last executing test programs: 11m34.062640055s ago: executing program 3 (id=19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 11m30.306979604s ago: executing program 3 (id=27): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, 0x0, 0x0) 11m28.717017036s ago: executing program 3 (id=30): sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendto$l2tp6(r6, &(0x7f0000000400)='(', 0x1, 0x20000010, 0x0, 0x0) 11m24.310699566s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x183) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) 11m22.543559375s ago: executing program 3 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 11m21.086157117s ago: executing program 3 (id=41): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 11m5.575024465s ago: executing program 32 (id=41): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 9m10.797612023s ago: executing program 4 (id=208): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x192}}, 0x20}}, 0x0) 9m5.781658233s ago: executing program 4 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() memfd_create(0x0, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioprio_get$pid(0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 9m4.018846727s ago: executing program 4 (id=217): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 9m1.677881039s ago: executing program 4 (id=221): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000a80)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e20100845f39806305f56d918cc5b402", 0xe4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 9m1.365588863s ago: executing program 4 (id=222): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace(0x10, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(r0, &(0x7f0000000800)={0x1700000000000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x42}]}]}, 0x5c}}, 0x8000) 8m58.555251639s ago: executing program 4 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 8m43.148637095s ago: executing program 33 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 11.198239596s ago: executing program 6 (id=1571): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) landlock_restrict_self(r4, 0x0) (fail_nth: 1) 8.579911509s ago: executing program 6 (id=1573): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x40, 0xfdd7, 0xaa0a, 0x1, 0x5, '\x00', 0x0, r0, 0x4, 0x4, 0x4, 0xb, @value=r0}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 8.202912888s ago: executing program 6 (id=1577): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r2 = socket(0x6, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r3 = socket(0x2b, 0x800, 0x8) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x9}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) fsopen(&(0x7f0000000580)='ncpfs\x00', 0x1) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000200)='syscall\x00') r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/130, 0x82}], 0x1, 0x8, 0x3) 8.035230119s ago: executing program 0 (id=1580): r0 = syz_io_uring_setup(0x5adf, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r5], 0x54}}, 0x800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r7, 0x110, 0x6, 0x0, &(0x7f00000003c0)=0xfffffffffffffea5) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r9) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="0b0000004f67fc36104082e7e3132f8da0a82b620dac88c204d7689e0ec6d66063dd8762629bf40bd5a7ffd8174b89a6c2fe4ced2835f324695326942a601dd36e35eea97213513dd4c1dfac7181f5b213522727f207a40f3e0fe9a4f4f6e80b3646652583601c9d48ff87799ed458b2d309", @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf25010000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="04", @ANYRES16=r10, @ANYBLOB="00022abd7000fddbdf25010000006c07088070000080200004000a004e2000000006fc0200000000000000000000000000000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000a0001000000200004000a004e230000005afc010000000000000000000000000001a5000000f8010080240002003f854fe6019f1169641185443ed81a32401e80fb6e05cab1760313621b469bfe24000200ab5feece5d8b3dfacfc64e941ee8999d8de7e3f7ad0f15edc176a24055d6689906000500d26400009c010980ac000080060001000200000008000200e00000010500030001000000060001000a00000014000200fe8000000000000000000000000000130500030002000000060001000a00000014000200fc0100000000000000000000000000010500030003000000060001000a00000014000200200100000000000000000000000000020500030004000000060001000a00000014000200fe8000000000000000000000000000bb050003000100000088000080060001000a00000014000200fc0000000000000000000000000000000500030003000000060001000a00000014000200fc0000000000000000000000000000010500030002000000060001000200000008000200ac1414150500030001000000060001000a00000014000200fc0100000000000000000000000000000500030003000000640000800600010002000000080002006401010005000300030000000600010002000000080002006401010205000300000000000600010002000000080002000a0101000500030000000000060001000200000008000200ffffffff050003000000000008000300040000004c0400801400040002004e20ac1414bb00000000000000001c04098004000080d0000080060001000200000008000200e00000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe8800000000000000000000000001010500030000000000060001000a0000001400020000000000000000000000ffff640101020500030000000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200fc010000000000000000000000000001050003000100000028000080060001000a0000001400020000000000000000000000000000000000050003000300000094000080060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000a00000014000200fc0200000000000000000000000000000500030001000000060001000200000008000200ac1e01010500030000000000060001000200000008000200ac1414aa0500030003000000060001000200000008000200ac14140e050003000200000040000080060001000200000008000200000000000500030003000000060001000a00000014000200fe88000000000000000000000000000105000300020000003c010080060001000200000008000200000000000500030001000000060001000a00000014000200ff0200000000000000000000000000010500030002000000060001000200000008000200ac1e01010500030002000000060001000200000008000200e00000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000200000008000200ac1414bb0500030001000000060001000a00000014000200ff01000000000000000000000000000105000300010000001c000080060001000200000008000200ac1414aa050003000200000034000080060001000200000008000200ac1414bb050003000200000006000100020000000800020064010102050003000300000070000080060001000200000008000200ac14141e0500030002000000060001000a00000014000200fe80000000000000000000000000002d0500030003000000060001000200000008000200e00000010500030003000000060001000200000008000200e000000105000300020000004c000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000080003000100000008000a000100000006000500090000004c0000802400020040be056f6631d97cb86f6468a4e92f827c69edc3538be606bee0adb362922c42240002007899e01b82fa189474c0b32158353ce63eb7b1e776e37b553e74baee23267c296800008008000a000100000008000a0001000000200004000a004e24fffffff7200100000000000000000000000000010f000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220800030006000000060006004e240000"], 0x788}, 0x1, 0x0, 0x0, 0x48080}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x42, 0x0, @fd_index=0x9, 0x2, 0x0, 0x1ff}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) io_setup(0x8, &(0x7f00000002c0)=0x0) r12 = eventfd2(0xe492, 0x800) io_cancel(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000000380)="87710ac1431602b1f04e0e2d8dcf1d613f8a673386a66e1afdf59ce23669a56441148183a2e2b27b3b9feacfa333c1bc1f47da873cd3fe307a34dbe81b09e960e32d652e47bef56f3573a411682182a07235c15679408b52fedbb4cafb38c00d90b64241a7cbeb71c586901f14c71b035b1012c2787809d3acfc1f35ae0839773b84241b485e9567e096647b4b3358d072057fa385e16c02ee4682c044197486b2e9f1fbade474abb815d36edfbb9d847051281497e7d9daf8eb64", 0xbb, 0x7662, 0x0, 0x1, r12}, 0xffffffffffffffff) 7.816837967s ago: executing program 2 (id=1581): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb0000010000000023000013000300050000200000020069f33b"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 7.816585348s ago: executing program 0 (id=1582): r0 = socket(0x1e, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x6}, 0x1c) (fail_nth: 1) 7.294022599s ago: executing program 6 (id=1584): setpgid(0x0, 0x0) setpgid(0x0, 0x0) 7.2271919s ago: executing program 6 (id=1585): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a58000000000061114c00000000009500000000000000"], 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0xfffffff9}}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000003c0)={0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x9, 0x7fffffff, 0x1, 'queue1\x00', 0x4}) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000001) syz_usb_connect$cdc_ecm(0x5, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x7e, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "1f0443e547e2"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x7, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x4, 0x0, [0x5, 0x0, 0x9, 0x7]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xd, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x28, 0x1, 0x81, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x7d7, 0x0, 0x0, 0xc}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0xf5, 0x9a, 0x3f, 0x10, 0x7}, 0x2d, &(0x7f0000000540)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x4, 0xf000, 0xe6, [0x30, 0xffcf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x87}]}, 0x1, [{0x90, &(0x7f0000000580)=@string={0x90, 0x3, "80d57db238de58f13ed9c6666e8910d56a4a5515a5bf8f7051b42771fdd49f1b5fb55e5127ca215416cfacdf1762fb9d2062dbe82c3c788a31e74be0b75b494e7010bba02bda35d2cd338ae1c3bf30f4c96728340074e7b65312a2c3a627f9f2075eb0a82e4c7dfff917252203132f22a031376119296ccd11c4bef6540f67a49c7dfcfeb2ebdfb11c47242b92e1"}}]}) 7.092756806s ago: executing program 0 (id=1586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (fail_nth: 1) 7.067529097s ago: executing program 2 (id=1587): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x40, 0xfdd7, 0xaa0a, 0x1, 0x5, '\x00', 0x0, r0, 0x4, 0x4, 0x4, 0xb, @value=r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 6.545388772s ago: executing program 0 (id=1589): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) poll(&(0x7f0000000100)=[{r1, 0x1000}], 0x1, 0x809) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev}, 0x14) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x10, "df86816cf383d252a97216f3b7453239"}, &(0x7f0000000040)=0x18) 6.507666178s ago: executing program 2 (id=1590): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4073, 0xfe9}, {&(0x7f0000001040)=""/4128, 0x1020}, {&(0x7f0000000640)=""/225, 0xe1}], 0x3}, 0x0) 6.388484162s ago: executing program 0 (id=1591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.305245826s ago: executing program 0 (id=1593): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r5 = fanotify_init(0x1, 0x101801) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r4, 0x400, 0x0) read$FUSE(r5, &(0x7f0000000b00)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r7}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 4.690633642s ago: executing program 2 (id=1595): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r2 = socket(0x6, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r3 = socket(0x2b, 0x800, 0x8) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x9}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000200)='syscall\x00') r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/130, 0x82}], 0x1, 0x8, 0x3) 4.347684878s ago: executing program 5 (id=1598): sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000180)=0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$inet_udp(0x2, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xc8ba}, &(0x7f0000000100)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0xfffffffffffffd1b}], 0x1, 0x5, 0x101, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.933208152s ago: executing program 5 (id=1600): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7, 0x40, 0xfdd7, 0xaa0a, 0x1, 0x5, '\x00', 0x0, r0, 0x4, 0x4, 0x4, 0xb, @value=r0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r5, &(0x7f0000000180)='1\x00', 0x2) 2.841214162s ago: executing program 6 (id=1601): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x1) poll(&(0x7f0000000100)=[{r1, 0x1000}], 0x1, 0x809) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev}, 0x14) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2c, 0x0, &(0x7f0000000180)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x10, "df86816cf383d252a97216f3b7453239"}, &(0x7f0000000040)=0x18) 2.83496672s ago: executing program 2 (id=1602): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000540)=@generic={0x1, "ec0d9fd2520e6f8f57a1c6b079cb42c7e106a38502f5a4fbe2d9b73b28a180cf45601cbf27b89b8a57230ec9537bf1544b4ae74567216a585343e28f1a7bf4ae66c415e44d0a16808f4dfa7a08045ad909d18b9df31703264ddfbbf2e039b0f1371e176c2308250bfd68b60294038ffaf34d26096663ec4d90c513909136"}, 0x80, 0x0}, 0x0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') sendfile(r2, r2, 0x0, 0xb9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, &(0x7f0000000080)=""/72) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r3, 0x0, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000700000085100000fdffffff95"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9, &(0x7f0000000080)=""/9, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.796112231s ago: executing program 1 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.384928328s ago: executing program 5 (id=1604): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaef}, [@call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) write(r4, &(0x7f0000000400)="3cd6", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000580)="178133d014e7d304d7584cd1a2b71e52f5e827c97dd9e86ff74065e90bc305a59d9a1a604516cf02b9268550f043c2b8c3f5a0ed8f09b6622e980729d7f325d852b18e1b179ef0ff578fb332b43b742bddf90d20cd5a6095acba6d6e200c05a7953c23706f7791d03d42d86d7ba2b1626b88c09b02f05f1add7351e01d851d454027ae7291307adfb277bf66f9d2fdb4572bd3", &(0x7f00000000c0)=@udp6=r6}, 0x20) shutdown(r4, 0x1) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000000)={r7}) 2.384374709s ago: executing program 1 (id=1605): r0 = io_uring_setup(0x6508, &(0x7f0000000100)={0x0, 0x2c3f, 0x100, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) listen(r2, 0x6098) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b5, 0x0, 0xda6}]}) 1.120447816s ago: executing program 5 (id=1606): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x0, 0x27c0, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x500, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x40005, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000114000000000000000000000bc7ab58d8d303752fb1949e8c45abc4396d994a7c12f3fa329dcfa936f1076508d8c2bd9e309e319020b7c8f162fc04683e5fe7ddf2332a3", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 960.266596ms ago: executing program 1 (id=1607): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) times(&(0x7f0000000100)) (async) times(&(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001200)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) bind$netlink(r0, &(0x7f0000001300)={0x10, 0x0, 0x25dfdbfd, 0x4000000}, 0xc) 845.365679ms ago: executing program 1 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6e}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0x80042, 0x20262076a4e6d5e) write$binfmt_format(r3, &(0x7f0000000180)='-1\x00', 0x3) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x7f) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000209"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r6, &(0x7f0000000a80), 0x0}, 0x20) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x200040be) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r10 = socket$l2tp(0x2, 0x2, 0x73) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sync_file_range(r4, 0x5, 0x8, 0x2) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, 0x0, 0x0) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000240)={0x7, 0x40000, 0x1}) setsockopt$inet_mreq(r10, 0x0, 0x24, &(0x7f0000001780)={@private=0xa010101, @empty}, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r1}) sendmmsg$inet(r7, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 753.234207ms ago: executing program 2 (id=1609): sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000180)=0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$inet_udp(0x2, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xc8ba}, &(0x7f0000000100)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES16], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0xfffffffffffffd1b}], 0x1, 0x5, 0x101, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 409.700667ms ago: executing program 5 (id=1610): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="757365090004"]) 168.982657ms ago: executing program 1 (id=1611): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) syz_io_uring_setup(0x1866, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet6(r0, 0x0, 0x8081) 168.647714ms ago: executing program 5 (id=1612): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r1, 0x3) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r2 = socket(0x6, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r3 = socket(0x2b, 0x800, 0x8) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x9}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000200)='syscall\x00') r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/130, 0x82}], 0x1, 0x8, 0x3) 0s ago: executing program 1 (id=1613): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a58000000000061114c00000000009500000000000000"], 0x0}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0xfffffff9}}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000003c0)={0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000240)={0x9, 0x7fffffff, 0x1, 'queue1\x00', 0x4}) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000001) syz_usb_connect$cdc_ecm(0x5, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x7e, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "1f0443e547e2"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x7, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x4, 0x0, [0x5, 0x0, 0x9, 0x7]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xd, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x28, 0x1, 0x81, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x7d7, 0x0, 0x0, 0xc}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0xf5, 0x9a, 0x3f, 0x10, 0x7}, 0x2d, &(0x7f0000000540)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x4, 0xf000, 0xe6, [0x30, 0xffcf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x87}]}, 0x1, [{0x90, &(0x7f0000000580)=@string={0x90, 0x3, "80d57db238de58f13ed9c6666e8910d56a4a5515a5bf8f7051b42771fdd49f1b5fb55e5127ca215416cfacdf1762fb9d2062dbe82c3c788a31e74be0b75b494e7010bba02bda35d2cd338ae1c3bf30f4c96728340074e7b65312a2c3a627f9f2075eb0a82e4c7dfff917252203132f22a031376119296ccd11c4bef6540f67a49c7dfcfeb2ebdfb11c47242b92e1"}}]}) kernel console output (not intermixed with test programs): _stack_lvl+0xe8/0x150 [ 692.997799][ T9392] should_fail_ex+0x46c/0x600 [ 692.997837][ T9392] ? getname_flags+0xb8/0x540 [ 692.997857][ T9392] should_failslab+0xa8/0x100 [ 692.997877][ T9392] ? getname_flags+0xb8/0x540 [ 692.997895][ T9392] kmem_cache_alloc_noprof+0x84/0x6c0 [ 692.997927][ T9392] ? do_sys_openat2+0x15a/0x200 [ 692.997954][ T9392] getname_flags+0xb8/0x540 [ 692.997978][ T9392] user_path_at+0x24/0x60 [ 692.998005][ T9392] do_fchownat+0x105/0x270 [ 692.998028][ T9392] ? __pfx_do_fchownat+0x10/0x10 [ 692.998048][ T9392] ? __pfx_ksys_write+0x10/0x10 [ 692.998084][ T9392] __x64_sys_fchownat+0xb5/0xd0 [ 692.998107][ T9392] do_syscall_64+0xec/0xf80 [ 692.998129][ T9392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.998150][ T9392] ? trace_irq_disable+0x37/0x100 [ 692.998172][ T9392] ? clear_bhb_loop+0x60/0xb0 [ 692.998196][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.998216][ T9392] RIP: 0033:0x7feda276f749 [ 692.998234][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.998253][ T9392] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 692.998273][ T9392] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 692.998288][ T9392] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 692.998300][ T9392] RBP: 00007feda09ce090 R08: 0000000000001000 R09: 0000000000000000 [ 692.998313][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.998334][ T9392] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 692.998366][ T9392] [ 694.570007][ T8880] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.689897][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.690140][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.843617][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.843790][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.952650][ T9454] FAULT_INJECTION: forcing a failure. [ 695.952650][ T9454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.952687][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.0.854 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 695.952712][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.952725][ T9454] Call Trace: [ 695.952733][ T9454] [ 695.952742][ T9454] dump_stack_lvl+0xe8/0x150 [ 695.952778][ T9454] should_fail_ex+0x46c/0x600 [ 695.952813][ T9454] _copy_from_user+0x2d/0xb0 [ 695.952836][ T9454] ___sys_sendmsg+0x158/0x2a0 [ 695.952949][ T9454] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.953014][ T9454] ? __fget_files+0x2a/0x420 [ 695.953037][ T9454] ? __fget_files+0x3a6/0x420 [ 695.953071][ T9454] __x64_sys_sendmsg+0x1a1/0x260 [ 695.953101][ T9454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.953149][ T9454] ? __pfx_ksys_write+0x10/0x10 [ 695.953192][ T9454] do_syscall_64+0xec/0xf80 [ 695.953213][ T9454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.953235][ T9454] ? trace_irq_disable+0x37/0x100 [ 695.953258][ T9454] ? clear_bhb_loop+0x60/0xb0 [ 695.953284][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.953305][ T9454] RIP: 0033:0x7feda276f749 [ 695.953325][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.953343][ T9454] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.953365][ T9454] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 695.953380][ T9454] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 695.953393][ T9454] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 695.953406][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.953418][ T9454] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 695.953452][ T9454] [ 697.231216][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.025064][ T9067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 699.091363][ T9067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 699.181781][ T9067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 699.297031][ T9067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 699.587659][ T8880] veth0_vlan: entered promiscuous mode [ 699.673523][ T8880] veth1_vlan: entered promiscuous mode [ 699.884975][ T8880] veth0_macvtap: entered promiscuous mode [ 699.930233][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.971765][ T8880] veth1_macvtap: entered promiscuous mode [ 700.103585][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.125301][ T9067] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.164988][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.231606][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.231846][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.286160][ T3524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.303659][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.303800][ T6651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.304470][ T3524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.333380][ T3524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.334832][ T3524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.137294][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.137317][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.401091][ T6651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.401115][ T6651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.858788][ T9067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.837817][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 702.938812][ T9640] No control pipe specified [ 703.120094][ T9067] veth0_vlan: entered promiscuous mode [ 703.149418][ T9067] veth1_vlan: entered promiscuous mode [ 703.201247][ T9647] FAULT_INJECTION: forcing a failure. [ 703.201247][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.201282][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.0.902 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 703.201306][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 703.201319][ T9647] Call Trace: [ 703.201326][ T9647] [ 703.201336][ T9647] dump_stack_lvl+0xe8/0x150 [ 703.201370][ T9647] should_fail_ex+0x46c/0x600 [ 703.201405][ T9647] _copy_to_user+0x31/0xb0 [ 703.201428][ T9647] simple_read_from_buffer+0xe1/0x170 [ 703.201456][ T9647] proc_fail_nth_read+0x1b6/0x220 [ 703.201492][ T9647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.201528][ T9647] ? rw_verify_area+0x2ac/0x4e0 [ 703.201556][ T9647] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 703.201603][ T9647] vfs_read+0x206/0xa30 [ 703.201642][ T9647] ? __pfx_vfs_read+0x10/0x10 [ 703.201675][ T9647] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 703.201697][ T9647] ? lockdep_hardirqs_on+0x7b/0x110 [ 703.201717][ T9647] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 703.201737][ T9647] ? mutex_lock_nested+0x154/0x1d0 [ 703.201764][ T9647] ? fdget_pos+0x253/0x320 [ 703.201795][ T9647] ksys_read+0x14b/0x260 [ 703.201828][ T9647] ? __pfx_ksys_read+0x10/0x10 [ 703.201857][ T9647] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 703.201883][ T9647] ? syscall_user_dispatch+0x4f/0x90 [ 703.201952][ T9647] do_syscall_64+0xec/0xf80 [ 703.201970][ T9647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.201992][ T9647] ? trace_irq_disable+0x37/0x100 [ 703.202015][ T9647] ? clear_bhb_loop+0x60/0xb0 [ 703.202042][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.202062][ T9647] RIP: 0033:0x7feda276e15c [ 703.202080][ T9647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 703.202098][ T9647] RSP: 002b:00007feda09ce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.202120][ T9647] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276e15c [ 703.202135][ T9647] RDX: 000000000000000f RSI: 00007feda09ce0a0 RDI: 0000000000000003 [ 703.202148][ T9647] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 703.202161][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.202173][ T9647] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 703.202208][ T9647] [ 703.561339][ T9067] veth0_macvtap: entered promiscuous mode [ 703.587708][ T9067] veth1_macvtap: entered promiscuous mode [ 703.693348][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.731892][ T9067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.815576][ T6629] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.829532][ T6629] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.830804][ T6629] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.901454][ T6629] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.516142][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.516182][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.621326][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.621347][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.786652][ T9688] nfs: Bad value for 'source' [ 704.908012][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 705.062483][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 705.066145][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 705.066173][ T10] usb 6-1: config 0 has no interface number 0 [ 705.066223][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 705.096134][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 705.096166][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.096187][ T10] usb 6-1: Product: syz [ 705.096203][ T10] usb 6-1: Manufacturer: syz [ 705.096218][ T10] usb 6-1: SerialNumber: syz [ 705.123798][ T10] usb 6-1: config 0 descriptor?? [ 705.255032][ T10] f81534 6-1:0.12: required endpoints missing [ 706.198787][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.199321][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.205962][ T5885] usb 6-1: USB disconnect, device number 2 [ 706.584038][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.584110][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.646448][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'. [ 706.918037][ T5885] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 707.068005][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 707.070611][ T5885] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 707.070643][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.076133][ T5885] usb 3-1: config 0 descriptor?? [ 707.115339][ T5885] gspca_main: sq930x-2.14.0 probing 041e:403c [ 707.361898][ T9728] FAULT_INJECTION: forcing a failure. [ 707.361898][ T9728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.361936][ T9728] CPU: 1 UID: 0 PID: 9728 Comm: syz.5.925 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 707.361961][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 707.361976][ T9728] Call Trace: [ 707.361985][ T9728] [ 707.361994][ T9728] dump_stack_lvl+0xe8/0x150 [ 707.362030][ T9728] should_fail_ex+0x46c/0x600 [ 707.362077][ T9728] _copy_to_user+0x31/0xb0 [ 707.362104][ T9728] simple_read_from_buffer+0xe1/0x170 [ 707.362132][ T9728] proc_fail_nth_read+0x1b6/0x220 [ 707.362168][ T9728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.362205][ T9728] ? rw_verify_area+0x2ac/0x4e0 [ 707.362233][ T9728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 707.362269][ T9728] vfs_read+0x206/0xa30 [ 707.362311][ T9728] ? __pfx_vfs_read+0x10/0x10 [ 707.362345][ T9728] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 707.362369][ T9728] ? lockdep_hardirqs_on+0x7b/0x110 [ 707.362390][ T9728] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 707.362413][ T9728] ? mutex_lock_nested+0x154/0x1d0 [ 707.362443][ T9728] ? fdget_pos+0x253/0x320 [ 707.362477][ T9728] ksys_read+0x14b/0x260 [ 707.362512][ T9728] ? __pfx_ksys_read+0x10/0x10 [ 707.362556][ T9728] do_syscall_64+0xec/0xf80 [ 707.362578][ T9728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.362601][ T9728] ? trace_irq_disable+0x37/0x100 [ 707.362627][ T9728] ? clear_bhb_loop+0x60/0xb0 [ 707.362655][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.362677][ T9728] RIP: 0033:0x7f2df461e15c [ 707.362695][ T9728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 707.362714][ T9728] RSP: 002b:00007f2df287e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 707.362738][ T9728] RAX: ffffffffffffffda RBX: 00007f2df4875fa0 RCX: 00007f2df461e15c [ 707.362755][ T9728] RDX: 000000000000000f RSI: 00007f2df287e0a0 RDI: 0000000000000003 [ 707.362768][ T9728] RBP: 00007f2df287e090 R08: 0000000000000000 R09: 0000000000000000 [ 707.362783][ T9728] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.362796][ T9728] R13: 00007f2df4876038 R14: 00007f2df4875fa0 R15: 00007fff81fdcaa8 [ 707.362831][ T9728] [ 707.684973][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.926'. [ 707.685030][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.926'. [ 707.725724][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.926'. [ 708.119221][ T9743] netlink: 'syz.6.928': attribute type 4 has an invalid length. [ 708.169488][ T9743] netlink: 'syz.6.928': attribute type 4 has an invalid length. [ 708.440992][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 708.629423][ T9] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.629889][ T9] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 708.629922][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 708.629968][ T9] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 708.630049][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.768213][ T9] usb 7-1: config 0 descriptor?? [ 709.018033][ T5885] gspca_sq930x: reg_w 0105 bc00 failed -110 [ 709.018223][ T5885] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 709.328074][ T5885] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 709.520496][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.520789][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 709.520817][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 709.520840][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.520882][ T5885] usb 6-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 709.521131][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.602688][ T5885] usb 6-1: config 0 descriptor?? [ 709.672477][ T5885] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.684041][ T5885] usb 6-1: MIDIStreaming interface descriptor not found [ 709.844528][ T5887] usb 3-1: USB disconnect, device number 30 [ 709.930067][ T9763] FAULT_INJECTION: forcing a failure. [ 709.930067][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.930099][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.2.939 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 709.930120][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.930130][ T9763] Call Trace: [ 709.930137][ T9763] [ 709.930145][ T9763] dump_stack_lvl+0xe8/0x150 [ 709.930177][ T9763] should_fail_ex+0x46c/0x600 [ 709.930206][ T9763] _copy_from_user+0x2d/0xb0 [ 709.930224][ T9763] ___sys_recvmsg+0x12e/0x510 [ 709.930253][ T9763] ? __pfx____sys_recvmsg+0x10/0x10 [ 709.930282][ T9763] ? __fget_files+0x2a/0x420 [ 709.930315][ T9763] ? __fget_files+0x3a6/0x420 [ 709.930343][ T9763] do_recvmmsg+0x30d/0x770 [ 709.930378][ T9763] ? __pfx_do_recvmmsg+0x10/0x10 [ 709.930412][ T9763] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 709.930451][ T9763] __x64_sys_recvmmsg+0x190/0x240 [ 709.930478][ T9763] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 709.930513][ T9763] do_syscall_64+0xec/0xf80 [ 709.930530][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.930549][ T9763] ? trace_irq_disable+0x37/0x100 [ 709.930568][ T9763] ? clear_bhb_loop+0x60/0xb0 [ 709.930588][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.930605][ T9763] RIP: 0033:0x7f30a23af749 [ 709.930622][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.930637][ T9763] RSP: 002b:00007f30a060e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 709.930656][ T9763] RAX: ffffffffffffffda RBX: 00007f30a2605fa0 RCX: 00007f30a23af749 [ 709.930670][ T9763] RDX: 0000000000000001 RSI: 0000200000007380 RDI: 0000000000000004 [ 709.930681][ T9763] RBP: 00007f30a060e090 R08: 0000000000000000 R09: 0000000000000000 [ 709.930692][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.930702][ T9763] R13: 00007f30a2606038 R14: 00007f30a2605fa0 R15: 00007ffd160b9158 [ 709.930729][ T9763] [ 710.745285][ T5885] usb 6-1: USB disconnect, device number 3 [ 711.113047][ T9] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71 [ 711.131447][ T9] usb 7-1: USB disconnect, device number 2 [ 711.415061][ T9792] FAULT_INJECTION: forcing a failure. [ 711.415061][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 711.415098][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: syz.0.952 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 711.415123][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.415137][ T9792] Call Trace: [ 711.415146][ T9792] [ 711.415155][ T9792] dump_stack_lvl+0xe8/0x150 [ 711.415193][ T9792] should_fail_ex+0x46c/0x600 [ 711.415229][ T9792] ? __alloc_skb+0x1dc/0x3a0 [ 711.415344][ T9792] should_failslab+0xa8/0x100 [ 711.415367][ T9792] ? __alloc_skb+0x1dc/0x3a0 [ 711.415389][ T9792] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 711.415422][ T9792] ? lockdep_hardirqs_on+0x7b/0x110 [ 711.415445][ T9792] ? __alloc_skb+0x198/0x3a0 [ 711.415471][ T9792] __alloc_skb+0x1dc/0x3a0 [ 711.415499][ T9792] netlink_sendmsg+0x5c6/0xb30 [ 711.415621][ T9792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.415662][ T9792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.415700][ T9792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.415733][ T9792] __sock_sendmsg+0x21c/0x270 [ 711.415795][ T9792] sock_write_iter+0x27f/0x370 [ 711.415831][ T9792] ? __pfx_sock_write_iter+0x10/0x10 [ 711.415890][ T9792] vfs_write+0x5d5/0xb40 [ 711.415928][ T9792] ? __pfx_sock_write_iter+0x10/0x10 [ 711.415962][ T9792] ? __pfx_vfs_write+0x10/0x10 [ 711.415990][ T9792] ? lockdep_hardirqs_on+0x7b/0x110 [ 711.416023][ T9792] ? kmem_cache_free+0x18f/0x8d0 [ 711.416055][ T9792] ? do_sys_openat2+0x15a/0x200 [ 711.416096][ T9792] ksys_write+0x14b/0x260 [ 711.416131][ T9792] ? __pfx_ksys_write+0x10/0x10 [ 711.416176][ T9792] do_syscall_64+0xec/0xf80 [ 711.416197][ T9792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.416220][ T9792] ? trace_irq_disable+0x37/0x100 [ 711.416244][ T9792] ? clear_bhb_loop+0x60/0xb0 [ 711.416271][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.416293][ T9792] RIP: 0033:0x7feda276f749 [ 711.416313][ T9792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.416332][ T9792] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 711.416355][ T9792] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 711.416372][ T9792] RDX: 000000000000003c RSI: 0000200000000000 RDI: 0000000000000005 [ 711.416385][ T9792] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 711.416399][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.416411][ T9792] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 711.416448][ T9792] [ 712.348101][ T5887] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 712.488062][ T5887] usb 3-1: device descriptor read/64, error -71 [ 712.575011][ T9802] netlink: 'syz.6.953': attribute type 63 has an invalid length. [ 712.678539][ T9803] vxcan1: tx drop: invalid sa for name 0x0000000000000006 [ 712.728066][ T5887] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 712.858025][ T5887] usb 3-1: device descriptor read/64, error -71 [ 712.971878][ T5887] usb usb3-port1: attempt power cycle [ 712.987998][ T5885] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 713.140177][ T5885] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 713.140224][ T5885] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.140242][ T5885] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 713.140278][ T5885] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.142238][ T5885] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 713.142265][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 713.142280][ T5885] usb 6-1: Product: syz [ 713.142290][ T5885] usb 6-1: Manufacturer: syz [ 713.241131][ T5885] cdc_wdm 6-1:1.0: skipping garbage [ 713.241147][ T5885] cdc_wdm 6-1:1.0: skipping garbage [ 713.254040][ T5885] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 713.254105][ T5885] cdc_wdm 6-1:1.0: Unknown control protocol [ 713.328125][ T5887] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 713.348824][ T5887] usb 3-1: device descriptor read/8, error -71 [ 713.393080][ T9835] overlayfs: missing 'lowerdir' [ 713.588501][ T5887] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 713.609064][ T5887] usb 3-1: device descriptor read/8, error -71 [ 713.645143][ T10] usb 6-1: USB disconnect, device number 4 [ 713.718346][ T5887] usb usb3-port1: unable to enumerate USB device [ 714.831148][ T9863] FAULT_INJECTION: forcing a failure. [ 714.831148][ T9863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.831186][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.0.980 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 714.831210][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.831225][ T9863] Call Trace: [ 714.831233][ T9863] [ 714.831243][ T9863] dump_stack_lvl+0xe8/0x150 [ 714.831279][ T9863] should_fail_ex+0x46c/0x600 [ 714.831317][ T9863] _copy_from_user+0x2d/0xb0 [ 714.831341][ T9863] __x64_sys_clock_adjtime+0xdd/0x2c0 [ 714.831412][ T9863] ? lockdep_hardirqs_on+0x7b/0x110 [ 714.831437][ T9863] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 714.831471][ T9863] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 714.831526][ T9863] ? __pfx_ksys_write+0x10/0x10 [ 714.831572][ T9863] do_syscall_64+0xec/0xf80 [ 714.831593][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.831615][ T9863] ? trace_irq_disable+0x37/0x100 [ 714.831639][ T9863] ? clear_bhb_loop+0x60/0xb0 [ 714.831667][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.831689][ T9863] RIP: 0033:0x7feda276f749 [ 714.831708][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.831728][ T9863] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 714.831752][ T9863] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 714.831776][ T9863] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000020 [ 714.831790][ T9863] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 714.831804][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.831817][ T9863] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 714.831853][ T9863] [ 715.368023][ T5887] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 715.527981][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 715.534047][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 715.534076][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.534094][ T5887] usb 3-1: Product: syz [ 715.534106][ T5887] usb 3-1: Manufacturer: syz [ 715.534118][ T5887] usb 3-1: SerialNumber: syz [ 715.542024][ T5887] usb 3-1: config 0 descriptor?? [ 716.219776][ T5887] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 716.219798][ T5887] eb 00 00 00 00 00 00 00 [ 716.219881][ T5887] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 717.098696][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.121231][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.194891][ T9] usb 3-1: USB disconnect, device number 35 [ 719.328036][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 719.508261][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 719.508293][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.508314][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 719.508366][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.514604][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 719.514636][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 719.514658][ T9] usb 6-1: Product: syz [ 719.514692][ T9] usb 6-1: Manufacturer: syz [ 719.603936][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 719.603958][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 719.639053][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 719.639077][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 720.010189][ T5915] usb 6-1: USB disconnect, device number 5 [ 721.348019][ T5887] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 721.479723][ T5887] usb 3-1: device descriptor read/64, error -71 [ 721.728413][ T5887] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 721.888055][ T5887] usb 3-1: device descriptor read/64, error -71 [ 722.005500][ T5887] usb usb3-port1: attempt power cycle [ 722.123358][ T9936] FAULT_INJECTION: forcing a failure. [ 722.123358][ T9936] name failslab, interval 1, probability 0, space 0, times 0 [ 722.123411][ T9936] CPU: 1 UID: 0 PID: 9936 Comm: syz.5.1010 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 722.123436][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.123449][ T9936] Call Trace: [ 722.123457][ T9936] [ 722.123466][ T9936] dump_stack_lvl+0xe8/0x150 [ 722.123502][ T9936] should_fail_ex+0x46c/0x600 [ 722.123539][ T9936] should_failslab+0xa8/0x100 [ 722.123562][ T9936] __kmalloc_cache_noprof+0x84/0x6d0 [ 722.123597][ T9936] ? __lock_acquire+0x6b6/0x2cf0 [ 722.123659][ T9936] ? alloc_pipe_info+0xe9/0x4d0 [ 722.123697][ T9936] alloc_pipe_info+0xe9/0x4d0 [ 722.123733][ T9936] splice_direct_to_actor+0xa6e/0xcd0 [ 722.123765][ T9936] ? kstrtouint+0x6e/0xe0 [ 722.123848][ T9936] ? get_pid_task+0x20/0x1f0 [ 722.123898][ T9936] ? __pfx_direct_splice_actor+0x10/0x10 [ 722.123922][ T9936] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 722.123959][ T9936] do_splice_direct+0x187/0x270 [ 722.123993][ T9936] ? __pfx_do_splice_direct+0x10/0x10 [ 722.124019][ T9936] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 722.124052][ T9936] ? rw_verify_area+0x25b/0x4e0 [ 722.124088][ T9936] do_sendfile+0x4ec/0x7f0 [ 722.124111][ T9936] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 722.124142][ T9936] ? __pfx_do_sendfile+0x10/0x10 [ 722.124180][ T9936] __se_sys_sendfile64+0x13e/0x190 [ 722.124206][ T9936] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 722.124241][ T9936] do_syscall_64+0xec/0xf80 [ 722.124264][ T9936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.124286][ T9936] ? trace_irq_disable+0x37/0x100 [ 722.124308][ T9936] ? clear_bhb_loop+0x60/0xb0 [ 722.124335][ T9936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.124358][ T9936] RIP: 0033:0x7f2df461f749 [ 722.124377][ T9936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.124400][ T9936] RSP: 002b:00007f2df287e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 722.124423][ T9936] RAX: ffffffffffffffda RBX: 00007f2df4875fa0 RCX: 00007f2df461f749 [ 722.124440][ T9936] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 722.124452][ T9936] RBP: 00007f2df287e090 R08: 0000000000000000 R09: 0000000000000000 [ 722.124465][ T9936] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 722.124478][ T9936] R13: 00007f2df4876038 R14: 00007f2df4875fa0 R15: 00007fff81fdcaa8 [ 722.124512][ T9936] [ 722.397967][ T5887] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 722.418780][ T5887] usb 3-1: device descriptor read/8, error -71 [ 722.658376][ T5887] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 722.679971][ T5887] usb 3-1: device descriptor read/8, error -71 [ 722.789377][ T5887] usb usb3-port1: unable to enumerate USB device [ 722.944524][ T9977] FAULT_INJECTION: forcing a failure. [ 722.944524][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 722.944560][ T9977] CPU: 1 UID: 0 PID: 9977 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 722.944586][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.944599][ T9977] Call Trace: [ 722.944608][ T9977] [ 722.944618][ T9977] dump_stack_lvl+0xe8/0x150 [ 722.944654][ T9977] should_fail_ex+0x46c/0x600 [ 722.944690][ T9977] should_failslab+0xa8/0x100 [ 722.944714][ T9977] __kmalloc_cache_noprof+0x84/0x6d0 [ 722.944747][ T9977] ? __lock_acquire+0x6b6/0x2cf0 [ 722.944776][ T9977] ? alloc_pipe_info+0xe9/0x4d0 [ 722.944814][ T9977] alloc_pipe_info+0xe9/0x4d0 [ 722.944850][ T9977] splice_direct_to_actor+0xa6e/0xcd0 [ 722.944891][ T9977] ? kstrtouint+0x6e/0xe0 [ 722.944933][ T9977] ? get_pid_task+0x20/0x1f0 [ 722.944970][ T9977] ? __pfx_direct_splice_actor+0x10/0x10 [ 722.944993][ T9977] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 722.945028][ T9977] do_splice_direct+0x187/0x270 [ 722.945054][ T9977] ? __pfx_do_splice_direct+0x10/0x10 [ 722.945079][ T9977] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 722.945111][ T9977] ? rw_verify_area+0x25b/0x4e0 [ 722.945145][ T9977] do_sendfile+0x4ec/0x7f0 [ 722.945168][ T9977] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 722.945197][ T9977] ? __pfx_do_sendfile+0x10/0x10 [ 722.945234][ T9977] __se_sys_sendfile64+0x13e/0x190 [ 722.945259][ T9977] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 722.945293][ T9977] do_syscall_64+0xec/0xf80 [ 722.945314][ T9977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.945335][ T9977] ? trace_irq_disable+0x37/0x100 [ 722.945357][ T9977] ? clear_bhb_loop+0x60/0xb0 [ 722.945384][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.945406][ T9977] RIP: 0033:0x7f2df461f749 [ 722.945424][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.945443][ T9977] RSP: 002b:00007f2df287e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 722.945465][ T9977] RAX: ffffffffffffffda RBX: 00007f2df4875fa0 RCX: 00007f2df461f749 [ 722.945480][ T9977] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 722.945492][ T9977] RBP: 00007f2df287e090 R08: 0000000000000000 R09: 0000000000000000 [ 722.945505][ T9977] R10: 0000000000ffba83 R11: 0000000000000246 R12: 0000000000000001 [ 722.945519][ T9977] R13: 00007f2df4876038 R14: 00007f2df4875fa0 R15: 00007fff81fdcaa8 [ 722.945552][ T9977] [ 722.969214][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 723.140864][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.140949][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.141019][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.141191][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.266230][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.266262][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.266282][ T10] usb 7-1: Product: syz [ 723.266297][ T10] usb 7-1: Manufacturer: syz [ 723.348195][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 723.348217][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 723.368991][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 723.369014][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 723.751470][ T10] usb 7-1: USB disconnect, device number 3 [ 724.047991][ T5972] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 724.198908][ T5972] usb 6-1: Using ep0 maxpacket: 32 [ 724.219449][ T5972] usb 6-1: unable to get BOS descriptor or descriptor too short [ 724.220862][ T5972] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 724.220902][ T5972] usb 6-1: can't read configurations, error -71 [ 724.406053][T10025] FAULT_INJECTION: forcing a failure. [ 724.406053][T10025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.406090][T10025] CPU: 1 UID: 0 PID: 10025 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 724.406114][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.406128][T10025] Call Trace: [ 724.406136][T10025] [ 724.406146][T10025] dump_stack_lvl+0xe8/0x150 [ 724.406181][T10025] should_fail_ex+0x46c/0x600 [ 724.406217][T10025] _copy_to_user+0x31/0xb0 [ 724.406242][T10025] simple_read_from_buffer+0xe1/0x170 [ 724.406270][T10025] proc_fail_nth_read+0x1b6/0x220 [ 724.406308][T10025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.406344][T10025] ? rw_verify_area+0x2ac/0x4e0 [ 724.406375][T10025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.406410][T10025] vfs_read+0x206/0xa30 [ 724.406449][T10025] ? __pfx_vfs_read+0x10/0x10 [ 724.406482][T10025] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 724.406504][T10025] ? lockdep_hardirqs_on+0x7b/0x110 [ 724.406525][T10025] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.406546][T10025] ? mutex_lock_nested+0x154/0x1d0 [ 724.406573][T10025] ? fdget_pos+0x253/0x320 [ 724.406606][T10025] ksys_read+0x14b/0x260 [ 724.406640][T10025] ? __pfx_ksys_read+0x10/0x10 [ 724.406685][T10025] do_syscall_64+0xec/0xf80 [ 724.406705][T10025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.406726][T10025] ? trace_irq_disable+0x37/0x100 [ 724.406749][T10025] ? clear_bhb_loop+0x60/0xb0 [ 724.406777][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.406798][T10025] RIP: 0033:0x7feda276e15c [ 724.406816][T10025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 724.406835][T10025] RSP: 002b:00007feda09ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.406857][T10025] RAX: ffffffffffffffda RBX: 00007feda29c6090 RCX: 00007feda276e15c [ 724.406872][T10025] RDX: 000000000000000f RSI: 00007feda09ad0a0 RDI: 0000000000000004 [ 724.406885][T10025] RBP: 00007feda09ad090 R08: 0000000000000000 R09: 0000000000000000 [ 724.406898][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.406910][T10025] R13: 00007feda29c6128 R14: 00007feda29c6090 R15: 00007ffdce8cef58 [ 724.406945][T10025] [ 725.218029][ T9883] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 725.412711][ T9883] usb 3-1: device descriptor read/64, error -71 [ 725.477988][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 725.627976][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 725.630905][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.630939][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.630988][ T31] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 725.631013][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.682850][ T9883] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 725.698588][ T31] usb 7-1: config 0 descriptor?? [ 725.818029][ T9883] usb 3-1: device descriptor read/64, error -71 [ 725.850335][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1066'. [ 725.931416][ T9883] usb usb3-port1: attempt power cycle [ 726.058973][T10075] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 726.059001][T10075] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 726.059120][T10075] vhci_hcd vhci_hcd.0: Device attached [ 726.308227][ T9883] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 726.375905][ T9883] usb 3-1: device descriptor read/8, error -71 [ 726.418986][ T5789] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 726.484688][ T31] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 726.574785][T10077] vhci_hcd: connection reset by peer [ 726.581396][ T6651] vhci_hcd vhci_hcd.5: stop threads [ 726.581422][ T6651] vhci_hcd vhci_hcd.5: release socket [ 726.581931][ T6651] vhci_hcd vhci_hcd.5: disconnect device [ 726.629482][ T9883] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 726.648699][ T9883] usb 3-1: device descriptor read/8, error -71 [ 726.758534][ T9883] usb usb3-port1: unable to enumerate USB device [ 726.784926][ T5972] usb 7-1: USB disconnect, device number 4 [ 727.518215][T10125] FAULT_INJECTION: forcing a failure. [ 727.518215][T10125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.518246][T10125] CPU: 1 UID: 0 PID: 10125 Comm: syz.0.1092 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 727.518265][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 727.518275][T10125] Call Trace: [ 727.518282][T10125] [ 727.518290][T10125] dump_stack_lvl+0xe8/0x150 [ 727.518318][T10125] should_fail_ex+0x46c/0x600 [ 727.518346][T10125] _copy_from_user+0x2d/0xb0 [ 727.518363][T10125] __x64_sys_epoll_ctl+0x126/0x1a0 [ 727.518385][T10125] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 727.518414][T10125] do_syscall_64+0xec/0xf80 [ 727.518431][T10125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.518447][T10125] ? trace_irq_disable+0x37/0x100 [ 727.518464][T10125] ? clear_bhb_loop+0x60/0xb0 [ 727.518485][T10125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.518501][T10125] RIP: 0033:0x7feda276f749 [ 727.518516][T10125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.518531][T10125] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 727.518548][T10125] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 727.518560][T10125] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 727.518579][T10125] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 727.518589][T10125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.518599][T10125] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 727.518624][T10125] [ 727.639195][T10126] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1091'. [ 728.587997][ T5972] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 728.740349][ T5972] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 728.740378][ T5972] usb 6-1: config 0 has no interface number 0 [ 728.740430][ T5972] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 728.740458][ T5972] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 728.740484][ T5972] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 728.742876][ T5972] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 728.742906][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 728.742926][ T5972] usb 6-1: Product: syz [ 728.742942][ T5972] usb 6-1: SerialNumber: syz [ 728.763495][ T5972] usb 6-1: config 0 descriptor?? [ 728.823932][ T5972] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 728.827360][ T5972] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input7 [ 729.079320][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.099684][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.716576][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.719192][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.719638][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.720054][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.720481][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.722012][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.722469][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.722890][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.723330][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.723794][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 729.907640][T10192] FAULT_INJECTION: forcing a failure. [ 729.907640][T10192] name failslab, interval 1, probability 0, space 0, times 0 [ 729.907678][T10192] CPU: 1 UID: 0 PID: 10192 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.907703][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 729.907716][T10192] Call Trace: [ 729.907724][T10192] [ 729.907733][T10192] dump_stack_lvl+0xe8/0x150 [ 729.907771][T10192] should_fail_ex+0x46c/0x600 [ 729.907809][T10192] should_failslab+0xa8/0x100 [ 729.907842][T10192] __kvmalloc_node_noprof+0x181/0x940 [ 729.907880][T10192] ? seq_read_iter+0x203/0xe20 [ 729.907911][T10192] ? mutex_lock_nested+0x154/0x1d0 [ 729.907941][T10192] ? seq_read_iter+0xb8/0xe20 [ 729.907977][T10192] seq_read_iter+0x203/0xe20 [ 729.908012][T10192] ? _parse_integer_limit+0x1ae/0x1f0 [ 729.908047][T10192] ? __asan_memset+0x22/0x50 [ 729.908081][T10192] seq_read+0x36c/0x480 [ 729.908117][T10192] ? __pfx_seq_read+0x10/0x10 [ 729.908144][T10192] ? __debugfs_file_get+0x5d2/0x700 [ 729.908211][T10192] ? __pfx___debugfs_file_get+0x10/0x10 [ 729.908236][T10192] full_proxy_read+0x127/0x1f0 [ 729.908254][T10192] ? __pfx_full_proxy_read+0x10/0x10 [ 729.908272][T10192] vfs_read+0x206/0xa30 [ 729.908303][T10192] ? __pfx_vfs_read+0x10/0x10 [ 729.908328][T10192] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 729.908345][T10192] ? lockdep_hardirqs_on+0x7b/0x110 [ 729.908361][T10192] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 729.908379][T10192] ? mutex_lock_nested+0x154/0x1d0 [ 729.908400][T10192] ? fdget_pos+0x253/0x320 [ 729.908426][T10192] ksys_read+0x14b/0x260 [ 729.908451][T10192] ? __pfx_ksys_read+0x10/0x10 [ 729.908484][T10192] do_syscall_64+0xec/0xf80 [ 729.908501][T10192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.908518][T10192] ? trace_irq_disable+0x37/0x100 [ 729.908535][T10192] ? clear_bhb_loop+0x60/0xb0 [ 729.908556][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.908572][T10192] RIP: 0033:0x7feda276f749 [ 729.908589][T10192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.908603][T10192] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.908630][T10192] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 729.908642][T10192] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000005 [ 729.908653][T10192] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 729.908664][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.908673][T10192] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 729.908700][T10192] [ 730.349641][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 730.390528][ T5972] usb 6-1: USB disconnect, device number 8 [ 730.498719][ T5972] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 730.759457][T10212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 731.458291][ T5972] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 731.528378][ T5789] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 731.607994][ T6617] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 731.630515][ T5972] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 731.630545][ T5972] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.630573][ T5972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 731.630631][ T5972] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.635814][ T5972] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 731.635843][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 731.635864][ T5972] usb 6-1: Product: syz [ 731.635879][ T5972] usb 6-1: Manufacturer: syz [ 731.739767][ T5972] cdc_wdm 6-1:1.0: skipping garbage [ 731.739790][ T5972] cdc_wdm 6-1:1.0: skipping garbage [ 731.764127][ T5972] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 731.764149][ T5972] cdc_wdm 6-1:1.0: Unknown control protocol [ 731.782282][ T6617] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 731.782329][ T6617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 187, changing to 7 [ 731.782359][ T6617] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9872, setting to 1024 [ 731.782406][ T6617] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 731.782591][ T6617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.853740][ T6617] usb 7-1: config 0 descriptor?? [ 732.125658][T10214] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1124'. [ 732.145420][ T6617] ath6kl: Failed to submit usb control message: -71 [ 732.145471][ T6617] ath6kl: unable to send the bmi data to the device: -71 [ 732.145487][ T6617] ath6kl: Unable to send get target info: -71 [ 732.172559][ T6617] ath6kl: Failed to init ath6kl core: -71 [ 732.174027][ T6617] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 732.199103][ T6617] usb 7-1: USB disconnect, device number 5 [ 732.257781][ T5972] usb 6-1: USB disconnect, device number 9 [ 732.652600][T10266] FAULT_INJECTION: forcing a failure. [ 732.652600][T10266] name failslab, interval 1, probability 0, space 0, times 0 [ 732.652669][T10266] CPU: 0 UID: 0 PID: 10266 Comm: syz.0.1138 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 732.652695][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 732.652721][T10266] Call Trace: [ 732.652730][T10266] [ 732.652739][T10266] dump_stack_lvl+0xe8/0x150 [ 732.652776][T10266] should_fail_ex+0x46c/0x600 [ 732.652812][T10266] ? alloc_io_context+0x27/0x2a0 [ 732.652886][T10266] should_failslab+0xa8/0x100 [ 732.652910][T10266] ? alloc_io_context+0x27/0x2a0 [ 732.652934][T10266] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 732.652974][T10266] ? rt_spin_unlock+0x150/0x200 [ 732.653031][T10266] alloc_io_context+0x27/0x2a0 [ 732.653062][T10266] set_task_ioprio+0x462/0x5e0 [ 732.653090][T10266] ? set_task_ioprio+0x60/0x5e0 [ 732.653122][T10266] __se_sys_ioprio_set+0x519/0xa30 [ 732.653181][T10266] ? __se_sys_ioprio_set+0xd0/0xa30 [ 732.653219][T10266] do_syscall_64+0xec/0xf80 [ 732.653237][T10266] ? rcu_is_watching+0x15/0xb0 [ 732.653252][T10266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.653271][T10266] ? clear_bhb_loop+0x60/0xb0 [ 732.653293][T10266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.653310][T10266] RIP: 0033:0x7feda276f749 [ 732.653326][T10266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.653341][T10266] RSP: 002b:00007feda098c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 732.653360][T10266] RAX: ffffffffffffffda RBX: 00007feda29c6180 RCX: 00007feda276f749 [ 732.653373][T10266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 732.653384][T10266] RBP: 00007feda098c090 R08: 0000000000000000 R09: 0000000000000000 [ 732.653395][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.653405][T10266] R13: 00007feda29c6218 R14: 00007feda29c6180 R15: 00007ffdce8cef58 [ 732.653434][T10266] [ 734.033903][T10283] FAULT_INJECTION: forcing a failure. [ 734.033903][T10283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.033940][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.2.1145 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 734.033965][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 734.033978][T10283] Call Trace: [ 734.033986][T10283] [ 734.033995][T10283] dump_stack_lvl+0xe8/0x150 [ 734.034050][T10283] should_fail_ex+0x46c/0x600 [ 734.034087][T10283] _copy_to_user+0x31/0xb0 [ 734.034111][T10283] simple_read_from_buffer+0xe1/0x170 [ 734.034139][T10283] proc_fail_nth_read+0x1b6/0x220 [ 734.034177][T10283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.034215][T10283] ? rw_verify_area+0x2ac/0x4e0 [ 734.034244][T10283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.034280][T10283] vfs_read+0x206/0xa30 [ 734.034320][T10283] ? __pfx_vfs_read+0x10/0x10 [ 734.034347][T10283] ? lockdep_hardirqs_on+0x7b/0x110 [ 734.034379][T10283] ? do_sys_openat2+0x15a/0x200 [ 734.034403][T10283] ? kmem_cache_free+0x18f/0x8d0 [ 734.034434][T10283] ? do_sys_openat2+0x15a/0x200 [ 734.034475][T10283] ksys_read+0x14b/0x260 [ 734.034510][T10283] ? __pfx_ksys_read+0x10/0x10 [ 734.034554][T10283] do_syscall_64+0xec/0xf80 [ 734.034576][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.034599][T10283] ? trace_irq_disable+0x37/0x100 [ 734.034623][T10283] ? clear_bhb_loop+0x60/0xb0 [ 734.034652][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.034674][T10283] RIP: 0033:0x7f30a23ae15c [ 734.034694][T10283] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 734.034713][T10283] RSP: 002b:00007f30a060e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.034736][T10283] RAX: ffffffffffffffda RBX: 00007f30a2605fa0 RCX: 00007f30a23ae15c [ 734.034753][T10283] RDX: 000000000000000f RSI: 00007f30a060e0a0 RDI: 0000000000000004 [ 734.034767][T10283] RBP: 00007f30a060e090 R08: 0000000000000000 R09: 0000000000000000 [ 734.034780][T10283] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 734.034794][T10283] R13: 00007f30a2606038 R14: 00007f30a2605fa0 R15: 00007ffd160b9158 [ 734.034828][T10283] [ 735.038019][ T5789] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 735.198060][ T5789] usb 6-1: Using ep0 maxpacket: 32 [ 735.230555][ T5789] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 735.230587][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.230608][ T5789] usb 6-1: Product: syz [ 735.230624][ T5789] usb 6-1: Manufacturer: syz [ 735.230639][ T5789] usb 6-1: SerialNumber: syz [ 735.282009][ T5789] usb 6-1: config 0 descriptor?? [ 735.585908][ T5789] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 735.585930][ T5789] eb 00 00 00 00 00 00 00 [ 735.586018][ T5789] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 735.830637][T10315] netlink: 'syz.1.1157': attribute type 3 has an invalid length. [ 736.525907][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.541028][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.608217][ T9705] usb 6-1: USB disconnect, device number 10 [ 737.621734][ T5789] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 737.860970][ T5789] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 737.861002][ T5789] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.861024][ T5789] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 737.861078][ T5789] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.864502][ T5789] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 737.864534][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 737.864556][ T5789] usb 7-1: Product: syz [ 737.864572][ T5789] usb 7-1: Manufacturer: syz [ 737.951549][ T5789] cdc_wdm 7-1:1.0: skipping garbage [ 737.951570][ T5789] cdc_wdm 7-1:1.0: skipping garbage [ 737.976099][ T5789] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 737.976123][ T5789] cdc_wdm 7-1:1.0: Unknown control protocol [ 738.340408][T10335] fuse: Bad value for 'fd' [ 738.340848][T10334] fuse: Bad value for 'fd' [ 738.472889][ T5892] usb 7-1: USB disconnect, device number 6 [ 738.553605][T10342] FAULT_INJECTION: forcing a failure. [ 738.553605][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 738.553669][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.2.1161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 738.553695][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.553710][T10342] Call Trace: [ 738.553719][T10342] [ 738.553729][T10342] dump_stack_lvl+0xe8/0x150 [ 738.553776][T10342] should_fail_ex+0x46c/0x600 [ 738.553813][T10342] should_failslab+0xa8/0x100 [ 738.553837][T10342] __kmalloc_noprof+0xe0/0x7e0 [ 738.553871][T10342] ? kfree+0x4d/0x900 [ 738.553897][T10342] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 738.554006][T10342] tomoyo_realpath_from_path+0xe3/0x5d0 [ 738.554031][T10342] ? tomoyo_domain+0xd9/0x130 [ 738.554061][T10342] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 738.554132][T10342] tomoyo_path_number_perm+0x1e8/0x5a0 [ 738.554167][T10342] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 738.554196][T10342] ? __lock_acquire+0x6b6/0x2cf0 [ 738.554230][T10342] ? do_raw_spin_lock+0x121/0x290 [ 738.554290][T10342] ? __fget_files+0x2a/0x420 [ 738.554316][T10342] ? __fget_files+0x2a/0x420 [ 738.554337][T10342] ? __fget_files+0x3a6/0x420 [ 738.554359][T10342] ? __fget_files+0x2a/0x420 [ 738.554386][T10342] security_file_ioctl+0xcb/0x2d0 [ 738.554460][T10342] __se_sys_ioctl+0x47/0x170 [ 738.554493][T10342] do_syscall_64+0xec/0xf80 [ 738.554515][T10342] ? rcu_is_watching+0x15/0xb0 [ 738.554533][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.554556][T10342] ? clear_bhb_loop+0x60/0xb0 [ 738.554583][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.554604][T10342] RIP: 0033:0x7f30a23af749 [ 738.554624][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.554643][T10342] RSP: 002b:00007f30a05cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.554665][T10342] RAX: ffffffffffffffda RBX: 00007f30a2606180 RCX: 00007f30a23af749 [ 738.554681][T10342] RDX: 0000000000000000 RSI: 000000000000890b RDI: 0000000000000006 [ 738.554693][T10342] RBP: 00007f30a05cc090 R08: 0000000000000000 R09: 0000000000000000 [ 738.554707][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.554719][T10342] R13: 00007f30a2606218 R14: 00007f30a2606180 R15: 00007ffd160b9158 [ 738.554754][T10342] [ 738.554827][T10342] ERROR: Out of memory at tomoyo_realpath_from_path. [ 739.169646][T10343] netlink: 'syz.0.1166': attribute type 2 has an invalid length. [ 740.153505][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1174'. [ 740.569719][T10363] hsr0: entered promiscuous mode [ 740.620255][T10366] hsr_slave_0: left promiscuous mode [ 740.678810][T10366] hsr_slave_1: left promiscuous mode [ 743.199747][T10430] FAULT_INJECTION: forcing a failure. [ 743.199747][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.199779][T10430] CPU: 0 UID: 0 PID: 10430 Comm: syz.2.1192 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 743.199799][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 743.199809][T10430] Call Trace: [ 743.199815][T10430] [ 743.199823][T10430] dump_stack_lvl+0xe8/0x150 [ 743.199854][T10430] should_fail_ex+0x46c/0x600 [ 743.199883][T10430] _copy_from_user+0x2d/0xb0 [ 743.199902][T10430] do_sys_poll+0x23d/0xed0 [ 743.199926][T10430] ? __lock_acquire+0x6b6/0x2cf0 [ 743.199952][T10430] ? __pfx_do_sys_poll+0x10/0x10 [ 743.199970][T10430] ? is_bpf_text_address+0x292/0x2b0 [ 743.199992][T10430] ? is_bpf_text_address+0x26/0x2b0 [ 743.200013][T10430] ? do_sys_openat2+0x15a/0x200 [ 743.200107][T10430] ? set_user_sigmask+0xc1/0x250 [ 743.200127][T10430] ? __pfx_set_user_sigmask+0x10/0x10 [ 743.200154][T10430] __se_sys_ppoll+0x1ff/0x260 [ 743.200184][T10430] ? __pfx___se_sys_ppoll+0x10/0x10 [ 743.200212][T10430] ? __pfx_ksys_write+0x10/0x10 [ 743.200240][T10430] ? __x64_sys_ppoll+0x20/0xc0 [ 743.200291][T10430] do_syscall_64+0xec/0xf80 [ 743.200309][T10430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.200326][T10430] ? trace_irq_disable+0x37/0x100 [ 743.200344][T10430] ? clear_bhb_loop+0x60/0xb0 [ 743.200365][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.200382][T10430] RIP: 0033:0x7f30a23af749 [ 743.200397][T10430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.200413][T10430] RSP: 002b:00007f30a060e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 743.200432][T10430] RAX: ffffffffffffffda RBX: 00007f30a2605fa0 RCX: 00007f30a23af749 [ 743.200445][T10430] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 743.200457][T10430] RBP: 00007f30a060e090 R08: 0000000000000000 R09: 0000000000000000 [ 743.200468][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.200480][T10430] R13: 00007f30a2606038 R14: 00007f30a2605fa0 R15: 00007ffd160b9158 [ 743.200507][T10430] [ 745.145605][T10441] FAULT_INJECTION: forcing a failure. [ 745.145605][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.145641][T10441] CPU: 0 UID: 0 PID: 10441 Comm: syz.6.1197 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 745.145664][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 745.145677][T10441] Call Trace: [ 745.145685][T10441] [ 745.145694][T10441] dump_stack_lvl+0xe8/0x150 [ 745.145730][T10441] should_fail_ex+0x46c/0x600 [ 745.145766][T10441] _copy_from_user+0x2d/0xb0 [ 745.145789][T10441] ucma_write+0x161/0x2f0 [ 745.145911][T10441] ? __pfx_ucma_write+0x10/0x10 [ 745.145940][T10441] ? rw_verify_area+0x25b/0x4e0 [ 745.145975][T10441] vfs_writev+0x4bf/0x970 [ 745.146000][T10441] ? __pfx_ucma_write+0x10/0x10 [ 745.146029][T10441] ? __pfx_vfs_writev+0x10/0x10 [ 745.146065][T10441] ? __fget_files+0x2a/0x420 [ 745.146093][T10441] ? __fget_files+0x3a6/0x420 [ 745.146115][T10441] ? __fget_files+0x2a/0x420 [ 745.146145][T10441] do_writev+0x153/0x2d0 [ 745.146168][T10441] ? __pfx_do_writev+0x10/0x10 [ 745.146201][T10441] do_syscall_64+0xec/0xf80 [ 745.146222][T10441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.146243][T10441] ? trace_irq_disable+0x37/0x100 [ 745.146266][T10441] ? clear_bhb_loop+0x60/0xb0 [ 745.146292][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.146314][T10441] RIP: 0033:0x7f04922df749 [ 745.146332][T10441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.146352][T10441] RSP: 002b:00007f049053e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 745.146375][T10441] RAX: ffffffffffffffda RBX: 00007f0492535fa0 RCX: 00007f04922df749 [ 745.146390][T10441] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 745.146404][T10441] RBP: 00007f049053e090 R08: 0000000000000000 R09: 0000000000000000 [ 745.146417][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.146429][T10441] R13: 00007f0492536038 R14: 00007f0492535fa0 R15: 00007fff0f3c15a8 [ 745.146463][T10441] [ 746.437697][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1204'. [ 746.974740][T10478] FAULT_INJECTION: forcing a failure. [ 746.974740][T10478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.974777][T10478] CPU: 1 UID: 0 PID: 10478 Comm: syz.5.1212 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 746.974802][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 746.974815][T10478] Call Trace: [ 746.974823][T10478] [ 746.974832][T10478] dump_stack_lvl+0xe8/0x150 [ 746.974868][T10478] should_fail_ex+0x46c/0x600 [ 746.974903][T10478] _copy_from_user+0x2d/0xb0 [ 746.974926][T10478] ___sys_recvmsg+0x12e/0x510 [ 746.974961][T10478] ? __pfx____sys_recvmsg+0x10/0x10 [ 746.974995][T10478] ? __fget_files+0x2a/0x420 [ 746.975037][T10478] ? __fget_files+0x3a6/0x420 [ 746.975071][T10478] do_recvmmsg+0x30d/0x770 [ 746.975105][T10478] ? __pfx_do_recvmmsg+0x10/0x10 [ 746.975153][T10478] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 746.975199][T10478] __x64_sys_recvmmsg+0x190/0x240 [ 746.975232][T10478] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 746.975274][T10478] do_syscall_64+0xec/0xf80 [ 746.975296][T10478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.975317][T10478] ? trace_irq_disable+0x37/0x100 [ 746.975340][T10478] ? clear_bhb_loop+0x60/0xb0 [ 746.975365][T10478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.975387][T10478] RIP: 0033:0x7f2df461f749 [ 746.975405][T10478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.975424][T10478] RSP: 002b:00007f2df287e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 746.975446][T10478] RAX: ffffffffffffffda RBX: 00007f2df4875fa0 RCX: 00007f2df461f749 [ 746.975462][T10478] RDX: 000000000000049f RSI: 0000200000006100 RDI: 0000000000000006 [ 746.975474][T10478] RBP: 00007f2df287e090 R08: 0000000000000000 R09: 0000000000000000 [ 746.975488][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.975500][T10478] R13: 00007f2df4876038 R14: 00007f2df4875fa0 R15: 00007fff81fdcaa8 [ 746.975534][T10478] [ 747.571954][T10489] FAULT_INJECTION: forcing a failure. [ 747.571954][T10489] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 747.572127][T10489] CPU: 0 UID: 0 PID: 10489 Comm: syz.2.1216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 747.572153][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.572165][T10489] Call Trace: [ 747.572173][T10489] [ 747.572182][T10489] dump_stack_lvl+0xe8/0x150 [ 747.572218][T10489] should_fail_ex+0x46c/0x600 [ 747.572253][T10489] prepare_alloc_pages+0x22b/0x6c0 [ 747.572284][T10489] __alloc_frozen_pages_noprof+0x123/0x370 [ 747.572311][T10489] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 747.572344][T10489] ? policy_nodemask+0x27c/0x720 [ 747.572394][T10489] alloc_pages_mpol+0xd1/0x380 [ 747.572427][T10489] alloc_migration_target_by_mpol+0x2e7/0x600 [ 747.572465][T10489] migrate_pages_batch+0x5a8/0x2ec0 [ 747.572507][T10489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 747.572541][T10489] ? __pfx_migrate_pages_batch+0x10/0x10 [ 747.572594][T10489] migrate_pages+0x1b91/0x28c0 [ 747.572633][T10489] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 747.572663][T10489] ? __lock_acquire+0x6b6/0x2cf0 [ 747.572696][T10489] ? __pfx_migrate_pages+0x10/0x10 [ 747.572716][T10489] ? do_raw_spin_lock+0x121/0x290 [ 747.572754][T10489] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 747.572776][T10489] ? lockdep_hardirqs_on+0x7b/0x110 [ 747.572798][T10489] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 747.572835][T10489] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 747.572857][T10489] ? lockdep_hardirqs_on+0x7b/0x110 [ 747.572882][T10489] __se_sys_mbind+0xa47/0xc40 [ 747.572915][T10489] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 747.572945][T10489] ? __pfx___se_sys_mbind+0x10/0x10 [ 747.572987][T10489] ? fput+0xa0/0xd0 [ 747.573011][T10489] ? ksys_write+0x230/0x260 [ 747.573046][T10489] ? __pfx_ksys_write+0x10/0x10 [ 747.573083][T10489] ? __x64_sys_mbind+0x21/0xf0 [ 747.573118][T10489] do_syscall_64+0xec/0xf80 [ 747.573141][T10489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.573163][T10489] ? trace_irq_disable+0x37/0x100 [ 747.573186][T10489] ? clear_bhb_loop+0x60/0xb0 [ 747.573213][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.573234][T10489] RIP: 0033:0x7f30a23af749 [ 747.573254][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.573273][T10489] RSP: 002b:00007f30a060e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 747.573296][T10489] RAX: ffffffffffffffda RBX: 00007f30a2605fa0 RCX: 00007f30a23af749 [ 747.573312][T10489] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 747.573326][T10489] RBP: 00007f30a060e090 R08: 0000000000000000 R09: 0000000000000002 [ 747.573339][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.573352][T10489] R13: 00007f30a2606038 R14: 00007f30a2605fa0 R15: 00007ffd160b9158 [ 747.573393][T10489] [ 748.114177][T10502] FAULT_INJECTION: forcing a failure. [ 748.114177][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.114214][T10502] CPU: 0 UID: 0 PID: 10502 Comm: syz.0.1221 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 748.114238][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.114252][T10502] Call Trace: [ 748.114260][T10502] [ 748.114269][T10502] dump_stack_lvl+0xe8/0x150 [ 748.114314][T10502] should_fail_ex+0x46c/0x600 [ 748.114350][T10502] _copy_from_user+0x2d/0xb0 [ 748.114390][T10502] ___sys_sendmsg+0x158/0x2a0 [ 748.114422][T10502] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.114492][T10502] ? __fget_files+0x2a/0x420 [ 748.114515][T10502] ? __fget_files+0x3a6/0x420 [ 748.114551][T10502] __x64_sys_sendmsg+0x1a1/0x260 [ 748.114583][T10502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 748.114622][T10502] ? __pfx_ksys_write+0x10/0x10 [ 748.114667][T10502] do_syscall_64+0xec/0xf80 [ 748.114690][T10502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.114712][T10502] ? trace_irq_disable+0x37/0x100 [ 748.114736][T10502] ? clear_bhb_loop+0x60/0xb0 [ 748.114763][T10502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.114784][T10502] RIP: 0033:0x7feda276f749 [ 748.114804][T10502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.114823][T10502] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.114846][T10502] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 748.114862][T10502] RDX: 0000000020000004 RSI: 0000200000000440 RDI: 0000000000000003 [ 748.114876][T10502] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 748.114889][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.114902][T10502] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 748.114938][T10502] [ 748.328011][ T5972] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 748.334825][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 748.503945][ T5972] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 748.503979][ T5972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.529885][ T5972] usb 6-1: config 0 descriptor?? [ 748.534437][ T5972] cp210x 6-1:0.0: cp210x converter detected [ 748.808037][ T6545] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 749.016074][ T5972] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 749.076294][T10522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.076782][T10522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.946476][ T5972] usb 6-1: cp210x converter now attached to ttyUSB0 [ 749.956436][ T6545] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.956481][ T6545] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 749.956502][ T6545] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.998808][ T5887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 750.298095][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 750.666454][ T5887] usb 1-1: device descriptor read/all, error -71 [ 750.710580][ T6545] usb 7-1: config 0 descriptor?? [ 751.872759][ T5915] usb 6-1: USB disconnect, device number 11 [ 751.940858][ T6545] usbhid 7-1:0.0: can't add hid device: -71 [ 751.940986][ T6545] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 751.993759][ T5915] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 752.009548][ T6545] usb 7-1: USB disconnect, device number 7 [ 752.134969][T10543] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 752.135031][T10543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 752.188049][T10544] overlayfs: overlapping lowerdir path [ 753.218800][ T5915] cp210x 6-1:0.0: device disconnected [ 755.810473][T10579] FAULT_INJECTION: forcing a failure. [ 755.810473][T10579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.810538][T10579] CPU: 0 UID: 0 PID: 10579 Comm: syz.5.1242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 755.810564][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.810578][T10579] Call Trace: [ 755.810587][T10579] [ 755.810597][T10579] dump_stack_lvl+0xe8/0x150 [ 755.810634][T10579] should_fail_ex+0x46c/0x600 [ 755.810672][T10579] _copy_from_user+0x2d/0xb0 [ 755.810696][T10579] __sys_bind+0x19f/0x3e0 [ 755.810722][T10579] ? __pfx___sys_bind+0x10/0x10 [ 755.810750][T10579] ? irqentry_exit+0x5e8/0x670 [ 755.810798][T10579] __x64_sys_bind+0x7a/0x90 [ 755.810823][T10579] do_syscall_64+0xec/0xf80 [ 755.810843][T10579] ? rcu_is_watching+0x15/0xb0 [ 755.810863][T10579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.810886][T10579] ? clear_bhb_loop+0x60/0xb0 [ 755.810914][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.810936][T10579] RIP: 0033:0x7f2df461f749 [ 755.810956][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.810975][T10579] RSP: 002b:00007f2df283c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 755.810999][T10579] RAX: ffffffffffffffda RBX: 00007f2df4876180 RCX: 00007f2df461f749 [ 755.811015][T10579] RDX: 000000000000000c RSI: 0000200000000180 RDI: 0000000000000005 [ 755.811029][T10579] RBP: 00007f2df283c090 R08: 0000000000000000 R09: 0000000000000000 [ 755.811043][T10579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.811056][T10579] R13: 00007f2df4876218 R14: 00007f2df4876180 R15: 00007fff81fdcaa8 [ 755.811092][T10579] [ 756.458143][ T9883] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 756.588289][ T9883] usb 7-1: device descriptor read/64, error -71 [ 756.710913][ T5915] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 756.827953][ T9883] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 756.858127][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 756.861449][ T5915] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 756.861503][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.864654][ T5915] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 756.864683][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.864704][ T5915] usb 3-1: Product: syz [ 756.864720][ T5915] usb 3-1: Manufacturer: syz [ 756.864735][ T5915] usb 3-1: SerialNumber: syz [ 756.928302][ T5915] usb 3-1: config 0 descriptor?? [ 756.930616][T10586] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 756.958263][ T9883] usb 7-1: device descriptor read/64, error -71 [ 757.079011][ T9883] usb usb7-port1: attempt power cycle [ 757.275394][T10578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.275939][T10578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.304514][T10578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.330039][T10578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.449806][ T9883] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 757.470318][ T9883] usb 7-1: device descriptor read/8, error -71 [ 757.708038][ T9883] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 757.728646][ T9883] usb 7-1: device descriptor read/8, error -71 [ 757.839991][ T9883] usb usb7-port1: unable to enumerate USB device [ 758.097174][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'. [ 758.278886][ T5915] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 758.292772][ T5915] usb 3-1: USB disconnect, device number 44 [ 760.279697][T10674] FAULT_INJECTION: forcing a failure. [ 760.279697][T10674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.279735][T10674] CPU: 0 UID: 0 PID: 10674 Comm: syz.0.1278 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 760.279760][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.279774][T10674] Call Trace: [ 760.279782][T10674] [ 760.279791][T10674] dump_stack_lvl+0xe8/0x150 [ 760.279829][T10674] should_fail_ex+0x46c/0x600 [ 760.279868][T10674] _copy_from_user+0x2d/0xb0 [ 760.279891][T10674] __sys_bpf+0x1e3/0x860 [ 760.279923][T10674] ? __pfx___sys_bpf+0x10/0x10 [ 760.279946][T10674] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 760.279997][T10674] ? ksys_write+0x230/0x260 [ 760.280033][T10674] ? __pfx_ksys_write+0x10/0x10 [ 760.280074][T10674] __x64_sys_bpf+0x7c/0x90 [ 760.280099][T10674] do_syscall_64+0xec/0xf80 [ 760.280120][T10674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.280143][T10674] ? trace_irq_disable+0x37/0x100 [ 760.280171][T10674] ? clear_bhb_loop+0x60/0xb0 [ 760.280200][T10674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.280222][T10674] RIP: 0033:0x7feda276f749 [ 760.280242][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.280262][T10674] RSP: 002b:00007feda098c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 760.280286][T10674] RAX: ffffffffffffffda RBX: 00007feda29c6180 RCX: 00007feda276f749 [ 760.280302][T10674] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000015 [ 760.280315][T10674] RBP: 00007feda098c090 R08: 0000000000000000 R09: 0000000000000000 [ 760.280329][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.280343][T10674] R13: 00007feda29c6218 R14: 00007feda29c6180 R15: 00007ffdce8cef58 [ 760.280379][T10674] [ 761.382894][ T38] audit: type=1326 audit(1767651862.521:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.382954][ T38] audit: type=1326 audit(1767651862.521:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383003][ T38] audit: type=1326 audit(1767651862.521:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383050][ T38] audit: type=1326 audit(1767651862.521:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383097][ T38] audit: type=1326 audit(1767651862.521:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383150][ T38] audit: type=1326 audit(1767651862.521:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383215][ T38] audit: type=1326 audit(1767651862.521:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383263][ T38] audit: type=1326 audit(1767651862.521:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383311][ T38] audit: type=1326 audit(1767651862.521:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 761.383367][ T38] audit: type=1326 audit(1767651862.521:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10681 comm="syz.1.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f44cef749 code=0x7ffc0000 [ 762.665087][T10695] warning: `syz.1.1287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 762.911744][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1288'. [ 762.938078][ T5957] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 763.092255][ T5957] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 763.092287][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.124591][ T5957] usb 3-1: config 0 descriptor?? [ 763.152111][ T5957] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 763.565653][T10704] FAULT_INJECTION: forcing a failure. [ 763.565653][T10704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.565689][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.6.1291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 763.565714][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.565727][T10704] Call Trace: [ 763.565735][T10704] [ 763.565744][T10704] dump_stack_lvl+0xe8/0x150 [ 763.565781][T10704] should_fail_ex+0x46c/0x600 [ 763.565823][T10704] _copy_from_user+0x2d/0xb0 [ 763.565845][T10704] do_tcp_setsockopt+0x47d/0x1f40 [ 763.565974][T10704] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 763.566016][T10704] ? __fget_files+0x2a/0x420 [ 763.566042][T10704] ? sock_common_setsockopt+0x36/0xc0 [ 763.566062][T10704] ? tcp_setsockopt+0x3d/0xe0 [ 763.566091][T10704] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 763.566114][T10704] do_sock_setsockopt+0x17c/0x1b0 [ 763.566146][T10704] __x64_sys_setsockopt+0x145/0x1b0 [ 763.566185][T10704] do_syscall_64+0xec/0xf80 [ 763.566206][T10704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.566227][T10704] ? trace_irq_disable+0x37/0x100 [ 763.566250][T10704] ? clear_bhb_loop+0x60/0xb0 [ 763.566277][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.566298][T10704] RIP: 0033:0x7f04922df749 [ 763.566317][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.566336][T10704] RSP: 002b:00007f049053e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 763.566358][T10704] RAX: ffffffffffffffda RBX: 00007f0492535fa0 RCX: 00007f04922df749 [ 763.566374][T10704] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 763.566386][T10704] RBP: 00007f049053e090 R08: 0000000000000004 R09: 0000000000000000 [ 763.566399][T10704] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 763.566412][T10704] R13: 00007f0492536038 R14: 00007f0492535fa0 R15: 00007fff0f3c15a8 [ 763.566446][T10704] [ 763.948730][T10712] FAULT_INJECTION: forcing a failure. [ 763.948730][T10712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.948765][T10712] CPU: 1 UID: 0 PID: 10712 Comm: syz.0.1293 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 763.948789][T10712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.948802][T10712] Call Trace: [ 763.948810][T10712] [ 763.948819][T10712] dump_stack_lvl+0xe8/0x150 [ 763.948854][T10712] should_fail_ex+0x46c/0x600 [ 763.948900][T10712] _copy_from_user+0x2d/0xb0 [ 763.948924][T10712] do_ipv6_setsockopt+0x23e/0x2eb0 [ 763.949066][T10712] ? get_pid_task+0x20/0x1f0 [ 763.949106][T10712] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 763.949143][T10712] ? get_pid_task+0x20/0x1f0 [ 763.949170][T10712] ? get_pid_task+0x20/0x1f0 [ 763.949210][T10712] ? __lock_acquire+0x6b6/0x2cf0 [ 763.949246][T10712] ? do_raw_spin_lock+0x121/0x290 [ 763.949284][T10712] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 763.949309][T10712] ? __fget_files+0x2a/0x420 [ 763.949344][T10712] ? __fget_files+0x2a/0x420 [ 763.949371][T10712] ipv6_setsockopt+0x59/0x170 [ 763.949391][T10712] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 763.949416][T10712] do_sock_setsockopt+0x17c/0x1b0 [ 763.949447][T10712] __x64_sys_setsockopt+0x145/0x1b0 [ 763.949497][T10712] do_syscall_64+0xec/0xf80 [ 763.949519][T10712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.949541][T10712] ? trace_irq_disable+0x37/0x100 [ 763.949565][T10712] ? clear_bhb_loop+0x60/0xb0 [ 763.949594][T10712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.949615][T10712] RIP: 0033:0x7feda276f749 [ 763.949636][T10712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.949656][T10712] RSP: 002b:00007feda09ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 763.949679][T10712] RAX: ffffffffffffffda RBX: 00007feda29c6090 RCX: 00007feda276f749 [ 763.949695][T10712] RDX: 0000000000000032 RSI: 0000000000000029 RDI: 0000000000000003 [ 763.949708][T10712] RBP: 00007feda09ad090 R08: 0000000000000014 R09: 0000000000000000 [ 763.949722][T10712] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 763.949736][T10712] R13: 00007feda29c6128 R14: 00007feda29c6090 R15: 00007ffdce8cef58 [ 763.949771][T10712] [ 764.230753][ T5957] usb 3-1: USB disconnect, device number 45 [ 765.843160][T10752] 9p: Bad value for 'rfdno' [ 766.129949][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1317'. [ 766.624130][T10788] FAULT_INJECTION: forcing a failure. [ 766.624130][T10788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.624167][T10788] CPU: 0 UID: 0 PID: 10788 Comm: syz.5.1313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 766.624192][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.624206][T10788] Call Trace: [ 766.624214][T10788] [ 766.624224][T10788] dump_stack_lvl+0xe8/0x150 [ 766.624261][T10788] should_fail_ex+0x46c/0x600 [ 766.624298][T10788] _copy_from_user+0x2d/0xb0 [ 766.624321][T10788] __sys_connect+0x124/0x450 [ 766.624350][T10788] ? __pfx___sys_connect+0x10/0x10 [ 766.624388][T10788] ? __pfx_ksys_write+0x10/0x10 [ 766.624430][T10788] __x64_sys_connect+0x7a/0x90 [ 766.624456][T10788] do_syscall_64+0xec/0xf80 [ 766.624478][T10788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.624499][T10788] ? trace_irq_disable+0x37/0x100 [ 766.624524][T10788] ? clear_bhb_loop+0x60/0xb0 [ 766.624552][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.624575][T10788] RIP: 0033:0x7f2df461f749 [ 766.624595][T10788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.624614][T10788] RSP: 002b:00007f2df285d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 766.624637][T10788] RAX: ffffffffffffffda RBX: 00007f2df4876090 RCX: 00007f2df461f749 [ 766.624653][T10788] RDX: 000000000000001c RSI: 0000200000002a00 RDI: 0000000000000003 [ 766.624667][T10788] RBP: 00007f2df285d090 R08: 0000000000000000 R09: 0000000000000000 [ 766.624680][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.624693][T10788] R13: 00007f2df4876128 R14: 00007f2df4876090 R15: 00007fff81fdcaa8 [ 766.624728][T10788] [ 767.146118][T10793] 9p: Bad value for 'rfdno' [ 767.446767][T10811] FAULT_INJECTION: forcing a failure. [ 767.446767][T10811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.446813][T10811] CPU: 1 UID: 0 PID: 10811 Comm: syz.0.1331 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 767.446836][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 767.446849][T10811] Call Trace: [ 767.446857][T10811] [ 767.446865][T10811] dump_stack_lvl+0xe8/0x150 [ 767.446906][T10811] should_fail_ex+0x46c/0x600 [ 767.446939][T10811] _copy_from_user+0x2d/0xb0 [ 767.446960][T10811] ___sys_sendmsg+0x158/0x2a0 [ 767.446990][T10811] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.447049][T10811] ? __fget_files+0x2a/0x420 [ 767.447070][T10811] ? __fget_files+0x3a6/0x420 [ 767.447101][T10811] __x64_sys_sendmsg+0x1a1/0x260 [ 767.447130][T10811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.447164][T10811] ? __pfx_ksys_write+0x10/0x10 [ 767.447203][T10811] do_syscall_64+0xec/0xf80 [ 767.447222][T10811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.447241][T10811] ? trace_irq_disable+0x37/0x100 [ 767.447263][T10811] ? clear_bhb_loop+0x60/0xb0 [ 767.447287][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.447306][T10811] RIP: 0033:0x7feda276f749 [ 767.447324][T10811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.447341][T10811] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.447361][T10811] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 767.447375][T10811] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 767.447387][T10811] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 767.447399][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.447410][T10811] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 767.447460][T10811] [ 767.460534][T10812] netlink: 'syz.1.1330': attribute type 83 has an invalid length. [ 768.023924][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 768.023999][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 768.206745][T10830] FAULT_INJECTION: forcing a failure. [ 768.206745][T10830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.206782][T10830] CPU: 0 UID: 0 PID: 10830 Comm: syz.5.1339 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 768.206815][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.206829][T10830] Call Trace: [ 768.206837][T10830] [ 768.206846][T10830] dump_stack_lvl+0xe8/0x150 [ 768.206883][T10830] should_fail_ex+0x46c/0x600 [ 768.206919][T10830] _copy_from_user+0x2d/0xb0 [ 768.206942][T10830] copy_from_sockptr+0x48/0x70 [ 768.207079][T10830] ip_mroute_setsockopt+0x643/0xf60 [ 768.207124][T10830] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 768.207159][T10830] ? get_pid_task+0x20/0x1f0 [ 768.207212][T10830] do_ip_setsockopt+0xf11/0x2d00 [ 768.207271][T10830] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 768.207297][T10830] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 768.207322][T10830] ? __fget_files+0x2a/0x420 [ 768.207358][T10830] ? __fget_files+0x2a/0x420 [ 768.207385][T10830] ip_setsockopt+0x66/0x110 [ 768.207408][T10830] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 768.207433][T10830] do_sock_setsockopt+0x17c/0x1b0 [ 768.207464][T10830] __x64_sys_setsockopt+0x145/0x1b0 [ 768.207495][T10830] do_syscall_64+0xec/0xf80 [ 768.207515][T10830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.207536][T10830] ? trace_irq_disable+0x37/0x100 [ 768.207559][T10830] ? clear_bhb_loop+0x60/0xb0 [ 768.207585][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.207607][T10830] RIP: 0033:0x7f2df461f749 [ 768.207625][T10830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.207644][T10830] RSP: 002b:00007f2df287e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 768.207666][T10830] RAX: ffffffffffffffda RBX: 00007f2df4875fa0 RCX: 00007f2df461f749 [ 768.207681][T10830] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 768.207693][T10830] RBP: 00007f2df287e090 R08: 0000000000000004 R09: 0000000000000000 [ 768.207706][T10830] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 768.207719][T10830] R13: 00007f2df4876038 R14: 00007f2df4875fa0 R15: 00007fff81fdcaa8 [ 768.207753][T10830] [ 768.732397][T10839] 9p: Bad value for 'rfdno' [ 770.118822][ T9069] Bluetooth: hci5: command 0x0406 tx timeout [ 770.603963][T10883] 9p: Bad value for 'rfdno' [ 772.700474][ T5887] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 772.828477][ T5887] usb 7-1: device descriptor read/64, error -71 [ 772.898130][T10953] FAULT_INJECTION: forcing a failure. [ 772.898130][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 772.898167][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.0.1384 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 772.898192][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.898205][T10953] Call Trace: [ 772.898214][T10953] [ 772.898223][T10953] dump_stack_lvl+0xe8/0x150 [ 772.898268][T10953] should_fail_ex+0x46c/0x600 [ 772.898305][T10953] should_failslab+0xa8/0x100 [ 772.898329][T10953] __kmalloc_cache_noprof+0x84/0x6d0 [ 772.898365][T10953] ? sched_core_alloc_cookie+0x41/0xa0 [ 772.898386][T10953] ? rt_spin_unlock+0x161/0x200 [ 772.898417][T10953] ? sched_core_share_pid+0xd1/0x7b0 [ 772.898440][T10953] sched_core_alloc_cookie+0x41/0xa0 [ 772.898462][T10953] ? sched_core_share_pid+0xd1/0x7b0 [ 772.898483][T10953] sched_core_share_pid+0x312/0x7b0 [ 772.898505][T10953] ? lockdep_hardirqs_on+0x7b/0x110 [ 772.898531][T10953] ? cap_task_prctl+0x1de/0xaa0 [ 772.898566][T10953] ? __pfx_sched_core_share_pid+0x10/0x10 [ 772.898588][T10953] ? static_key_count+0x41/0x70 [ 772.898646][T10953] ? security_task_prctl+0x163/0x190 [ 772.898676][T10953] __se_sys_prctl+0x223/0x1830 [ 772.898716][T10953] ? __pfx___se_sys_prctl+0x10/0x10 [ 772.898757][T10953] ? __x64_sys_prctl+0x20/0xc0 [ 772.898794][T10953] do_syscall_64+0xec/0xf80 [ 772.898816][T10953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.898837][T10953] ? trace_irq_disable+0x37/0x100 [ 772.898861][T10953] ? clear_bhb_loop+0x60/0xb0 [ 772.898888][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.898910][T10953] RIP: 0033:0x7feda276f749 [ 772.898930][T10953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.898950][T10953] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 772.898973][T10953] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 772.898989][T10953] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 772.899002][T10953] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 772.899016][T10953] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 772.899028][T10953] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 772.899063][T10953] [ 772.963490][T10950] 9p: Bad value for 'rfdno' [ 773.072233][ T5887] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 773.198538][ T5887] usb 7-1: device descriptor read/64, error -71 [ 773.308493][ T5887] usb usb7-port1: attempt power cycle [ 773.824063][T10967] overlay: ./file0 is not a directory [ 773.834857][ T5887] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 777.886665][ T5887] usb 7-1: device descriptor read/8, error -71 [ 778.122262][ T5887] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 778.167138][ T5887] usb 7-1: device descriptor read/8, error -71 [ 778.291368][ T5887] usb usb7-port1: unable to enumerate USB device [ 778.572442][ T38] kauditd_printk_skb: 109 callbacks suppressed [ 778.572463][ T38] audit: type=1326 audit(1767651879.721:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.572521][ T38] audit: type=1326 audit(1767651879.721:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.572568][ T38] audit: type=1326 audit(1767651879.721:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.572615][ T38] audit: type=1326 audit(1767651879.721:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.572662][ T38] audit: type=1326 audit(1767651879.721:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.573607][ T38] audit: type=1326 audit(1767651879.721:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.573667][ T38] audit: type=1326 audit(1767651879.721:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.573706][ T38] audit: type=1326 audit(1767651879.721:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.573744][ T38] audit: type=1326 audit(1767651879.721:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 778.574885][ T38] audit: type=1326 audit(1767651879.721:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10978 comm="syz.5.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2df461f749 code=0x7ffc0000 [ 780.332440][T10991] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 780.724541][T11012] FAULT_INJECTION: forcing a failure. [ 780.724541][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 780.724585][T11012] CPU: 0 UID: 0 PID: 11012 Comm: syz.6.1403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 780.724612][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 780.724627][T11012] Call Trace: [ 780.724636][T11012] [ 780.724651][T11012] dump_stack_lvl+0xe8/0x150 [ 780.724690][T11012] should_fail_ex+0x46c/0x600 [ 780.724729][T11012] should_failslab+0xa8/0x100 [ 780.724754][T11012] __kvmalloc_node_noprof+0x181/0x940 [ 780.724793][T11012] ? fuse_readdir+0x147d/0x2bd0 [ 780.724876][T11012] fuse_readdir+0x147d/0x2bd0 [ 780.724925][T11012] ? lockdep_hardirqs_on+0x7b/0x110 [ 780.724961][T11012] ? finish_task_switch+0x23d/0x940 [ 780.725000][T11012] ? rcu_is_watching+0x15/0xb0 [ 780.725023][T11012] ? trace_sched_exit_tp+0x36/0xf0 [ 780.725056][T11012] ? __schedule+0x1475/0x5070 [ 780.725100][T11012] ? __pfx_fuse_readdir+0x10/0x10 [ 780.725141][T11012] ? irqentry_exit+0x5e8/0x670 [ 780.725167][T11012] ? rcu_is_watching+0x15/0xb0 [ 780.725190][T11012] ? __pfx___schedule+0x10/0x10 [ 780.725243][T11012] ? irqentry_exit+0x5e8/0x670 [ 780.725264][T11012] ? lockdep_hardirqs_on+0x7b/0x110 [ 780.725285][T11012] ? irqentry_exit+0x5e8/0x670 [ 780.725339][T11012] ? iterate_dir+0x29e/0x580 [ 780.725369][T11012] ? down_read_killable+0x152/0x220 [ 780.725394][T11012] ? __pfx_down_read_killable+0x10/0x10 [ 780.725419][T11012] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 780.725442][T11012] ? lockdep_hardirqs_on+0x7b/0x110 [ 780.725463][T11012] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 780.725490][T11012] iterate_dir+0x3a5/0x580 [ 780.725528][T11012] __se_sys_getdents64+0xe4/0x260 [ 780.725566][T11012] ? __pfx___se_sys_getdents64+0x10/0x10 [ 780.725597][T11012] ? ksys_write+0x230/0x260 [ 780.725628][T11012] ? __pfx_filldir64+0x10/0x10 [ 780.725664][T11012] ? __pfx_ksys_write+0x10/0x10 [ 780.725709][T11012] do_syscall_64+0xec/0xf80 [ 780.725732][T11012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.725756][T11012] ? clear_bhb_loop+0x60/0xb0 [ 780.725784][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.725807][T11012] RIP: 0033:0x7f04922df749 [ 780.725829][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.725849][T11012] RSP: 002b:00007f049051d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 780.725872][T11012] RAX: ffffffffffffffda RBX: 00007f0492536090 RCX: 00007f04922df749 [ 780.725888][T11012] RDX: 000000000000002c RSI: 0000000000000000 RDI: 0000000000000004 [ 780.725902][T11012] RBP: 00007f049051d090 R08: 0000000000000000 R09: 0000000000000000 [ 780.725915][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.725928][T11012] R13: 00007f0492536128 R14: 00007f0492536090 R15: 00007fff0f3c15a8 [ 780.725971][T11012] [ 782.005018][T11034] FAULT_INJECTION: forcing a failure. [ 782.005018][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 782.005058][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.6.1414 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 782.005082][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.005097][T11034] Call Trace: [ 782.005104][T11034] [ 782.005114][T11034] dump_stack_lvl+0xe8/0x150 [ 782.005151][T11034] should_fail_ex+0x46c/0x600 [ 782.005187][T11034] should_failslab+0xa8/0x100 [ 782.005211][T11034] __kmalloc_noprof+0xe0/0x7e0 [ 782.005243][T11034] ? kfree+0x4d/0x900 [ 782.005269][T11034] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 782.005298][T11034] tomoyo_realpath_from_path+0xe3/0x5d0 [ 782.005323][T11034] ? tomoyo_domain+0xd9/0x130 [ 782.005352][T11034] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 782.005384][T11034] tomoyo_path_number_perm+0x1e8/0x5a0 [ 782.005419][T11034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 782.005450][T11034] ? __lock_acquire+0x6b6/0x2cf0 [ 782.005484][T11034] ? do_raw_spin_lock+0x121/0x290 [ 782.005545][T11034] ? __fget_files+0x2a/0x420 [ 782.005572][T11034] ? __fget_files+0x2a/0x420 [ 782.005593][T11034] ? __fget_files+0x3a6/0x420 [ 782.005613][T11034] ? __fget_files+0x2a/0x420 [ 782.005641][T11034] security_file_ioctl+0xcb/0x2d0 [ 782.005674][T11034] __se_sys_ioctl+0x47/0x170 [ 782.005709][T11034] do_syscall_64+0xec/0xf80 [ 782.005731][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.005754][T11034] ? trace_irq_disable+0x37/0x100 [ 782.005779][T11034] ? clear_bhb_loop+0x60/0xb0 [ 782.005807][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.005829][T11034] RIP: 0033:0x7f04922df749 [ 782.005849][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.005879][T11034] RSP: 002b:00007f049053e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 782.005903][T11034] RAX: ffffffffffffffda RBX: 00007f0492535fa0 RCX: 00007f04922df749 [ 782.005919][T11034] RDX: 0000200000000040 RSI: 00000000c0585611 RDI: 0000000000000003 [ 782.005932][T11034] RBP: 00007f049053e090 R08: 0000000000000000 R09: 0000000000000000 [ 782.005946][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.005958][T11034] R13: 00007f0492536038 R14: 00007f0492535fa0 R15: 00007fff0f3c15a8 [ 782.005995][T11034] [ 782.006004][T11034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 782.628075][ T5957] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 782.777971][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 782.783673][ T5957] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 782.783707][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.783729][ T5957] usb 3-1: Product: syz [ 782.783745][ T5957] usb 3-1: Manufacturer: syz [ 782.783761][ T5957] usb 3-1: SerialNumber: syz [ 782.826997][ T5957] usb 3-1: config 0 descriptor?? [ 783.065089][ T5957] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 783.065112][ T5957] eb 00 00 00 00 00 00 00 [ 783.065197][ T5957] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 783.895415][T11057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.913159][T11057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.805797][ T5957] usb 3-1: USB disconnect, device number 46 [ 785.164719][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 785.164743][ T38] audit: type=1326 audit(1767651886.311:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.6.1427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04922df749 code=0x0 [ 785.291219][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1427'. [ 785.315870][T11068] FAULT_INJECTION: forcing a failure. [ 785.315870][T11068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.315909][T11068] CPU: 0 UID: 0 PID: 11068 Comm: syz.0.1429 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.315934][T11068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.315948][T11068] Call Trace: [ 785.315956][T11068] [ 785.315966][T11068] dump_stack_lvl+0xe8/0x150 [ 785.316005][T11068] should_fail_ex+0x46c/0x600 [ 785.316043][T11068] _copy_from_user+0x2d/0xb0 [ 785.316066][T11068] ___sys_sendmsg+0x158/0x2a0 [ 785.316101][T11068] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.316169][T11068] ? __fget_files+0x2a/0x420 [ 785.316193][T11068] ? __fget_files+0x3a6/0x420 [ 785.316228][T11068] __x64_sys_sendmsg+0x1a1/0x260 [ 785.316265][T11068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.316305][T11068] ? __pfx_ksys_write+0x10/0x10 [ 785.316360][T11068] do_syscall_64+0xec/0xf80 [ 785.316385][T11068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.316406][T11068] ? trace_irq_disable+0x37/0x100 [ 785.316432][T11068] ? clear_bhb_loop+0x60/0xb0 [ 785.316460][T11068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.316482][T11068] RIP: 0033:0x7feda276f749 [ 785.316502][T11068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.316521][T11068] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.316546][T11068] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 785.316561][T11068] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 785.316575][T11068] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 785.316589][T11068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.316602][T11068] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 785.316637][T11068] [ 786.953739][T11085] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 788.879153][T11135] FAULT_INJECTION: forcing a failure. [ 788.879153][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 788.879192][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.0.1452 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 788.879218][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.879231][T11135] Call Trace: [ 788.879240][T11135] [ 788.879250][T11135] dump_stack_lvl+0xe8/0x150 [ 788.879287][T11135] should_fail_ex+0x46c/0x600 [ 788.879324][T11135] ? __alloc_skb+0x1dc/0x3a0 [ 788.879349][T11135] should_failslab+0xa8/0x100 [ 788.879383][T11135] ? __alloc_skb+0x1dc/0x3a0 [ 788.879405][T11135] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 788.879441][T11135] ? lockdep_hardirqs_on+0x7b/0x110 [ 788.879471][T11135] ? __alloc_skb+0x198/0x3a0 [ 788.879497][T11135] __alloc_skb+0x1dc/0x3a0 [ 788.879526][T11135] alloc_skb_with_frags+0xca/0x890 [ 788.879641][T11135] ? unwind_next_frame+0xa5/0x23d0 [ 788.879692][T11135] ? is_bpf_text_address+0x26/0x2b0 [ 788.879726][T11135] sock_alloc_send_pskb+0x859/0x990 [ 788.879779][T11135] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 788.879813][T11135] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 788.879909][T11135] ? __lock_acquire+0x6b6/0x2cf0 [ 788.879945][T11135] hci_sock_sendmsg+0x1fe/0xf30 [ 788.880034][T11135] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 788.880061][T11135] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 788.880099][T11135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 788.880129][T11135] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 788.880163][T11135] __sock_sendmsg+0x21c/0x270 [ 788.880203][T11135] sock_write_iter+0x27f/0x370 [ 788.880238][T11135] ? __pfx_sock_write_iter+0x10/0x10 [ 788.880297][T11135] vfs_write+0x5d5/0xb40 [ 788.880335][T11135] ? __pfx_sock_write_iter+0x10/0x10 [ 788.880382][T11135] ? __pfx_vfs_write+0x10/0x10 [ 788.880426][T11135] ? __fget_files+0x2a/0x420 [ 788.880465][T11135] ksys_write+0x14b/0x260 [ 788.880502][T11135] ? __pfx_ksys_write+0x10/0x10 [ 788.880546][T11135] do_syscall_64+0xec/0xf80 [ 788.880569][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.880591][T11135] ? trace_irq_disable+0x37/0x100 [ 788.880615][T11135] ? clear_bhb_loop+0x60/0xb0 [ 788.880643][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.880666][T11135] RIP: 0033:0x7feda276f749 [ 788.880686][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.880706][T11135] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.880730][T11135] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 788.880746][T11135] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000001b [ 788.880760][T11135] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 788.880773][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.880786][T11135] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 788.880821][T11135] [ 791.168058][ T6545] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 791.325965][ T6545] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.326017][ T6545] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 791.326043][ T6545] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.354870][ T6545] usb 7-1: config 0 descriptor?? [ 792.211098][T11192] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001 [ 792.824003][ T5972] IPVS: starting estimator thread 0... [ 792.961885][T11194] IPVS: using max 11 ests per chain, 26400 per kthread [ 793.432513][T11213] FAULT_INJECTION: forcing a failure. [ 793.432513][T11213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.432552][T11213] CPU: 0 UID: 0 PID: 11213 Comm: syz.0.1485 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 793.432579][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.432599][T11213] Call Trace: [ 793.432608][T11213] [ 793.432617][T11213] dump_stack_lvl+0xe8/0x150 [ 793.432654][T11213] should_fail_ex+0x46c/0x600 [ 793.432693][T11213] _copy_from_user+0x2d/0xb0 [ 793.432716][T11213] ___sys_recvmsg+0x12e/0x510 [ 793.432754][T11213] ? __pfx____sys_recvmsg+0x10/0x10 [ 793.432797][T11213] ? __fget_files+0x2a/0x420 [ 793.432840][T11213] ? __fget_files+0x3a6/0x420 [ 793.432875][T11213] do_recvmmsg+0x30d/0x770 [ 793.432916][T11213] ? __pfx_do_recvmmsg+0x10/0x10 [ 793.432961][T11213] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 793.433009][T11213] __x64_sys_recvmmsg+0x190/0x240 [ 793.433042][T11213] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 793.433088][T11213] do_syscall_64+0xec/0xf80 [ 793.433112][T11213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.433133][T11213] ? trace_irq_disable+0x37/0x100 [ 793.433157][T11213] ? clear_bhb_loop+0x60/0xb0 [ 793.433185][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.433207][T11213] RIP: 0033:0x7feda276f749 [ 793.433228][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.433248][T11213] RSP: 002b:00007feda09ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 793.433273][T11213] RAX: ffffffffffffffda RBX: 00007feda29c6090 RCX: 00007feda276f749 [ 793.433289][T11213] RDX: 0000000000000001 RSI: 00002000000047c0 RDI: 0000000000000003 [ 793.433302][T11213] RBP: 00007feda09ad090 R08: 0000000000000000 R09: 0000000000000000 [ 793.433316][T11213] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 793.433328][T11213] R13: 00007feda29c6128 R14: 00007feda29c6090 R15: 00007ffdce8cef58 [ 793.433363][T11213] [ 793.987436][ T6545] usbhid 7-1:0.0: can't add hid device: -71 [ 793.987572][ T6545] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 794.016136][ T6545] usb 7-1: USB disconnect, device number 16 [ 794.045204][ T9883] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 794.210200][ T9883] usb 6-1: Using ep0 maxpacket: 32 [ 794.218316][ T9883] usb 6-1: unable to get BOS descriptor or descriptor too short [ 794.244495][ T9883] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 794.244527][ T9883] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 794.244551][ T9883] usb 6-1: config 255 has no interface number 0 [ 794.244588][ T9883] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 794.244607][ T9883] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 794.244626][ T9883] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 794.244646][ T9883] usb 6-1: config 255 interface 81 has no altsetting 0 [ 794.589174][ T9883] usb 6-1: string descriptor 0 read error: -22 [ 794.589342][ T9883] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 794.589369][ T9883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.670296][T11215] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 794.726662][ T9883] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input8 [ 795.614981][ C1] usbtouchscreen 6-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 795.668081][ T6617] usb 6-1: USB disconnect, device number 12 [ 796.085438][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1499'. [ 796.086665][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1499'. [ 796.142134][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1500'. [ 800.648033][ T5886] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 800.887995][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 800.910605][ T5886] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 800.910640][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.910659][ T5886] usb 6-1: Product: syz [ 800.910673][ T5886] usb 6-1: Manufacturer: syz [ 800.910689][ T5886] usb 6-1: SerialNumber: syz [ 800.963293][ T5886] usb 6-1: config 0 descriptor?? [ 801.492860][ T5886] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 801.492883][ T5886] eb 00 00 00 00 00 00 00 [ 801.492963][ T5886] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 802.750390][T11367] FAULT_INJECTION: forcing a failure. [ 802.750390][T11367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.750455][T11367] CPU: 1 UID: 0 PID: 11367 Comm: syz.0.1542 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.750482][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.750497][T11367] Call Trace: [ 802.750507][T11367] [ 802.750517][T11367] dump_stack_lvl+0xe8/0x150 [ 802.750556][T11367] should_fail_ex+0x46c/0x600 [ 802.750592][T11367] _copy_from_user+0x2d/0xb0 [ 802.750616][T11367] __sys_bpf+0x1e3/0x860 [ 802.750646][T11367] ? __pfx___sys_bpf+0x10/0x10 [ 802.750668][T11367] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 802.750718][T11367] ? ksys_write+0x230/0x260 [ 802.750755][T11367] ? __pfx_ksys_write+0x10/0x10 [ 802.750794][T11367] __x64_sys_bpf+0x7c/0x90 [ 802.750818][T11367] do_syscall_64+0xec/0xf80 [ 802.750838][T11367] ? rcu_is_watching+0x15/0xb0 [ 802.750859][T11367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.750882][T11367] ? clear_bhb_loop+0x60/0xb0 [ 802.750909][T11367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.750932][T11367] RIP: 0033:0x7feda276f749 [ 802.750952][T11367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.750971][T11367] RSP: 002b:00007feda098c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.750994][T11367] RAX: ffffffffffffffda RBX: 00007feda29c6180 RCX: 00007feda276f749 [ 802.751011][T11367] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 802.751025][T11367] RBP: 00007feda098c090 R08: 0000000000000000 R09: 0000000000000000 [ 802.751040][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.751053][T11367] R13: 00007feda29c6218 R14: 00007feda29c6180 R15: 00007ffdce8cef58 [ 802.751088][T11367] [ 804.219406][T11360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.219777][T11360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.634055][ T5892] usb 6-1: USB disconnect, device number 13 [ 809.034697][T11437] FAULT_INJECTION: forcing a failure. [ 809.034697][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 809.034765][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.6.1571 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 809.034792][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.034805][T11437] Call Trace: [ 809.034815][T11437] [ 809.034825][T11437] dump_stack_lvl+0xe8/0x150 [ 809.034863][T11437] should_fail_ex+0x46c/0x600 [ 809.034900][T11437] ? prepare_creds+0x31/0x640 [ 809.034934][T11437] should_failslab+0xa8/0x100 [ 809.034957][T11437] ? prepare_creds+0x31/0x640 [ 809.034990][T11437] kmem_cache_alloc_noprof+0x84/0x6c0 [ 809.035031][T11437] prepare_creds+0x31/0x640 [ 809.035064][T11437] ? get_ruleset_from_fd+0x1ae/0x230 [ 809.035171][T11437] __se_sys_landlock_restrict_self+0x18f/0x760 [ 809.035221][T11437] do_syscall_64+0xec/0xf80 [ 809.035244][T11437] ? rcu_is_watching+0x15/0xb0 [ 809.035264][T11437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.035287][T11437] ? clear_bhb_loop+0x60/0xb0 [ 809.035315][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.035337][T11437] RIP: 0033:0x7f04922df749 [ 809.035358][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.035378][T11437] RSP: 002b:00007f04904fc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 809.035401][T11437] RAX: ffffffffffffffda RBX: 00007f0492536180 RCX: 00007f04922df749 [ 809.035418][T11437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 809.035431][T11437] RBP: 00007f04904fc090 R08: 0000000000000000 R09: 0000000000000000 [ 809.035445][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.035479][T11437] R13: 00007f0492536218 R14: 00007f0492536180 R15: 00007fff0f3c15a8 [ 809.035517][T11437] [ 810.610300][T11456] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 810.660968][T11456] VFS: Can't find a romfs filesystem on dev nullb0. [ 810.660968][T11456] [ 810.810165][T11449] 9p: Bad value for 'rfdno' [ 810.854474][T11462] FAULT_INJECTION: forcing a failure. [ 810.854474][T11462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.854511][T11462] CPU: 0 UID: 0 PID: 11462 Comm: syz.0.1582 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 810.854537][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.854550][T11462] Call Trace: [ 810.854559][T11462] [ 810.854568][T11462] dump_stack_lvl+0xe8/0x150 [ 810.854605][T11462] should_fail_ex+0x46c/0x600 [ 810.854642][T11462] _copy_from_user+0x2d/0xb0 [ 810.854665][T11462] tipc_setsockopt+0x4b2/0x970 [ 810.854810][T11462] ? __pfx_tipc_setsockopt+0x10/0x10 [ 810.854841][T11462] ? __fget_files+0x2a/0x420 [ 810.854869][T11462] ? __fget_files+0x2a/0x420 [ 810.854892][T11462] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 810.854924][T11462] ? __pfx_tipc_setsockopt+0x10/0x10 [ 810.854956][T11462] do_sock_setsockopt+0x17c/0x1b0 [ 810.854988][T11462] __x64_sys_setsockopt+0x145/0x1b0 [ 810.855022][T11462] do_syscall_64+0xec/0xf80 [ 810.855044][T11462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.855065][T11462] ? trace_irq_disable+0x37/0x100 [ 810.855088][T11462] ? clear_bhb_loop+0x60/0xb0 [ 810.855115][T11462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.855137][T11462] RIP: 0033:0x7feda276f749 [ 810.855157][T11462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.855176][T11462] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 810.855199][T11462] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 810.855215][T11462] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 810.855229][T11462] RBP: 00007feda09ce090 R08: 000000000000001c R09: 0000000000000000 [ 810.855243][T11462] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 810.855257][T11462] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 810.855292][T11462] [ 811.403024][T11476] FAULT_INJECTION: forcing a failure. [ 811.403024][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 811.403062][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.0.1586 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 811.403087][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 811.403101][T11476] Call Trace: [ 811.403110][T11476] [ 811.403120][T11476] dump_stack_lvl+0xe8/0x150 [ 811.403158][T11476] should_fail_ex+0x46c/0x600 [ 811.403196][T11476] should_failslab+0xa8/0x100 [ 811.403219][T11476] __kmalloc_noprof+0xe0/0x7e0 [ 811.403251][T11476] ? kfree+0x4d/0x900 [ 811.403276][T11476] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 811.403306][T11476] tomoyo_realpath_from_path+0xe3/0x5d0 [ 811.403332][T11476] ? tomoyo_domain+0xd9/0x130 [ 811.403360][T11476] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 811.403392][T11476] tomoyo_path_number_perm+0x1e8/0x5a0 [ 811.403426][T11476] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 811.403458][T11476] ? __lock_acquire+0x6b6/0x2cf0 [ 811.403492][T11476] ? do_raw_spin_lock+0x121/0x290 [ 811.403554][T11476] ? __fget_files+0x2a/0x420 [ 811.403582][T11476] ? __fget_files+0x2a/0x420 [ 811.403605][T11476] ? __fget_files+0x3a6/0x420 [ 811.403628][T11476] ? __fget_files+0x2a/0x420 [ 811.403656][T11476] security_file_ioctl+0xcb/0x2d0 [ 811.403701][T11476] __se_sys_ioctl+0x47/0x170 [ 811.403737][T11476] do_syscall_64+0xec/0xf80 [ 811.403760][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.403783][T11476] ? trace_irq_disable+0x37/0x100 [ 811.403806][T11476] ? clear_bhb_loop+0x60/0xb0 [ 811.403835][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.403857][T11476] RIP: 0033:0x7feda276f749 [ 811.403876][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.403896][T11476] RSP: 002b:00007feda09ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.403919][T11476] RAX: ffffffffffffffda RBX: 00007feda29c5fa0 RCX: 00007feda276f749 [ 811.403935][T11476] RDX: 0000200000000140 RSI: 00000000c00caee0 RDI: 0000000000000004 [ 811.403949][T11476] RBP: 00007feda09ce090 R08: 0000000000000000 R09: 0000000000000000 [ 811.403963][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.403977][T11476] R13: 00007feda29c6038 R14: 00007feda29c5fa0 R15: 00007ffdce8cef58 [ 811.404014][T11476] [ 811.404023][T11476] ERROR: Out of memory at tomoyo_realpath_from_path. [ 811.728182][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 811.901865][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 811.907450][ T9] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 811.907483][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.907505][ T9] usb 7-1: Product: syz [ 811.907521][ T9] usb 7-1: Manufacturer: syz [ 811.907537][ T9] usb 7-1: SerialNumber: syz [ 811.965763][ T9] usb 7-1: config 0 descriptor?? [ 812.216086][ T9] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 812.216108][ T9] eb 00 00 00 00 00 00 00 [ 812.216193][ T9] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 812.714541][T11496] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1592'. [ 814.298773][T11505] 9p: Bad value for 'rfdno' [ 815.503683][ T5957] usb 7-1: USB disconnect, device number 17 [ 815.691756][ T9069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 815.697449][ T9069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 815.736847][ T9069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 815.776325][ T9069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 815.777382][ T9069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 816.090720][T11513] lo speed is unknown, defaulting to 1000 [ 817.858061][ T61] Bluetooth: hci2: command tx timeout [ 818.381364][T11553] mmap: syz.6.1601 (11553) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 820.032322][ T61] Bluetooth: hci2: command tx timeout [ 820.033184][ T5886] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 820.033211][ T5886] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 820.033233][ T5886] CPU: 1 UID: 0 PID: 5886 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 820.033257][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.033272][ T5886] Workqueue: events l2cap_info_timeout [ 820.033380][ T5886] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 820.033404][ T5886] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 10 82 b3 08 cc 66 66 66 66 66 66 2e [ 820.033423][ T5886] RSP: 0018:ffffc9000524f7a0 EFLAGS: 00010202 [ 820.033441][ T5886] RAX: dffffc0000000000 RBX: ffffffff88ab082e RCX: 0000000080000001 [ 820.033457][ T5886] RDX: 0000000000000000 RSI: ffffffff88ab082e RDI: 000000000000006b [ 820.033471][ T5886] RBP: ffffffff89d9f646 R08: 0000000000000001 R09: 0000000000000000 [ 820.033484][ T5886] R10: dffffc0000000000 R11: ffffffff89d9f600 R12: 0000000000000000 [ 820.033499][ T5886] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 820.033512][ T5886] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 820.033529][ T5886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.033543][ T5886] CR2: 00007fffd2c6cfc0 CR3: 0000000033014000 CR4: 00000000003526f0 [ 820.033561][ T5886] Call Trace: [ 820.033570][ T5886] [ 820.033578][ T5886] __kasan_check_byte+0x12/0x40 [ 820.033613][ T5886] lock_acquire+0x84/0x340 [ 820.033643][ T5886] ? work_grab_pending+0x3d6/0x8e0 [ 820.033677][ T5886] lock_sock_nested+0x3e/0x130 [ 820.033711][ T5886] ? l2cap_sock_ready_cb+0x46/0x170 [ 820.033745][ T5886] l2cap_sock_ready_cb+0x46/0x170 [ 820.033780][ T5886] l2cap_conn_start+0x700/0xcd0 [ 820.033820][ T5886] ? __pfx_l2cap_conn_start+0x10/0x10 [ 820.033853][ T5886] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 820.033875][ T5886] ? lockdep_hardirqs_on+0x7b/0x110 [ 820.033895][ T5886] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 820.033916][ T5886] ? mutex_lock_nested+0x154/0x1d0 [ 820.033944][ T5886] ? l2cap_info_timeout+0x60/0xa0 [ 820.033971][ T5886] l2cap_info_timeout+0x68/0xa0 [ 820.033996][ T5886] ? process_scheduled_works+0x9ef/0x1770 [ 820.034020][ T5886] process_scheduled_works+0xad1/0x1770 [ 820.034058][ T5886] ? __pfx_process_scheduled_works+0x10/0x10 [ 820.034081][ T5886] ? do_raw_spin_lock+0x121/0x290 [ 820.034114][ T5886] worker_thread+0x8a0/0xda0 [ 820.034152][ T5886] kthread+0x711/0x8a0 [ 820.034185][ T5886] ? __pfx_worker_thread+0x10/0x10 [ 820.034209][ T5886] ? __pfx_kthread+0x10/0x10 [ 820.034238][ T5886] ? rt_spin_unlock+0x150/0x200 [ 820.034269][ T5886] ? rt_spin_unlock+0x161/0x200 [ 820.034296][ T5886] ? __pfx_kthread+0x10/0x10 [ 820.034327][ T5886] ret_from_fork+0x510/0xa50 [ 820.034352][ T5886] ? __pfx_ret_from_fork+0x10/0x10 [ 820.034373][ T5886] ? __switch_to+0xc9e/0x1480 [ 820.034409][ T5886] ? __pfx_kthread+0x10/0x10 [ 820.034439][ T5886] ret_from_fork_asm+0x1a/0x30 [ 820.034482][ T5886] [ 820.034499][ T5886] Modules linked in: [ 820.034523][ T5886] ---[ end trace 0000000000000000 ]--- [ 820.034539][ T5886] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 820.034562][ T5886] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 10 82 b3 08 cc 66 66 66 66 66 66 2e [ 820.034580][ T5886] RSP: 0018:ffffc9000524f7a0 EFLAGS: 00010202 [ 820.034598][ T5886] RAX: dffffc0000000000 RBX: ffffffff88ab082e RCX: 0000000080000001 [ 820.034613][ T5886] RDX: 0000000000000000 RSI: ffffffff88ab082e RDI: 000000000000006b [ 820.034627][ T5886] RBP: ffffffff89d9f646 R08: 0000000000000001 R09: 0000000000000000 [ 820.034641][ T5886] R10: dffffc0000000000 R11: ffffffff89d9f600 R12: 0000000000000000 [ 820.034678][ T5886] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 820.034691][ T5886] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 820.034709][ T5886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.034723][ T5886] CR2: 00007fffd2c6cfc0 CR3: 0000000033014000 CR4: 00000000003526f0 [ 820.034748][ T5886] Kernel panic - not syncing: Fatal exception [ 820.035350][ T5886] Kernel Offset: disabled