] do_syscall_64+0xfa/0xfa0 [ 1191.143492][T14877] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.143516][T14877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.143535][T14877] ? clear_bhb_loop+0x60/0xb0 [ 1191.143558][T14877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.143576][T14877] RIP: 0033:0x7f62e8e7f6c9 [ 1191.143594][T14877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.143611][T14877] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.143631][T14877] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1191.143646][T14877] RDX: 0000000004048850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1191.143659][T14877] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.143671][T14877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.143682][T14877] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1191.143719][T14877] [ 1191.340215][T14830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.389843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.419981][T14830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.429980][T14875] XFS (nullb0): Invalid superblock magic number [ 1191.601460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.678128][T14887] FAULT_INJECTION: forcing a failure. [ 1191.678128][T14887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.678163][T14887] CPU: 1 UID: 0 PID: 14887 Comm: syz.5.2627 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1191.678185][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1191.678198][T14887] Call Trace: [ 1191.678207][T14887] [ 1191.678216][T14887] dump_stack_lvl+0x189/0x250 [ 1191.678247][T14887] ? __pfx____ratelimit+0x10/0x10 [ 1191.678273][T14887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1191.678300][T14887] ? __pfx__printk+0x10/0x10 [ 1191.678324][T14887] ? __might_fault+0xb0/0x130 [ 1191.678361][T14887] should_fail_ex+0x46c/0x600 [ 1191.678392][T14887] _copy_from_user+0x2d/0xb0 [ 1191.678414][T14887] ___sys_sendmsg+0x158/0x2a0 [ 1191.678440][T14887] ? __pfx____sys_sendmsg+0x10/0x10 [ 1191.678499][T14887] ? __fget_files+0x2a/0x420 [ 1191.678523][T14887] ? __fget_files+0x3a6/0x420 [ 1191.678559][T14887] __x64_sys_sendmsg+0x1a1/0x260 [ 1191.678585][T14887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1191.678618][T14887] ? __pfx_ksys_write+0x10/0x10 [ 1191.678646][T14887] ? do_syscall_64+0xbe/0xfa0 [ 1191.678675][T14887] do_syscall_64+0xfa/0xfa0 [ 1191.678698][T14887] ? lockdep_hardirqs_on+0x9c/0x150 [ 1191.678723][T14887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.678743][T14887] ? clear_bhb_loop+0x60/0xb0 [ 1191.678772][T14887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.678792][T14887] RIP: 0033:0x7fc81c60f6c9 [ 1191.678809][T14887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.678825][T14887] RSP: 002b:00007fc81a86e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.678847][T14887] RAX: ffffffffffffffda RBX: 00007fc81c865fa0 RCX: 00007fc81c60f6c9 [ 1191.678862][T14887] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1191.678875][T14887] RBP: 00007fc81a86e090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.678887][T14887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.678900][T14887] R13: 00007fc81c866038 R14: 00007fc81c865fa0 R15: 00007ffdd2d0a678 [ 1191.678933][T14887] [ 1191.949260][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.066324][T14830] team0: Port device team_slave_0 added [ 1192.078312][T14830] team0: Port device team_slave_1 added [ 1192.160403][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.368140][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.434024][ T5903] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1192.572160][ C1] vkms_vblank_simulate: vblank timer overrun [ 1192.694750][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 1193.165865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.205495][ T5903] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1193.205526][ T5903] usb 4-1: config 0 has no interface number 0 [ 1193.210255][ T5903] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1193.210285][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.210307][ T5903] usb 4-1: Product: syz [ 1193.210323][ T5903] usb 4-1: Manufacturer: syz [ 1193.210339][ T5903] usb 4-1: SerialNumber: syz [ 1193.284160][T12448] Bluetooth: hci1: command tx timeout [ 1193.287688][ T5903] usb 4-1: config 0 descriptor?? [ 1193.310259][ T5903] smsc95xx v2.0.0 [ 1193.310277][ T5903] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1193.310556][ T5903] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1193.388764][ C1] vkms_vblank_simulate: vblank timer overrun [ 1193.557275][T14908] FAULT_INJECTION: forcing a failure. [ 1193.557275][T14908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.557310][T14908] CPU: 1 UID: 0 PID: 14908 Comm: syz.4.2635 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1193.557341][T14908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1193.557354][T14908] Call Trace: [ 1193.557362][T14908] [ 1193.557372][T14908] dump_stack_lvl+0x189/0x250 [ 1193.557404][T14908] ? __pfx____ratelimit+0x10/0x10 [ 1193.557429][T14908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.557456][T14908] ? __pfx__printk+0x10/0x10 [ 1193.557479][T14908] ? __might_fault+0xb0/0x130 [ 1193.557516][T14908] should_fail_ex+0x46c/0x600 [ 1193.557547][T14908] _copy_from_user+0x2d/0xb0 [ 1193.557570][T14908] __sys_bind+0x19f/0x3e0 [ 1193.557591][T14908] ? __pfx___sys_bind+0x10/0x10 [ 1193.557622][T14908] ? __pfx_ksys_write+0x10/0x10 [ 1193.557652][T14908] __x64_sys_bind+0x7a/0x90 [ 1193.557673][T14908] do_syscall_64+0xfa/0xfa0 [ 1193.557697][T14908] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.557721][T14908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.557741][T14908] ? clear_bhb_loop+0x60/0xb0 [ 1193.557765][T14908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.557784][T14908] RIP: 0033:0x7f62e8e7f6c9 [ 1193.557801][T14908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.557819][T14908] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1193.557839][T14908] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1193.557854][T14908] RDX: 0000000000000012 RSI: 0000200000000780 RDI: 0000000000000004 [ 1193.557867][T14908] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.557880][T14908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1193.557892][T14908] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1193.557925][T14908] [ 1193.558912][ T5903] usb 4-1: USB disconnect, device number 88 [ 1193.987543][T14830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.987561][T14830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.987588][T14830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.989999][T14830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1193.990012][T14830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1193.990038][T14830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.022464][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.474031][ T5903] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1194.515191][T14830] hsr_slave_0: entered promiscuous mode [ 1194.516590][T14830] hsr_slave_1: entered promiscuous mode [ 1194.517591][T14830] debugfs: 'hsr0' already exists in 'hsr' [ 1194.517615][T14830] Cannot create hsr debugfs directory [ 1194.627816][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.630987][ T5903] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.631017][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.631037][ T5903] usb 6-1: Product: syz [ 1194.631053][ T5903] usb 6-1: Manufacturer: syz [ 1194.631068][ T5903] usb 6-1: SerialNumber: syz [ 1194.970539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.114059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.420225][T12448] Bluetooth: hci1: command tx timeout [ 1195.664111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.102721][T14948] FAULT_INJECTION: forcing a failure. [ 1196.102721][T14948] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.102755][T14948] CPU: 0 UID: 0 PID: 14948 Comm: syz.4.2651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1196.102777][T14948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1196.102789][T14948] Call Trace: [ 1196.102797][T14948] [ 1196.102806][T14948] dump_stack_lvl+0x189/0x250 [ 1196.102837][T14948] ? __pfx____ratelimit+0x10/0x10 [ 1196.102861][T14948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1196.102887][T14948] ? __pfx__printk+0x10/0x10 [ 1196.102916][T14948] ? __pfx___might_resched+0x10/0x10 [ 1196.102941][T14948] should_fail_ex+0x46c/0x600 [ 1196.102973][T14948] should_failslab+0xa8/0x100 [ 1196.103001][T14948] __kmalloc_noprof+0xcc/0x7d0 [ 1196.103025][T14948] ? kfree+0x51/0x950 [ 1196.103043][T14948] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1196.103072][T14948] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1196.103097][T14948] ? tomoyo_domain+0xda/0x130 [ 1196.103125][T14948] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1196.103152][T14948] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1196.103184][T14948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1196.103216][T14948] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1196.103243][T14948] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.103300][T14948] ? __fget_files+0x2a/0x420 [ 1196.103330][T14948] ? __fget_files+0x3a6/0x420 [ 1196.103353][T14948] ? __fget_files+0x2a/0x420 [ 1196.103390][T14948] security_file_ioctl+0xcb/0x2d0 [ 1196.103412][T14948] __se_sys_ioctl+0x47/0x170 [ 1196.103438][T14948] do_syscall_64+0xfa/0xfa0 [ 1196.103461][T14948] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.103486][T14948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.103505][T14948] ? clear_bhb_loop+0x60/0xb0 [ 1196.103529][T14948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.103549][T14948] RIP: 0033:0x7f62e8e7f6c9 [ 1196.103567][T14948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.103583][T14948] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1196.103604][T14948] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1196.103619][T14948] RDX: 0000000000000000 RSI: 0000000000008917 RDI: 0000000000000004 [ 1196.103631][T14948] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.103644][T14948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.103655][T14948] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1196.103690][T14948] [ 1196.103698][T14948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1196.116247][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.676533][T14953] wireguard0: entered promiscuous mode [ 1196.676562][T14953] wireguard0: entered allmulticast mode [ 1196.823102][T14962] FAULT_INJECTION: forcing a failure. [ 1196.823102][T14962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.823125][T14962] CPU: 1 UID: 0 PID: 14962 Comm: syz.4.2657 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1196.823138][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1196.823145][T14962] Call Trace: [ 1196.823150][T14962] [ 1196.823158][T14962] dump_stack_lvl+0x189/0x250 [ 1196.823179][T14962] ? __pfx____ratelimit+0x10/0x10 [ 1196.823193][T14962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1196.823209][T14962] ? __pfx__printk+0x10/0x10 [ 1196.823223][T14962] ? __might_fault+0xb0/0x130 [ 1196.823244][T14962] should_fail_ex+0x46c/0x600 [ 1196.823261][T14962] _copy_from_user+0x2d/0xb0 [ 1196.823274][T14962] ___sys_sendmsg+0x158/0x2a0 [ 1196.823289][T14962] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.823320][T14962] ? __fget_files+0x2a/0x420 [ 1196.823335][T14962] ? __fget_files+0x3a6/0x420 [ 1196.823360][T14962] __x64_sys_sendmsg+0x1a1/0x260 [ 1196.823374][T14962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1196.823392][T14962] ? __pfx_ksys_write+0x10/0x10 [ 1196.823407][T14962] ? do_syscall_64+0xbe/0xfa0 [ 1196.823424][T14962] do_syscall_64+0xfa/0xfa0 [ 1196.823437][T14962] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.823452][T14962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.823462][T14962] ? clear_bhb_loop+0x60/0xb0 [ 1196.823475][T14962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.823485][T14962] RIP: 0033:0x7f62e8e7f6c9 [ 1196.823495][T14962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.823505][T14962] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.823517][T14962] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1196.823525][T14962] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1196.823532][T14962] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.823539][T14962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.823545][T14962] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1196.823562][T14962] [ 1196.868923][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.188273][T14922] netlink: 'syz.5.2641': attribute type 2 has an invalid length. [ 1197.196178][ T5903] cdc_ncm 6-1:1.0: bind() failure [ 1197.226278][ T5903] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1197.227385][ T5903] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1197.231506][ T5903] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1197.274027][ T5903] usb 6-1: USB disconnect, device number 41 [ 1197.383232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.493291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.805532][T14988] FAULT_INJECTION: forcing a failure. [ 1197.805532][T14988] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.805568][T14988] CPU: 0 UID: 0 PID: 14988 Comm: syz.4.2670 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1197.805591][T14988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1197.805603][T14988] Call Trace: [ 1197.805612][T14988] [ 1197.805622][T14988] dump_stack_lvl+0x189/0x250 [ 1197.805655][T14988] ? __pfx____ratelimit+0x10/0x10 [ 1197.805681][T14988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1197.805708][T14988] ? __pfx__printk+0x10/0x10 [ 1197.805738][T14988] ? __pfx___might_resched+0x10/0x10 [ 1197.805764][T14988] should_fail_ex+0x46c/0x600 [ 1197.805796][T14988] should_failslab+0xa8/0x100 [ 1197.805825][T14988] __kmalloc_noprof+0xcc/0x7d0 [ 1197.805849][T14988] ? kfree+0x51/0x950 [ 1197.805868][T14988] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1197.805899][T14988] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1197.805924][T14988] ? tomoyo_domain+0xda/0x130 [ 1197.805953][T14988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1197.805981][T14988] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1197.806020][T14988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1197.806054][T14988] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1197.806080][T14988] ? lockdep_hardirqs_on+0x9c/0x150 [ 1197.806140][T14988] ? __fget_files+0x2a/0x420 [ 1197.806171][T14988] ? __fget_files+0x3a6/0x420 [ 1197.806196][T14988] ? __fget_files+0x2a/0x420 [ 1197.806225][T14988] security_file_ioctl+0xcb/0x2d0 [ 1197.806249][T14988] __se_sys_ioctl+0x47/0x170 [ 1197.806273][T14988] do_syscall_64+0xfa/0xfa0 [ 1197.806300][T14988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.806319][T14988] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1197.806338][T14988] ? clear_bhb_loop+0x60/0xb0 [ 1197.806362][T14988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.806381][T14988] RIP: 0033:0x7f62e8e7f6c9 [ 1197.806400][T14988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.806416][T14988] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1197.806437][T14988] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1197.806452][T14988] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 1197.806466][T14988] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.806478][T14988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.806491][T14988] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1197.806525][T14988] [ 1197.806609][T14988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1197.877068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.878375][T12448] Bluetooth: hci1: command tx timeout [ 1198.014011][T14992] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1198.014038][T14992] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1198.057180][T14992] vhci_hcd vhci_hcd.0: Device attached [ 1198.206202][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1198.206396][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1198.214533][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1198.214755][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1198.244082][ T5827] vhci_hcd: vhci_device speed not set [ 1198.303993][ T5827] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1198.502407][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1198.531189][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1198.988195][T14995] ceph: No mds server is up or the cluster is laggy [ 1199.051993][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1199.052199][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1199.164745][ T37] audit: type=1326 audit(2000000966.878:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.164797][ T37] audit: type=1326 audit(2000000966.878:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.164842][ T37] audit: type=1326 audit(2000000966.878:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.166477][ T37] audit: type=1326 audit(2000000966.888:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.174070][ T37] audit: type=1326 audit(2000000966.888:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.174123][ T37] audit: type=1326 audit(2000000966.888:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.174175][ T37] audit: type=1326 audit(2000000966.888:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.174219][ T37] audit: type=1326 audit(2000000966.888:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.174261][ T37] audit: type=1326 audit(2000000966.888:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.174300][ T37] audit: type=1326 audit(2000000966.888:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15008 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc3c4f6c9 code=0x7ffc0000 [ 1199.309744][T14830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.416494][T14993] vhci_hcd: connection reset by peer [ 1199.420300][ T13] vhci_hcd: stop threads [ 1199.420320][ T13] vhci_hcd: release socket [ 1199.421774][ T13] vhci_hcd: disconnect device [ 1199.654704][T15021] FAULT_INJECTION: forcing a failure. [ 1199.654704][T15021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.654738][T15021] CPU: 0 UID: 0 PID: 15021 Comm: syz.4.2681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1199.654755][T15021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1199.654764][T15021] Call Trace: [ 1199.654770][T15021] [ 1199.654777][T15021] dump_stack_lvl+0x189/0x250 [ 1199.654804][T15021] ? __pfx____ratelimit+0x10/0x10 [ 1199.654823][T15021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.654842][T15021] ? __pfx__printk+0x10/0x10 [ 1199.654859][T15021] ? __might_fault+0xb0/0x130 [ 1199.654885][T15021] should_fail_ex+0x46c/0x600 [ 1199.654908][T15021] _copy_from_user+0x2d/0xb0 [ 1199.654924][T15021] ___sys_sendmsg+0x158/0x2a0 [ 1199.654945][T15021] ? __pfx____sys_sendmsg+0x10/0x10 [ 1199.654989][T15021] ? __fget_files+0x2a/0x420 [ 1199.655013][T15021] ? __fget_files+0x3a6/0x420 [ 1199.655046][T15021] __sys_sendmmsg+0x22d/0x430 [ 1199.655070][T15021] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1199.655100][T15021] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1199.655140][T15021] ? ksys_write+0x230/0x260 [ 1199.655166][T15021] ? __pfx_ksys_write+0x10/0x10 [ 1199.655203][T15021] __x64_sys_sendmmsg+0xa0/0xc0 [ 1199.655228][T15021] do_syscall_64+0xfa/0xfa0 [ 1199.655253][T15021] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.655278][T15021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.655297][T15021] ? clear_bhb_loop+0x60/0xb0 [ 1199.655321][T15021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.655340][T15021] RIP: 0033:0x7f62e8e7f6c9 [ 1199.655357][T15021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.655374][T15021] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1199.655396][T15021] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1199.655411][T15021] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000003 [ 1199.655423][T15021] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.655436][T15021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.655448][T15021] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1199.655481][T15021] [ 1200.081186][T14830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.283969][T11439] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1200.443285][T11439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.443320][T11439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.447069][T11439] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1200.447097][T11439] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1200.447119][T11439] usb 1-1: Manufacturer: syz [ 1200.504186][T14830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.506509][T11439] usb 1-1: config 0 descriptor?? [ 1200.582661][T15032] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2686'. [ 1200.634059][ T5964] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1200.649711][T15051] FAULT_INJECTION: forcing a failure. [ 1200.649711][T15051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.649744][T15051] CPU: 1 UID: 0 PID: 15051 Comm: syz.4.2695 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1200.649767][T15051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1200.649778][T15051] Call Trace: [ 1200.649786][T15051] [ 1200.649795][T15051] dump_stack_lvl+0x189/0x250 [ 1200.649828][T15051] ? __pfx____ratelimit+0x10/0x10 [ 1200.649853][T15051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.649879][T15051] ? __pfx__printk+0x10/0x10 [ 1200.649902][T15051] ? __might_fault+0xb0/0x130 [ 1200.649937][T15051] should_fail_ex+0x46c/0x600 [ 1200.649968][T15051] _copy_from_user+0x2d/0xb0 [ 1200.649989][T15051] ___sys_recvmsg+0x12e/0x510 [ 1200.650018][T15051] ? __pfx____sys_recvmsg+0x10/0x10 [ 1200.650066][T15051] ? __fget_files+0x3a6/0x420 [ 1200.650102][T15051] do_recvmmsg+0x30d/0x770 [ 1200.650139][T15051] ? __pfx_do_recvmmsg+0x10/0x10 [ 1200.650159][T15051] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1200.650185][T15051] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1200.650222][T15051] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1200.650259][T15051] __x64_sys_recvmmsg+0x190/0x240 [ 1200.650285][T15051] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1200.650312][T15051] ? do_syscall_64+0xbe/0xfa0 [ 1200.650341][T15051] do_syscall_64+0xfa/0xfa0 [ 1200.650364][T15051] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.650388][T15051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.650407][T15051] ? clear_bhb_loop+0x60/0xb0 [ 1200.650430][T15051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.650449][T15051] RIP: 0033:0x7f62e8e7f6c9 [ 1200.650466][T15051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.650482][T15051] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1200.650502][T15051] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1200.650517][T15051] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 1200.650531][T15051] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.650544][T15051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.650556][T15051] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1200.650588][T15051] [ 1200.784036][ T5964] usb 6-1: Using ep0 maxpacket: 8 [ 1200.789475][ T5964] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1200.789505][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.789526][ T5964] usb 6-1: Product: syz [ 1200.789541][ T5964] usb 6-1: Manufacturer: syz [ 1200.789556][ T5964] usb 6-1: SerialNumber: syz [ 1200.797132][ T5964] usb 6-1: config 0 descriptor?? [ 1200.815481][ T5964] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1200.824143][ T5964] usb 6-1: setting power ON [ 1200.824169][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 1200.831622][ T5964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1200.833244][ T5964] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1200.833303][ T5964] usb 6-1: media controller created [ 1200.897782][ T5964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1200.951741][ T5964] usb 6-1: selecting invalid altsetting 6 [ 1200.951763][ T5964] usb 6-1: digital interface selection failed (-22) [ 1200.951780][ T5964] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1200.953019][ T5964] usb 6-1: setting power OFF [ 1200.953042][ T5964] dvb-usb: bulk message failed: -22 (2/0) [ 1200.953060][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1200.953073][ T5964] (NULL device *): no alternate interface [ 1201.000801][T15041] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2690'. [ 1201.005694][ T31] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1201.157980][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1201.158032][ T31] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 1201.158057][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.208245][ T31] usb 4-1: config 0 descriptor?? [ 1201.318565][T14830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.404975][ T5964] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1201.417914][ T5964] usb 6-1: USB disconnect, device number 42 [ 1201.618012][T11439] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0031/input/input105 [ 1201.648109][ T31] aquacomputer_d5next 0003:0C70:F003.0032: unknown main item tag 0x4 [ 1201.685835][ T31] aquacomputer_d5next 0003:0C70:F003.0032: hidraw0: USB HID v1.00 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 1201.753462][T11439] uclogic 0003:256C:006D.0031: input,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1201.854585][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.862493][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.886265][ T5985] usb 1-1: USB disconnect, device number 79 [ 1202.110547][ T5964] usb 4-1: USB disconnect, device number 89 [ 1202.164416][T15059] fido_id[15059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1202.614014][ T31] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1202.652462][T14830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1202.691464][T14830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1202.740639][T14830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1202.754224][ T5964] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1202.776412][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.780243][ T31] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1202.780274][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.780296][ T31] usb 6-1: Product: syz [ 1202.780312][ T31] usb 6-1: Manufacturer: syz [ 1202.780327][ T31] usb 6-1: SerialNumber: syz [ 1202.788088][T14830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1202.796589][ T31] usb 6-1: config 0 descriptor?? [ 1202.822077][ T31] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 1202.826420][ T31] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1202.826480][ T31] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1202.914596][ T5964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.915704][ T5964] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1202.915733][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.944294][ T5964] usb 4-1: config 0 descriptor?? [ 1202.962585][ T5964] pwc: Askey VC010 type 2 USB webcam detected. [ 1203.354010][ T5964] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1203.357946][ T5964] pwc: recv_control_msg error -32 req 02 val 2700 [ 1203.359552][ T5964] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1203.394104][ T5827] vhci_hcd: vhci_device speed not set [ 1203.508646][T14830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.546699][T14830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.568649][ T1649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.568816][ T1649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.607734][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.607918][T12564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.810415][T15098] FAULT_INJECTION: forcing a failure. [ 1203.810415][T15098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.810450][T15098] CPU: 1 UID: 0 PID: 15098 Comm: syz.4.2711 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1203.810473][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1203.810489][T15098] Call Trace: [ 1203.810497][T15098] [ 1203.810507][T15098] dump_stack_lvl+0x189/0x250 [ 1203.810539][T15098] ? __pfx____ratelimit+0x10/0x10 [ 1203.810565][T15098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.810599][T15098] ? __pfx__printk+0x10/0x10 [ 1203.810622][T15098] ? __might_fault+0xb0/0x130 [ 1203.810659][T15098] should_fail_ex+0x46c/0x600 [ 1203.810690][T15098] _copy_from_user+0x2d/0xb0 [ 1203.810713][T15098] core_sys_select+0x4be/0xa20 [ 1203.810750][T15098] ? __pfx_core_sys_select+0x10/0x10 [ 1203.810799][T15098] ? __pfx_set_user_sigmask+0x10/0x10 [ 1203.810834][T15098] __se_sys_pselect6+0x27a/0x300 [ 1203.810864][T15098] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1203.810888][T15098] ? __pfx_ksys_write+0x10/0x10 [ 1203.810915][T15098] ? __x64_sys_pselect6+0x21/0xf0 [ 1203.810941][T15098] do_syscall_64+0xfa/0xfa0 [ 1203.810965][T15098] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.810989][T15098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.811008][T15098] ? clear_bhb_loop+0x60/0xb0 [ 1203.811031][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.811050][T15098] RIP: 0033:0x7f62e8e7f6c9 [ 1203.811067][T15098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.811084][T15098] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1203.811105][T15098] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1203.811119][T15098] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1203.811132][T15098] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.811146][T15098] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1203.811158][T15098] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1203.811192][T15098] [ 1204.163441][T14830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1204.260806][T14830] veth0_vlan: entered promiscuous mode [ 1204.294459][T14830] veth1_vlan: entered promiscuous mode [ 1204.359779][T14830] veth0_macvtap: entered promiscuous mode [ 1204.376351][T14830] veth1_macvtap: entered promiscuous mode [ 1204.412598][T14830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1204.431246][T14830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1204.472985][T11482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.482902][T11482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.494579][T11482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.494833][T11482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.810999][ T5827] ------------[ cut here ]------------ [ 1204.811013][ T5827] kernel BUG at net/ipv6/route.c:1473! [ 1204.811772][ T5827] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1204.811797][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1204.811815][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1204.811826][ T5827] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 1204.811851][ T5827] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1204.811882][ T5827] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1204.811897][ T5827] RSP: 0018:ffffc90004c673c0 EFLAGS: 00010293 [ 1204.811911][ T5827] RAX: ffffffff8975653c RBX: ffff888126ef9000 RCX: ffff88803385bc00 [ 1204.811926][ T5827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1204.811937][ T5827] RBP: ffffc90004c674d0 R08: ffffe8ffffd543d7 R09: 1ffffd1ffffaa87a [ 1204.811952][ T5827] R10: dffffc0000000000 R11: fffff91ffffaa87b R12: ffff88805b8a53c0 [ 1204.811967][ T5827] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed8e5b3d0 [ 1204.811982][ T5827] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 1204.811998][ T5827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.812009][ T5827] CR2: 00007f62e8edc470 CR3: 0000000058d5c000 CR4: 00000000003526f0 [ 1204.812026][ T5827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1204.812038][ T5827] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1204.812050][ T5827] Call Trace: [ 1204.812058][ T5827] [ 1204.812067][ T5827] ? ip6_pol_route+0x162/0x1180 [ 1204.812095][ T5827] ? __pfx_ip6_pol_route+0x10/0x10 [ 1204.812127][ T5827] fib6_rule_lookup+0x1fc/0x6f0 [ 1204.812144][ T5827] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1204.812160][ T5827] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1204.812180][ T5827] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.812201][ T5827] ip6_route_output_flags+0x364/0x5d0 [ 1204.812218][ T5827] ? ip6_route_output_flags+0x2e/0x5d0 [ 1204.812235][ T5827] ip6_dst_lookup_tail+0x299/0x1510 [ 1204.812257][ T5827] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1204.812276][ T5827] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 1204.812298][ T5827] ? __ipv6_chk_addr_and_flags+0x68f/0x7f0 [ 1204.812317][ T5827] ? __ipv6_chk_addr_and_flags+0x187/0x7f0 [ 1204.812340][ T5827] ip6_dst_lookup_flow+0x47/0xe0 [ 1204.812358][ T5827] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1204.812374][ T5827] send6+0x4ce/0x8d0 [ 1204.812390][ T5827] ? rt_read_lock+0x203/0x490 [ 1204.812410][ T5827] ? send6+0x220/0x8d0 [ 1204.812451][ T5827] ? __pfx_send6+0x10/0x10 [ 1204.812470][ T5827] ? rcu_is_watching+0x15/0xb0 [ 1204.812493][ T5827] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1204.812515][ T5827] wg_socket_send_skb_to_peer+0x128/0x200 [ 1204.812538][ T5827] wg_packet_tx_worker+0x1c8/0x7c0 [ 1204.812559][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 1204.812583][ T5827] ? process_scheduled_works+0x9ef/0x17b0 [ 1204.812606][ T5827] process_scheduled_works+0xae1/0x17b0 [ 1204.812638][ T5827] ? __pfx_process_scheduled_works+0x10/0x10 [ 1204.812664][ T5827] worker_thread+0x8a0/0xda0 [ 1204.812693][ T5827] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1204.812717][ T5827] ? __kthread_parkme+0x7b/0x200 [ 1204.812740][ T5827] kthread+0x711/0x8a0 [ 1204.812764][ T5827] ? __pfx_worker_thread+0x10/0x10 [ 1204.812784][ T5827] ? __pfx_kthread+0x10/0x10 [ 1204.812805][ T5827] ? rt_spin_unlock+0x150/0x200 [ 1204.812826][ T5827] ? rt_spin_unlock+0x161/0x200 [ 1204.812844][ T5827] ? __pfx_kthread+0x10/0x10 [ 1204.812844][ T5827] ? __pfx_kthread+0x10/0x10 [ 1204.812866][ T5827] ret_from_fork+0x4bc/0x870 [ 1204.812887][ T5827] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.812908][ T5827] ? __switch_to_asm+0x39/0x70 [ 1204.812925][ T5827] ? __switch_to_asm+0x33/0x70 [ 1204.812941][ T5827] ? __pfx_kthread+0x10/0x10 [ 1204.812964][ T5827] ret_from_fork_asm+0x1a/0x30 [ 1204.812989][ T5827] [ 1204.813005][ T5827] Modules linked in: [ 1204.813037][ T5827] ---[ end trace 0000000000000000 ]--- [ 1204.826614][T15120] FAULT_INJECTION: forcing a failure. [ 1204.826614][T15120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.826649][T15120] CPU: 0 UID: 0 PID: 15120 Comm: syz.4.2720 Tainted: G D syzkaller #0 PREEMPT_{RT,(full)} [ 1204.826675][T15120] Tainted: [D]=DIE [ 1204.826682][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1204.826693][T15120] Call Trace: [ 1204.826700][T15120] [ 1204.826708][T15120] dump_stack_lvl+0x189/0x250 [ 1204.826738][T15120] ? __pfx____ratelimit+0x10/0x10 [ 1204.826762][T15120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1204.826787][T15120] ? __pfx__printk+0x10/0x10 [ 1204.826806][T15120] ? __might_fault+0xb0/0x130 [ 1204.826837][T15120] should_fail_ex+0x46c/0x600 [ 1204.826861][T15120] _copy_from_user+0x2d/0xb0 [ 1204.826882][T15120] ___sys_sendmsg+0x158/0x2a0 [ 1204.826905][T15120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1204.826940][T15120] ? __fget_files+0x2a/0x420 [ 1204.826963][T15120] ? __fget_files+0x3a6/0x420 [ 1204.826991][T15120] __x64_sys_sendmsg+0x1a1/0x260 [ 1204.827011][T15120] ? lock_release+0x4b/0x3e0 [ 1204.827032][T15120] ? fdget_pos+0x253/0x320 [ 1204.827055][T15120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1204.827079][T15120] ? __pfx_ksys_write+0x10/0x10 [ 1204.827102][T15120] ? rcu_is_watching+0x15/0xb0 [ 1204.827121][T15120] do_syscall_64+0xfa/0xfa0 [ 1204.827145][T15120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.827164][T15120] ? clear_bhb_loop+0x60/0xb0 [ 1204.827183][T15120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.827201][T15120] RIP: 0033:0x7f62e8e7f6c9 [ 1204.827217][T15120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.827233][T15120] RSP: 002b:00007f62e70e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.827254][T15120] RAX: ffffffffffffffda RBX: 00007f62e90d5fa0 RCX: 00007f62e8e7f6c9 [ 1204.827268][T15120] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1204.827281][T15120] RBP: 00007f62e70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.827292][T15120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.827304][T15120] R13: 00007f62e90d6038 R14: 00007f62e90d5fa0 R15: 00007ffe6d3e05a8 [ 1204.827326][T15120] [ 1205.148523][ T5827] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 1205.148555][ T5827] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 5e 13 ab f8 e9 f6 fa ff ff e8 e4 5a 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 1205.148565][ T5827] RSP: 0018:ffffc90004c673c0 EFLAGS: 00010293 [ 1205.148576][ T5827] RAX: ffffffff8975653c RBX: ffff888126ef9000 RCX: ffff88803385bc00 [ 1205.148590][ T5827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1205.148603][ T5827] RBP: ffffc90004c674d0 R08: ffffe8ffffd543d7 R09: 1ffffd1ffffaa87a [ 1205.148616][ T5827] R10: dffffc0000000000 R11: fffff91ffffaa87b R12: ffff88805b8a53c0 [ 1205.160666][ T5827] R13: ffffffff89755522 R14: dffffc0000000000 R15: 0000607ed8e5b3d0 [ 1205.160689][ T5827] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 1205.160700][ T5827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1205.160707][ T5827] CR2: 00007f62e8edc470 CR3: 0000000058d5c000 CR4: 00000000003526f0 [ 1205.160720][ T5827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1205.160726][ T5827] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1205.160748][ T5827] Kernel panic - not syncing: Fatal exception in interrupt [ 1205.161010][ T5827] Kernel Offset: disabled