last executing test programs: 6.796722175s ago: executing program 2 (id=561): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002100), 0x0, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_list_modules(0x0, &(0x7f0000000a40), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0x9}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0xc, 0xc, 0x4, 0x7fff, 0xf, 0xe}) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0xfe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.964018707s ago: executing program 1 (id=566): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x100000000, 0x80200) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) (fail_nth: 3) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$inet(0x2, 0x802, 0xc) getsockopt$inet_int(r2, 0x0, 0xd, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000100)=0x8000, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = openat$null(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x4, 0x0, '\x00', 0x1, &(0x7f0000000140)}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 5.584174653s ago: executing program 1 (id=568): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x841, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket(0x1e, 0x4, 0x0) r0 = syz_io_uring_setup(0x417, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x126}, &(0x7f0000000bc0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.412919066s ago: executing program 2 (id=570): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1fc, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x200}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r4, 0x12) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0xdd, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x2c}}, 0x0) tkill(r3, 0x1) tkill(r4, 0x14) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 4.724164788s ago: executing program 4 (id=571): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_score_adj\x00') syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0xb5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000070000000000"], 0x2c, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'bridge_slave_1\x00', {}, 0xe6d}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff00000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.702250868s ago: executing program 1 (id=572): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/1) 4.466073949s ago: executing program 3 (id=573): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000680)={0x2, @pix_mp={0x0, 0x2027fad8, 0x59555956, 0x0, 0x0, [{0x400}, {0x0, 0x20}, {}, {0x0, 0x8}, {0xfffffffc}, {0x0, 0x5}, {0x3}], 0x0, 0x7, 0x6}}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x60) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="183e000000000000000000000000930018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="e640c5200cf961aae5bf62aabb156923489c4fabddc8411d630151f71966591a00f9dd7d13a90983657b4970da4a1bafdb7753fbd5fc7902ab5e6411af0799e96cfe38ce33753e23560faf299fccff825586439fc80d20837a302335baca3e2196edc0a370b9b167cf2b961fd6081c5b55c890a0834c", 0x76, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="71dd1a04ef2f89028ebc90bde1806c9097be081fbe196a0fb2f25679fb7afff0bf3ccb2f1c4a6d40984744208a46e2827b03c6c85f8212376294af6bdff15d7b218d88464e4d04399a1cac24c903f6b976cc63a5181b4b79a292feb2c07c111048d8d6add5498d9587d098a9ad0f4df312cebb9a74560b42ba7d8781f01d96b20c6791b58327e46c274eeb9e40e377fc67088982b78a576cec4a6fd7ee9e6589e8f13132247b512d8194bdb7ce07192d774baf0329797bb965", 0xb9, r3) r4 = openat$vimc1(0xffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000001500)={0x9, 0x102, 0x5, {0x3, 0x0, 0x6, 0x9}}) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x10000, 0xf, 0x3, 0x5}}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x2}, {0xffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) 4.331375766s ago: executing program 3 (id=574): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4.200315647s ago: executing program 3 (id=575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x2f8}, &(0x7f0000000140), &(0x7f0000000540)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="8269b66f", 0x20, 0x0, 0x0, 0x0) 4.115110582s ago: executing program 3 (id=576): syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 3.966362523s ago: executing program 4 (id=577): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback, 0xffffffffffffffff, 0x1c, 0x2024, 0x0, @void, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x140000000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2b}, &(0x7f0000000200)=""/209, 0xd1, &(0x7f0000000300)=""/104, &(0x7f0000000380)=[r1, r1, r1], 0x3}, 0x58) move_pages(r2, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = syz_io_uring_setup(0xed0, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r5, 0x10a40, 0x0, 0x40, 0x0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000340)={0x60000, 0x10, 0x10001, 0x7fff, 0xd8, "41213a5479d798633670d30c7b5ca4f443b8f3", 0x3, 0x8}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x3) link(0x0, &(0x7f0000000280)='./file0/file0/..\x00') r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) syz_usb_ep_write(r8, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000004c0)=""/217) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) 3.249223947s ago: executing program 1 (id=579): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a000000000000000080005fc3"], 0x26}}, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) fcntl$setownex(r1, 0xf, &(0x7f0000000140)) sendmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)='&', 0x1}], 0x1, 0x0, 0x0, 0x4004044}}], 0x1, 0x40015) 3.140544057s ago: executing program 1 (id=580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002100), 0x0, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_list_modules(0x0, &(0x7f0000000a40), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0x9}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0xc, 0xc, 0x4, 0x7fff, 0xf, 0xe}) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0xfe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.089190789s ago: executing program 2 (id=581): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x1a, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) socket$kcm(0x10, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0x1) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000000)={0xc2df, 0x6, [{0x8, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0xa, 0x1}, {}]}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000300)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="0008b9000000b9"], 0x0}, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r6) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r7, 0xf01, 0x70bd2f, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x20000004) 2.683094164s ago: executing program 3 (id=584): syz_usb_connect(0x3, 0x4f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0c020000000009049c00030103510009200a00000000000009050313000000000003270103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.283530284s ago: executing program 0 (id=587): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_score_adj\x00') syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0xb5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000070000000000"], 0x2c, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'bridge_slave_1\x00', {}, 0xe6d}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff00000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.185323413s ago: executing program 1 (id=588): syz_usb_connect(0x6, 0x7a, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x800, r1, &(0x7f0000002000)="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", 0x1000, 0x0, 0x0, 0x2}]) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x2, {0xa, 0x4e20, 0x3, @private2, 0xfffff7a0}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000200), r8}}, 0x18) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="e5ff000000000000bc1008001f0000000fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_int(r7, 0x0, 0xf, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) syz_io_uring_submit(r10, r11, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) io_uring_enter(r9, 0x2def, 0x4000, 0x0, 0x0, 0x0) r12 = open(&(0x7f00009e1000)='./file0\x00', 0x20940, 0x8) fcntl$setlease(r12, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.937897124s ago: executing program 4 (id=589): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) r0 = syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x38, &(0x7f0000000100)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x8906, "1ed27099163f13e6e6e36167cbb44fa7413ca2c81cb7be6d752714b202d740f5250d866c13fa"}}}, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) (fail_nth: 2) 1.744828114s ago: executing program 4 (id=590): r0 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) (fail_nth: 3) 1.534724035s ago: executing program 4 (id=591): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca0000000109021200010092f800279b5f34ea9f2a8b439b9206099e24deaac4cd5126ed40c9fb62e721fc45ef844db047fd779a028d8d650ffbc1dc7a6ceeec74fa673aa63de8b4c616c664c7f5664549c1b41fe49e94b32f7899762737fdbf098c5a000000000000000200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.457282267s ago: executing program 0 (id=592): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x80, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x44}}, 0x0) 1.372320979s ago: executing program 2 (id=593): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.308965897s ago: executing program 0 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (fail_nth: 3) 1.193756206s ago: executing program 2 (id=595): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x4c) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) syz_emit_ethernet(0x4e, &(0x7f0000001880)=ANY=[@ANYBLOB="9fbeb3fea816ffffffffffff86dd600a843500180601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB='`\x00'/12], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="e85f3aa9763f18e5db241035ba73f5e7de53988571a14d413905a4afffa4b7df1ed5a0568601374dc09d2db2222de8abf05fdd32212f6828a009cae1b03c46147afe304140f0590ab5e23f6658c449a07accdb8ab695c9912fc83735df4febd017c5ba058d12eca80e1fa25301f3797d1fb77f3724b0bdaa", 0x78}, {&(0x7f0000000340)="a81c127ba04517a60186fad1daae014830a618191480c10521a75d8cca407e27a5c6bff2f87ac07d46b10631326539d84ac05108b2dbea3250bb2645b61c31ab4f6b4d0b1c3559ccab2689a643914b916068ff7166e1d77a8b15c5c9b6bdc2ebdbd7ae3a671a9412cd094a0049ec5702f314ce367bdf17ad1f7e4fba12c4d93a9255005347123e592a6260852d", 0x8d}, {&(0x7f0000002480)="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", 0x1000}], 0x3, 0x0, 0x0, 0x7400}, 0x4000001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000004780)='./file0/../file0\x00', 0x1000, 0x800, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000004980)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="2e56e4bf6208eed510256183ea", 0xd}, {&(0x7f0000000500)="3bd2bb32d3faf4294368febbc264ad6e9c453c479008add4c268de5d6e02d9b123663f15e501364bb2ea8078d0bb8870a259ec3dc92aa30265f2ba6fab6cacc3a57fb9bd29cd514067ac3bb82268210fe1382ed8092dfabab0025b4ede9cc25753", 0x61}, {&(0x7f0000003480)="9effd5a56813318101d8c437c492c321aa1eb4f8373355258aaa145db76e8e86b6b1e5d80189d6b3f63bd97ef26e6de07dc0941bf5adc22dbe1eb8fe9b4f1a68226b21ac652b675bd1c0fe02b01a085d79e21fe855a52ff42c3aa256dd08d73d006175bc8553f09672d279326aeed331f048fa89833c5c804b36726e235710482730947c8432c01f78a03f9e2abb1b7eace157d5cada44ac2fb4251ed8a73015afe6a859e5e62aa96349935063cb37403bb5817199f1bb96a71253e415ae0cb28aecfa164e58039c4788950fc777db988b25da5faf829e6e00cf558a6bcf5e4f3f5b605d5e154648d70ea120b5db2c481684e630ec0516bbffe378103b00978c2e9bb4ed887f66eab67ba2312991be0c166a604771a9b2634bbd2af7755c5f2bf3b8ba3925f21d25f289ed93531b98e01514716c5078c025254ec403ebaa2cb0e3671803c255cfd64a2cbae3f8bfdc72482ecf84cf3d2abed353886467e6d138dbbe04223d83afa1938eb507d8aa18c073e01568beab06f2fc36834d491c3c9967dca42792f9893b4f10d99f071ead30ea8485d15bbc77225de1b637efaa617bfb2eddde21267d7131148b625a989c2e49a9aad938ae8a6aae7c28e9fe6e6431c5be2f2272e2de79f81ecf7bf510f44898f35e26f02d74e5ec0b5bf9a60ebab62d49b446a582128d0b3adc84e1508ec0572d317082c09930bfcf70dcf3710dff430aad2a98ebc1d920ac51145578472894dc70775666dcd5ec902cc69868a6a30e4db61231f221821fd32ecd50629a285696ba202bdf61c9929f4c93130dd9c1ad6654d8188b31e38e475da53c198236ddde22c9051ea4ad720c830d5695ba7a711dd4389700bf2b96988a4df72a077b568fb73c5693a9394ba7eb6d756731ce7159b916f1945efc2dd5b576bbb6fdba59fbf89ad55426475a080f74ee2187cf9b0b31eafdc31849e25be36751f808db5d1b163284511baaacd46a686b32d59d8fbf652f2c2844fc3c27ae93d8d1a0547abf47b25ecf6229b06b8cf2d206581c792c70e259b04ded852baa86b4c28c6797851f7e21ea2f42413058b42b11663ea700871657ad69fc795320d3a72ab148b5c47c471b538168eb739067c2622bd1148ff2becf5903235e829ff43e730131c9e9ad6595d0602252745e999caeb1d984b7f41935712839d833c0026e3f55ef46949741de2f4730c6065799a6d4a5b1d292cbaa486c085a29153ead9f14a2d1e5d26445e24a640be9c08f00a95656fa3311c8dc2e74b89cc3393a3e880e4747e2e3c5098fb1ba844af1d9a020e867e02172ffbbefa42b717314ec0734ca93cffe6b8f00282781eb9c6bc04b4d2230e39a623d54b633f3ae3862dc431383f2497da52724db321a4033c075f8b0156a07311fe6d9ace70ab23a890a93107f3642a0fefecb9fd1d3abcf3c639930163d8796756340a59f5b6157cc93b34dc840afe751dac0c4e1171778a23d1e420c5c7707e4e6ee29facd7a86baee8677b7abc3c573b6e2ec443ef02fb97c4602f92a2f7b7d2f52e7a85d6b5d2ff840ea2b6f0907b52777d9cfa2e8094810b3737c3e98f9f4be302d9f0867dc181aad11edfd3a8d430921112542f5ea55dcd61645b8b11f9be4963704cd83df178ee062437ead91ee32f4bc903d4b3b10cc4d4b62d0f5ae37bbde95c09448cba89715baa31f44be433c05d993529e7ef722429dee4505edd2a42701e852178426b8b776549e8773519e94e7606d3f5523cf51ab455164a236bc19b93a2f4815e93630afadcfc4032ab9bb2ed32e65bb4afdf9b4984fd24dd1e9fb8eb71ab606b3a3b49139f29ba3aca8e792c0490835c235fee52365d06f4c8106e808de543f273515f0e361d6364f9744bd8c237ee513adc18cd0d324ef355510933a31c41cd93f31088e60c2b49afc503d16ea9f9bb5e42351506917098fcb7e2442cb1b3c291cb8de25c4f35c763bda84af07f3db6d7fdd103cbf12ca8002d87b1449a0778a4a1a4a1877819acc01796797261ff83eb12b8f131d036485076865e5c9157ffc133a8ca151168945799a0dddf05b4f23423dea6054f1d68aee8471e1ee7bb3bca4c1573fc02bd75218867166f33bd81427620dcd4fd2983c2ecd08a0fc31789062585ff28c344768404bca73be7a39ee8a5719168ef13703e5a8605944a279a85231c348674e3dddd211220fa3b621c6fef0d7c21c8dfde0005f1b856f816a11054882d86de27696715c3903491214b41fe52b5bea92f61c29442bc83f5e07f0a6be40c3137422ed01f5e166e501017f7370484516f63718dba2ef9978426c2f6931ec92005069e44f8f603c5a43be79485fc43a9cccd8436464d452298eaec9f4f794bbff85858063ee1dba057859f4d04c137547f3fec91fe822c503834ef07e9b56ff1d25b88cfce13708ced35e8faf87b7cb3a4b0a4876a6391644cd736ad0532be79ae234dfacffaab3d6d8d18f93ba070ff0dfc6bce84f8a3ee9d25366f489a68c7ae0c0cb30ea5d45eb384245ddaeba30e83a6c0346d50c5fbc8a22d10444fb385a4c347408be3cb3f7c2999beaef20094d5420e204d4fa752727ddda7e7445754990df9b74e8bf88c4c4a53963b08dd43c0f1932af2a97694b5efc4ae5ce93fa20eebdafd857175a2dfaa805e95b56909561460be890acfb1cecb4a43305a93ae0b9a3e0ff6d6238a1ad04a12d4e5451626f9deaea38983e909a6bf48f39422511d21b6f8722f0f8d00fa15c8a80c868dfeebbdb90f6294f7f21519925d8db7437fc8efb195cff0d649e393214cfebbf1627b4840a212302230afd7a488eac7cbe97c14623fa55410a203bf347e190ebf9656236b82714f3534e621baaded37f918aabc73550e7b15de1100491849dc48fdf65c83396d0275b6a34557f6a4f0b467180e59d54b3fdba0bad650eeea5502a31d622f879a02a2eab7f3e5d422ee03425a73968753aedb1ff3c053d8b419447e2cc0d687d88bcba3c540791c3a3190984785a7e7a9e56e3854d86a2ffe421eb57f1a25839b15cfda7a2fa36ada3beded33e181d0ba050b23eb3b3950bc7c6c8de9aa43f1af2d2ba0cbf09e9b026c134d8060e47243be150a44f8ad9ba942db807ef45b3b3eb3056d800481bcb44dcdc02dcbcd0725d0e5080a0c4096d1ef26a6f15699d08f5774fd1cda3640062ec107f0b04146a5d7e46e28445da0cc9494896da26aaf84c7fd0b8e92feadc9c8f707fe6c525d5e2196bad423368bd531b728f54cbb05815ea35acd28e9fe883bbe9476b62a96a9e9efab9fae4dc3735895751baf68cd76af7cb2d757eb83ad63f325e118322a22d7702003b13f964511fc0fbe19089f3b423bf0466318ee318bc7408adfdf8c6c273f5fc8132b54cf38b547587be308ada5be0065652cb9d373f6e20cbf96194eca91f96438de957b6f113ffb543ec1780c77890193127da801157a77a0f8cfea3b7965f4623ba778563d14e0bb639de8d87404cef35596db5b41b75b7c89dcb0e192affdde9a4715cd93d220dc54d7d6e7afb0425d4cab3a8ffac0d4f14d6004197255372fbf1b951c55bae6af63caca9ed19b1d6137e1c31da1c640662499bf01d8f711574b0b3447b7e2c5a76bc4e24613bbd46680c44318a17008b6d27b0657a896fdee75e8ba89ae29ecb7583cd6dc2a8f734427289b3f4201997ddf1e21874180621bd5f4825d0a59495caaa369681c6651ce5f1cce3e2aa6cc317e071a41105d008f8b52ca8a79bdad0e094c8ed1ede2951019d04573afdd55b2412e38794668d6b654070ed62714543c47302be1a559ed5a0cf1838eb16ba391db8260531c7b49557bd696ec8f323b5e38c14bb5df4eb66d8e75e908ee749a88931d834710d8ed391343e8ea00c0c170f014f270bc0cdf9149648303bac7c3b2bd0edcd20b9aeb7badf917970dd46b18e2fc9d2fba3e55d5cac187b859e62bcb11a788efa91683cb0ce1349eae20ca9b91635cb47f58fba3040f48f217d5be82ae9195d75e1dc8250d52a369cfa2d6a28761d27b44b571242e7c177b81aeda2dfe0e04cb3a42c3d0f4e3cd3fb8afb3f42d53e62e82d01360b9afcd8964f8b5abba08d50022f089884a344e75672fe37746ff55bd9bed85fa7e039e792ef063c7a4b3367e8d8d80e2e38d28eaf8cb8cbe7fc7ddb52c2dc0c24a017b01fc182c86567a179c11b90b1ce042138f8e6f74ac2106d4ac5352de5243bd526e3d0a121aea94f88b059751e1b24daeae5036f08d8130b33157764e09f2e6c7efdc0d80679a4edf846a2045be36b4d39433b62bf284350b446b1d2e0df9560a2d01858563e8dd280695ae90918d3317c4cd4a918f690a800cf47809e961d83c7655f99d44784254ef646d2785ea29ccecc448b2036a85793597906b04c037e2ae2aa49414128b7b44d07bd5204fb3986d36684e3df8c8acd65657a40bc2b8016f060905d89dec65bf15a4376e7bfdf7857c2a902160ac5ee8bbf7671a5c8d5cfff56fd6b5f24d470e5499cbfbe3388d3c930bb7cc047b8f610e00d1a81b7ecc6afc82496bdca14f2f359e3996c6dc5e756b4564d729cfd223f273775a29ae703e264aa0e2a33b57f50953d269b50e37dc1bda182b677976e66daab77bb207c15e8ba5e941bbc9b9f99a3e3c921101bceef42049c7a7b63084ee477a42bfca33850fd747f784f49817bfb46299d49042996f4cd3be352482f7455c0c1f07664bf63967c3349cec5190d5e1b11d3d4ac24d37277a9d696ac300fc440e60fa7d2d87b497fb7f02376784d0731c190de7dee08295cd7700afbb35833641aff1c76bf24362336fe571b845fcea22b0fcf756af9fc094a74beaa0d50811473b6dc4e00f6b2abd4eb30673ad06842c646cfff71c92cc026e27c4c88bb3c5bdfa77fab41eeb7d39b5da0946c9b3c1e1c68bd8be751aa08666bfb2cfd1ff590ef3368455c36e10f11edffec005248c0bb18e7823e76e09c1e7e208f8f3d28f5e506d438756cc8fa1bcde9de80463ee8d9b08eae2ba1a08646909897ee6276af076a38c13b8f720a69041bf52423de9646a84d349c1f47483690e5990eb7a9e16a65736fe7f938167be532daf989ea73dce6ca6149c2d29f55465402da91713fba403f52a9e5ab78f04ec38ff2d3132023525de01513dd08a7fb41d7bc291fe71157f1814e0760809a65428b640d423c7ced3098c393ce4e1ac7a657ebcbe06d38489297daca93d150cf990ca15423fa731553aa1b4481d2e17c42c3c0b4d7188fcac4fae11c126e014e99319990798f5fdbe0057fa8729ab227e76ef9d1157dda48e8d47b47e208914532561e58626b78ae12e09d1fe0e3251cb3ee78c0c8b96584eeb78194734cfb43529174d8d9e8b3198fa802a52844ba6385dfee6053586a919c555df4c5374311a58a8b48460f1b74302017efe6bf7d05023e344b5a5439e190501600ca56736a4664eaa4f5cf7cbb48f131a59bbaccf27ca140d334622efc62e049042166ba11e2f49c7d743b60cb5c0e41ebe948f26cb1ccddd74bb84c1ff6953113875d80f644c253b77049855b5b1a1843d49c63ecae7200b9ce042cf351effc5a100198e98dc06549e6f2400cf4b76a4c413da7e77cca1c659409091ae72b2564c439c304f2bb10c8e698a96d47b3020b78eade0c494c8accf4938e7c52a02ab5cca9990a436bcec874418caabd53cd77512d7c4fef3fa69f6dd62254fd13d64fcab4cf5583edbee0028e0035835f81ae55992e788fdb4cb133b98f32c4d196b979c3a25bf7f17a2b7e70c0281c84a608fc2c", 0x1000}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="280000000100000001940000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r4], 0x28, 0x8000}}, {{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000680)="ea8a68f653a9d157122d7ca5998c979eb4f6524c0d61d5efbb6e9260995492b5795bbeed6690527afc98dbaef8ca43145059508196c7a7fbeb2caaeaf6549bb2cff96548edeb6752d688a1327f5f9e9c16c4328b6b766e9d3086b85c66fbfc3f026d6b3404dcafe430b0f7f09aee96ba638b134f2198ae5acc087181be141634f9", 0x81}, {&(0x7f0000000780)="40612e37ae35ac891f41971d6149a2fd155c9094ca99e0eb75ff19585822ac31121944a296f99159c52f657c931c57e8c7aa296bc54093947037447909542beb89caf1c390a859b8a9fc98cc89108e71d4955cfb0dec51e4566457ab37dc2414606c6ac25837719b5ad8e5633b43982c27", 0x71}, {&(0x7f0000000800)="7bfa4cf465f9f763853e5b1a0d96bf5d3bd6279faf1109824721ce7a9cde35199d2249f0d5baa487857374584e4c96214a0fa773f1ea6a927fcfce2934ca7af66fcb1597f7e9fce9af0b2643fe37077b2f4d5ba74cd79e9fd436b4772ae187e5c612e96c8e8ea08a855fb79e3c375346e9e8d2d852fc2c0fc760ee6279c72f66557a35524bb506d98fffee00fe94986728d03565d2ae117044fa9ccffe00c6771da175b97ed6ace45e9ef08979e0", 0xae}], 0x3, &(0x7f0000000980)=[@rights={{0x2c, 0x1, 0x1, [r5, r2, r3, r5, r2, r0, r5, r4]}}], 0x2c, 0x4000000}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000cc0)="afe92b6283b8a7f821602f6593532e67914eba820623dfa888da", 0x1a}, {&(0x7f0000000d00)="bc3a07d6f3d26af2f310c494ea07ccb1954897d23436ad3c356d8a5699fb222f5ed44ae9649dd92bf0f179ca4a4a2d83b4e8d2da3a44a225cb7ade26afd3408bbfea78f0e755e27607f42b6bac75f04eefdcce912e85b00b19f6f64af43e63601abdfa73c939d83e17641df9afeb47addf12a27ab0ea99266ea9843426262bcf89ffd91c83441a92f950ddc216d751cef9b09a1c125bf93eee33f616169b93a083bf3505f5ae9943e36edb13700570076f", 0xb1}, {&(0x7f0000000dc0)="2229def04e3b3430e9e77a4ceda960d19b25c6fb06f9a69a1a9cd28c8cfb52fc997a52d6601001dff535397ada5658fd3108cee15be237734327436aa3dd5e5d676b2589b00d28d1cd262e77ba63e3e3dabae766b8c94b2ed62fde0bf3e839370021f0fabc4a43a4156fcf724119dc6b8d60f01c9e16d8349922b68882fcd408bd59b5f69eb39a0af3a64a15015e64b40a443b7206f36666ed9a60143d1ba8f80f254219ab9cf033", 0xa8}, {&(0x7f0000000e80)="d1bdf0db9f6bbca9ad5074f3226e22d6c08c63acdece1e7de55943bddead52263856e6a9eb4a359095e80273a751e4ba09c04a43305d81199ec8e701ee805092373c30100fe60d12f6ef8639ff4b811d976224536a6836faed422590e8f909a8854105af4c60de5ce0fe96b6dfc36b452e", 0x71}, {&(0x7f0000000f00)="fecd73c5821ff39e6d30e623644474842e3ca1d9d5ef2d45e66195a70ed234b3b7da41322b3efb8e302b0c0d9a7f7999ba90f5a8c33762d61e01c837c4aa2a8240d2150f7fdde93e84dd594f4ccea5e04eff213a0a7235ac9cc9942b9e9301eacce694634929d42df756078df9d39cabbd3420dd6e9e97d5fb3a58399e4368efb36f8c4a5f52ae7c40512d4b1d4e45f29bcb7a17362a6f31db3b077a071955c210d619f9df1adaca8d1e91513494d64c107ca84a6ed7d30d0728dad5db2028c0e330ed5b5b10c628237a92707af4383a2a863ff82092f453ad63709e81130ac13f9496182bede5d12d3daee138545d981da44075", 0xf4}, {&(0x7f0000001000)="1e40d340b78898e4806036f904ca8983cadc05ee3bce2d393f7842e705bfd3fcb5b54581b41c15de91968a36dfc709e6445c81f5352bce0739a96573841699190fff369c147ca78722bbe46fe5f6ff6b93bf057c14256e0afc1e659810167883", 0x60}], 0x6, 0x0, 0x0, 0x40000}}, {{&(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001140)="b576bf2c6148701e9a7131d632fa132959a98d7cc668a32168d0f302274cca6d56f302289ddd53702f393f05877df2bdbb74d4806d14464a0a79bb20f5c04f71c73597f6f30f63b0d519d43069df096a329fe92271dd00ad73efd63985ddcb276c60624f762c16bddba6ad959c31494fc958a3bd83278d76d5425c71efaa2dfc3e44699fe1084050136e6e9b003c673c2226ce540e3ecb93fa790e6e41cfca95c68fecccfc2a1bc1c0f7fb18716a9cf95c85cea6d5eb3605d7b8f14d25ed78a39c2cce4e43e58fdd9f8c98502272a2df6061c73b", 0xd4}, {&(0x7f0000001280)="09df21568156d3829a", 0x9}], 0x2, &(0x7f0000001380)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x30, 0x20004004}}, {{&(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001440)="aee0ddd8c09670a11adb7e46d8560060a09466fdda4f8b1d9237a14e01d35bb09bc5a77db85c2657f275e72b80ba5af40fc864e875c48c04daff1c67835cf7f58cd22d2f136d", 0x46}, {&(0x7f00000014c0)="b84b7c6f7982b729950121e124ea8fc2e1ba739c4a6fdb948c46a5624e3493e04554649a0d6ca7704f60c2929f56e68d74fe026ee3c5c0067c4698274c4f768d4be8fb852de8ba7e69e589782fd7284eb2dc2e4a88f3dcb94723c10974032154b61a2fb19b6a61ef75518407509641ad3b127e722378c2d16e6103ab15e5d68043bf03f8cf109d4002e08b388b1ba1434d128aeb8b7aa1a8ad2f754bb07478fb507a41891901b4ffc9f460567659114a2a3658ae68b7eac380", 0xb9}, {&(0x7f0000001580)="da1ab21ad5fd9ef2defd5e65a76f431c3c19663f535cf413a31172dfd8376a988b907b81d5be75b8e1b6464a41a65678e3b8932207b69e6f5a92cc9cdbc55e659b91571b4d24f77ef723e2c03e5c57e6187df2b6569a9a27e53aaee744bbca2be13c61962d03342c6875cb24d366b7508de29ddbf1ccab2b4fd39741524742bb685858e518de4c8c65b45717944ce1c892ff36e43e8ca2739392e0454696a1de31b18a902c4234b51772161ce2330e8feca36b9ce5c68116761121121faf739c9bf66bbf3e36042803125b6edfed48f262b306a74e7ad6e922c2ba60522fdbf9a7446309e721c385dcbab4396e9802", 0xef}], 0x3, &(0x7f0000002080)=[@rights={{0x10, 0x1, 0x1, [r3]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r5, r6]}}, @cred={{0x18}}], 0x9c, 0x20008011}}, {{&(0x7f0000001fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002140)="ccf7849f7aa8060c07fd82fe9441246898b3b482ff", 0x15}, {&(0x7f0000002180)="712c25c19163e6d7631c30bb3d5b8e03b479f0fab38a0a518233cea985079a914d12570ebda622c6922cb965bef739a12a0849015f5fc8b894b171dba014f40f8e2847c688a5745ee31cef0bc8ac610ec43f9c9a5bae72a062a4f6f150a9b0bbe4a5d032c4ba0ca2f5040c38a704ac2ecd5e3d2ab88a2890b995c917968bb5446038595f6cd6aa7e1ee88d0004eea3ba3ba2a26da9df99d8564f3c5de5ef7b289798448340b40d02961db6eadcc588d5ffbb7cc4db4f9188fd4f05480ea6b0ea31d63e91b93b36d20915", 0xca}, {&(0x7f0000002280)="f809a4d764328cb8c273785fc0365a414e7732fc771c986d0e1a3fe8c84a23465fc56490e355156fc5e63d9fd095905bf6b631b61b08580f04d5ec89f0f1f49f278da4b006b304aec8ccaf7cdb09ca09a437f8ac3b7ba3893fe1502ab37ac5792854c378e12dad2fc88e", 0x6a}], 0x3, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [r0, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r7, r2]}}, @rights={{0x10, 0x1, 0x1, [r7]}}], 0x54, 0x20008001}}, {{&(0x7f0000004480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004580), 0x0, &(0x7f00000048c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0xc}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r7, r6, r6, r3, r6, r3, r3, r7]}}, @rights={{0x24, 0x1, 0x1, [r6, r7, r7, r3, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r8}}}], 0xa8, 0x4800}}], 0x7, 0x20040000) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2, 0x5}) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_names\x00') read$FUSE(r9, &(0x7f0000006140)={0x2020}, 0x2020) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c000780060004"], 0x34}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x10000}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES8=r6, @ANYBLOB="3800000006000000", @ANYRES32, @ANYBLOB, @ANYRES32=r9, @ANYRES8=r3, @ANYRES64=0x0], 0x20) 1.128207247s ago: executing program 0 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="900300003052006e64000000000c0002800500160000000000979cd1e27a10e801cef75cf601531d536bec4bae52441e478df4b74feb0374a7d2fd6781e84079932504ff6a2cadea8f183c91d5db64078cde725b48c07af402830286eaf6d8c6283022c48357c41933ee27f35c31024448292cb79b30e596172c0c604224e13f8be497e74cbfdd3eb322b5f65876e6940d3f9f72d643e4f6496f0a301e023082f1f2ad7f19efaf564f81d53deea912d0da8643884310b1e68390befb9f8a3a5f3b780f1126"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 880.49968ms ago: executing program 0 (id=597): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000140)="8269b66f", 0x20, 0x0, 0x0, 0x0) 650.219188ms ago: executing program 0 (id=598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002100), 0x0, 0x10) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_list_modules(0x0, &(0x7f0000000a40), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x6, 0x0, 0x4) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0x9}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0xc, 0xc, 0x4, 0x7fff, 0xf, 0xe}) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f00000001c0)='./cgroup/../file0\x00', 0xfe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 648.744909ms ago: executing program 3 (id=599): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback, 0xffffffffffffffff, 0x1c, 0x2024, 0x0, @void, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x140000000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2b}, &(0x7f0000000200)=""/209, 0xd1, &(0x7f0000000300)=""/104, &(0x7f0000000380)=[r1, r1, r1], 0x3}, 0x58) move_pages(r2, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = syz_io_uring_setup(0xed0, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r5, 0x10a40, 0x0, 0x40, 0x0, 0x0) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000340)={0x60000, 0x10, 0x10001, 0x7fff, 0xd8, "41213a5479d798633670d30c7b5ca4f443b8f3", 0x3, 0x8}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x3) link(0x0, &(0x7f0000000280)='./file0/file0/..\x00') r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0) syz_usb_ep_write(r8, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000004c0)=""/217) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) 173.477µs ago: executing program 2 (id=600): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b83065cd8966efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000002, 0x7, &(0x7f0000006680)) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r8, 0x800) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x0, {0xa}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008864}, 0x800) connect$netlink(r9, &(0x7f00000000c0)=@unspec, 0xc) accept4(r8, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x77e, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): alNumber: syz [ 171.066043][ T24] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 171.094889][ T24] cdc_ncm 3-1:1.0: bind() failure [ 171.096138][ T6874] netlink: 'syz.3.276': attribute type 10 has an invalid length. [ 171.114708][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.278069][ T6857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.286804][ T9] usb 5-1: USB disconnect, device number 5 [ 171.294405][ T6857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.352486][ T24] usb 3-1: USB disconnect, device number 9 [ 172.215920][ T6901] FAULT_INJECTION: forcing a failure. [ 172.215920][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.315639][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.4.284 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 172.315667][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.315679][ T6901] Call Trace: [ 172.315687][ T6901] [ 172.315695][ T6901] dump_stack_lvl+0x189/0x250 [ 172.315731][ T6901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.315759][ T6901] ? __pfx__printk+0x10/0x10 [ 172.315789][ T6901] should_fail_ex+0x414/0x560 [ 172.315823][ T6901] _copy_to_user+0x31/0xb0 [ 172.315850][ T6901] simple_read_from_buffer+0xe1/0x170 [ 172.315879][ T6901] proc_fail_nth_read+0x1df/0x250 [ 172.315909][ T6901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.315938][ T6901] ? rw_verify_area+0x258/0x650 [ 172.315956][ T6901] ? aa_sk_perm+0x81e/0x950 [ 172.315984][ T6901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.316012][ T6901] vfs_read+0x1fd/0x980 [ 172.316031][ T6901] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.316064][ T6901] ? do_sock_setsockopt+0x267/0x3e0 [ 172.316085][ T6901] ? __pfx_vfs_read+0x10/0x10 [ 172.316102][ T6901] ? do_sock_setsockopt+0x267/0x3e0 [ 172.316120][ T6901] ? kfree+0x4d/0x440 [ 172.316141][ T6901] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 172.316172][ T6901] ? do_sock_setsockopt+0x267/0x3e0 [ 172.316194][ T6901] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 172.316229][ T6901] ksys_read+0x145/0x250 [ 172.316252][ T6901] ? __pfx_ksys_read+0x10/0x10 [ 172.316274][ T6901] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 172.316296][ T6901] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.316316][ T6901] __do_fast_syscall_32+0xb4/0x110 [ 172.316338][ T6901] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.316359][ T6901] do_fast_syscall_32+0x34/0x80 [ 172.316379][ T6901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.316401][ T6901] RIP: 0023:0xf712e539 [ 172.316417][ T6901] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 172.316432][ T6901] RSP: 002b:00000000f511e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 172.316451][ T6901] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f511e620 [ 172.316463][ T6901] RDX: 000000000000000f RSI: 00000000f7492ff4 RDI: 0000000000000000 [ 172.316474][ T6901] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 172.316484][ T6901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.316495][ T6901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.316522][ T6901] [ 172.563571][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.644932][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 172.801097][ T9] usb 3-1: device descriptor read/64, error -71 [ 172.945812][ T6913] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 172.988379][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.048628][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 173.208810][ T9] usb 3-1: device descriptor read/64, error -71 [ 173.331290][ T9] usb usb3-port1: attempt power cycle [ 173.616135][ T6922] FAULT_INJECTION: forcing a failure. [ 173.616135][ T6922] name failslab, interval 1, probability 0, space 0, times 0 [ 173.650424][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.1.294 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 173.650453][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 173.650465][ T6922] Call Trace: [ 173.650473][ T6922] [ 173.650481][ T6922] dump_stack_lvl+0x189/0x250 [ 173.650518][ T6922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.650547][ T6922] ? __pfx__printk+0x10/0x10 [ 173.650569][ T6922] ? __pfx___might_resched+0x10/0x10 [ 173.650600][ T6922] ? fs_reclaim_acquire+0x7d/0x100 [ 173.650633][ T6922] should_fail_ex+0x414/0x560 [ 173.650670][ T6922] should_failslab+0xa8/0x100 [ 173.650698][ T6922] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 173.650723][ T6922] ? __alloc_skb+0x112/0x2d0 [ 173.650747][ T6922] __alloc_skb+0x112/0x2d0 [ 173.650771][ T6922] alloc_skb_with_frags+0xca/0x890 [ 173.650792][ T6922] ? __lock_acquire+0xaac/0xd20 [ 173.650833][ T6922] sock_alloc_send_pskb+0x857/0x990 [ 173.650878][ T6922] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 173.650908][ T6922] ? dev_get_by_index+0x22/0x2e0 [ 173.650934][ T6922] ? dev_get_by_index+0x22/0x2e0 [ 173.650967][ T6922] packet_sendmsg+0x3664/0x5400 [ 173.651021][ T6922] ? __pfx___might_resched+0x10/0x10 [ 173.651073][ T6922] ? __pfx_packet_sendmsg+0x10/0x10 [ 173.651091][ T6922] ? aa_sk_perm+0x81e/0x950 [ 173.651129][ T6922] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 173.651156][ T6922] ? __asan_memset+0x22/0x50 [ 173.651175][ T6922] ? __import_iovec+0x40e/0x7f0 [ 173.651198][ T6922] ? aa_sock_msg_perm+0x94/0x160 [ 173.651220][ T6922] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.651241][ T6922] ? __pfx_packet_sendmsg+0x10/0x10 [ 173.651262][ T6922] __sock_sendmsg+0x219/0x270 [ 173.651292][ T6922] ____sys_sendmsg+0x505/0x830 [ 173.651319][ T6922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.651357][ T6922] ___sys_sendmsg+0x21f/0x2a0 [ 173.651382][ T6922] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.651440][ T6922] ? __fget_files+0x2a/0x420 [ 173.651465][ T6922] ? __fget_files+0x3a0/0x420 [ 173.651500][ T6922] __sys_sendmsg+0x164/0x220 [ 173.651523][ T6922] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.651558][ T6922] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 173.651580][ T6922] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.651602][ T6922] __do_fast_syscall_32+0xb4/0x110 [ 173.651624][ T6922] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.651646][ T6922] do_fast_syscall_32+0x34/0x80 [ 173.651667][ T6922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.651690][ T6922] RIP: 0023:0xf70fe539 [ 173.651708][ T6922] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 173.651724][ T6922] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 173.651744][ T6922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 173.651757][ T6922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.651768][ T6922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.651779][ T6922] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.651790][ T6922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.651817][ T6922] [ 173.678758][ T5882] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.999359][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 174.155220][ T9] usb 3-1: device descriptor read/8, error -71 [ 174.419257][ T5882] usb 1-1: device descriptor read/64, error -71 [ 174.518595][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 174.560033][ T9] usb 3-1: device descriptor read/8, error -71 [ 174.668650][ T5882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.684685][ T9] usb usb3-port1: unable to enumerate USB device [ 174.909754][ T5882] usb 1-1: device descriptor read/64, error -71 [ 175.032464][ T5882] usb usb1-port1: attempt power cycle [ 175.443083][ T5882] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.483218][ T5882] usb 1-1: device descriptor read/8, error -71 [ 175.576433][ T6956] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 175.633853][ T6955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.738603][ T5882] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.889177][ T5882] usb 1-1: device descriptor read/8, error -71 [ 176.004325][ T5882] usb usb1-port1: unable to enumerate USB device [ 176.368562][ T5832] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 176.525231][ T6968] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 176.543623][ T5832] usb 4-1: config 4 has an invalid interface number: 153 but max is 3 [ 176.576768][ T6968] bridge0: port 3(macsec0) entered blocking state [ 176.599237][ T5832] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 176.605790][ T6968] bridge0: port 3(macsec0) entered disabled state [ 176.627155][ T5832] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 176.636838][ T6968] macsec0: entered allmulticast mode [ 176.645690][ T6968] veth1_macvtap: entered allmulticast mode [ 176.661966][ T5832] usb 4-1: config 4 has no interface number 0 [ 176.675640][ T5832] usb 4-1: config 4 interface 153 altsetting 14 endpoint 0x3 is Bulk; changing to Interrupt [ 176.701290][ T5832] usb 4-1: config 4 interface 153 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.703604][ T6968] macsec0: entered promiscuous mode [ 176.727085][ T5832] usb 4-1: config 4 interface 153 has no altsetting 0 [ 176.736707][ T6968] bridge0: port 3(macsec0) entered blocking state [ 176.743643][ T6968] bridge0: port 3(macsec0) entered forwarding state [ 177.232923][ T6981] vlan2: entered promiscuous mode [ 177.251140][ T6981] hsr0: entered promiscuous mode [ 177.259458][ T6981] vlan2: entered allmulticast mode [ 177.277688][ T6981] hsr0: entered allmulticast mode [ 177.298685][ T6981] hsr_slave_0: entered allmulticast mode [ 177.316291][ T6981] hsr_slave_1: entered allmulticast mode [ 177.561778][ T6989] kernel profiling enabled (shift: 17) [ 177.922149][ T6992] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 178.006931][ T6990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.548673][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 178.738543][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 178.767192][ T5881] usb 3-1: config 7 has an invalid interface number: 247 but max is 0 [ 178.804487][ T5881] usb 3-1: config 7 has no interface number 0 [ 178.811048][ T5881] usb 3-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 178.820989][ T5881] usb 3-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 178.832182][ T5881] usb 3-1: config 7 interface 247 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 178.847351][ T5881] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 178.857734][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 178.866535][ T5886] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.886637][ T5881] usb 3-1: Product: syz [ 178.891231][ T5881] usb 3-1: Manufacturer: syz [ 178.896414][ T5881] usb 3-1: SerialNumber: syz [ 178.926332][ T5881] ni6501 3-1:7.247: driver 'ni6501' failed to auto-configure device. [ 179.029460][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 179.041013][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.058949][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 179.068266][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.083320][ T5886] usb 2-1: Product: syz [ 179.099343][ T5886] usb 2-1: Manufacturer: syz [ 179.115086][ T5886] usb 2-1: SerialNumber: syz [ 179.121161][ T5832] usb 4-1: string descriptor 0 read error: -71 [ 179.221555][ T5884] usb 3-1: USB disconnect, device number 14 [ 179.222496][ T5832] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=47.a6 [ 179.242188][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.253341][ T5886] usb 2-1: config 0 descriptor?? [ 179.266131][ T5886] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 179.281251][ T5886] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 179.306483][ T5832] usb 4-1: can't set config #4, error -71 [ 179.395467][ T5832] usb 4-1: USB disconnect, device number 10 [ 179.431793][ T7016] capability: warning: `syz.0.327' uses deprecated v2 capabilities in a way that may be insecure [ 179.859546][ T7020] FAULT_INJECTION: forcing a failure. [ 179.859546][ T7020] name failslab, interval 1, probability 0, space 0, times 0 [ 179.930263][ T7020] CPU: 1 UID: 0 PID: 7020 Comm: syz.0.329 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 179.930293][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 179.930305][ T7020] Call Trace: [ 179.930314][ T7020] [ 179.930322][ T7020] dump_stack_lvl+0x189/0x250 [ 179.930360][ T7020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.930389][ T7020] ? __pfx__printk+0x10/0x10 [ 179.930411][ T7020] ? __pfx___might_resched+0x10/0x10 [ 179.930441][ T7020] ? fs_reclaim_acquire+0x7d/0x100 [ 179.930474][ T7020] should_fail_ex+0x414/0x560 [ 179.930512][ T7020] should_failslab+0xa8/0x100 [ 179.930540][ T7020] __kmalloc_noprof+0xcb/0x4f0 [ 179.930563][ T7020] ? tomoyo_encode+0x28b/0x550 [ 179.930591][ T7020] tomoyo_encode+0x28b/0x550 [ 179.930620][ T7020] tomoyo_realpath_from_path+0x58d/0x5d0 [ 179.930655][ T7020] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 179.930685][ T7020] tomoyo_path_number_perm+0x1e8/0x5a0 [ 179.930720][ T7020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 179.930800][ T7020] ? __fget_files+0x2a/0x420 [ 179.930830][ T7020] ? __fget_files+0x3a0/0x420 [ 179.930853][ T7020] ? __fget_files+0x2a/0x420 [ 179.930882][ T7020] security_file_ioctl_compat+0xcb/0x2d0 [ 179.930915][ T7020] __ia32_compat_sys_ioctl+0x128/0x840 [ 179.930940][ T7020] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 179.930961][ T7020] ? __fget_files+0x3a0/0x420 [ 179.930993][ T7020] ? fput+0xa0/0xd0 [ 179.931021][ T7020] ? ksys_write+0x1f0/0x250 [ 179.931051][ T7020] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 179.931073][ T7020] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.931095][ T7020] __do_fast_syscall_32+0xb4/0x110 [ 179.931116][ T7020] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.931140][ T7020] do_fast_syscall_32+0x34/0x80 [ 179.931161][ T7020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.931185][ T7020] RIP: 0023:0xf705e539 [ 179.931201][ T7020] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 179.931217][ T7020] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 179.931237][ T7020] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5616 [ 179.931250][ T7020] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.931261][ T7020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.931272][ T7020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 179.931288][ T7020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.931316][ T7020] [ 179.934757][ T7020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 180.478937][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 180.602996][ T7035] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 180.632325][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.648911][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 180.680087][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 180.718725][ T9] usb 4-1: config 0 has no interface number 0 [ 180.743152][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.777070][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.800044][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.828408][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 180.839132][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.861422][ T9] usb 4-1: config 0 descriptor?? [ 180.892566][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 181.123086][ T7029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'. [ 181.174667][ T5832] usb 4-1: USB disconnect, device number 11 [ 181.588999][ T5882] usb 2-1: USB disconnect, device number 4 [ 181.699455][ T5832] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.943909][ T5832] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 181.974180][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.029529][ T5832] usb 1-1: config 0 descriptor?? [ 182.097703][ T5832] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 182.490039][ T5832] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 182.536611][ T5832] gspca_cpia1: usb_control_msg 01, error -71 [ 182.558579][ T5832] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 182.610095][ T5832] usb 1-1: USB disconnect, device number 10 [ 183.252848][ T7085] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 183.285749][ T7089] FAULT_INJECTION: forcing a failure. [ 183.285749][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 183.343464][ T7084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.349127][ T7089] CPU: 1 UID: 0 PID: 7089 Comm: syz.2.354 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 183.349160][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 183.349175][ T7089] Call Trace: [ 183.349184][ T7089] [ 183.349194][ T7089] dump_stack_lvl+0x189/0x250 [ 183.349235][ T7089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.349265][ T7089] ? __pfx__printk+0x10/0x10 [ 183.349294][ T7089] ? __pfx___might_resched+0x10/0x10 [ 183.349326][ T7089] ? fs_reclaim_acquire+0x7d/0x100 [ 183.349363][ T7089] should_fail_ex+0x414/0x560 [ 183.349401][ T7089] should_failslab+0xa8/0x100 [ 183.349431][ T7089] __kmalloc_cache_noprof+0x70/0x3d0 [ 183.349457][ T7089] ? bcm_rx_setup+0x488/0x19a0 [ 183.349487][ T7089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.349525][ T7089] bcm_rx_setup+0x488/0x19a0 [ 183.349564][ T7089] bcm_sendmsg+0x255/0x6a0 [ 183.349593][ T7089] ? __pfx_bcm_sendmsg+0x10/0x10 [ 183.349622][ T7089] ? __import_iovec+0x5d4/0x7f0 [ 183.349648][ T7089] ? aa_sock_msg_perm+0x94/0x160 [ 183.349672][ T7089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.349695][ T7089] ? __pfx_bcm_sendmsg+0x10/0x10 [ 183.349719][ T7089] __sock_sendmsg+0x219/0x270 [ 183.349753][ T7089] ____sys_sendmsg+0x505/0x830 [ 183.349783][ T7089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.349826][ T7089] ___sys_sendmsg+0x21f/0x2a0 [ 183.349853][ T7089] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.349918][ T7089] ? __fget_files+0x2a/0x420 [ 183.349943][ T7089] ? __fget_files+0x3a0/0x420 [ 183.349982][ T7089] __sys_sendmsg+0x164/0x220 [ 183.350009][ T7089] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.350050][ T7089] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 183.350073][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.350097][ T7089] __do_fast_syscall_32+0xb4/0x110 [ 183.350121][ T7089] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.350145][ T7089] do_fast_syscall_32+0x34/0x80 [ 183.350168][ T7089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.350193][ T7089] RIP: 0023:0xf7f38539 [ 183.350211][ T7089] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 183.350230][ T7089] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 183.350252][ T7089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 183.350267][ T7089] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.350278][ T7089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.350291][ T7089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.350303][ T7089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.350333][ T7089] [ 183.438336][ T7094] program syz.0.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.008892][ T5882] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 184.158575][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 184.178728][ T5882] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 184.193078][ T5882] usb 3-1: config 0 has no interface number 0 [ 184.208573][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.258514][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.288510][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.364235][ T5882] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 184.385877][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.398728][ T5886] IPVS: starting estimator thread 0... [ 184.406959][ T5882] usb 3-1: config 0 descriptor?? [ 184.427039][ T5882] ldusb 3-1:0.55: Interrupt in endpoint not found [ 184.434697][ T7120] FAULT_INJECTION: forcing a failure. [ 184.434697][ T7120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.482139][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.1.363 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 184.482170][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 184.482182][ T7120] Call Trace: [ 184.482191][ T7120] [ 184.482200][ T7120] dump_stack_lvl+0x189/0x250 [ 184.482237][ T7120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.482267][ T7120] ? __pfx__printk+0x10/0x10 [ 184.482299][ T7120] should_fail_ex+0x414/0x560 [ 184.482337][ T7120] _copy_to_user+0x31/0xb0 [ 184.482374][ T7120] simple_read_from_buffer+0xe1/0x170 [ 184.482404][ T7120] proc_fail_nth_read+0x1df/0x250 [ 184.482435][ T7120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.482466][ T7120] ? rw_verify_area+0x258/0x650 [ 184.482486][ T7120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.482515][ T7120] vfs_read+0x1fd/0x980 [ 184.482543][ T7120] ? __pfx___mutex_lock+0x10/0x10 [ 184.482565][ T7120] ? __pfx_vfs_read+0x10/0x10 [ 184.482588][ T7120] ? __fget_files+0x2a/0x420 [ 184.482618][ T7120] ? __fget_files+0x3a0/0x420 [ 184.482642][ T7120] ? __fget_files+0x2a/0x420 [ 184.482676][ T7120] ksys_read+0x145/0x250 [ 184.482697][ T7120] ? rcu_is_watching+0x15/0xb0 [ 184.482728][ T7120] ? __pfx_ksys_read+0x10/0x10 [ 184.482752][ T7120] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 184.482775][ T7120] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.482797][ T7120] __do_fast_syscall_32+0xb4/0x110 [ 184.482820][ T7120] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.482844][ T7120] do_fast_syscall_32+0x34/0x80 [ 184.482866][ T7120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.482890][ T7120] RIP: 0023:0xf70fe539 [ 184.482908][ T7120] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.482924][ T7120] RSP: 002b:00000000f50ee590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 184.482945][ T7120] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ee620 [ 184.482958][ T7120] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 184.482970][ T7120] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 184.482982][ T7120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.482993][ T7120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.483022][ T7120] [ 184.748690][ T7119] IPVS: using max 31 ests per chain, 74400 per kthread [ 184.781110][ T7123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.357'. [ 184.798552][ T5881] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.816264][ T5884] usb 3-1: USB disconnect, device number 15 [ 184.906724][ T7127] FAULT_INJECTION: forcing a failure. [ 184.906724][ T7127] name failslab, interval 1, probability 0, space 0, times 0 [ 184.948534][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 184.955628][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.0.364 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 184.955656][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 184.955668][ T7127] Call Trace: [ 184.955676][ T7127] [ 184.955685][ T7127] dump_stack_lvl+0x189/0x250 [ 184.955728][ T7127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.955764][ T7127] ? __pfx__printk+0x10/0x10 [ 184.955791][ T7127] ? __pfx___might_resched+0x10/0x10 [ 184.955821][ T7127] ? fs_reclaim_acquire+0x7d/0x100 [ 184.955858][ T7127] should_fail_ex+0x414/0x560 [ 184.955895][ T7127] should_failslab+0xa8/0x100 [ 184.955924][ T7127] kmem_cache_alloc_noprof+0x73/0x3c0 [ 184.955948][ T7127] ? can_rx_register+0x16d/0x790 [ 184.955983][ T7127] can_rx_register+0x16d/0x790 [ 184.956013][ T7127] ? __pfx_raw_rcv+0x10/0x10 [ 184.956037][ T7127] raw_enable_allfilters+0xe4/0x420 [ 184.956068][ T7127] raw_bind+0x2a7/0x740 [ 184.956095][ T7127] __sys_bind+0x2c3/0x3e0 [ 184.956130][ T7127] ? __pfx___sys_bind+0x10/0x10 [ 184.956184][ T7127] __ia32_sys_bind+0x7a/0x90 [ 184.956214][ T7127] __do_fast_syscall_32+0xb4/0x110 [ 184.956237][ T7127] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.956259][ T7127] do_fast_syscall_32+0x34/0x80 [ 184.956281][ T7127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.956300][ T7127] RIP: 0023:0xf705e539 [ 184.956322][ T7127] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.956336][ T7127] RSP: 002b:00000000f500c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 184.956353][ T7127] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 184.956364][ T7127] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.956373][ T7127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.956383][ T7127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.956392][ T7127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.956415][ T7127] [ 184.956566][ T5881] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 184.989151][ T7129] FAULT_INJECTION: forcing a failure. [ 184.989151][ T7129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.000026][ T5881] usb 5-1: config 0 has no interface number 0 [ 185.005719][ T5881] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.119657][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.1.367 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 185.119688][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 185.119702][ T7129] Call Trace: [ 185.119711][ T7129] [ 185.119720][ T7129] dump_stack_lvl+0x189/0x250 [ 185.119762][ T7129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.119794][ T7129] ? __pfx__printk+0x10/0x10 [ 185.119828][ T7129] should_fail_ex+0x414/0x560 [ 185.119872][ T7129] _copy_to_user+0x31/0xb0 [ 185.119903][ T7129] simple_read_from_buffer+0xe1/0x170 [ 185.119934][ T7129] proc_fail_nth_read+0x1df/0x250 [ 185.119967][ T7129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.120000][ T7129] ? rw_verify_area+0x258/0x650 [ 185.120021][ T7129] ? poll_select_finish+0x560/0x5f0 [ 185.120055][ T7129] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.120086][ T7129] vfs_read+0x1fd/0x980 [ 185.120115][ T7129] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 185.120137][ T7129] ? __pfx_vfs_read+0x10/0x10 [ 185.120156][ T7129] ? count_memcg_event_mm+0x92/0x3b0 [ 185.120187][ T7129] ? do_compat_pselect+0x27e/0x2d0 [ 185.120228][ T7129] ksys_read+0x145/0x250 [ 185.120250][ T7129] ? rcu_is_watching+0x15/0xb0 [ 185.120282][ T7129] ? __pfx_ksys_read+0x10/0x10 [ 185.120307][ T7129] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 185.120331][ T7129] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.120354][ T7129] __do_fast_syscall_32+0xb4/0x110 [ 185.120377][ T7129] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.120402][ T7129] do_fast_syscall_32+0x34/0x80 [ 185.120432][ T7129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.120458][ T7129] RIP: 0023:0xf70fe539 [ 185.120476][ T7129] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 185.120494][ T7129] RSP: 002b:00000000f50ee590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 185.120517][ T7129] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ee620 [ 185.120530][ T7129] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 185.120544][ T7129] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 185.120556][ T7129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.120568][ T7129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.120598][ T7129] [ 185.818598][ T5881] usb 5-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.848613][ T5886] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 185.863004][ T5881] usb 5-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.910508][ T5881] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 185.937610][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.956464][ T5881] usb 5-1: Product: syz [ 185.966583][ T5881] usb 5-1: Manufacturer: syz [ 186.007072][ T5881] usb 5-1: SerialNumber: syz [ 186.011051][ T7143] netlink: 'syz.3.371': attribute type 10 has an invalid length. [ 186.011928][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 186.036002][ T5881] usb 5-1: config 0 descriptor?? [ 186.061265][ T5886] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.070089][ T5886] usb 3-1: config 0 has no interface number 0 [ 186.070820][ T7142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.076251][ T5886] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.076283][ T5886] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.109651][ T5881] redrat3 5-1:0.83: Couldn't find all endpoints [ 186.256622][ T5886] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.282968][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 186.311713][ T5886] usb 3-1: Product: syz [ 186.315951][ T5886] usb 3-1: SerialNumber: syz [ 186.335445][ T5881] usb 5-1: USB disconnect, device number 6 [ 186.389066][ T5886] usb 3-1: config 0 descriptor?? [ 186.414260][ T5886] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 186.439747][ T5886] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 186.757830][ T9] IPVS: starting estimator thread 0... [ 186.796394][ T7158] tipc: Started in network mode [ 186.813101][ T7158] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.822915][ T7158] net_ratelimit: 10 callbacks suppressed [ 186.822940][ T7158] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.848572][ T7159] IPVS: using max 33 ests per chain, 79200 per kthread [ 186.856739][ T7158] tipc: Enabled bearer , priority 10 [ 186.914428][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 186.915831][ T5884] usb 3-1: USB disconnect, device number 16 [ 186.921652][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 186.959940][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.004447][ T5884] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 187.098638][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.248561][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.308630][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.337248][ T7172] fuse: Bad value for 'user_id' [ 187.348581][ T7172] fuse: Bad value for 'user_id' [ 187.388706][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.489157][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 187.510484][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 187.538521][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.552285][ T9] usb 5-1: config 0 has no interface number 0 [ 187.580150][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.621101][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.648331][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.678586][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.691947][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 187.738042][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.761312][ T9] usb 5-1: config 0 descriptor?? [ 187.776786][ T9] ldusb 5-1:0.55: Interrupt in endpoint not found [ 187.822315][ T9] tipc: Node number set to 2886997162 [ 187.968704][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.991153][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.379'. [ 188.017261][ T5882] usb 5-1: USB disconnect, device number 7 [ 188.238526][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.299928][ T7185] mmap: syz.3.383 (7185) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.379231][ T5832] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.396837][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 188.415023][ T7194] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 188.433369][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.518640][ T5832] usb 1-1: device descriptor read/64, error -71 [ 188.759582][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 188.768551][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 188.928973][ T5832] usb 1-1: device descriptor read/64, error -71 [ 189.065013][ T5832] usb usb1-port1: attempt power cycle [ 189.418599][ T5886] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.440153][ T5832] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.647510][ T5832] usb 1-1: device descriptor read/8, error -71 [ 189.681814][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.718641][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.815106][ T5886] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 189.829834][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.844186][ T5886] usb 2-1: config 0 descriptor?? [ 190.023551][ T5832] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 190.069992][ T5832] usb 1-1: device descriptor read/8, error -71 [ 190.183118][ T30] audit: type=1326 audit(1745999737.688:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.398" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x0 [ 190.190254][ T5832] usb usb1-port1: unable to enumerate USB device [ 190.270819][ T5886] waltop 0003:172F:0034.0004: item fetching failed at offset 5/7 [ 190.310328][ T5886] waltop 0003:172F:0034.0004: probe with driver waltop failed with error -22 [ 190.464826][ T9] usb 2-1: USB disconnect, device number 5 [ 190.824229][ T7234] netlink: 'syz.3.401': attribute type 10 has an invalid length. [ 190.833740][ T7234] bridge0: port 4(macsec0) entered blocking state [ 190.841770][ T7234] bridge0: port 4(macsec0) entered disabled state [ 190.849454][ T7234] macsec0: entered allmulticast mode [ 190.854796][ T7234] veth1_macvtap: entered allmulticast mode [ 190.862708][ T7234] macsec0: entered promiscuous mode [ 190.869182][ T7234] bridge0: port 4(macsec0) entered blocking state [ 190.875840][ T7234] bridge0: port 4(macsec0) entered forwarding state [ 190.908604][ T5886] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 191.064501][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 191.076912][ T5886] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 191.088530][ T5886] usb 3-1: config 0 has no interface number 0 [ 191.102626][ T5886] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.125412][ T5886] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.137652][ T7239] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 191.148396][ T5886] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.149030][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.173341][ T5886] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 191.200108][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.229973][ T5886] usb 3-1: config 0 descriptor?? [ 191.239979][ T5886] ldusb 3-1:0.55: Interrupt in endpoint not found [ 191.303379][ T7244] netlink: 'syz.4.406': attribute type 16 has an invalid length. [ 191.315383][ T7244] netlink: 'syz.4.406': attribute type 17 has an invalid length. [ 191.427833][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.437253][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.460812][ T7232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.400'. [ 191.560968][ T7244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.580310][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.582652][ T7244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.707803][ T7245] fuse: Unknown parameter '®ÈO`Õid' [ 191.714579][ T7244] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.732183][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.742669][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 191.748909][ T7244] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.762001][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.762088][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 191.775440][ T7244] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.792624][ T7244] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.816508][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 191.848041][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.861954][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.878525][ C0] net_ratelimit: 2 callbacks suppressed [ 191.878546][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.906800][ T9] usb 4-1: Product: syz [ 191.916135][ T9] usb 4-1: Manufacturer: syz [ 191.933294][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 191.947851][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 191.977628][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 191.987890][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 192.001680][ T7244] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 192.023565][ T7244] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 192.036637][ T7244] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 192.047764][ T7244] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 192.069885][ T5882] usb 3-1: USB disconnect, device number 17 [ 192.246943][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 192.248001][ T5832] usb 4-1: USB disconnect, device number 12 [ 192.253792][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 192.265815][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 192.278696][ T7246] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 192.586712][ T7261] netlink: 'syz.1.419': attribute type 4 has an invalid length. [ 192.607034][ T7261] netlink: 'syz.1.419': attribute type 4 has an invalid length. [ 192.918527][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.018677][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 193.308755][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 193.321861][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.349424][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.377770][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 193.430329][ T10] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 193.439004][ T10] usb 2-1: Product: syz [ 193.443222][ T10] usb 2-1: Manufacturer: syz [ 193.447896][ T10] usb 2-1: SerialNumber: syz [ 193.549258][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9 [ 193.788017][ T10] usb 2-1: USB disconnect, device number 6 [ 193.854531][ T10] appletouch 2-1:1.0: input: appletouch disconnected [ 193.958568][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.338980][ T7272] netlink: 'syz.0.412': attribute type 10 has an invalid length. [ 194.383722][ T7271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.419375][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425879][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.461019][ T7274] netlink: 'syz.3.413': attribute type 10 has an invalid length. [ 194.492015][ T7273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.789798][ T7280] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 194.803461][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.999189][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.334550][ T7294] FAULT_INJECTION: forcing a failure. [ 195.334550][ T7294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.348092][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.4.423 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 195.348121][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 195.348134][ T7294] Call Trace: [ 195.348143][ T7294] [ 195.348153][ T7294] dump_stack_lvl+0x189/0x250 [ 195.348184][ T7294] ? __lock_acquire+0xaac/0xd20 [ 195.348213][ T7294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.348242][ T7294] ? __pfx__printk+0x10/0x10 [ 195.348261][ T7294] ? __might_fault+0xb0/0x130 [ 195.348298][ T7294] should_fail_ex+0x414/0x560 [ 195.348341][ T7294] _copy_from_user+0x2d/0xb0 [ 195.348368][ T7294] sw_sync_ioctl+0x105/0xd00 [ 195.348403][ T7294] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 195.348436][ T7294] ? sb_end_write+0xe9/0x1c0 [ 195.348463][ T7294] ? vfs_write+0x8d8/0xa90 [ 195.348490][ T7294] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 195.348519][ T7294] __ia32_compat_sys_ioctl+0x551/0x840 [ 195.348544][ T7294] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 195.348580][ T7294] ? ksys_write+0x1e1/0x250 [ 195.348609][ T7294] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 195.348632][ T7294] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.348654][ T7294] __do_fast_syscall_32+0xb4/0x110 [ 195.348676][ T7294] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.348700][ T7294] do_fast_syscall_32+0x34/0x80 [ 195.348721][ T7294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.348744][ T7294] RIP: 0023:0xf712e539 [ 195.348762][ T7294] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 195.348779][ T7294] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 195.348799][ T7294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045701 [ 195.348813][ T7294] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.348825][ T7294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.348836][ T7294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.348847][ T7294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.348876][ T7294] [ 195.559392][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.648616][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 195.810606][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 195.820591][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 195.843835][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.857047][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.871142][ T9] usb 3-1: Product: ࡃ [ 195.875735][ T9] usb 3-1: Manufacturer: ÑŒ [ 195.884825][ T9] usb 3-1: SerialNumber: ꣣ভïˆå„¨í”¦ï¸ë˜»ï›… [ 195.928685][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 196.038553][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.196325][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 196.211059][ T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 196.241217][ T7309] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 196.244352][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 196.282294][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 196.309738][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 196.325496][ T7311] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 196.335611][ T9] cdc_ncm 3-1:1.0: bind() failure [ 196.343249][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 196.354066][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 196.368078][ T10] usb 2-1: Product: syz [ 196.377588][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 196.385553][ T10] usb 2-1: Manufacturer: syz [ 196.392676][ T9] cdc_ncm 3-1:1.1: bind() failure [ 196.403651][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 196.410069][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 196.434492][ T9] usb 3-1: USB disconnect, device number 18 [ 196.445259][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 196.460990][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 196.679106][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 196.680486][ T9] usb 2-1: USB disconnect, device number 7 [ 196.685831][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 196.697742][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 196.828690][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.996453][ T30] audit: type=1326 audit(1745999744.498:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.018806][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 197.047776][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.072699][ T30] audit: type=1326 audit(1745999744.498:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.094873][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.096910][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.136843][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 197.150973][ T24] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 197.159835][ T24] usb 1-1: Product: syz [ 197.166355][ T24] usb 1-1: Manufacturer: syz [ 197.168675][ T30] audit: type=1326 audit(1745999744.528:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.192974][ T24] usb 1-1: SerialNumber: syz [ 197.225713][ T30] audit: type=1326 audit(1745999744.528:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.235734][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 197.286624][ T30] audit: type=1326 audit(1745999744.528:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.336828][ T30] audit: type=1326 audit(1745999744.538:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.407153][ T30] audit: type=1326 audit(1745999744.538:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.457877][ T30] audit: type=1326 audit(1745999744.538:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.488938][ T24] usb 1-1: USB disconnect, device number 15 [ 197.517185][ T30] audit: type=1326 audit(1745999744.538:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 197.545504][ T24] appletouch 1-1:1.0: input: appletouch disconnected [ 197.604617][ T30] audit: type=1326 audit(1745999744.538:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.4.429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 198.118681][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.188590][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.360793][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 198.381954][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 198.448595][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.469616][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.490821][ T7334] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 198.497891][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 198.526873][ T7332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.537104][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 198.537158][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 198.537182][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.548091][ T10] usb 5-1: config 0 descriptor?? [ 198.681553][ T7324] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.056783][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 199.066605][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 199.075527][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 199.082625][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 199.094069][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 199.158580][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.265165][ T10] usb 5-1: USB disconnect, device number 8 [ 199.288706][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 200.198533][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.791552][ T7371] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.810200][ T7371] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.831147][ T7371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 200.849902][ T7371] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.248516][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.268560][ T5886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 201.443565][ T5886] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.459420][ T5886] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 201.480624][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.493952][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 201.498893][ T5882] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 201.523258][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.564783][ T5886] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.568718][ T7388] netlink: 'syz.3.449': attribute type 4 has an invalid length. [ 201.582727][ T7388] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 201.599455][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.620654][ T5886] usb 1-1: Product: syz [ 201.624898][ T5886] usb 1-1: Manufacturer: syz [ 201.647393][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 201.655337][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 201.660846][ T5882] usb 3-1: device descriptor read/64, error -71 [ 201.672519][ T5886] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 201.679568][ T5886] cdc_wdm 1-1:1.0: Unknown control protocol [ 201.700078][ T7390] netlink: 'syz.1.450': attribute type 10 has an invalid length. [ 201.722936][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.787783][ T7392] futex_wake_op: syz.3.451 tries to shift op by -33; fix this program [ 201.904079][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 201.904642][ T10] usb 1-1: USB disconnect, device number 16 [ 201.910813][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 201.910838][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 201.932076][ T5882] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 201.943214][ T7377] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 202.048893][ T5886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.068749][ T5882] usb 3-1: device descriptor read/64, error -71 [ 202.180840][ T5882] usb usb3-port1: attempt power cycle [ 202.198780][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 202.208055][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 202.216253][ T5886] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 202.226436][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.235086][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.242244][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.261452][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.269917][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.276163][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.278527][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 202.291762][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.301590][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.308015][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.316361][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.325704][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.334164][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.342819][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.356389][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.363843][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.376373][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.385396][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.395119][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.403106][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.414777][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.421093][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.430238][ T5886] usb 4-1: config 4 has an invalid interface number: 146 but max is 0 [ 202.439096][ T5886] usb 4-1: config 4 has no interface number 0 [ 202.445347][ T5886] usb 4-1: config 4 interface 146 has no altsetting 0 [ 202.455535][ T5886] usb 4-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 202.465900][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.474178][ T5886] usb 4-1: Product: syz [ 202.478609][ T5886] usb 4-1: Manufacturer: syz [ 202.483312][ T5886] usb 4-1: SerialNumber: syz [ 202.518716][ T5882] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 202.551563][ T5882] usb 3-1: device descriptor read/8, error -71 [ 202.618551][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.712030][ T5886] comedi comedi0: could not set alternate setting 3 in high speed [ 202.720187][ T5886] usbduxsigma 4-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 202.734922][ T5886] usbduxsigma 4-1:4.146: probe with driver usbduxsigma failed with error -71 [ 202.747859][ T5886] usb 4-1: USB disconnect, device number 13 [ 202.768815][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 202.782394][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 202.796408][ T5882] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.815996][ T10] usb 2-1: config 0 has no interface number 0 [ 202.823800][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.837200][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.852969][ T5882] usb 3-1: device descriptor read/8, error -71 [ 202.859338][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.875872][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 202.885947][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.900375][ T10] usb 2-1: config 0 descriptor?? [ 202.914071][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 202.979884][ T5882] usb usb3-port1: unable to enumerate USB device [ 203.137569][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.452'. [ 203.154620][ T5886] usb 2-1: USB disconnect, device number 8 [ 203.318543][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.639461][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 203.798931][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 203.805777][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 203.817463][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.892535][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.908529][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 203.932363][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.944022][ T5886] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 203.987128][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.032075][ T5886] usb 4-1: config 0 descriptor?? [ 204.044830][ T7399] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.101793][ T7414] FAULT_INJECTION: forcing a failure. [ 204.101793][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.130364][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.1.457 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 204.130393][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 204.130406][ T7414] Call Trace: [ 204.130413][ T7414] [ 204.130423][ T7414] dump_stack_lvl+0x189/0x250 [ 204.130455][ T7414] ? __lock_acquire+0xaac/0xd20 [ 204.130486][ T7414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.130514][ T7414] ? __pfx__printk+0x10/0x10 [ 204.130535][ T7414] ? __might_fault+0xb0/0x130 [ 204.130572][ T7414] should_fail_ex+0x414/0x560 [ 204.130610][ T7414] _copy_from_user+0x2d/0xb0 [ 204.130637][ T7414] vlan_ioctl_handler+0x9d/0x650 [ 204.130664][ T7414] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 204.130688][ T7414] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 204.130726][ T7414] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.130763][ T7414] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 204.130788][ T7414] sock_ioctl+0x60d/0x790 [ 204.130818][ T7414] ? __pfx_sock_ioctl+0x10/0x10 [ 204.130862][ T7414] compat_sock_ioctl+0x285/0xc80 [ 204.130895][ T7414] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 204.130925][ T7414] ? __fget_files+0x3a0/0x420 [ 204.130950][ T7414] ? __fget_files+0x2a/0x420 [ 204.130978][ T7414] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 204.131008][ T7414] __ia32_compat_sys_ioctl+0x551/0x840 [ 204.131033][ T7414] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 204.131056][ T7414] ? __fget_files+0x3a0/0x420 [ 204.131088][ T7414] ? fput+0xa0/0xd0 [ 204.131117][ T7414] ? ksys_write+0x1f0/0x250 [ 204.131137][ T7414] ? rcu_is_watching+0x15/0xb0 [ 204.131174][ T7414] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 204.131197][ T7414] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.131219][ T7414] __do_fast_syscall_32+0xb4/0x110 [ 204.131242][ T7414] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.131272][ T7414] do_fast_syscall_32+0x34/0x80 [ 204.131294][ T7414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.131318][ T7414] RIP: 0023:0xf70fe539 [ 204.131335][ T7414] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.131353][ T7414] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.131374][ T7414] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008982 [ 204.131387][ T7414] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.131399][ T7414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.131411][ T7414] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.131422][ T7414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.131452][ T7414] [ 204.401236][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.314780][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.324508][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.331577][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.339023][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.346015][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.478519][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.497664][ T7424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.461'. [ 205.689537][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 205.690080][ T5882] usb 4-1: USB disconnect, device number 14 [ 206.017225][ T7429] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 206.081462][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.518527][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.665433][ T7424] syz_tun: entered promiscuous mode [ 206.697163][ T7424] batadv_slave_0: entered promiscuous mode [ 206.779744][ T7424] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 206.807671][ T7441] FAULT_INJECTION: forcing a failure. [ 206.807671][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.823336][ T7424] Cannot create hsr debugfs directory [ 206.840832][ T7441] CPU: 1 UID: 0 PID: 7441 Comm: syz.2.467 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 206.840868][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.840878][ T7441] Call Trace: [ 206.840884][ T7441] [ 206.840890][ T7441] dump_stack_lvl+0x189/0x250 [ 206.840922][ T7441] ? irqentry_exit+0x74/0x90 [ 206.840938][ T7441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.840972][ T7441] should_fail_ex+0x414/0x560 [ 206.841000][ T7441] _copy_from_user+0x2d/0xb0 [ 206.841020][ T7441] get_compat_msghdr+0xad/0x4a0 [ 206.841040][ T7441] ? __pfx_get_compat_msghdr+0x10/0x10 [ 206.841063][ T7441] ___sys_sendmsg+0x193/0x2a0 [ 206.841082][ T7441] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.841123][ T7441] ? __fget_files+0x2a/0x420 [ 206.841140][ T7441] ? __fget_files+0x3a0/0x420 [ 206.841165][ T7441] __sys_sendmsg+0x164/0x220 [ 206.841183][ T7441] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.841209][ T7441] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 206.841224][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.841246][ T7441] __do_fast_syscall_32+0xb4/0x110 [ 206.841262][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.841279][ T7441] do_fast_syscall_32+0x34/0x80 [ 206.841294][ T7441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.841314][ T7441] RIP: 0023:0xf7f38539 [ 206.841333][ T7441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.841350][ T7441] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 206.841371][ T7441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800014c0 [ 206.841385][ T7441] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.841397][ T7441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.841407][ T7441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.841419][ T7441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.841445][ T7441] [ 206.841735][ T7424] hsr1: entered allmulticast mode [ 207.206153][ T7424] syz_tun: entered allmulticast mode [ 207.226298][ T7424] batadv_slave_0: entered allmulticast mode [ 207.338682][ T5832] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.558506][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.741147][ T5832] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.788594][ T5832] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.846228][ T5832] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.866490][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 207.913827][ T5832] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 207.945985][ T5832] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.974025][ T7452] netlink: 252 bytes leftover after parsing attributes in process `syz.2.472'. [ 207.987614][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.029280][ T5832] usb 5-1: Product: syz [ 208.090012][ T5832] usb 5-1: Manufacturer: syz [ 208.112219][ T5832] cdc_wdm 5-1:1.0: skipping garbage [ 208.117460][ T5832] cdc_wdm 5-1:1.0: skipping garbage [ 208.171324][ T5832] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 208.180088][ T5832] cdc_wdm 5-1:1.0: Unknown control protocol [ 208.204245][ T7459] bridge0: port 3(netdevsim0) entered blocking state [ 208.211796][ T7459] bridge0: port 3(netdevsim0) entered disabled state [ 208.219518][ T7459] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 208.232798][ T7459] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 208.241278][ T7459] bridge0: port 3(netdevsim0) entered blocking state [ 208.248074][ T7459] bridge0: port 3(netdevsim0) entered forwarding state [ 208.388685][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.399583][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 208.403441][ T5882] usb 5-1: USB disconnect, device number 9 [ 208.406210][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 208.406232][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 208.427191][ T7443] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 208.498978][ T10] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 208.538787][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 208.546633][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 208.555067][ T24] usb 4-1: config 0 has no interface number 0 [ 208.568251][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.598517][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.618801][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.629983][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.643814][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 208.659327][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.717724][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 208.738827][ T24] usb 4-1: config 0 descriptor?? [ 208.758272][ T24] ldusb 4-1:0.55: Interrupt in endpoint not found [ 208.859087][ T10] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 208.982524][ T7455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.473'. [ 209.003831][ T24] usb 4-1: USB disconnect, device number 15 [ 209.028515][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.035305][ T10] usb usb1-port1: attempt power cycle [ 209.059200][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.251839][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 209.274377][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 209.310076][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.320636][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.337935][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 209.354484][ T5882] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 209.365864][ T5882] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 209.377885][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.390668][ T7470] netlink: 'syz.2.478': attribute type 10 has an invalid length. [ 209.401448][ T5882] usb 2-1: config 0 descriptor?? [ 209.414452][ T7464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.418688][ T10] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 209.434193][ T7469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.469281][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.608662][ T10] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 209.638526][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.655173][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.672229][ T10] usb usb1-port1: unable to enumerate USB device [ 209.694590][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 209.706030][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 209.713890][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 209.725789][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 209.735627][ T5835] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 209.917174][ T5839] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 209.917628][ T10] usb 2-1: USB disconnect, device number 9 [ 209.953149][ T7478] fuse: Unknown parameter 'root-ode' [ 210.135261][ T7483] FAULT_INJECTION: forcing a failure. [ 210.135261][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 210.163139][ T7483] CPU: 1 UID: 0 PID: 7483 Comm: syz.2.483 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 210.163167][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 210.163180][ T7483] Call Trace: [ 210.163188][ T7483] [ 210.163196][ T7483] dump_stack_lvl+0x189/0x250 [ 210.163231][ T7483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.163259][ T7483] ? __pfx__printk+0x10/0x10 [ 210.163284][ T7483] ? __pfx___might_resched+0x10/0x10 [ 210.163313][ T7483] ? fs_reclaim_acquire+0x7d/0x100 [ 210.163347][ T7483] should_fail_ex+0x414/0x560 [ 210.163384][ T7483] should_failslab+0xa8/0x100 [ 210.163412][ T7483] kmem_cache_alloc_noprof+0x73/0x3c0 [ 210.163436][ T7483] ? alloc_empty_file+0x55/0x1d0 [ 210.163463][ T7483] ? __lock_acquire+0xaac/0xd20 [ 210.163494][ T7483] alloc_empty_file+0x55/0x1d0 [ 210.163523][ T7483] path_openat+0x107/0x3830 [ 210.163544][ T7483] ? __lock_acquire+0xaac/0xd20 [ 210.163589][ T7483] ? __lock_acquire+0xaac/0xd20 [ 210.163622][ T7483] ? do_raw_spin_lock+0x121/0x290 [ 210.163644][ T7483] ? __pfx_path_openat+0x10/0x10 [ 210.163671][ T7483] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 210.163701][ T7483] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.163728][ T7483] do_filp_open+0x1fa/0x410 [ 210.163750][ T7483] ? __pfx_do_filp_open+0x10/0x10 [ 210.163801][ T7483] ? do_open_execat+0x93/0x450 [ 210.163825][ T7483] do_open_execat+0x135/0x450 [ 210.163843][ T7483] ? __pfx_do_open_execat+0x10/0x10 [ 210.163869][ T7483] ? __might_fault+0xb0/0x130 [ 210.163899][ T7483] alloc_bprm+0x28/0xbc0 [ 210.163931][ T7483] do_execveat_common+0x1b3/0x6a0 [ 210.163964][ T7483] __ia32_compat_sys_execveat+0xca/0xe0 [ 210.163998][ T7483] __do_fast_syscall_32+0xb4/0x110 [ 210.164021][ T7483] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.164045][ T7483] do_fast_syscall_32+0x34/0x80 [ 210.164066][ T7483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.164090][ T7483] RIP: 0023:0xf7f38539 [ 210.164107][ T7483] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 210.164123][ T7483] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 210.164143][ T7483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 210.164156][ T7483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 210.164167][ T7483] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.164178][ T7483] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.164189][ T7483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.164217][ T7483] [ 210.559870][ T7485] warning: `syz.4.486' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 210.572689][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.485'. [ 210.678528][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 210.954132][ T7489] syz_tun: entered promiscuous mode [ 210.970098][ T7489] batadv_slave_0: entered promiscuous mode [ 210.982784][ T7489] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 211.031826][ T7489] Cannot create hsr debugfs directory [ 211.039924][ T7489] hsr1: entered allmulticast mode [ 211.045180][ T7489] syz_tun: entered allmulticast mode [ 211.052169][ T7489] batadv_slave_0: entered allmulticast mode [ 211.668546][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 211.725356][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.802918][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 211.803001][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.803204][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 211.803224][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 211.803267][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 211.825392][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 211.833469][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 211.833502][ T24] usb 1-1: config 0 has no interface number 0 [ 211.833549][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.833573][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.833624][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 211.833666][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 211.833690][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.841535][ T24] usb 1-1: config 0 descriptor?? [ 212.022360][ T24] ldusb 1-1:0.55: Interrupt in endpoint not found [ 212.132547][ T7509] netlink: 'syz.3.493': attribute type 10 has an invalid length. [ 212.134546][ T7508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.201664][ T7502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.489'. [ 212.211971][ T7516] process 'syz.2.494' launched '/dev/fd/3' with NULL argv: empty string added [ 212.253290][ T24] usb 1-1: USB disconnect, device number 21 [ 212.679008][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 212.758528][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.869183][ T5881] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.878692][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.915239][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.935421][ T24] usb 3-1: New USB device found, idVendor=2901, idProduct=012c, bcdDevice=4f.d9 [ 212.955372][ T24] usb 3-1: New USB device strings: Mfr=214, Product=2, SerialNumber=3 [ 213.022304][ T24] usb 3-1: Product: syz [ 213.026548][ T24] usb 3-1: Manufacturer: syz [ 213.049286][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 213.071159][ T24] usb 3-1: SerialNumber: syz [ 213.108745][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 213.133050][ T24] usb 3-1: config 0 descriptor?? [ 213.154084][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.174307][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.210599][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 213.238513][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 213.267058][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 213.303578][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.336778][ T5881] usb 5-1: config 0 descriptor?? [ 213.369129][ T7525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 213.653633][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 213.660882][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 213.668662][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 213.675541][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 213.682608][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 213.788048][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 213.798729][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.806242][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.817752][ T7552] dummy0: entered promiscuous mode [ 213.824166][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 213.835509][ T7552] dummy0: left promiscuous mode [ 213.865288][ T5830] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 213.868394][ T7550] tipc: Started in network mode [ 213.872298][ T5882] usb 5-1: USB disconnect, device number 10 [ 213.889282][ T7550] tipc: Node identity ac1414aa, cluster identity 4711 [ 213.907956][ T7550] tipc: Enabled bearer , priority 10 [ 213.941134][ T5881] usb 3-1: USB disconnect, device number 23 [ 214.008505][ T10] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 214.106033][ T7559] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 214.118067][ T7558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.173441][ T10] usb 4-1: device descriptor read/64, error -71 [ 214.439771][ T10] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 214.598737][ T10] usb 4-1: device descriptor read/64, error -71 [ 214.708913][ T10] usb usb4-port1: attempt power cycle [ 214.845189][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.871746][ T7573] IPVS: length: 136 != 24 [ 214.953001][ T7575] FAULT_INJECTION: forcing a failure. [ 214.953001][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 214.970795][ T7575] CPU: 0 UID: 0 PID: 7575 Comm: syz.4.512 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 214.970817][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 214.970827][ T7575] Call Trace: [ 214.970833][ T7575] [ 214.970839][ T7575] dump_stack_lvl+0x189/0x250 [ 214.970866][ T7575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.970887][ T7575] ? __pfx__printk+0x10/0x10 [ 214.970905][ T7575] ? __pfx___might_resched+0x10/0x10 [ 214.970931][ T7575] should_fail_ex+0x414/0x560 [ 214.970957][ T7575] should_failslab+0xa8/0x100 [ 214.970978][ T7575] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 214.970997][ T7575] ? __alloc_skb+0x112/0x2d0 [ 214.971014][ T7575] __alloc_skb+0x112/0x2d0 [ 214.971032][ T7575] netlink_sendmsg+0x5c6/0xb30 [ 214.971052][ T7575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.971067][ T7575] ? __import_iovec+0x5d4/0x7f0 [ 214.971085][ T7575] ? aa_sock_msg_perm+0x94/0x160 [ 214.971101][ T7575] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.971116][ T7575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.971130][ T7575] __sock_sendmsg+0x219/0x270 [ 214.971153][ T7575] ____sys_sendmsg+0x505/0x830 [ 214.971172][ T7575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.971200][ T7575] ___sys_sendmsg+0x21f/0x2a0 [ 214.971217][ T7575] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.971259][ T7575] ? __fget_files+0x2a/0x420 [ 214.971276][ T7575] ? __fget_files+0x3a0/0x420 [ 214.971301][ T7575] __sys_sendmsg+0x164/0x220 [ 214.971323][ T7575] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.971350][ T7575] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 214.971366][ T7575] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.971382][ T7575] __do_fast_syscall_32+0xb4/0x110 [ 214.971398][ T7575] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.971414][ T7575] do_fast_syscall_32+0x34/0x80 [ 214.971430][ T7575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.971447][ T7575] RIP: 0023:0xf712e539 [ 214.971460][ T7575] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 214.971472][ T7575] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 214.971487][ T7575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004380 [ 214.971497][ T7575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.971505][ T7575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.971514][ T7575] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 214.971522][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.971542][ T7575] [ 215.232992][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.369013][ T5882] tipc: Node number set to 2886997162 [ 215.428571][ T10] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 215.503676][ T10] usb 4-1: device descriptor read/8, error -71 [ 215.602441][ T7585] FAULT_INJECTION: forcing a failure. [ 215.602441][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 215.630371][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.1.527 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 215.630401][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 215.630413][ T7585] Call Trace: [ 215.630431][ T7585] [ 215.630440][ T7585] dump_stack_lvl+0x189/0x250 [ 215.630478][ T7585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.630506][ T7585] ? __pfx__printk+0x10/0x10 [ 215.630531][ T7585] ? __pfx___might_resched+0x10/0x10 [ 215.630561][ T7585] ? fs_reclaim_acquire+0x7d/0x100 [ 215.630595][ T7585] should_fail_ex+0x414/0x560 [ 215.630633][ T7585] should_failslab+0xa8/0x100 [ 215.630661][ T7585] __kmalloc_noprof+0xcb/0x4f0 [ 215.630684][ T7585] ? kfree+0x4d/0x440 [ 215.630703][ T7585] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.630733][ T7585] tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.630757][ T7585] ? tomoyo_domain+0xda/0x130 [ 215.630786][ T7585] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 215.630817][ T7585] tomoyo_path_number_perm+0x1e8/0x5a0 [ 215.630851][ T7585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.630927][ T7585] ? __fget_files+0x2a/0x420 [ 215.630958][ T7585] ? __fget_files+0x3a0/0x420 [ 215.630982][ T7585] ? __fget_files+0x2a/0x420 [ 215.631011][ T7585] security_file_ioctl_compat+0xcb/0x2d0 [ 215.631045][ T7585] __ia32_compat_sys_ioctl+0x128/0x840 [ 215.631070][ T7585] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 215.631092][ T7585] ? __fget_files+0x3a0/0x420 [ 215.631124][ T7585] ? fput+0xa0/0xd0 [ 215.631152][ T7585] ? ksys_write+0x1f0/0x250 [ 215.631182][ T7585] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 215.631215][ T7585] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.631238][ T7585] __do_fast_syscall_32+0xb4/0x110 [ 215.631260][ T7585] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.631284][ T7585] do_fast_syscall_32+0x34/0x80 [ 215.631305][ T7585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.631329][ T7585] RIP: 0023:0xf70fe539 [ 215.631346][ T7585] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 215.631363][ T7585] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 215.631383][ T7585] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004601 [ 215.631396][ T7585] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.631408][ T7585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.631426][ T7585] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 215.631438][ T7585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.631467][ T7585] [ 215.631475][ T7585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.774575][ T10] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 215.882591][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.005585][ T10] usb 4-1: device descriptor read/8, error -71 [ 216.108094][ T7596] input: syz1 as /devices/virtual/input/input11 [ 216.120246][ T10] usb usb4-port1: unable to enumerate USB device [ 216.378077][ T7600] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 216.406262][ T7599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.524792][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.522'. [ 216.918538][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.919838][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 217.090805][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 217.114204][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 217.123376][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.135283][ T10] usb 1-1: config 0 has no interface number 0 [ 217.190781][ T10] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 48, changing to 9 [ 217.209410][ T10] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has invalid maxpacket 25325, setting to 1024 [ 217.222995][ T7620] IPVS: length: 136 != 24 [ 217.252017][ T10] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 217.295930][ T10] usb 1-1: config 0 interface 8 has no altsetting 0 [ 217.349235][ T10] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 217.360877][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.398714][ T10] usb 1-1: Product: syz [ 217.403041][ T10] usb 1-1: Manufacturer: syz [ 217.407676][ T10] usb 1-1: SerialNumber: syz [ 217.450480][ T10] usb 1-1: config 0 descriptor?? [ 217.685079][ T10] ath6kl: Failed to submit usb control message: -71 [ 217.712973][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 217.736554][ T10] ath6kl: Unable to send get target info: -71 [ 217.744531][ T10] ath6kl: Failed to init ath6kl core: -71 [ 217.753287][ T10] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 217.802568][ T10] usb 1-1: USB disconnect, device number 22 [ 217.958873][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.203183][ T7648] netlink: 'syz.4.538': attribute type 10 has an invalid length. [ 218.278906][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.289647][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.428559][ T5832] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.458553][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 218.505084][ T10] usb 4-1: config 0 has no interfaces? [ 218.517164][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 218.541657][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.569313][ T10] usb 4-1: Product: syz [ 218.576401][ T10] usb 4-1: Manufacturer: syz [ 218.586327][ T10] usb 4-1: SerialNumber: syz [ 218.599691][ T10] usb 4-1: config 0 descriptor?? [ 218.619189][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 218.634742][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 218.657170][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.672064][ T5832] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.682482][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.690883][ T5832] usb 2-1: Product: syz [ 218.698850][ T5832] usb 2-1: Manufacturer: syz [ 218.703503][ T5832] usb 2-1: SerialNumber: syz [ 218.740154][ T5832] usb 2-1: config 0 descriptor?? [ 218.758330][ T5832] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 218.777961][ T5832] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 218.991323][ T7667] FAULT_INJECTION: forcing a failure. [ 218.991323][ T7667] name failslab, interval 1, probability 0, space 0, times 0 [ 218.998552][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.014401][ T5885] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 219.036284][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: syz.4.546 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 219.036315][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 219.036328][ T7667] Call Trace: [ 219.036337][ T7667] [ 219.036346][ T7667] dump_stack_lvl+0x189/0x250 [ 219.036389][ T7667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.036418][ T7667] ? __pfx__printk+0x10/0x10 [ 219.036444][ T7667] ? __pfx___might_resched+0x10/0x10 [ 219.036481][ T7667] should_fail_ex+0x414/0x560 [ 219.036517][ T7667] should_failslab+0xa8/0x100 [ 219.036545][ T7667] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 219.036572][ T7667] ? zswap_store+0xbc8/0x1be0 [ 219.036602][ T7667] zswap_store+0xbc8/0x1be0 [ 219.036627][ T7667] ? __pfx_flush_tlb_func+0x10/0x10 [ 219.036660][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.036685][ T7667] ? zswap_store+0x727/0x1be0 [ 219.036716][ T7667] ? __pfx_zswap_store+0x10/0x10 [ 219.036741][ T7667] ? do_raw_spin_lock+0x121/0x290 [ 219.036775][ T7667] ? do_raw_spin_unlock+0x122/0x240 [ 219.036800][ T7667] ? _raw_spin_unlock+0x28/0x50 [ 219.036828][ T7667] ? folio_free_swap+0x289/0x430 [ 219.036853][ T7667] swap_writepage+0x6b5/0xda0 [ 219.036898][ T7667] shrink_folio_list+0x37e3/0x4e90 [ 219.036919][ T7667] ? __split_vma+0x84f/0x9b0 [ 219.036976][ T7667] ? __pfx_shrink_folio_list+0x10/0x10 [ 219.037005][ T7667] ? call_rcu+0x6dd/0x990 [ 219.037021][ T7667] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.037046][ T7667] ? mas_leaf_max_gap+0x497/0x670 [ 219.037112][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.037176][ T7667] ? cgroup_rstat_updated+0x144/0xb50 [ 219.037208][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.037257][ T7667] reclaim_folio_list+0xe8/0x4f0 [ 219.037301][ T7667] ? __pfx_reclaim_folio_list+0x10/0x10 [ 219.037329][ T7667] ? __mod_zone_page_state+0xd7/0x140 [ 219.037357][ T7667] ? lru_gen_del_folio+0x359/0x540 [ 219.037388][ T7667] reclaim_pages+0x49a/0x5b0 [ 219.037419][ T7667] ? __pfx_reclaim_pages+0x10/0x10 [ 219.037444][ T7667] ? do_raw_spin_unlock+0x122/0x240 [ 219.037471][ T7667] madvise_cold_or_pageout_pte_range+0x14d7/0x1d20 [ 219.037508][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.037542][ T7667] ? rcu_is_watching+0x15/0xb0 [ 219.037571][ T7667] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 219.037598][ T7667] ? __mod_memcg_lruvec_state+0x2ae/0x480 [ 219.037642][ T7667] walk_pgd_range+0xc7f/0x1790 [ 219.037695][ T7667] ? __pfx_walk_pgd_range+0x10/0x10 [ 219.037731][ T7667] __walk_page_range+0x14c/0x710 [ 219.037759][ T7667] ? find_vma+0xe7/0x160 [ 219.037782][ T7667] ? __pfx_find_vma+0x10/0x10 [ 219.037816][ T7667] walk_page_range_mm+0x42d/0x620 [ 219.037847][ T7667] ? __pfx_walk_page_range_mm+0x10/0x10 [ 219.037880][ T7667] ? mlock_drain_local+0x79/0x490 [ 219.037915][ T7667] ? walk_page_range+0x6b/0x90 [ 219.037940][ T7667] madvise_do_behavior+0x2898/0x3500 [ 219.037965][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.038011][ T7667] ? __pfx_madvise_do_behavior+0x10/0x10 [ 219.038044][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.038080][ T7667] ? get_pid_task+0x20/0x1f0 [ 219.038152][ T7667] ? __lock_acquire+0xaac/0xd20 [ 219.038189][ T7667] ? madvise_lock+0xda/0x200 [ 219.038238][ T7667] __ia32_sys_madvise+0x10c/0x150 [ 219.038267][ T7667] __do_fast_syscall_32+0xb4/0x110 [ 219.038291][ T7667] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.038314][ T7667] do_fast_syscall_32+0x34/0x80 [ 219.038335][ T7667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.038358][ T7667] RIP: 0023:0xf712e539 [ 219.038374][ T7667] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 219.038389][ T7667] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 219.038409][ T7667] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 219.038423][ T7667] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.038434][ T7667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.038444][ T7667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 219.038455][ T7667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.038482][ T7667] [ 219.518589][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 219.527991][ T5885] usb 3-1: config 0 has no interfaces? [ 219.547478][ T5885] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 219.575439][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.629683][ T5885] usb 3-1: Product: syz [ 219.648761][ T5885] usb 3-1: Manufacturer: syz [ 219.653504][ T5885] usb 3-1: SerialNumber: syz [ 219.664912][ T5832] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 219.665558][ T5885] usb 3-1: config 0 descriptor?? [ 219.687032][ T5832] em28xx 2-1:0.0: Config register raw data: 0x56 [ 219.877314][ T5832] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 219.884497][ T5832] em28xx 2-1:0.0: No AC97 audio processor [ 219.931049][ T7664] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 219.952855][ T7680] syz.0.552(7680): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 220.014012][ T24] usb 3-1: USB disconnect, device number 24 [ 220.038533][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.069892][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 220.241907][ T5885] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.256323][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.275770][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.285866][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 220.300484][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.309833][ T5885] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.317956][ T5885] usb 5-1: Manufacturer: syz [ 220.326241][ T5885] usb 5-1: config 0 descriptor?? [ 220.605566][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.737199][ T5885] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 220.745582][ T5885] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 220.757202][ T5885] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 221.036850][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 221.036869][ T30] audit: type=1326 audit(1745999768.538:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7fc00000 [ 221.065209][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.078548][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 221.081144][ T24] usb 4-1: USB disconnect, device number 20 [ 221.265840][ T5832] usb 2-1: USB disconnect, device number 10 [ 221.274019][ T5832] em28xx 2-1:0.0: Disconnecting em28xx [ 221.345592][ T5832] em28xx 2-1:0.0: Freeing device [ 221.399701][ T30] audit: type=1326 audit(1745999768.898:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.408980][ T5881] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 221.447937][ T30] audit: type=1326 audit(1745999768.898:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.489955][ T30] audit: type=1326 audit(1745999768.898:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.515854][ T30] audit: type=1326 audit(1745999768.908:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.566156][ T30] audit: type=1326 audit(1745999768.938:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.589343][ T30] audit: type=1326 audit(1745999768.938:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.619048][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 221.631661][ T30] audit: type=1326 audit(1745999768.968:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.669281][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.688077][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 221.702217][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.726688][ T30] audit: type=1326 audit(1745999768.968:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 221.753103][ T5881] usb 1-1: config 0 descriptor?? [ 221.768137][ T5881] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 221.823252][ T30] audit: type=1326 audit(1745999768.968:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.2.561" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 222.075580][ T7723] FAULT_INJECTION: forcing a failure. [ 222.075580][ T7723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.094332][ T7723] CPU: 1 UID: 0 PID: 7723 Comm: syz.1.566 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 222.094365][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 222.094378][ T7723] Call Trace: [ 222.094386][ T7723] [ 222.094395][ T7723] dump_stack_lvl+0x189/0x250 [ 222.094433][ T7723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.094479][ T7723] ? __pfx__printk+0x10/0x10 [ 222.094512][ T7723] should_fail_ex+0x414/0x560 [ 222.094550][ T7723] _copy_to_user+0x31/0xb0 [ 222.094579][ T7723] simple_read_from_buffer+0xe1/0x170 [ 222.094609][ T7723] proc_fail_nth_read+0x1df/0x250 [ 222.094651][ T7723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.094683][ T7723] ? rw_verify_area+0x258/0x650 [ 222.094703][ T7723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.094732][ T7723] vfs_read+0x1fd/0x980 [ 222.094759][ T7723] ? __pfx___mutex_lock+0x10/0x10 [ 222.094780][ T7723] ? __pfx_vfs_read+0x10/0x10 [ 222.094804][ T7723] ? __fget_files+0x2a/0x420 [ 222.094834][ T7723] ? __fget_files+0x3a0/0x420 [ 222.094858][ T7723] ? __fget_files+0x2a/0x420 [ 222.094892][ T7723] ksys_read+0x145/0x250 [ 222.094916][ T7723] ? __pfx_ksys_read+0x10/0x10 [ 222.094940][ T7723] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 222.094963][ T7723] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.094985][ T7723] __do_fast_syscall_32+0xb4/0x110 [ 222.095007][ T7723] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.095031][ T7723] do_fast_syscall_32+0x34/0x80 [ 222.095052][ T7723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.095076][ T7723] RIP: 0023:0xf70fe539 [ 222.095094][ T7723] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.095111][ T7723] RSP: 002b:00000000f50ee590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 222.095131][ T7723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ee620 [ 222.095144][ T7723] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 222.095156][ T7723] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 222.095166][ T7723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.095177][ T7723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.095207][ T7723] [ 222.158700][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.288801][ T5881] gspca_vc032x: reg_r err -110 [ 222.429304][ T5881] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 222.565168][ T7730] FAULT_INJECTION: forcing a failure. [ 222.565168][ T7730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.597717][ T7730] CPU: 0 UID: 0 PID: 7730 Comm: syz.3.567 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 222.597748][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 222.597760][ T7730] Call Trace: [ 222.597769][ T7730] [ 222.597777][ T7730] dump_stack_lvl+0x189/0x250 [ 222.597814][ T7730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.597843][ T7730] ? __pfx__printk+0x10/0x10 [ 222.597874][ T7730] ? fs_reclaim_acquire+0x7d/0x100 [ 222.597912][ T7730] should_fail_ex+0x414/0x560 [ 222.597949][ T7730] prepare_alloc_pages+0x213/0x610 [ 222.597986][ T7730] __alloc_frozen_pages_noprof+0x123/0x370 [ 222.598020][ T7730] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 222.598054][ T7730] ? filemap_map_pages+0x1370/0x1740 [ 222.598077][ T7730] ? policy_nodemask+0x27c/0x720 [ 222.598101][ T7730] ? __lock_acquire+0xaac/0xd20 [ 222.598132][ T7730] alloc_pages_mpol+0x232/0x4a0 [ 222.598162][ T7730] vma_alloc_folio_noprof+0xe4/0x200 [ 222.598190][ T7730] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 222.598228][ T7730] folio_prealloc+0x30/0x180 [ 222.598256][ T7730] __handle_mm_fault+0x2b28/0x5380 [ 222.598301][ T7730] ? __pfx___handle_mm_fault+0x10/0x10 [ 222.598340][ T7730] ? follow_page_pte+0x888/0x13c0 [ 222.598375][ T7730] handle_mm_fault+0x3f6/0x8c0 [ 222.598410][ T7730] __get_user_pages+0x16f0/0x2a40 [ 222.598468][ T7730] ? __pfx___get_user_pages+0x10/0x10 [ 222.598493][ T7730] ? get_user_pages_unlocked+0xb9/0x740 [ 222.598516][ T7730] ? down_read_killable+0x1d1/0x350 [ 222.598539][ T7730] ? is_valid_gup_args+0x11f/0x200 [ 222.598563][ T7730] get_user_pages_unlocked+0x1e3/0x740 [ 222.598586][ T7730] ? rcu_is_watching+0x15/0xb0 [ 222.598628][ T7730] hva_to_pfn+0x313/0xc50 [ 222.598664][ T7730] ? __pfx_hva_to_pfn+0x10/0x10 [ 222.598703][ T7730] ? xas_start+0x390/0x770 [ 222.598724][ T7730] ? xa_load+0x60/0x210 [ 222.598758][ T7730] __kvm_faultin_pfn+0x2bc/0x360 [ 222.598796][ T7730] kvm_mmu_faultin_pfn+0x765/0x1d10 [ 222.598844][ T7730] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 222.598880][ T7730] ? __pfx_fast_page_fault+0x10/0x10 [ 222.598908][ T7730] ? __kvm_mmu_topup_memory_cache+0x31a/0x610 [ 222.598946][ T7730] kvm_tdp_page_fault+0x273/0x370 [ 222.598970][ T7730] kvm_mmu_do_page_fault+0x2c5/0x640 [ 222.598998][ T7730] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 222.599034][ T7730] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 222.599064][ T7730] kvm_mmu_page_fault+0x22f/0xb70 [ 222.599091][ T7730] ? __pfx_handle_ept_violation+0x10/0x10 [ 222.599120][ T7730] vmx_handle_exit+0x103b/0x1850 [ 222.599145][ T7730] ? vcpu_run+0x34f6/0x6b20 [ 222.599188][ T7730] vcpu_run+0x41c3/0x6b20 [ 222.599223][ T7730] ? vcpu_run+0x34f6/0x6b20 [ 222.599314][ T7730] ? __pfx_vcpu_run+0x10/0x10 [ 222.599348][ T7730] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 222.599385][ T7730] ? rcu_is_watching+0x15/0xb0 [ 222.599419][ T7730] kvm_arch_vcpu_ioctl_run+0xfca/0x1940 [ 222.599460][ T7730] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 222.599488][ T7730] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 222.599514][ T7730] ? do_vfs_ioctl+0xf36/0x1eb0 [ 222.599538][ T7730] ? rcu_is_watching+0x15/0xb0 [ 222.599567][ T7730] ? trace_contention_end+0x39/0x120 [ 222.599588][ T7730] ? __mutex_lock+0x330/0xe80 [ 222.599620][ T7730] ? kvm_vcpu_ioctl+0x22c/0xe90 [ 222.599651][ T7730] ? __pfx___mutex_lock+0x10/0x10 [ 222.599680][ T7730] ? kasan_quarantine_put+0xdd/0x220 [ 222.599713][ T7730] kvm_vcpu_ioctl+0x95a/0xe90 [ 222.599748][ T7730] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 222.599776][ T7730] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.599869][ T7730] kvm_vcpu_compat_ioctl+0x203/0x390 [ 222.599901][ T7730] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 222.599935][ T7730] ? __fget_files+0x3a0/0x420 [ 222.599959][ T7730] ? __fget_files+0x2a/0x420 [ 222.599987][ T7730] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 222.600017][ T7730] __ia32_compat_sys_ioctl+0x551/0x840 [ 222.600039][ T7730] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 222.600060][ T7730] ? __fget_files+0x3a0/0x420 [ 222.600093][ T7730] ? fput+0xa0/0xd0 [ 222.600121][ T7730] ? ksys_write+0x1f0/0x250 [ 222.600152][ T7730] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 222.600174][ T7730] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.600196][ T7730] __do_fast_syscall_32+0xb4/0x110 [ 222.600219][ T7730] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.600243][ T7730] do_fast_syscall_32+0x34/0x80 [ 222.600264][ T7730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.600288][ T7730] RIP: 0023:0xf711e539 [ 222.600306][ T7730] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 222.600324][ T7730] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 222.600344][ T7730] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 222.600358][ T7730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.600369][ T7730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.600380][ T7730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.600392][ T7730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.600423][ T7730] [ 223.238804][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.300573][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 223.440840][ T7736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.546283][ T7741] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.618743][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.658894][ T975] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 223.720913][ T5832] usb 5-1: USB disconnect, device number 11 [ 223.773492][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 223.793344][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.812384][ T24] usb 3-1: Product: syz [ 223.817509][ T24] usb 3-1: Manufacturer: syz [ 223.824143][ T24] usb 3-1: SerialNumber: syz [ 223.847461][ T975] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 223.857281][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.870417][ T24] usb 3-1: config 0 descriptor?? [ 223.876311][ T975] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 223.894306][ T975] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 223.904767][ T975] usb 2-1: Manufacturer: syz [ 223.914517][ T975] usb 2-1: config 0 descriptor?? [ 223.988535][ T975] rc_core: IR keymap rc-hauppauge not found [ 223.996532][ T975] Registered IR keymap rc-empty [ 224.011643][ T975] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 224.053349][ T5882] usb 1-1: USB disconnect, device number 23 [ 224.064724][ T975] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 224.158382][ T975] usb 2-1: USB disconnect, device number 11 [ 224.189066][ T10] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 224.275850][ T24] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 224.288609][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.296410][ T24] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 224.310626][ T24] usb 3-1: USB disconnect, device number 25 [ 224.392975][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.405365][ T10] usb 4-1: config 0 has no interface number 0 [ 224.411869][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 224.425510][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.435743][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.445953][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.460697][ T10] usb 4-1: config 0 descriptor?? [ 224.490230][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 224.581556][ T5881] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 224.685549][ T7749] iowarrior 4-1:0.1: Error -90 while submitting URB [ 224.700609][ T24] usb 4-1: USB disconnect, device number 21 [ 224.738729][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 224.755711][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 224.777290][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.787498][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.797774][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 224.809745][ T5881] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 224.844814][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 224.867656][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.890763][ T5881] usb 5-1: config 0 descriptor?? [ 224.896789][ T7759] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.956016][ T7766] syz_tun: entered allmulticast mode [ 225.027930][ T7766] dvmrp1: entered allmulticast mode [ 225.042408][ T7766] loop2: detected capacity change from 0 to 7 [ 225.054939][ T7766] Dev loop2: unable to read RDB block 7 [ 225.064757][ T7766] loop2: unable to read partition table [ 225.074445][ T7766] loop2: partition table beyond EOD, truncated [ 225.095731][ T7766] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.157451][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 225.166180][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 225.173266][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 225.180198][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 225.187146][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 225.328636][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.366390][ T5830] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 225.377869][ T5881] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 225.378563][ T10] usb 5-1: USB disconnect, device number 12 [ 225.497496][ T7776] input: syz1 as /devices/virtual/input/input13 [ 225.561561][ T5881] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 225.571760][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.583182][ T5881] usb 3-1: config 0 descriptor?? [ 225.658733][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 225.798358][ T7779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.823148][ T5881] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 225.843059][ T5881] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 225.853523][ T5881] [drm:udl_init] *ERROR* Selecting channel failed [ 225.861436][ T9] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 225.877584][ T9] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 225.894114][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.904638][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.910707][ T5881] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 225.928783][ T5881] [drm] Initialized udl on minor 2 [ 225.940658][ T5881] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 225.962282][ T9] usb 4-1: config 0 has no interface number 0 [ 225.969550][ T5881] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 225.978767][ T9] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 225.991154][ T975] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.011092][ T9] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 226.040543][ T5881] usb 3-1: USB disconnect, device number 26 [ 226.049056][ T975] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 226.058717][ T9] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 226.109143][ T9] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 226.134784][ T7786] FAULT_INJECTION: forcing a failure. [ 226.134784][ T7786] name failslab, interval 1, probability 0, space 0, times 0 [ 226.139758][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.149449][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.4.589 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 226.149482][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 226.149497][ T7786] Call Trace: [ 226.149504][ T7786] [ 226.149514][ T7786] dump_stack_lvl+0x189/0x250 [ 226.149555][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.149586][ T7786] ? __pfx__printk+0x10/0x10 [ 226.149615][ T7786] ? __pfx___might_resched+0x10/0x10 [ 226.149646][ T7786] ? fs_reclaim_acquire+0x7d/0x100 [ 226.149683][ T7786] should_fail_ex+0x414/0x560 [ 226.149723][ T7786] should_failslab+0xa8/0x100 [ 226.149753][ T7786] __kmalloc_noprof+0xcb/0x4f0 [ 226.149778][ T7786] ? io_cache_alloc_new+0x40/0x100 [ 226.149814][ T7786] io_cache_alloc_new+0x40/0x100 [ 226.149845][ T7786] __io_prep_rw+0x21d/0xca0 [ 226.149885][ T7786] ? __pfx___io_prep_rw+0x10/0x10 [ 226.149914][ T7786] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 226.149963][ T7786] io_prep_read+0x22/0xd0 [ 226.149994][ T7786] io_submit_sqes+0x93a/0x1d20 [ 226.150062][ T7786] __se_sys_io_uring_enter+0x2df/0x2b20 [ 226.150116][ T7786] ? ksys_write+0x1cb/0x250 [ 226.150143][ T7786] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 226.150173][ T7786] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 226.150196][ T7786] ? __pfx_vfs_write+0x10/0x10 [ 226.150222][ T7786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 226.150246][ T7786] ? __fget_files+0x3a0/0x420 [ 226.150295][ T7786] ? fput+0xa0/0xd0 [ 226.150326][ T7786] ? ksys_write+0x1f0/0x250 [ 226.150358][ T7786] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 226.150381][ T7786] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 226.150418][ T7786] __do_fast_syscall_32+0xb4/0x110 [ 226.150442][ T7786] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.150467][ T7786] do_fast_syscall_32+0x34/0x80 [ 226.150490][ T7786] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.150515][ T7786] RIP: 0023:0xf712e539 [ 226.150533][ T7786] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 226.150552][ T7786] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 226.150574][ T7786] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000048e9 [ 226.150589][ T7786] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 226.150600][ T7786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.150613][ T7786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 226.150625][ T7786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.150657][ T7786] [ 226.366233][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.467619][ T9] usb 4-1: config 0 descriptor?? [ 226.478861][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 226.693763][ T9] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 226.717613][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.728530][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 226.748520][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 226.896185][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 226.918045][ T9] usb 4-1: USB disconnect, device number 22 [ 226.924459][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'. [ 226.943838][ T10] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 226.983296][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.994583][ T10] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 227.018929][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.067328][ T10] usb 5-1: config 0 descriptor?? [ 227.346683][ T10] usb 5-1: string descriptor 0 read error: -71 [ 227.402531][ T10] usb 5-1: USB disconnect, device number 13 [ 227.408600][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.498812][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 227.498831][ T30] audit: type=1326 audit(1745999774.988:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.558654][ T30] audit: type=1326 audit(1745999774.988:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.582436][ T30] audit: type=1326 audit(1745999774.988:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.648668][ T30] audit: type=1326 audit(1745999774.988:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.671064][ T30] audit: type=1326 audit(1745999774.988:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.693940][ T30] audit: type=1326 audit(1745999774.988:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.716247][ T30] audit: type=1326 audit(1745999774.988:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.738773][ T30] audit: type=1326 audit(1745999774.988:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.763540][ T30] audit: type=1326 audit(1745999774.988:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 227.889557][ T30] audit: type=1326 audit(1745999774.988:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7808 comm="syz.0.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 228.121659][ C0] [ 228.124047][ C0] ============================= [ 228.128914][ C0] [ BUG: Invalid wait context ] [ 228.133800][ C0] 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 Not tainted [ 228.140939][ C0] ----------------------------- [ 228.145893][ C0] swapper/0/0 is trying to lock: [ 228.150851][ C0] ffffc900047fd410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 228.160396][ C0] other info that might help us debug this: [ 228.166309][ C0] context-{2:2} [ 228.169795][ C0] 1 lock held by swapper/0/0: [ 228.174490][ C0] #0: ffffc900047fd958 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 228.184473][ C0] stack backtrace: [ 228.188221][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 228.188248][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 228.188261][ C0] Call Trace: [ 228.188270][ C0] [ 228.188278][ C0] dump_stack_lvl+0x189/0x250 [ 228.188321][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.188348][ C0] ? __pfx__printk+0x10/0x10 [ 228.188367][ C0] ? print_lock_name+0xde/0x100 [ 228.188398][ C0] __lock_acquire+0xbcf/0xd20 [ 228.188426][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 228.188460][ C0] lock_acquire+0x120/0x360 [ 228.188483][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 228.188506][ C0] ? __lock_acquire+0xaac/0xd20 [ 228.188535][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 228.188566][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 228.188586][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 228.188616][ C0] ? xa_load+0x1ea/0x210 [ 228.188640][ C0] kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 228.188661][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 228.188683][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 228.188712][ C0] ? kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 228.188734][ C0] xen_timer_callback+0x109/0x220 [ 228.188757][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 228.188777][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 228.188815][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 228.188843][ C0] ? read_tsc+0x9/0x20 [ 228.188865][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 228.188905][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 228.188932][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 228.188963][ C0] [ 228.188969][ C0] [ 228.188977][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.188998][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 228.189017][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 6b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 228.189034][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 228.189053][ C0] RAX: e9e8a48b2a05b100 RBX: ffffffff81973da8 RCX: e9e8a48b2a05b100 [ 228.189069][ C0] RDX: 0000000000000001 RSI: ffffffff8d748ffc RDI: ffffffff8bc1cde0 [ 228.189082][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 228.189097][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7ec970 [ 228.189112][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 228.189127][ C0] ? do_idle+0x1e8/0x510 [ 228.189148][ C0] default_idle+0x13/0x20 [ 228.189169][ C0] default_idle_call+0x74/0xb0 [ 228.189191][ C0] do_idle+0x1e8/0x510 [ 228.189210][ C0] ? __pfx_do_idle+0x10/0x10 [ 228.189225][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.189251][ C0] cpu_startup_entry+0x44/0x60 [ 228.189268][ C0] rest_init+0x2de/0x300 [ 228.189291][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 228.189323][ C0] start_kernel+0x470/0x4f0 [ 228.189352][ C0] x86_64_start_reservations+0x2a/0x30 [ 228.189372][ C0] x86_64_start_kernel+0x66/0x70 [ 228.189390][ C0] common_startup_64+0x13e/0x147 [ 228.189425][ C0] [ 228.238631][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 228.448502][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.898706][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 229.064098][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 229.078226][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.090647][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.100788][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 229.205092][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 229.269822][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 229.281301][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.297421][ T24] usb 4-1: config 0 descriptor?? [ 229.303588][ T7815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.488481][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.560152][ T5830] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 229.567326][ T5830] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 229.574449][ T5830] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 229.581535][ T5830] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 229.588701][ T5830] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 229.764125][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 229.767225][ T24] usb 4-1: USB disconnect, device number 23 [ 230.528523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.558585][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.598548][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.638608][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.678643][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.718523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.768494][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.808525][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available