last executing test programs: 2m36.008695429s ago: executing program 3 (id=182): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000008) 2m35.935444437s ago: executing program 3 (id=183): r0 = syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x3a, 0x0, 0x1}]}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x6}, 0xfe}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000000)={r7}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xffffffff}], 0x1}}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000d30300000001000000000000000109000000000000000000000000000000000000000200"/56]) 2m35.703952951s ago: executing program 3 (id=184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) sendmmsg(r0, &(0x7f0000003640)=[{{0x0, 0x12, &(0x7f0000000540)=[{&(0x7f00000011c0)="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", 0x595}], 0x1}}], 0x1, 0x4004808) socket$inet6(0xa, 0x2, 0x3) mount(0x0, 0x0, 0x0, 0x11, 0x0) 2m35.526266701s ago: executing program 3 (id=186): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0xfc, 0x8}]}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000040)=@sha1={0x1, "cd20d93fd4f562ec0960020ab13ebfc93c32c9d1"}, 0xd7, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x6, 0x1, 0x5}, 0x9c) 2m34.328250036s ago: executing program 3 (id=190): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0xa1, "fda51c83ed29a0f0dc54ab71839ff98b911e79ac33161f30b75559e2cfc9bdf8531a0cb99bf20a277e87b3883cabf58cc4af1fab47b6e960c8e927e6714d16291f00913e7a607bb525edebfe9fe4d4ef9f97b21609466688283cc6408c3fc804c18f0ba10e14ef0623640bce575f72b92caee19ff180da0e43d57f8fbacd2cc6f2cd5a8440fd2003e79ac3c897691a0a641ac122beff12833fb3ef1822a44ae756"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000300)={0x40, 0xd, 0xe0, {0xe0, 0x0, "0de48c346daafdb2af0db36f3fe143304ec48412fd2c72c0ec19f3818f11f2287bae8cf6f7b18a99784dea158aa65204ee53304f3eb12fc1d72c0dad2ccb3a09821cfd87c82e5554673fce0a1d66531e0b2e6590c45932dd376fb5d1694257aa6cc447ba7a23ad70e83e9aa7ec1bb508cbd47acce3bec9cc53a6a91763a3289ceb4cc2a4db4be2659f47398394d7d08f6546aac3561a3c584923bd4cfd323b9e074209fcf6375df98a671e6c47e824a1e61d49da275c3e5f775ba823ad5304d541f78c25e2bfb96b95e9cd89e38ca4cb1682270c27f68797a59628e1157c"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000100)={0x0, 0x15, 0x9c, "652c569888c0dbd0b0164c82f7a57f00c47fee41476d9f072c0eb4555044e241628a49e6499d3956cc3aad151e0e9969476e12e75d0eed90b07b5f637977d160f42bf0010caefcca49a8b0964d2536af01208369db72245ed67da8e746c9147c2622adac994741943f5e352c78b537e32684ee3834b3ec4bc9937dee3c0a2d7b9669df76c59fba86b511d3a29a89842218fd647fa98b774d8968a93b"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0xfffa, 0x40, 0xb4, 0x7, 0x3, 0x1, 0x63, 0xfffffbff, 0x0, 0x0, 0x3, 0x8000}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) 2m34.121266137s ago: executing program 3 (id=193): r0 = syz_open_dev$radio(&(0x7f0000000f00), 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1, 0xd, 0x1f9, 0x0}) poll(&(0x7f0000000f40)=[{}, {r0, 0x2}], 0x2, 0x101) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040), 0x4) madvise(&(0x7f00003ec000/0x2000)=nil, 0x2000, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x200) listen(r5, 0x18006) mlock(&(0x7f0000904000/0x1000)=nil, 0x1000) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r7, &(0x7f0000001c00)={0xa, 0x4e20, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000006c0)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$BLKRASET(r2, 0x1262, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000) r9 = getpgid(0x0) mq_notify(r3, &(0x7f0000000000)={0x0, 0x128, 0x1, @tid=r9}) 2m33.861544799s ago: executing program 32 (id=193): r0 = syz_open_dev$radio(&(0x7f0000000f00), 0x2, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1, 0xd, 0x1f9, 0x0}) poll(&(0x7f0000000f40)=[{}, {r0, 0x2}], 0x2, 0x101) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000040), 0x4) madvise(&(0x7f00003ec000/0x2000)=nil, 0x2000, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x200) listen(r5, 0x18006) mlock(&(0x7f0000904000/0x1000)=nil, 0x1000) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r7, &(0x7f0000001c00)={0xa, 0x4e20, 0x80, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000006c0)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$BLKRASET(r2, 0x1262, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000) r9 = getpgid(0x0) mq_notify(r3, &(0x7f0000000000)={0x0, 0x128, 0x1, @tid=r9}) 2m25.197405639s ago: executing program 0 (id=241): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) set_mempolicy(0x2002, 0x0, 0x89) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000a00)={'comedi_bond\x00', [0x5, 0x80208000, 0x40, 0xfffffffc, 0x0, 0x5, 0x9, 0x4, 0xffe, 0x1, 0x8, 0x800001, 0x5, 0x3, 0x100, 0x6, 0xffffffa7, 0xf0, 0xfffffffd, 0x8, 0x3f9, 0x10000, 0x800, 0xe2df, 0x6, 0xfffffffe, 0x0, 0x10005, 0x7, 0x2, 0x5]}) 2m25.128644702s ago: executing program 0 (id=242): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m23.608107923s ago: executing program 0 (id=249): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x0, 0x20, 0xe0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "1c44"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x8, 0x1, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xfa, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x7, 0xf, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0xb5, 0x9e}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xf, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x0, 0x7, 0xaa}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x5, 0xf4, 0x3, 0x20, 0xb6}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44e}}, {0xff, &(0x7f0000000300)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x449}}, {0xae, &(0x7f0000000740)=ANY=[@ANYBLOB="ae03776455f07f5d7aa0f31de75323bcf8c78646a216365b110a74d88fe82363921c51a60c86a1322584948671721aaf554f2d76a68ffbc29aa61c43c21bfe90a1b990980ac54212ef8eedb150a4148590586d6d8546957080e0fd3c9637ad6e5b053b5720164980e9b928da2bf76dbd3761d97a1fb4b868ff0d97f009e0b7f26949167c0b8797efb968201f6a620c2606fb54bab898089f0d93d112bc178f8c836721f45cc1b01dded3921c2fbb1934eed2"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1409}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x18, r3, 0x317, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400085c}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x4, 0xe9, 0x3, 0x41, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8, 0x8}}) getsockname$packet(r1, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001980)={'syztnl0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0xff, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x5f, 0x7806, 0x7, 0xea1}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) 2m20.435889575s ago: executing program 0 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="66643d60c1409de13f04042f6ea62c25cf4c99bf6887a63a29aec6ebc4227db6bf634d82ce275a231d2592335025a87ba16987a9d53d246588b46041c7d46b78377a1957c4e415e6f02f54bb37e147846856c43efc857ab47b", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff050000000000000002f80000000000000300000000000000bc000000000000000600000007000000060000000000000009000000000000000000000000000000ff000000000000000300000000000000000000000000fb8000000000000000000400000000000000ff030000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000100000000000000ffffffffffff1f0037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="9ad83aba13a62e9d833b7fb3c0066c8245812669453fe128ec7b64d667a132d1a2db3c0f0c4cc819c002bf47ee1a5c659a5ff4fb9cd6f7226207dd9cbb60fe8c6cea7beaa650da872f8de4e6ee228e7728cc66795b3728c032008a09a83b6ce27d1b6934b0b429f913f46ebe5cce421b1b5be2186f0a792d9985f72889125dcd88edc555a0e9932caa64faffe340c68b9f96246482b23a9fef1b0a41ace705ef97f44378fcbb2b0d8820eddb06a25eae754654e05dbcac293f9de0cc3b8f04667e7c336032e83aaf2c1b0081779459f16fcd6fed744d3d704d9cc2f52a7e624bdc457693937e018491e981ff4bfbdaad02a75428660ab7b84d86f448cb423160627f0d3d83e6fa1be61222ba44db8b31a445013b9519da5d318a017ee21433bcf39b94d7dbea820408026ca948608c58331c72baa385160080ddc73cc371c3df61d26324eb491ad5c3e5fdfa82bdc71059a3c1515a5f39ff3a213ec69d4cad2ee9f7efca2b06fc0b0317f46c2cdf15afc7177bb60c95551c7422ec51de53eb75ce989ae739c9e09b9858acf595eeda172e666993691e2bb02ad70d5ade068a6e2b51fa9eb9af8396587c49aa7303feb28755f2f4b246c58fbb1d0119dd5637da8ee7661e53ec97b9050f2d1f14a93383a299f45a970fb26a59a6b5511941e745f4709b6e849bb66247220402abb97d610b18a9843f13057a020d3d46cd12901bdb64661a32f69d5000327f7340c9652ffe506a3e98ad02a201f6286e8850485593882653065da0d3c4e48cec7e4f359a69a320d3e83d69da115a5671535d4e88ec2b07edaa0ccf67b677847f53dda3cbe0dc6c3c522fc8e14f99c3c7d0510662e8945dd5f889fcbd3abad4ffcd09cff3b01060350a0d2ee98767ee5b0e5eb1b88a04278702d5ae161f3369db6c3bb886d4c29336bd31eb43a276f56856937a4601a9500fe343a55a3d0ebdfc7c6d7eb33b92ca56d6e270b597e386f2e6e0e57ccdf189a3a8dc40d8842adb5de8207152357100d528cc19303ffd38b6327277bc7068ee94432b3b5dce54a69991e0cc87db19d41d21bf3ba67e5263b1eab0a915564e90a63f6b208e9aefe943e92bc106612f45c3d7df1fddeee0ffba02442fe3ac31b19d26d25d2fbe02779f03e142b72302759ba143ceee7087dab66ae19a11e0df36b451e9c1fac39359a26c2d0b513040536df861c41ceeabbf4fc1843e064aed19ef234c4baff3715308a35b82aba7eacff3eed3e72e473b38b71300c5c28f44e73c208c1137ebf31137bc9ab6e4d5fcbeca0d18d62ff4e7702d4c2f1b195837e67f7fd806af28a07177251da4d3eac3fbab6e1d42df7c7bd55a482a9b68aa2b5cf65dd2ed73cd8b50b2d2fc8fad9449a79638fef9b4fa717cbab0d3953feacf593a9f0967b289ecf2cda40c89a522d9fb58b26edb6534dcae849f1c4ef8d9d6b78ecda4569322c7fcd7b4e963316a484343ec05fbdcab9b09c69a200550eec74d98b06e9925ed1b00136436c8d27da08b48acd93db6d5735391e1eb263628be70fa3658a6151074898570e842a62a8a6375c75764c40801da27b4fd49e6b5965b866395b2c54f6d1e001827b43d57b52bb19c25ee4ca51ce0dc58ebb01634ce3ed6508fa7ab12d428b706499b2e65af18d07a89672291426564940b22a20fdcea68d7dc808ca67866c30bf0fbfcf5c47438af47ba5548ec6741c82c7f8d684798f4356bda7d9a507ba263181d4b780b6067038bbb74dbbbe75e1083b41ab1bbd0a96be71519e8644ce9f6695a6a027e05166b8b4c0a297f5448611e538a4e72e9de9b58c91874f2d82af11dd08a8ba32d8e703e5aed77a9bae2b79a653122f4ebec1f2ddd7f0787f9f1e70b723bc1ee9d7665c99fd82225d23285dbf2383a6c35cf73e8370b0b7b0ce571ae73024ffddc92ba71fe24677425743619fe98f5ba30a3e0e8e5ffb4f145c3527504aa15fa5932658372a0a54e272045480a606f08525284f955ad4e1dbce3be9ba3d318aa69e01a1e7d1732ed8b9398a05b7b0e9b636aba3c842bb6ebe4d2929f5c52e36349e2ca9bf96e3765c828484af645e90fb39785faf7aec79cf40b9d4bd72778383a86c71c9922b9d2088ea329daad90604880f415c3a768ecf3a4f8c7678a167086ddc241160900589299191182b3a2e9fd85ef723a74ab9af77a6605f23e4d4a1e58fcde3845944a4c21548d867ab5e89a8a605db12779c75b8cdf4748f97ac98a24eb18e2d8f18442aac57d4b5d0a1b283c7fcd7c28c514f2773f0e81141235c4e83d4e4d6be8b900ac02c0a74cd9078ba936100521ec644bda5d994a69e138fd1da8dbc4919bbeb8dfe358c5f27263930aa0fea860bca6618c570d1a8801fa50ff2bc1b02a20a2ae9dcfe5d1cb9289a59f38c0338d8bbc72fb7cdb47850571112bc11e008c2c901299cfdb8611e93ee9ad787c6148db5566e04ffc874dfb15c150bd74469ccaa7784df74e610cf6b60e8b166ec8acf7e1890ed83e57405ca830c20a5b3854e9cd5187af1b6a776601d85dba43cebc82661b9d89140d78781621adcca9c8826112dcc0a6e6925b85e63e53c3d75bd2960fecb03972d9fe86164f9d161cd28de361256c0f9461f9b44a73f60b0031ca3d3d6d381320e74ddb103194c7ccd8a5a81a5d53969399d087fb145f410767c25ec0e3f1cad24a32ef0695fbe790fe7ccaa7470375c3cb6d5dcd251c4a865bcc1895b09feb569487e110d9f9d43fd7cb858ed8e7684a4655f436cac4e762cdbca62d871f4c42e721c86e1b5f1137e59a01b131a8147b743c3f3615f113a71eb57e7153650ed4869b0c43704f31eb1c07970376ab295a5cf6564d67464a122195b9868a36e89a227ab65f9628a99385fa99827522af33b965dcc013eafe8f86ee40ce9fe4270b6d4edab0e3a3f9b4b105224a8e64e7805af7882caea7a7c4578f1f551e790b7e0e0b93c06d05705dfa14a59e9e90da141f695fce9643b2d9c43b7ad6051e34771e78693a283638210a3123cfd6864996d48936d99521060241833f9f94c45989d1e71aa653113e794cfc0cabe1387f504d001b8990f65999b877432633264bbdbc4537e8f110352c5f4c505b3f761c36b39ea3094c59c650689cdf780618f6e95e588bb81f071235ceb575a6d98adff48ec128531752701659d2fe4d8b8e425fe456743d53becdd839b973365137bed4c7f9ffa04d114eda4bd8adf990cdb944e25df1a64c9308fb3d423768245a1cb965b4035cffcfe8dc2011b70c7df2fef6b9bfd7edebd509ff1cb27e53676fc0ad1d578cc35e5c1f5afd8d5b882bde606fcd550c497c6b1bee60223697a315c86d8a04c1a14b8374380af1f62fad77ce32547c129090a19eeb2dad08cb5eb5399eee85794298e27906de8c983f6c5f9a570f4c9f588662cace84a2961c603aabece457ce58f917e8994ce30cf95c1aab584fd3166a27a6132c269cd9699243baacb67190abdefd1067f79c89bd93539603838fafd49d14259ef510b73dcb9cac8fb9e653a018600f7af72d765998a35c2a267ec7be4fffe36e932479465100510dcd4223995a9e4428a4524e23d63c8d525ca809d899215025a5d06786e0f817ff99d694bb6a34f6d6b7e46fbf87719c03db2e221fbb1106ce7722c2e8b5926d7233f8f5eddfff7c27b49a24d2b8764446492a9afd1290473c619490d1345438bd6624a37490c77e3d831aa8c1ce8bafeae7416458c9f417fa32a4736c515daa8897313c267b8f3024d96e7ca8b085c0a7ecc8355de591962a0c00d727a354e0f44e97784dff2e26225da3f8b4956bb9b9f777173b5e6a75e3aef182ab89362ecac2aea2adaeda80d767a073de87c6bad82520acb8e1171f1a981a6b6044dde96a8dba6845f6a316662235b04b0125267d77d48ca7b256d95b7604d8589117f4aa2b410858b4a9999be5d74aad6c9cbe0e53042a15aa8fcba375f4ad8d99f27240f1ffb156316071b8c285486d9fd7e27658258fb3c37d69c58c2c8a494967652bc503823a712b275fa0766f4e77f7f252c8a73649abadd7b5e028d07509774b0b3f48cae70e606a92150e8d219fee981a1b57caf00898c2bb80bb82cd1bea45159eeb9e6328b2d1380beab1f05f4f5463486f1f28fb858f4cd757c1e3177033defe798c94b905ec93b76789020503c3ae4a5be1f5b91b1c8744943b9bca5dd944beb91963bfd2a27fd4a5202f2258688346d53f334e4cc5ae84706cd194c065a95e9f62449b5a1efda73159d8c0de34f9b72c12efa7c0729b08b8511086ac110ad5452c86be9af0253f82fe34733c70437d41ac30ffc7d5c038bf40ddf026497580e3af0912baf6c340feb240e130f6f6cfa0d44f6a57fe67c979c2140a4b679c5dacc6a713d2f761f2028523eda6928ba98cc2d13a549abb841abcc04fc905bf94ec4190e7f0d57c072f4ca7b296c9a7b3492164085f8610637c956e19b7ee32f1af133524fe6e7a9ff07b0a3eb7ee2043c00a59742e81495aced26682cdc2875c3d5dfe2877ac43e6fb2a7a5a5bb77c0898779e2400414d284839be573dc129d2edd072bd3759a0a2ed550a267948c0862211e357d6cdd5244711718dcde100b583fbbbc37e719e1c01181c575567517193fc48d632852afe7e58fc2da0d38390307a121dcee3cf3f016de77c40660882ec808bf0337d9f16c12d886aa20733f220ee5a0a7f9e3d61ab9ec8a4abff6f952c9c912031d58fddab5ff61dcb9b83b038e5caf381bd219d7ac5c43931c9de70ea5378fded2e6e65ca5a173be150bdcdb2e5767ad3f07f92cec7295d0dd758c3be02eb1fb3944a70b4bde69924d6baa7659f53c47a184995acea3445fc2e46588063d6b38dc3faa72a39c572a3e3b324c5fb7b859c8e21c0c91d495e741f8b2f938709abff2d8d6cb77133f1a567f6c5d37f85ff8f93575cb569d9acf058dc819cddd80a80f2d95c25bb70f56c8fe6ac24863a95290ed9bfd53871c1e230296fd4acf64052cb48f6dee4308d8a3365cafe28b54dc2c53d9287815e00f04e1ddf7225332d3a5628637b9c3745558424c29c4f405d93b3524436f150e0d3254e0831543ca7d02d23adcd7c328909545d0ef87137eb3f2f7dc037841fd552c452b0c2278d8b651dc6d9ef8b4b704b3c9e239d711113ee126df164ffcd54ac24cefe7ae2e53e5093283fd3acb750a682573b73c815a61676d44923f59e16901aa65b7cb409aac2e2e2c357c0f57fac988cf21e2777a9aaeeb5fd2c4d276b042f8c40e69735d01f58123b7d8a6d136334b47871236ef9817b35bcb85e23c9ba4d1b40e63788e5869ff6d4f12383909a22498c94d201d779fa92c9d72ff928e38cd3a7b67efb68167368a7913bbb3e84698d67cdd3d46eec95b24420583f8c44073cfd419d4db68f0fed85cc45d89bc11a200aafe4e36b87daf815b985c3b18e160a47d37fa7162a68d89956a87e1dc1d3dad204ec17bb186f4a24c5ead387f05bc6f10a40476971692dfb1934b1bfa8d554822bd4445b6f355cc847d7078bd754be8ba4286245918d292e1eec6a705bdf16eeedd5ec65dd8df4d4dd9c50634f151884d704e8477ca55480a81a1269b214cade4147a78b68e47f5c881bfa26488a097645962564d718548058448908bbc1fd3e255c1208c19feae103a6e87beabbf8727a5d43228eccecea799ef847a075f580df39fb02fdcf34a3be25697fbfe07ac9ef6b858f9a74a1bc039ca19d0b97b098a2320398f7383432c5db9a305d0f9920eed67ed49c7a0269b55449e4f33bcc0f7dc79cdc49e66ca3efa5f2c8f49e9cbde788ef635e61361dd02a7a2f4074c22fcd0d15d1250327add2c76a614eeb43af7efb2c698661652809f5785ebb5626c419c08d0a2faefcb57c7734a20dc6b4c7a85f027eb19799d8647e1d5d10fb165bdbe586f5f9e3d2601f6fcc3d95a9e848422a7cbd93013bc2500f255ab8ad2410f50ff02776f9668b04c8ef652d04c58d06ced30da82fbd6fe7d48c4662e7aea6e857a914774509b87f2698352d8ac077200b9b629ce9debe8dbbf68ffe42f76b3b8f035998621610df18b5896247d07135e9e4bee4e0938c63b4a515184bd298f16714307d5072ce0a2a07a6cc98d79630d70223f00a74b1bd32eefd6411870a445dcf004fd136bac8d81d04310e7bb34705ad237b40ba5ec773368deb3d2a308fe95f685df02a0e4dca535ebb131c79adc9762b448eabb9e98d06eecadb521082536919ff38a586804981bc65f754686167771c1a1d34c9fb5513f6bc2ed064ab8cca8a59aaad525d282fab741b43eada82fbb15ed17d29099e8c8e10707bed355ae6952cdd2601ad249715b57e9f2e503d796191a4f580bfb587983a8287f1614a2a424205f70446ee5f649a217253cf4a9d3aa1a17328a4e996f4144479ae4c0d7078f091bebc5ade1e46a516c7cf7023d780ffece2bf2af282679e2d2511b8dd744ca2643c1ba85edaeea021c2182f16cbec49d2d0ca129432c368cad7fdf342e0c3c3dbec7758a5add9b95c840267877f5ecd3cbcb059c120be7a278f5aec4208abf3b0e3798330f2f56d65071a9c1578f9ddffad2eaaef685ff56cacbeabb1616e6478c1719583bd63fd64fc40e60127059301a25bdaca2d75f73207d130fe43c10286c0236eed1d079458ebb8ec9aef29eb90c77e7cd858701f364a11f8ef5420b5867f4ff073ffda79531ffae862c36cf6910630f72583526cdc43b9efde47a80f8e5972f8f457955eef49305064c9dbd9dbdd5c83634c705fb17c4d385540961d7401939771262c9efd8cbcd9c9ca037a2b540fcb7f38d6f4c926bcde614b4d7a6678e7871a58af6c63ba2ce08cea1c7c60d323ef34a53dd54ec7aa70d82a4231538a50f0abc9604e2942f7088fa57cada19a79324f35ab1cb0c8bf926be118c0e44c9bc90f4b83054b98c443d101ec8b863c472d29450a4040fef881b145f64a4fcdb858b29535f7cc02dc96add55279d82a7ea384812175856f419db60177d7cabc6b34f8cf5f8373e54ed7dd22bf01bde48796a47a0845bf897ba14c034d19169e1548d03714833cb0f8da6f1b99af613f68dcf762cab6cb63a14d527bc2a59c18867978e2e849c044a52066fa61c5435754c70bea14c42f54f5bc1bee2385862d3b84b30ec08ba39b56d034069e689a9d0a3224ff379d1aeac216bf5ef6e1a02c01336295ee5593f777fa57c2ddf170e7389c0fb29232f4551c770ace2c22736519124f983f5e47a296f50d13cce3a57c2f3a879fdea4c7d78f057907960e6b5df4585195dac1e37f38e369ece105a3a3778e4b77e9b02b5d51a2b81ea451c7a2e4a60817e52c02592d0f4d9d8ec81b1ae04c8b76feffcecaf61f7671982d65508224515e3a7efa88d6c91c14cfb3937b162d55b6498613ced291df89156fe53668b78999e86e4cda26901945e14cc7444904b02f2c802ffa5baa3cdd7f1270d2d5ec995b602fb20b49a374580fc348f7f351a6eed91b519274a46327fde78667c541e4137f6dafe84090ab44d9b34d04aa13dc232ef7d6b494462455bc24e7ea8e7e31fe788abc14d224d92c5588e7d02327b7b501ca994de6554100d26b4ae2df2cf4a511827c24a68040e6a808ffcfe97d5fbff8f1db95daec35a43041e53814a061b33ddb3184b058d07c82c2627a297490288aa3e8a05e9a2fb767487d8a2b91e6fbe44d6b573ddd8cd59a0424eb91194b45ed34f3acc9063a8fcee2526b0a8b15ebc52741c6d285c5f31f3ac7df83d159fc7bea46ba1a42aa34d4b3002f442579d8bc941fd711a393cc149cac2d6491fd94d9296c455bd7d60f90301a7f9dfc9ae527f9830c91097f8e57583cee755a6dbbd0e59ef4a800a4ec2fda80b42ceb2106724d009f6a52c62229bbcc0dfe6abced583ff72a898c94f95ef052624d7a4af0a66aa7ce8e0361bd041d644fc685e0fcb444ed5e6225a09cd2f1a16e499c099fffc20e3e6d4d50a3c516c39fa9eb17086940d671e1c16f646c2e363a549c8c1f4a9c8c32650ef3d40ccbdef06a389f985057c6f39a70b7c75d22ef64ae8c097e7d1e9b609ab65c0ca8d72fb5273b43792dd8a387ce47acb9f70d6a3efee1b28ba434d68aa1d6190773735e82a6922af4908dffd1cc4c8d5c018a98bc37d46734be5e6a7f9e832f8c3a785677be909d6289e8f17079cac1371ddc3e91d36ca9e2c0dc829a54a87565d8ab4afbcc287398e5f5c3792c077b17bcbca8bf13c6b8a739cb6d75bdc514749fc35596e181a26b8d851bd33149dbdc920ef135c58803a45ba5191dbba3d2754626349c67feaa7771d6650378cae1e0cf74ef3a3c60e0402b674f3701d77daf5f1ae994bff08be3bb505583e2d1744d8b4b7e89e18efe9676182917028d064918b933e04e30bfba17205021788964aff9f3b56d6e9c3718220d6c9917749c0c4f44f2138b65410b49176b82b5dcb72f78f3b90ee21be055fca9fd49080f2e54c2f6dc53bc5da0ab7c80c9b177d77a4a4859ac7222074568d0c111b0299cc80f1e6305c131c7fcf2d7a7ffc919cd3b96d4b7028208a58b81b0f43f2f4e069f5c3c42c8d0aa1fb29617b4884ba18e3843472b175586e11438c027bc96fff2fb9a52849b2b916dc33392808688b767fae927a0f39abb5a595fffac5d2d77c415f0783e3c56c6c21cddcec8ea74f591b363a560a5d29901e4d170f4e3f60cf85938390c636594a91bb126ca5bf837a6c3ac89dfce1580e1f7fd30bcf0bfd6a9f49d0957597df39d7b57d66d43b2a4968665396a1c815b99216525beefdf24d94768cc5e437cf34f99ec5c106ccebeb7106efef0b23cb0950540ce5856d9cf057f7d453b9363f9f9234996d31bde0b77749a83f83130ef487deb4709b22ec06aab8715274917abc29f96bf96b4ab20e06326310ec7b34e3b467a1072079a8076dae46d036d29bd4c1fb85a537b0e77fbc09669a680c6b15dab57cbed3f2a22ba95acb7a6adbde7b1d6a4c5bff889e28c4efc24ea40d200f9a18192fcff240ce7f434617e17b12a59bde247f11dd6f739fc33ccb7cf10c370a5ddb950633e1d6af68b0ef05b71fa0c99c9c7346d10fe880f15f4e1cb772b4d50557d943f18be4c1a6370df76b096224c84824c8f2109b28586acfa8c1f05f742d6fcef8bff56770bcc8b6e07837f0510923c8bc168aa06ba17dcbb987fdcd490c553ac486ea53b667089e785722c3b78c09023db39aa43530ac9c4c574f1f8909962bfeb1d6b11c08c54b7d97f61af03940b982b2bb82419a57bcb94b8b4e2dac2a32b2fcb20bcecb36b2421531990468f917cf4bc7637a553d726124f459da21b62579d831ea54f828d46fa3c24510928d8949eb6019d05de056418cfc42d19a666d76f2125ab9c6d602aac719afceb782892c619f2477dc9ec64002057b5da6ed686216cdd9695387595877a2f7607bc92429c04cd56ae3eb72646e2530f4559f083cb6d02f9226199900d5ce4ef81e3d5031cf780b83542036379310bf0824c30df7907e61fa2fec5e85153e122d5109fe76480910adbb12d3140a08463d781861f81ce60033ef32340202d29f886b68fafa5801568e8f04f58fd05532439a97c81e3b2e29ee15c622241b9116c506607a6728fb3f277faf67038341882152953fb774f04008ce503be4788074ece37d310faee83302beba41e61d1e81fd014e8e855c4c2f6b5eb8f6b890c4868e738ee7d36a8fb9240d37abf77ea85a23d51328bc35f20ad241a054f7bc49264c3d93c1a828f0289d1ce7b28defaace177fceb2f2c478fcc2beacc598ebe6d766e34c2529598679e2dfedff65c39d7dacdd2aad16dbebf630265e464e32e9429b40b19e80caefa51f6474cda630d55857114e0d52828de75ed97c01b15a48bc8d3c93e4eb67040e2526fb594f814c487ff8f61022682ea8796e9a189a33bac1e2d9eb5f43080576f1933d5efb74c7a7a4e034acec863cc30cb59cfc5089428a0a8bcf50ca2ec6467258d57ee4246b054434c5592a5c807bebf0369fdf4b83a291551b415632155bf1769a19c3e245c971322e41b7e9f29eaa0b4d22a918e0d61df6138c321ff0816007eb054df7b04d9024af7d99aa2babc1f948a533ed899893749e95db67c8339529fe69a0730a66c2667056ce6a34cef3d3df39c7cf78bf3710978e0eca37f351f0311dfa8d35b0f91d08c5fd6b43eb620bb45da33818be103a66749876e5cc44108c9fd34a85baed01ae2880a325996bf5671f84cfe0a41fe99a6a6ee1a705b3ed9fbc13b6c596537aa505fba9407d61bc7053d0e288acb4391d1fd06f4d898c64d10e86cf74af2781e218061327979d1b2c3e24b9b3bfc5d230767c5491b0272cfbc49f71385aaecd99b6e14890b0766ea76a84224688564e234ba1237d2e26fed35a99e791c11aa9c7136e4c32594b23aa9c1c9671ce24ea3d2899c930812daf00cd02fe4b2460b5ce21b76039de97363a1f10df0e7543f0af069694d9431b61505c388575baeb28a4460adba7c0f1f565e2e220f7e74a4fa77005a69d378dae25b546e65175c0859f1cda4af993421ae6e9aebf13c4348804dc207d1477e8a9b7abcc4b823c83235312ba8a81c81de475745c1c60c1f880c3465180cbc2b643a7f50f3f8df813deac9d3ee7ee79b450b32897fa9e2c89af9fde5f8213234d5fbbe6176e603589eee633ebcc557dbfeaab1f3160021fffd91062e2f5b8470c01d8d27f0a121ac103df92f90a4be089a32ead1ed83dc58732a2752df546b5e771b7e6ebd06ab6815c5e45a3cfdbe69cc1176d9e44a9849af5f90a1b63b333ec78729600e44e16ae699719aec69c3d46baab6156558855a0201698508db6bc277ca52e337be452ba1959c9632710c54351f13f97bc380710066a0a782027a9378c0f29c527fa691978816f59f8353742dad0cece27bc6f6bd401d12ccacc59ab2d1034d15efca3f8d4059e864c18e661214efb9955d415b111b93e7a72be26f20c5e15f75673333868d781b0865fcfa6857d7fb477eec508bb5cbb6766db4069f57eadb5ddbb973982659d39a36d853f01ad5f1e201c706fe0537ebad188999e4c8a7e59c71aef119e01a116188f244c73216d925fae32046b7e4e84900fffce295f4263d47e81303c38ae1e7e62a87267c598d9747d2effae6c3eb4e159684b6ddf9e2d12f3d1067d1e0f2d430b405f18b6a75fb4a403e8eed0037e4086c35a327f3ae28ea0371339e6f7d0e13e2d1aded739407a043a90dd54fafcd05547c416ac9b17297d42a0d719c846ba7972cce2281bb046f61f5346912b289a8962d653a7d3cd194c2d253a05c93166a9638fd53c3103efd440a497eaac336f9f3447b17d87810f00cf4e5567c40a2243b01c57ef3046ef3dcd72dfd8dd384dcddd6dcc3ac46605edaf5aa7c8270660fa1d6b50df2d5cd991e01f3e6e861a5e1b562ee6ad69aa906cafa3c2f31df93ca9968e03b0d68aba89136fe4e45331e1eb3577e468209d2047c200b108ad267319c4507141f73cf200f820d00a98202191b0082e4ddd0749aa070dd5e257fb0a6f0942f67d010e3f22f3ba26e000f4e59a075", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m20.377439248s ago: executing program 0 (id=256): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001e0015b02dbd7000ffdbdf25e0000001000000000000000000000000000004d300003200fc020000000000000000000000000001080000000035000024000900030000000000000007000000000000000a00"/100], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000001000000008010040"]) 2m20.170430377s ago: executing program 0 (id=259): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0xa0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bridge\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84088}, 0x4001) 2m4.700423067s ago: executing program 33 (id=259): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0xa0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_bridge\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84088}, 0x4001) 8.617157715s ago: executing program 1 (id=934): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) recvfrom(r0, &(0x7f0000000000)=""/32, 0x20, 0x0, 0x0, 0x0) 7.780599598s ago: executing program 1 (id=937): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0xfffffff9, 0x1, 0x3ff}}) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffd, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 4.13958974s ago: executing program 4 (id=949): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x48}, 0x200040c4) 3.934647379s ago: executing program 4 (id=950): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb9713", 0x91}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39811b58bc1452d76496e44c556198949ad6bab7e9bd1136845e", 0x34}], 0x2}}], 0x1, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.610177069s ago: executing program 1 (id=952): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050", @ANYRES8=r2], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 3.362386468s ago: executing program 1 (id=953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x10]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 2.780380575s ago: executing program 4 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, r1, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 2.477476507s ago: executing program 4 (id=959): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x78000, &(0x7f0000000380)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r0, 0x1, 0x1) 2.211282438s ago: executing program 5 (id=960): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 2.14418324s ago: executing program 4 (id=961): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200080, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xbe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4040010) 2.143806507s ago: executing program 2 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r1, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x4}]}]}, 0x24}}, 0xc054) 1.954144186s ago: executing program 2 (id=963): creat(&(0x7f0000000240)='./file0\x00', 0x8a) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.710715829s ago: executing program 2 (id=964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 1.428190918s ago: executing program 1 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)) io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000040)=[{r2}, {r2, 0x8000}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.412534529s ago: executing program 2 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.155618689s ago: executing program 5 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000020101010000000000000000020000002400028014000180"], 0x38}}, 0x0) 1.155454983s ago: executing program 2 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x703d2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) 1.068241333s ago: executing program 4 (id=969): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xb4}}, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000040000000060a010400000000000000000100000008000b40000000000900010073797a30000000001800048014000180090001006cad62ffffffffffff000280140000001100010000000000000000000000000a"], 0xc8}}, 0x0) 904.217588ms ago: executing program 5 (id=970): r0 = socket(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000008"], 0x18}}], 0x2, 0x1799a18923ce5fba) 866.267148ms ago: executing program 2 (id=971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010792153916600000000010902240001001400"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x140) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) tkill(0x0, 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2400c800) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 632.406135ms ago: executing program 5 (id=972): lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) 416.463297ms ago: executing program 5 (id=973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x8140aecc, &(0x7f0000000200)={0x6, 0x0, 0x1}) 280.434401ms ago: executing program 1 (id=974): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2900a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb1661fed8ddba6250af47fde6e4225f438528b6660d8b67812726721f6b755bb37ca116f51e2f239675ff38126c1d68163", 0x88}, {&(0x7f0000000900)="a1e27575d35fd4f38d622e3237bfc6a28a4c21284fa1f95f8e2343cff8831a5a663f3fac3d082e19b04d59a071c5599a98b7bc07bf2bf94767fe9bf0db2b8fa547766a8e024ef76e320cf8e352f293b0c19f465a9deed8", 0x57}, {&(0x7f00000009c0)="4d25acabb0d76231f77e554a8c8c1b3afdb47d428c57725ff9b4fc3ff9300e603fd9b082e7b1dc654d7db972a680ad49a0b606b08d00b692df47c9b3d57a2ca02114cff55e05199643619f8b0e3c02546ba27d0e5eb073779970d0ec308a8a4cfee0902034edd899", 0x68}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 5 (id=975): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000001e80), 0x1, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f0000001600)=[{0xfff9, 0x801, 0x0, 0x0}, {0xffff, 0x4000, 0x0, 0x0}], 0x2}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) kernel console output (not intermixed with test programs): 3(batadv0) entered forwarding state [ 195.961990][ T5919] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 196.007632][ T5919] usb 5-1: config 0 has no interface number 0 [ 196.013831][ T5919] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 196.046733][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.102697][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 196.112943][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 196.117958][ T5919] usb 5-1: config 0 descriptor?? [ 196.149800][ T5919] lan78xx 5-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 196.177978][ T5919] lan78xx 5-1:0.168: probe with driver lan78xx failed with error -5 [ 196.465040][ T7387] NILFS (rnullb0): couldn't find nilfs on the device [ 196.489116][ T5862] usb 5-1: USB disconnect, device number 33 [ 196.566870][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 196.619664][ T7396] overlayfs: failed to resolve './file1': -2 [ 196.638398][ T7394] FAULT_INJECTION: forcing a failure. [ 196.638398][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.655774][ T7394] CPU: 0 UID: 0 PID: 7394 Comm: syz.2.512 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 196.655806][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.655820][ T7394] Call Trace: [ 196.655829][ T7394] [ 196.655838][ T7394] dump_stack_lvl+0x189/0x250 [ 196.655874][ T7394] ? __pfx____ratelimit+0x10/0x10 [ 196.655895][ T7394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.655925][ T7394] ? __pfx__printk+0x10/0x10 [ 196.655955][ T7394] ? __might_fault+0xb0/0x130 [ 196.655999][ T7394] should_fail_ex+0x414/0x560 [ 196.656037][ T7394] _copy_from_user+0x2d/0xb0 [ 196.656067][ T7394] drm_ioctl+0x58a/0xb10 [ 196.656094][ T7394] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 196.656127][ T7394] ? __pfx_drm_ioctl+0x10/0x10 [ 196.656162][ T7394] ? __fget_files+0x2a/0x420 [ 196.656193][ T7394] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.656221][ T7394] ? __pfx_drm_ioctl+0x10/0x10 [ 196.656241][ T7394] __se_sys_ioctl+0xfc/0x170 [ 196.656265][ T7394] do_syscall_64+0xfa/0x3b0 [ 196.656286][ T7394] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.656305][ T7394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.656326][ T7394] ? clear_bhb_loop+0x60/0xb0 [ 196.656351][ T7394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.656370][ T7394] RIP: 0033:0x7f6a1b18e929 [ 196.656389][ T7394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.656407][ T7394] RSP: 002b:00007f6a1bf8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.656428][ T7394] RAX: ffffffffffffffda RBX: 00007f6a1b3b5fa0 RCX: 00007f6a1b18e929 [ 196.656443][ T7394] RDX: 00002000000002c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 196.656456][ T7394] RBP: 00007f6a1bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.656487][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.656500][ T7394] R13: 0000000000000000 R14: 00007f6a1b3b5fa0 R15: 00007ffe7c62db88 [ 196.656532][ T7394] [ 196.853631][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.938603][ T7398] syzkaller1: entered promiscuous mode [ 196.944211][ T7398] syzkaller1: entered allmulticast mode [ 196.956927][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 196.964088][ T5899] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.980980][ T5899] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.990200][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.000292][ T5899] usb 6-1: Product: syz [ 197.004488][ T5899] usb 6-1: Manufacturer: syz [ 197.009148][ T5899] usb 6-1: SerialNumber: syz [ 197.036087][ T5899] usb 6-1: config 0 descriptor?? [ 197.042009][ T7384] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 197.050920][ T5899] hub 6-1:0.0: bad descriptor, ignoring hub [ 197.057451][ T5899] hub 6-1:0.0: probe with driver hub failed with error -5 [ 197.304795][ T7407] exFAT-fs (rnullb0): invalid boot record signature [ 197.312122][ T7407] exFAT-fs (rnullb0): failed to read boot sector [ 197.318816][ T7407] exFAT-fs (rnullb0): failed to recognize exfat type [ 197.357669][ T5919] usb 6-1: USB disconnect, device number 8 [ 197.416853][ T5899] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 197.591646][ T5899] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.601469][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.611797][ T5899] usb 3-1: Product: syz [ 197.616022][ T5899] usb 3-1: Manufacturer: syz [ 197.620694][ T5899] usb 3-1: SerialNumber: syz [ 197.627651][ T5899] usb 3-1: config 0 descriptor?? [ 197.666946][ T5946] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 197.816740][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 197.823688][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.836008][ T5946] usb 5-1: config 0 has no interfaces? [ 197.841802][ T5899] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 197.853314][ T5946] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 197.862551][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 197.871019][ T5946] usb 5-1: Product: syz [ 197.875205][ T5946] usb 5-1: Manufacturer: syz [ 197.879886][ T5946] usb 5-1: SerialNumber: syz [ 197.887604][ T5946] usb 5-1: config 0 descriptor?? [ 198.053017][ T5899] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 198.065172][ T5899] usb 3-1: USB disconnect, device number 33 [ 198.095245][ T7409] binder: 7408:7409 ioctl c0306201 0 returned -14 [ 198.103794][ T5946] usb 5-1: USB disconnect, device number 34 [ 198.664687][ T7411] overlayfs: failed to resolve './file1': -2 [ 198.967440][ T5919] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 199.138855][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.163655][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.194131][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.222573][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.249231][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.284409][ T5919] usb 5-1: config 0 descriptor?? [ 199.547296][ T5899] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 199.606730][ T5946] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 199.706816][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 199.714162][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.725143][ T5899] usb 3-1: config 0 has no interfaces? [ 199.733415][ T5899] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 199.744726][ T5919] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 199.746398][ T5946] usb 6-1: device descriptor read/64, error -71 [ 199.769982][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 199.779312][ T5899] usb 3-1: Product: syz [ 199.783559][ T5899] usb 3-1: Manufacturer: syz [ 199.789949][ T5899] usb 3-1: SerialNumber: syz [ 199.807915][ T5899] usb 3-1: config 0 descriptor?? [ 200.017316][ T5919] usb 3-1: USB disconnect, device number 34 [ 200.026935][ T5946] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 200.166826][ T5946] usb 6-1: device descriptor read/64, error -71 [ 200.247309][ T5899] usb 5-1: USB disconnect, device number 35 [ 200.277594][ T5946] usb usb6-port1: attempt power cycle [ 200.593666][ T7441] overlayfs: failed to resolve './file1': -2 [ 200.616865][ T5946] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 200.648754][ T5946] usb 6-1: device descriptor read/8, error -71 [ 200.837039][ T5972] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 200.887328][ T5946] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 200.942877][ T5946] usb 6-1: device descriptor read/8, error -71 [ 201.081093][ T5946] usb usb6-port1: unable to enumerate USB device [ 201.113839][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.120372][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.187041][ T5919] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 201.217209][ T5972] usb 2-1: Using ep0 maxpacket: 32 [ 201.228478][ T5972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.243888][ T5972] usb 2-1: config 0 has no interfaces? [ 201.254981][ T5972] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 201.264911][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 201.275698][ T5972] usb 2-1: Product: syz [ 201.280086][ T5972] usb 2-1: Manufacturer: syz [ 201.284757][ T5972] usb 2-1: SerialNumber: syz [ 201.305526][ T5972] usb 2-1: config 0 descriptor?? [ 201.357164][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 201.370571][ T5919] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 201.388512][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.403203][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.420125][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.435822][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.444931][ T5919] usb 3-1: Product: syz [ 201.453106][ T5919] usb 3-1: Manufacturer: syz [ 201.459683][ T5919] usb 3-1: SerialNumber: syz [ 201.530202][ T982] usb 2-1: USB disconnect, device number 51 [ 201.894511][ T5919] usb 3-1: 0:2 : does not exist [ 202.310442][ T5919] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 202.335948][ T5919] usb 3-1: USB disconnect, device number 35 [ 202.363140][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.389112][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 202.576732][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 202.592579][ T9] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 202.604035][ T9] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 202.624132][ T9] usb 2-1: config 4 has no interface number 0 [ 202.632462][ T9] usb 2-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 202.650265][ T9] usb 2-1: config 4 interface 51 has no altsetting 0 [ 202.660794][ T9] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 202.673766][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.682727][ T9] usb 2-1: Product: syz [ 202.688975][ T9] usb 2-1: Manufacturer: syz [ 202.693601][ T9] usb 2-1: SerialNumber: syz [ 202.721822][ T9] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 202.736231][ T5856] Bluetooth: min 0 < 6 [ 202.809383][ T7479] netlink: 'syz.5.548': attribute type 4 has an invalid length. [ 202.817430][ T7479] netlink: 152 bytes leftover after parsing attributes in process `syz.5.548'. [ 202.839089][ T7479] : renamed from bond0 (while UP) [ 202.922015][ T9] usb 2-1: USB disconnect, device number 52 [ 203.144697][ T7489] netlink: 'syz.2.553': attribute type 4 has an invalid length. [ 203.154515][ T7489] netlink: 152 bytes leftover after parsing attributes in process `syz.2.553'. [ 203.173807][ T7489] : renamed from bond0 (while UP) [ 203.207725][ T5906] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 203.267186][ T5919] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 203.376867][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 203.382842][ T5906] usb 5-1: no configurations [ 203.387567][ T5906] usb 5-1: can't read configurations, error -22 [ 203.416716][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 203.423575][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.433895][ T5919] usb 6-1: config 0 has no interfaces? [ 203.441840][ T5919] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 203.453823][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 203.467453][ T5919] usb 6-1: Product: syz [ 203.471663][ T5919] usb 6-1: Manufacturer: syz [ 203.476284][ T5919] usb 6-1: SerialNumber: syz [ 203.499985][ T5919] usb 6-1: config 0 descriptor?? [ 203.526950][ T5906] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 203.536772][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 203.543260][ T7496] vxfs: WRONG superblock magic 00000000 at 1 [ 203.555660][ T7496] vxfs: WRONG superblock magic 00000000 at 8 [ 203.562248][ T7496] vxfs: can't find superblock. [ 203.706721][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 203.712939][ T5906] usb 5-1: no configurations [ 203.715255][ T92] usb 6-1: USB disconnect, device number 13 [ 203.717714][ T5906] usb 5-1: can't read configurations, error -22 [ 203.718144][ T5906] usb usb5-port1: attempt power cycle [ 203.735333][ T9] usb 3-1: config 0 has no interfaces? [ 203.746909][ T9] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 203.763370][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.772165][ T9] usb 3-1: Product: syz [ 203.776334][ T9] usb 3-1: Manufacturer: syz [ 203.781122][ T9] usb 3-1: SerialNumber: syz [ 203.789591][ T9] usb 3-1: config 0 descriptor?? [ 203.866778][ T5899] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 203.996961][ T5899] usb 2-1: device descriptor read/64, error -71 [ 204.005758][ T5919] usb 3-1: USB disconnect, device number 36 [ 204.066856][ T5906] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 204.088025][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 204.093594][ T5906] usb 5-1: no configurations [ 204.101640][ T5906] usb 5-1: can't read configurations, error -22 [ 204.236919][ T5906] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 204.246756][ T5899] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 204.277817][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 204.300036][ T5906] usb 5-1: no configurations [ 204.304796][ T5906] usb 5-1: can't read configurations, error -22 [ 204.314859][ T5906] usb usb5-port1: unable to enumerate USB device [ 204.380679][ T5856] Bluetooth: hci1: unexpected event for opcode 0x202f [ 204.397293][ T5899] usb 2-1: device descriptor read/64, error -71 [ 204.517094][ T5899] usb usb2-port1: attempt power cycle [ 204.632761][ T7512] program syz.2.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.647947][ T7512] program syz.2.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.827301][ T92] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 204.886956][ T5899] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 204.907444][ T5899] usb 2-1: device descriptor read/8, error -71 [ 204.977005][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 204.983091][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 204.994122][ T92] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 205.002951][ T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.013121][ T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.025613][ T92] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.034801][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.043009][ T92] usb 6-1: Product: syz [ 205.047272][ T92] usb 6-1: Manufacturer: syz [ 205.051932][ T92] usb 6-1: SerialNumber: syz [ 205.136681][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 205.146046][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.158852][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.167058][ T5899] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 205.174806][ T9] usb 3-1: Product: syz [ 205.179470][ T9] usb 3-1: Manufacturer: syz [ 205.184140][ T9] usb 3-1: SerialNumber: syz [ 205.198128][ T5899] usb 2-1: device descriptor read/8, error -71 [ 205.204523][ T9] usb 3-1: config 0 descriptor?? [ 205.307910][ T5899] usb usb2-port1: unable to enumerate USB device [ 205.413465][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 205.467607][ T92] usb 6-1: 0:2 : does not exist [ 205.882571][ T92] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 205.912850][ T92] usb 6-1: USB disconnect, device number 14 [ 205.941483][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.497061][ T92] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 206.561020][ T7527] FAULT_INJECTION: forcing a failure. [ 206.561020][ T7527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.579077][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.5.567 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 206.579107][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.579119][ T7527] Call Trace: [ 206.579127][ T7527] [ 206.579136][ T7527] dump_stack_lvl+0x189/0x250 [ 206.579172][ T7527] ? __pfx____ratelimit+0x10/0x10 [ 206.579194][ T7527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.579224][ T7527] ? __pfx__printk+0x10/0x10 [ 206.579253][ T7527] ? __might_fault+0xb0/0x130 [ 206.579296][ T7527] should_fail_ex+0x414/0x560 [ 206.579335][ T7527] _copy_from_iter+0x3f5/0x16f0 [ 206.579375][ T7527] ? __pfx__copy_from_iter+0x10/0x10 [ 206.579400][ T7527] ? __local_bh_enable_ip+0x12d/0x1c0 [ 206.579425][ T7527] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 206.579462][ T7527] bcm_sendmsg+0x15b/0x6a0 [ 206.579496][ T7527] ? __lock_acquire+0xab9/0xd20 [ 206.579518][ T7527] ? __pfx_bcm_sendmsg+0x10/0x10 [ 206.579552][ T7527] ? aa_sock_msg_perm+0xf1/0x1d0 [ 206.579580][ T7527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.579607][ T7527] ? __pfx_bcm_sendmsg+0x10/0x10 [ 206.579635][ T7527] __sock_sendmsg+0x21c/0x270 [ 206.579671][ T7527] ____sys_sendmsg+0x52d/0x830 [ 206.579702][ T7527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.579745][ T7527] ? import_iovec+0x74/0xa0 [ 206.579778][ T7527] ___sys_sendmsg+0x21f/0x2a0 [ 206.579806][ T7527] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.579880][ T7527] ? __might_fault+0xb0/0x130 [ 206.579915][ T7527] __sys_sendmmsg+0x227/0x430 [ 206.579947][ T7527] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.579970][ T7527] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 206.580018][ T7527] ? ksys_write+0x22a/0x250 [ 206.580044][ T7527] ? __pfx_ksys_write+0x10/0x10 [ 206.580064][ T7527] ? rcu_is_watching+0x15/0xb0 [ 206.580097][ T7527] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.580125][ T7527] do_syscall_64+0xfa/0x3b0 [ 206.580145][ T7527] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.580166][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.580187][ T7527] ? clear_bhb_loop+0x60/0xb0 [ 206.580212][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.580232][ T7527] RIP: 0033:0x7f193ef8e929 [ 206.580249][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.580267][ T7527] RSP: 002b:00007f193fd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.580289][ T7527] RAX: ffffffffffffffda RBX: 00007f193f1b5fa0 RCX: 00007f193ef8e929 [ 206.580304][ T7527] RDX: 040000000000003a RSI: 0000200000001b00 RDI: 0000000000000003 [ 206.580318][ T7527] RBP: 00007f193fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 206.580331][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.580342][ T7527] R13: 0000000000000000 R14: 00007f193f1b5fa0 R15: 00007ffc68cc4d58 [ 206.580374][ T7527] [ 206.886789][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 206.895113][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.905613][ T92] usb 5-1: config 0 has no interfaces? [ 206.914923][ T92] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 206.931431][ T92] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 206.959374][ T92] usb 5-1: Product: syz [ 206.968888][ T92] usb 5-1: Manufacturer: syz [ 206.973573][ T92] usb 5-1: SerialNumber: syz [ 207.007515][ T92] usb 5-1: config 0 descriptor?? [ 207.227511][ T5919] usb 5-1: USB disconnect, device number 40 [ 207.346925][ T5906] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 207.496832][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 207.502681][ T5906] usb 2-1: no configurations [ 207.509051][ T5906] usb 2-1: can't read configurations, error -22 [ 207.518704][ T5899] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 207.648534][ T5906] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 207.698954][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.709415][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 207.721158][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 207.732273][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 207.742138][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.769278][ T5899] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 207.779818][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 207.796894][ T5899] usb 6-1: Product: syz [ 207.801146][ T5899] usb 6-1: Manufacturer: syz [ 207.805800][ T5899] usb 6-1: SerialNumber: syz [ 207.816915][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 207.821559][ T5899] usb 6-1: config 0 descriptor?? [ 207.840567][ T5906] usb 2-1: no configurations [ 207.860331][ T5906] usb 2-1: can't read configurations, error -22 [ 207.871861][ T5906] usb usb2-port1: attempt power cycle [ 207.968902][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 207.985860][ T9] usb 3-1: USB disconnect, device number 37 [ 208.032944][ T5899] radio-si470x 6-1:0.0: DeviceID=0x75fd ChipID=0x4f61 [ 208.176900][ T5919] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 208.218854][ T5906] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 208.236086][ T5899] radio-si470x 6-1:0.0: software version 117, hardware version 253 [ 208.251199][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 208.257431][ T5906] usb 2-1: no configurations [ 208.264107][ T5906] usb 2-1: can't read configurations, error -22 [ 208.328797][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 208.336127][ T5919] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 208.344834][ T5919] usb 5-1: config 0 has no interface number 0 [ 208.352664][ T5919] usb 5-1: config 0 interface 180 has no altsetting 0 [ 208.365843][ T5919] usb 5-1: New USB device found, idVendor=050d, idProduct=1202, bcdDevice=47.d7 [ 208.375116][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.383484][ T5919] usb 5-1: Product: syz [ 208.387732][ T5919] usb 5-1: Manufacturer: syz [ 208.392355][ T5919] usb 5-1: SerialNumber: syz [ 208.400637][ T5919] usb 5-1: config 0 descriptor?? [ 208.407100][ T5906] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 208.441276][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 208.446030][ T7536] netlink: 'syz.5.571': attribute type 27 has an invalid length. [ 208.447501][ T5906] usb 2-1: no configurations [ 208.459292][ T5906] usb 2-1: can't read configurations, error -22 [ 208.468544][ T5906] usb usb2-port1: unable to enumerate USB device [ 208.618937][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.647328][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.674398][ T5919] usb 5-1: USB disconnect, device number 41 [ 208.751041][ T5899] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 208.933684][ T5899] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 208.953303][ T5899] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 208.962579][ T5899] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 209.724345][ T7581] netlink: 56 bytes leftover after parsing attributes in process `syz.2.576'. [ 209.738252][ T7581] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 209.866768][ T5899] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 209.987023][ T982] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 210.036910][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 210.046295][ T5899] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 210.055134][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.065642][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.081488][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.090647][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.105932][ T5899] usb 5-1: Product: syz [ 210.110208][ T5899] usb 5-1: Manufacturer: syz [ 210.114828][ T5899] usb 5-1: SerialNumber: syz [ 210.156944][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 210.172737][ T982] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 210.184838][ T982] usb 3-1: config 0 has no interface number 0 [ 210.193489][ T982] usb 3-1: config 0 interface 227 has no altsetting 0 [ 210.212769][ T982] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 210.222364][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.241326][ T982] usb 3-1: Product: syz [ 210.245553][ T982] usb 3-1: Manufacturer: syz [ 210.251701][ T982] usb 3-1: SerialNumber: syz [ 210.261922][ T982] usb 3-1: config 0 descriptor?? [ 210.284490][ T982] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.227/input/input16 [ 210.309379][ T9] usb 6-1: USB disconnect, device number 15 [ 210.391321][ T30] audit: type=1326 audit(1752725333.987:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7584 comm="syz.5.578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f193ef8e929 code=0x0 [ 210.484475][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 210.493727][ T7581] netlink: 64 bytes leftover after parsing attributes in process `syz.2.576'. [ 210.503534][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 210.535132][ T5202] bcm5974 3-1:0.227: could not read from device [ 210.550890][ T5202] bcm5974 3-1:0.227: could not read from device [ 210.559919][ T5899] usb 5-1: 0:2 : does not exist [ 210.560379][ T982] usb 3-1: USB disconnect, device number 38 [ 210.579320][ T5202] bcm5974 3-1:0.227: could not read from device [ 211.036859][ T5906] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 211.173276][ T5899] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 211.186955][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 211.201818][ T5899] usb 5-1: USB disconnect, device number 42 [ 211.201849][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.226912][ T5906] usb 2-1: config 0 has no interfaces? [ 211.245152][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.263683][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 211.283866][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 211.295180][ T5906] usb 2-1: Product: syz [ 211.299650][ T5906] usb 2-1: Manufacturer: syz [ 211.304364][ T5906] usb 2-1: SerialNumber: syz [ 211.322672][ T5906] usb 2-1: config 0 descriptor?? [ 211.387098][ T982] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 211.546734][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 211.553898][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.569126][ T982] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 211.577006][ T9] usb 2-1: USB disconnect, device number 61 [ 211.585479][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.595763][ T982] usb 3-1: Product: syz [ 211.603685][ T982] usb 3-1: Manufacturer: syz [ 211.608456][ T982] usb 3-1: SerialNumber: syz [ 211.619758][ T982] usb 3-1: config 0 descriptor?? [ 211.643918][ T982] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 211.651514][ T982] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 211.722186][ T982] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 211.895735][ T7600] NILFS (rnullb0): couldn't find nilfs on the device [ 211.989242][ T9] usb 3-1: USB disconnect, device number 39 [ 212.197389][ T982] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 212.346971][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 212.353669][ T982] usb 5-1: no configurations [ 212.360658][ T982] usb 5-1: can't read configurations, error -22 [ 212.406738][ T5972] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 212.506864][ T982] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 212.579154][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.592187][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.602558][ T5972] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 212.612059][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.623947][ T5972] usb 2-1: config 0 descriptor?? [ 212.669514][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 212.684436][ T982] usb 5-1: no configurations [ 212.696584][ T982] usb 5-1: can't read configurations, error -22 [ 212.704203][ T982] usb usb5-port1: attempt power cycle [ 212.726733][ T5906] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 212.899698][ T5906] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 212.912628][ T5906] usb 6-1: config 5 interface 0 has no altsetting 1 [ 212.921823][ T5906] usb 6-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=45.6b [ 212.931143][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.939228][ T5906] usb 6-1: Product: syz [ 212.943433][ T5906] usb 6-1: Manufacturer: syz [ 212.948097][ T5906] usb 6-1: SerialNumber: syz [ 213.066785][ T982] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 213.066891][ T5899] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 213.107823][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 213.113834][ T982] usb 5-1: no configurations [ 213.120243][ T982] usb 5-1: can't read configurations, error -22 [ 213.159426][ T7610] tipc: Enabled bearer , priority 0 [ 213.170075][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.181613][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.200343][ T7609] tipc: Disabling bearer [ 213.215245][ T5906] usb 6-1: USB disconnect, device number 16 [ 213.228251][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 213.236928][ T5899] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.254282][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.255617][ T5972] usbhid 2-1:0.0: can't add hid device: -71 [ 213.268675][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.278565][ T982] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 213.293220][ T5972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 213.294555][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.315434][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.317893][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 213.325966][ T5899] usb 3-1: Product: syz [ 213.330763][ T5972] usb 2-1: USB disconnect, device number 62 [ 213.341681][ T5899] usb 3-1: Manufacturer: syz [ 213.341875][ T982] usb 5-1: no configurations [ 213.346507][ T5899] usb 3-1: SerialNumber: syz [ 213.356178][ T982] usb 5-1: can't read configurations, error -22 [ 213.377443][ T982] usb usb5-port1: unable to enumerate USB device [ 213.791455][ T5899] usb 3-1: 0:2 : does not exist [ 214.110119][ T7625] overlay: Unknown parameter 'euid' [ 214.338571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 214.351123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 214.365483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 214.476926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 214.526714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 214.528818][ T5899] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 214.550761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 214.559451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 214.577957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 214.607758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 214.651532][ T5899] usb 3-1: USB disconnect, device number 40 [ 215.386854][ T5972] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 215.432455][ T7647] syzkaller1: entered promiscuous mode [ 215.438205][ T7647] syzkaller1: entered allmulticast mode [ 215.536689][ T5972] usb 6-1: Using ep0 maxpacket: 32 [ 215.543570][ T5972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.553976][ T5972] usb 6-1: config 0 has no interfaces? [ 215.561882][ T5972] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 215.571175][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 215.579609][ T5972] usb 6-1: Product: syz [ 215.583873][ T5972] usb 6-1: Manufacturer: syz [ 215.588604][ T5972] usb 6-1: SerialNumber: syz [ 215.595831][ T5972] usb 6-1: config 0 descriptor?? [ 215.805744][ T9] usb 6-1: USB disconnect, device number 17 [ 215.954094][ T7656] binder: 7655:7656 ioctl c0306201 0 returned -14 [ 216.015189][ T7657] binder: 7655:7657 ioctl c0306201 0 returned -14 [ 216.770605][ T7668] /dev/rnullb0: Can't open blockdev [ 217.187281][ T5906] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 217.346810][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 217.356819][ T5899] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 217.381245][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.412002][ T5906] usb 6-1: config 0 has no interfaces? [ 217.437472][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 217.471266][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.498674][ T5906] usb 6-1: config 0 descriptor?? [ 217.537638][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 217.561773][ T5899] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.601144][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.617715][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.641119][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.651178][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.670991][ T5899] usb 3-1: Product: syz [ 217.681355][ T5899] usb 3-1: Manufacturer: syz [ 217.701290][ T5899] usb 3-1: SerialNumber: syz [ 218.139616][ T5899] usb 3-1: 0:2 : does not exist [ 218.260175][ T7688] FAULT_INJECTION: forcing a failure. [ 218.260175][ T7688] name failslab, interval 1, probability 0, space 0, times 0 [ 218.304685][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.4.615 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 218.304718][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.304732][ T7688] Call Trace: [ 218.304741][ T7688] [ 218.304750][ T7688] dump_stack_lvl+0x189/0x250 [ 218.304788][ T7688] ? __pfx____ratelimit+0x10/0x10 [ 218.304811][ T7688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.304842][ T7688] ? __pfx__printk+0x10/0x10 [ 218.304902][ T7688] ? __pfx___might_resched+0x10/0x10 [ 218.304939][ T7688] ? fs_reclaim_acquire+0x7d/0x100 [ 218.304971][ T7688] should_fail_ex+0x414/0x560 [ 218.305018][ T7688] should_failslab+0xa8/0x100 [ 218.305043][ T7688] __kmalloc_cache_noprof+0x70/0x3d0 [ 218.305079][ T7688] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 218.305123][ T7688] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 218.305174][ T7688] sctp_association_new+0x15d3/0x25f0 [ 218.305223][ T7688] sctp_connect_new_asoc+0x2c5/0x690 [ 218.305255][ T7688] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 218.305281][ T7688] ? __local_bh_enable_ip+0x12d/0x1c0 [ 218.305320][ T7688] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 218.305352][ T7688] ? security_sctp_bind_connect+0x7e/0x2e0 [ 218.305379][ T7688] sctp_sendmsg+0x155c/0x2810 [ 218.305420][ T7688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.305452][ T7688] ? aa_sk_perm+0x81e/0x950 [ 218.305486][ T7688] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.305517][ T7688] ? sock_rps_record_flow+0x19/0x410 [ 218.305556][ T7688] ? inet_sendmsg+0x2f4/0x370 [ 218.305594][ T7688] __sock_sendmsg+0x19c/0x270 [ 218.305635][ T7688] ____sys_sendmsg+0x52d/0x830 [ 218.305671][ T7688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.305713][ T7688] ? import_iovec+0x74/0xa0 [ 218.305750][ T7688] ___sys_sendmsg+0x21f/0x2a0 [ 218.305781][ T7688] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.305853][ T7688] ? __fget_files+0x2a/0x420 [ 218.305883][ T7688] ? __fget_files+0x3a0/0x420 [ 218.305934][ T7688] __sys_sendmmsg+0x227/0x430 [ 218.305972][ T7688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.305998][ T7688] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 218.306057][ T7688] ? ksys_write+0x22a/0x250 [ 218.306086][ T7688] ? __pfx_ksys_write+0x10/0x10 [ 218.306108][ T7688] ? rcu_is_watching+0x15/0xb0 [ 218.306146][ T7688] __x64_sys_sendmmsg+0xa0/0xc0 [ 218.306180][ T7688] do_syscall_64+0xfa/0x3b0 [ 218.306202][ T7688] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.306225][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.306248][ T7688] ? clear_bhb_loop+0x60/0xb0 [ 218.306275][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.306299][ T7688] RIP: 0033:0x7fde8398e929 [ 218.306320][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.306339][ T7688] RSP: 002b:00007fde84873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.306364][ T7688] RAX: ffffffffffffffda RBX: 00007fde83bb5fa0 RCX: 00007fde8398e929 [ 218.306380][ T7688] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 218.306394][ T7688] RBP: 00007fde84873090 R08: 0000000000000000 R09: 0000000000000000 [ 218.306408][ T7688] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000002 [ 218.306422][ T7688] R13: 0000000000000000 R14: 00007fde83bb5fa0 R15: 00007ffe65b67478 [ 218.306459][ T7688] [ 218.659800][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 219.073916][ T5899] usb 3-1: 1:0: cannot get min/max values for control 2 (id 1) [ 219.135088][ T5899] usb 3-1: USB disconnect, device number 41 [ 219.179163][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.206947][ T5946] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 219.391423][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 219.434016][ T5946] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.463785][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.485858][ T5946] usb 5-1: SerialNumber: syz [ 219.935529][ T5946] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 219.983397][ T5946] usb 5-1: USB disconnect, device number 47 [ 220.055916][ T982] usb 6-1: USB disconnect, device number 18 [ 220.156006][ T7692] netlink: 252 bytes leftover after parsing attributes in process `syz.4.616'. [ 220.206528][ T7709] netlink: 'syz.5.620': attribute type 15 has an invalid length. [ 220.556713][ T5946] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 220.699079][ T5946] usb 2-1: device descriptor read/64, error -71 [ 220.947067][ T5946] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 220.997774][ T5899] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 221.086930][ T5946] usb 2-1: device descriptor read/64, error -71 [ 221.136860][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 221.144684][ T92] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 221.166678][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 221.173844][ T5899] usb 6-1: config index 0 descriptor too short (expected 4096, got 18) [ 221.184383][ T5899] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 221.193657][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.202210][ T5946] usb usb2-port1: attempt power cycle [ 221.207746][ T5899] usb 6-1: Product: syz [ 221.211935][ T5899] usb 6-1: Manufacturer: syz [ 221.216585][ T5899] usb 6-1: SerialNumber: syz [ 221.226028][ T5899] usb 6-1: config 0 descriptor?? [ 221.234101][ T5899] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 221.296660][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 221.301948][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 221.309226][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.319634][ T92] usb 5-1: config 0 has no interfaces? [ 221.325489][ T92] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 221.334822][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.343127][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 221.353343][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.364871][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.374830][ T92] usb 5-1: config 0 descriptor?? [ 221.391114][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.400459][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.408615][ T9] usb 3-1: Product: syz [ 221.412846][ T9] usb 3-1: Manufacturer: syz [ 221.417810][ T9] usb 3-1: SerialNumber: syz [ 221.434247][ T7721] netlink: 48 bytes leftover after parsing attributes in process `syz.5.625'. [ 221.462149][ T5899] pwc: Failed to set LED on/off time (-71) [ 221.469917][ T5899] pwc: send_video_command error -71 [ 221.475191][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 221.484511][ T5899] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 221.496514][ T5899] usb 6-1: USB disconnect, device number 19 [ 221.557036][ T5946] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 221.577560][ T5946] usb 2-1: device descriptor read/8, error -71 [ 221.816762][ T5946] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 221.834045][ T9] usb 3-1: 0:2 : does not exist [ 221.839865][ T5946] usb 2-1: device descriptor read/8, error -71 [ 221.950386][ T5946] usb usb2-port1: unable to enumerate USB device [ 222.452724][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 222.482487][ T9] usb 3-1: USB disconnect, device number 42 [ 223.681231][ T7755] FAULT_INJECTION: forcing a failure. [ 223.681231][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 223.730752][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.5.634 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 223.730783][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.730796][ T7755] Call Trace: [ 223.730804][ T7755] [ 223.730813][ T7755] dump_stack_lvl+0x189/0x250 [ 223.730849][ T7755] ? __pfx____ratelimit+0x10/0x10 [ 223.730870][ T7755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.730900][ T7755] ? __pfx__printk+0x10/0x10 [ 223.730933][ T7755] ? __pfx___might_resched+0x10/0x10 [ 223.730959][ T7755] ? fs_reclaim_acquire+0x7d/0x100 [ 223.730987][ T7755] should_fail_ex+0x414/0x560 [ 223.731026][ T7755] should_failslab+0xa8/0x100 [ 223.731049][ T7755] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 223.731082][ T7755] ? dup_task_struct+0x52/0x860 [ 223.731114][ T7755] dup_task_struct+0x52/0x860 [ 223.731141][ T7755] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.731165][ T7755] copy_process+0x54b/0x3c00 [ 223.731232][ T7755] ? __pfx_copy_process+0x10/0x10 [ 223.731274][ T7755] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 223.731295][ T7755] vhost_task_create+0x1c4/0x290 [ 223.731326][ T7755] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 223.731349][ T7755] ? __pfx_vhost_task_create+0x10/0x10 [ 223.731388][ T7755] ? __pfx_vhost_task_fn+0x10/0x10 [ 223.731429][ T7755] ? kasan_save_track+0x4f/0x80 [ 223.731455][ T7755] ? kasan_save_track+0x3e/0x80 [ 223.731489][ T7755] kvm_mmu_post_init_vm+0x147/0x2b0 [ 223.731517][ T7755] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 223.731546][ T7755] ? __mutex_trylock_common+0x153/0x260 [ 223.731578][ T7755] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 223.731615][ T7755] ? rcu_is_watching+0x15/0xb0 [ 223.731640][ T7755] ? look_up_lock_class+0x74/0x170 [ 223.731662][ T7755] ? register_lock_class+0x51/0x320 [ 223.731691][ T7755] ? __lock_acquire+0xab9/0xd20 [ 223.731749][ T7755] kvm_vcpu_ioctl+0x95c/0xe90 [ 223.731789][ T7755] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 223.731822][ T7755] ? __lock_acquire+0xab9/0xd20 [ 223.731869][ T7755] ? __fget_files+0x2a/0x420 [ 223.731899][ T7755] ? __fget_files+0x2a/0x420 [ 223.731924][ T7755] ? __fget_files+0x3a0/0x420 [ 223.731949][ T7755] ? __fget_files+0x2a/0x420 [ 223.731979][ T7755] ? bpf_lsm_file_ioctl+0x9/0x20 [ 223.732008][ T7755] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 223.732040][ T7755] __se_sys_ioctl+0xfc/0x170 [ 223.732063][ T7755] do_syscall_64+0xfa/0x3b0 [ 223.732084][ T7755] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.732103][ T7755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.732124][ T7755] ? clear_bhb_loop+0x60/0xb0 [ 223.732150][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.732170][ T7755] RIP: 0033:0x7f193ef8e929 [ 223.732188][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.732214][ T7755] RSP: 002b:00007f193fd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.732236][ T7755] RAX: ffffffffffffffda RBX: 00007f193f1b5fa0 RCX: 00007f193ef8e929 [ 223.732251][ T7755] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 223.732262][ T7755] RBP: 00007f193fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 223.732275][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.732286][ T7755] R13: 0000000000000000 R14: 00007f193f1b5fa0 R15: 00007ffc68cc4d58 [ 223.732319][ T7755] [ 224.050557][ T9] usb 5-1: USB disconnect, device number 48 [ 224.295702][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 224.546874][ T982] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 224.556839][ T5906] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 224.754127][ T982] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 224.766781][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 224.774859][ T982] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 224.801558][ T5906] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.812612][ T982] usb 3-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= 6.1f [ 224.826959][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.838901][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.990001][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.999056][ T982] usb 3-1: Product: syz [ 225.003263][ T982] usb 3-1: Manufacturer: syz [ 225.018217][ T982] usb 3-1: SerialNumber: syz [ 225.029947][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.047240][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.067735][ T5906] usb 5-1: Product: syz [ 225.072003][ T5906] usb 5-1: Manufacturer: syz [ 225.087269][ T5906] usb 5-1: SerialNumber: syz [ 225.272191][ T7771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'. [ 225.301007][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'. [ 225.336443][ T7771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'. [ 225.346356][ T7771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'. [ 225.369249][ T982] usb 3-1: NDI device with a latency value of 1 [ 225.378647][ T982] ftdi_sio 3-1:2.0: FTDI USB Serial Device converter detected [ 225.406926][ T982] ftdi_sio ttyUSB0: unknown device type: 0x61f [ 225.419734][ T982] usb 3-1: USB disconnect, device number 43 [ 225.442890][ T982] ftdi_sio 3-1:2.0: device disconnected [ 225.538743][ T5906] usb 5-1: 0:2 : does not exist [ 225.545121][ T7802] input: syz1 as /devices/virtual/input/input17 [ 226.166807][ T5906] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 226.240140][ T5906] usb 5-1: USB disconnect, device number 49 [ 226.363552][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.580659][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 226.750790][ T7839] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 226.781026][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 226.824322][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.841224][ T9] usb 2-1: config 0 has no interfaces? [ 226.848417][ T7842] FAULT_INJECTION: forcing a failure. [ 226.848417][ T7842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.857204][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 226.875184][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.875238][ T7842] CPU: 1 UID: 0 PID: 7842 Comm: syz.5.655 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 226.875265][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.875278][ T7842] Call Trace: [ 226.875290][ T7842] [ 226.875300][ T7842] dump_stack_lvl+0x189/0x250 [ 226.875341][ T7842] ? __pfx____ratelimit+0x10/0x10 [ 226.875366][ T7842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.875400][ T7842] ? __pfx__printk+0x10/0x10 [ 226.875450][ T7842] should_fail_ex+0x414/0x560 [ 226.875492][ T7842] _copy_to_user+0x31/0xb0 [ 226.875528][ T7842] simple_read_from_buffer+0xe1/0x170 [ 226.875564][ T7842] proc_fail_nth_read+0x1df/0x250 [ 226.875603][ T7842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.875642][ T7842] ? rw_verify_area+0x2a6/0x4d0 [ 226.875664][ T7842] ? __lock_acquire+0xab9/0xd20 [ 226.875689][ T7842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.875734][ T7842] vfs_read+0x1fd/0x980 [ 226.875765][ T7842] ? __pfx___mutex_lock+0x10/0x10 [ 226.875791][ T7842] ? __pfx_vfs_read+0x10/0x10 [ 226.875818][ T7842] ? __fget_files+0x2a/0x420 [ 226.875854][ T7842] ? __fget_files+0x3a0/0x420 [ 226.875881][ T7842] ? __fget_files+0x2a/0x420 [ 226.875922][ T7842] ksys_read+0x145/0x250 [ 226.875945][ T7842] ? __fget_files+0x3a0/0x420 [ 226.875976][ T7842] ? __pfx_ksys_read+0x10/0x10 [ 226.876007][ T7842] ? do_syscall_64+0xbe/0x3b0 [ 226.876037][ T7842] do_syscall_64+0xfa/0x3b0 [ 226.876059][ T7842] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.876083][ T7842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.876105][ T7842] ? clear_bhb_loop+0x60/0xb0 [ 226.876139][ T7842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.876161][ T7842] RIP: 0033:0x7f193ef8d33c [ 226.876183][ T7842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.876203][ T7842] RSP: 002b:00007f193cdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.876234][ T7842] RAX: ffffffffffffffda RBX: 00007f193f1b6080 RCX: 00007f193ef8d33c [ 226.876251][ T7842] RDX: 000000000000000f RSI: 00007f193cdf60a0 RDI: 0000000000000004 [ 226.876266][ T7842] RBP: 00007f193cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.876279][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.876294][ T7842] R13: 0000000000000000 R14: 00007f193f1b6080 R15: 00007ffc68cc4d58 [ 226.876330][ T7842] [ 227.167029][ T9] usb 2-1: config 0 descriptor?? [ 227.298533][ T7848] comedi comedi3: comedi_test: 20262 microvolt, 5 microsecond waveform attached [ 228.047324][ T5919] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 228.211264][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 228.235326][ T5919] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 228.249274][ T5919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.260368][ T5919] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.273006][ T5919] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.282242][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.311506][ T5919] usb 5-1: Product: syz [ 228.316193][ T5919] usb 5-1: Manufacturer: syz [ 228.322372][ T5919] usb 5-1: SerialNumber: syz [ 228.425686][ T7890] gfs2: not a GFS2 filesystem [ 228.647160][ T5906] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 228.744960][ T7897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.750514][ T5919] usb 5-1: 0:2 : does not exist [ 228.818865][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.829921][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.849691][ T5906] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.38 [ 228.859803][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.871893][ T5906] usb 6-1: config 0 descriptor?? [ 229.315499][ T5906] elo 0003:04E7:0030.0009: item fetching failed at offset 0/3 [ 229.332825][ T5906] elo 0003:04E7:0030.0009: parse failed [ 229.339508][ T5906] elo 0003:04E7:0030.0009: probe with driver elo failed with error -22 [ 229.343487][ T5862] usb 2-1: USB disconnect, device number 67 [ 229.402106][ T5919] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 229.465351][ T7911] sctp: [Deprecated]: syz.2.679 (pid 7911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.465351][ T7911] Use struct sctp_sack_info instead [ 229.491381][ T5919] usb 5-1: USB disconnect, device number 50 [ 229.547073][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.551049][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 229.984370][ T7919] FAULT_INJECTION: forcing a failure. [ 229.984370][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.998142][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.4.684 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 229.998171][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.998184][ T7919] Call Trace: [ 229.998192][ T7919] [ 229.998201][ T7919] dump_stack_lvl+0x189/0x250 [ 229.998236][ T7919] ? __pfx____ratelimit+0x10/0x10 [ 229.998258][ T7919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.998287][ T7919] ? __pfx__printk+0x10/0x10 [ 229.998317][ T7919] ? __might_fault+0xb0/0x130 [ 229.998360][ T7919] should_fail_ex+0x414/0x560 [ 229.998397][ T7919] _copy_from_iter+0x1db/0x16f0 [ 229.998427][ T7919] ? __lock_acquire+0xab9/0xd20 [ 229.998457][ T7919] ? __pfx__copy_from_iter+0x10/0x10 [ 229.998500][ T7919] tun_get_user+0x219/0x3e20 [ 229.998546][ T7919] ? aa_file_perm+0x13e/0x11b0 [ 229.998574][ T7919] ? aa_file_perm+0x3ed/0x11b0 [ 229.998601][ T7919] ? __pfx_tun_get_user+0x10/0x10 [ 229.998638][ T7919] ? _parse_integer_limit+0x1ae/0x1f0 [ 229.998669][ T7919] ? __lock_acquire+0xab9/0xd20 [ 229.998697][ T7919] ? ref_tracker_alloc+0x318/0x460 [ 229.998715][ T7919] ? __lock_acquire+0xab9/0xd20 [ 229.998739][ T7919] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.998764][ T7919] ? tun_get+0x1c/0x2f0 [ 229.998794][ T7919] ? tun_get+0x1c/0x2f0 [ 229.998818][ T7919] ? tun_get+0x1c/0x2f0 [ 229.998847][ T7919] tun_chr_write_iter+0x113/0x200 [ 229.998879][ T7919] vfs_write+0x54b/0xa90 [ 229.998906][ T7919] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.998932][ T7919] ? __pfx_vfs_write+0x10/0x10 [ 229.998965][ T7919] ? __fget_files+0x2a/0x420 [ 229.999005][ T7919] ksys_write+0x145/0x250 [ 229.999030][ T7919] ? __pfx_ksys_write+0x10/0x10 [ 229.999048][ T7919] ? rcu_is_watching+0x15/0xb0 [ 229.999079][ T7919] ? do_syscall_64+0xbe/0x3b0 [ 229.999104][ T7919] do_syscall_64+0xfa/0x3b0 [ 229.999124][ T7919] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.999142][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.999162][ T7919] ? clear_bhb_loop+0x60/0xb0 [ 229.999186][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.999205][ T7919] RIP: 0033:0x7fde8398e929 [ 229.999222][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.999240][ T7919] RSP: 002b:00007fde84873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.999260][ T7919] RAX: ffffffffffffffda RBX: 00007fde83bb5fa0 RCX: 00007fde8398e929 [ 229.999275][ T7919] RDX: 000000000000002a RSI: 0000200000000b80 RDI: 0000000000000003 [ 229.999287][ T7919] RBP: 00007fde84873090 R08: 0000000000000000 R09: 0000000000000000 [ 229.999299][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.999310][ T7919] R13: 0000000000000000 R14: 00007fde83bb5fa0 R15: 00007ffe65b67478 [ 229.999340][ T7919] [ 230.275254][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.127745][ T9] usb 6-1: USB disconnect, device number 20 [ 231.218159][ T5862] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 231.387129][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 231.418744][ T5862] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.441951][ T5862] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.481782][ T5862] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 231.487468][ T7935] netlink: 32 bytes leftover after parsing attributes in process `syz.5.691'. [ 231.536325][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.566041][ T5862] usb 2-1: config 0 descriptor?? [ 231.856813][ T5972] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 232.026735][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 232.033711][ T5972] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 232.042572][ T5972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.052785][ T5972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.063790][ T5972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.072903][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.081023][ T5972] usb 5-1: Product: syz [ 232.085215][ T5972] usb 5-1: Manufacturer: syz [ 232.089890][ T5972] usb 5-1: SerialNumber: syz [ 232.442724][ T7951] hugetlbfs: syz.5.698 (7951): Using mlock ulimits for SHM_HUGETLB is obsolete [ 232.530367][ T5972] usb 5-1: 0:2 : does not exist [ 233.207001][ T5972] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 233.304497][ T5972] usb 5-1: USB disconnect, device number 51 [ 234.048235][ T982] usb 2-1: USB disconnect, device number 68 [ 234.456823][ T5862] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 234.627353][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 234.648913][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 234.700170][ T5862] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 234.732331][ T5862] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 234.789904][ T5862] usb 6-1: Product: syz [ 234.794139][ T5862] usb 6-1: Manufacturer: syz [ 234.798563][ T8001] FAULT_INJECTION: forcing a failure. [ 234.798563][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.819350][ T5862] usb 6-1: SerialNumber: syz [ 234.842660][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.2.713 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 234.842690][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.842704][ T8001] Call Trace: [ 234.842712][ T8001] [ 234.842722][ T8001] dump_stack_lvl+0x189/0x250 [ 234.842758][ T8001] ? __pfx____ratelimit+0x10/0x10 [ 234.842780][ T8001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.842808][ T8001] ? __pfx__printk+0x10/0x10 [ 234.842838][ T8001] ? __might_fault+0xb0/0x130 [ 234.842880][ T8001] should_fail_ex+0x414/0x560 [ 234.842918][ T8001] _copy_from_user+0x2d/0xb0 [ 234.842946][ T8001] binder_ioctl_write_read+0x124/0xa000 [ 234.842983][ T8001] ? is_bpf_text_address+0x292/0x2b0 [ 234.843007][ T8001] ? is_bpf_text_address+0x26/0x2b0 [ 234.843033][ T8001] ? kernel_text_address+0xa5/0xe0 [ 234.843053][ T8001] ? __kernel_text_address+0xd/0x40 [ 234.843072][ T8001] ? unwind_get_return_address+0x4d/0x90 [ 234.843098][ T8001] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.843127][ T8001] ? arch_stack_walk+0xfc/0x150 [ 234.843167][ T8001] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 234.843186][ T8001] ? stack_trace_save+0x9c/0xe0 [ 234.843216][ T8001] ? stack_depot_save_flags+0x40/0x900 [ 234.843255][ T8001] ? kasan_save_track+0x4f/0x80 [ 234.843310][ T8001] ? kasan_save_track+0x3e/0x80 [ 234.843335][ T8001] ? kasan_save_free_info+0x46/0x50 [ 234.843357][ T8001] ? __kasan_slab_free+0x62/0x70 [ 234.843385][ T8001] ? kfree+0x18e/0x440 [ 234.843411][ T8001] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 234.843431][ T8001] ? security_file_ioctl+0xcb/0x2d0 [ 234.843448][ T8001] ? __se_sys_ioctl+0x47/0x170 [ 234.843465][ T8001] ? do_syscall_64+0xfa/0x3b0 [ 234.843485][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.843517][ T8001] ? __lock_acquire+0xab9/0xd20 [ 234.843539][ T8001] ? binder_debug+0x13f/0x1b0 [ 234.843565][ T8001] ? __pfx_binder_debug+0x10/0x10 [ 234.843583][ T8001] ? do_raw_spin_lock+0x121/0x290 [ 234.843631][ T8001] ? _raw_spin_unlock+0x28/0x50 [ 234.843660][ T8001] ? binder_get_thread+0x178/0x6d0 [ 234.843685][ T8001] binder_ioctl+0x3e0/0x19c0 [ 234.843708][ T8001] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 234.843732][ T8001] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 234.843758][ T8001] ? do_vfs_ioctl+0xbe8/0x1430 [ 234.843777][ T8001] ? __pfx_binder_ioctl+0x10/0x10 [ 234.843799][ T8001] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.843835][ T8001] ? __lock_acquire+0xab9/0xd20 [ 234.843879][ T8001] ? __fget_files+0x2a/0x420 [ 234.843909][ T8001] ? __fget_files+0x2a/0x420 [ 234.843934][ T8001] ? __fget_files+0x3a0/0x420 [ 234.843959][ T8001] ? __fget_files+0x2a/0x420 [ 234.843989][ T8001] ? bpf_lsm_file_ioctl+0x9/0x20 [ 234.844018][ T8001] ? __pfx_binder_ioctl+0x10/0x10 [ 234.844040][ T8001] __se_sys_ioctl+0xfc/0x170 [ 234.844064][ T8001] do_syscall_64+0xfa/0x3b0 [ 234.844084][ T8001] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.844104][ T8001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.844124][ T8001] ? clear_bhb_loop+0x60/0xb0 [ 234.844149][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.844169][ T8001] RIP: 0033:0x7f6a1b18e929 [ 234.844188][ T8001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.844206][ T8001] RSP: 002b:00007f6a1bf8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.844228][ T8001] RAX: ffffffffffffffda RBX: 00007f6a1b3b5fa0 RCX: 00007f6a1b18e929 [ 234.844243][ T8001] RDX: 0000200000000380 RSI: 00000000c0306201 RDI: 0000000000000003 [ 234.844256][ T8001] RBP: 00007f6a1bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 234.844268][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.844290][ T8001] R13: 0000000000000000 R14: 00007f6a1b3b5fa0 R15: 00007ffe7c62db88 [ 234.844321][ T8001] [ 234.844330][ T8001] binder: 8000:8001 ioctl c0306201 200000000380 returned -14 [ 235.296812][ T5899] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 235.446123][ T5862] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 235.455047][ T5862] usb 6-1: Handspring Visor / Palm OS: port 210, is for Remote File System use [ 235.464259][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 235.478822][ T5899] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 235.498065][ T5862] usb 6-1: Handspring Visor / Palm OS: port 121, is for unknown use [ 235.506316][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.524208][ T5862] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 235.552449][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.576228][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.596409][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.631103][ T5899] usb 2-1: Product: syz [ 235.635482][ T5899] usb 2-1: Manufacturer: syz [ 235.658024][ T5862] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 235.673240][ T8010] tipc: Started in network mode [ 235.679437][ T5899] usb 2-1: SerialNumber: syz [ 235.686596][ T8010] tipc: Node identity ac1414aa, cluster identity 4711 [ 235.691872][ T5862] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 235.699825][ T8010] tipc: Enabled bearer , priority 10 [ 235.754187][ T5862] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 235.786814][ T982] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 235.940599][ T5862] usb 6-1: USB disconnect, device number 21 [ 235.973532][ T5862] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 235.988684][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 236.001231][ T5862] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 236.002497][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.020628][ T5862] visor 6-1:1.0: device disconnected [ 236.025039][ T982] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.038143][ T982] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 236.048892][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.066842][ T982] usb 3-1: config 0 descriptor?? [ 236.131782][ T5899] usb 2-1: 0:2 : does not exist [ 236.206825][ T5919] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 236.366705][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 236.373929][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.384011][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.394460][ T5919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.404576][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.417640][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.428996][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.621214][ T8021] comedi comedi1: Minor 2 could not be opened [ 236.650781][ T5919] usb 5-1: GET_CAPABILITIES returned 0 [ 236.656504][ T5919] usbtmc 5-1:16.0: can't read capabilities [ 236.713965][ T8024] FAULT_INJECTION: forcing a failure. [ 236.713965][ T8024] name failslab, interval 1, probability 0, space 0, times 0 [ 236.728520][ T8024] CPU: 0 UID: 0 PID: 8024 Comm: syz.5.723 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 236.728550][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.728562][ T8024] Call Trace: [ 236.728570][ T8024] [ 236.728579][ T8024] dump_stack_lvl+0x189/0x250 [ 236.728617][ T8024] ? __pfx____ratelimit+0x10/0x10 [ 236.728637][ T8024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.728666][ T8024] ? __pfx__printk+0x10/0x10 [ 236.728696][ T8024] ? __pfx___might_resched+0x10/0x10 [ 236.728721][ T8024] ? fs_reclaim_acquire+0x7d/0x100 [ 236.728747][ T8024] should_fail_ex+0x414/0x560 [ 236.728784][ T8024] should_failslab+0xa8/0x100 [ 236.728805][ T8024] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 236.728836][ T8024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.728854][ T8024] ? parse_opts+0x138/0x580 [ 236.728878][ T8024] kstrdup+0x42/0x100 [ 236.728903][ T8024] parse_opts+0x138/0x580 [ 236.728932][ T8024] ? __pfx_parse_opts+0x10/0x10 [ 236.728962][ T8024] ? kasan_quarantine_put+0xdd/0x220 [ 236.728989][ T8024] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.729014][ T8024] p9_fd_create+0x37/0x3f0 [ 236.729034][ T8024] ? kfree+0x18e/0x440 [ 236.729066][ T8024] p9_client_create+0x7fa/0xfe0 [ 236.729102][ T8024] ? __pfx_p9_client_create+0x10/0x10 [ 236.729151][ T8024] ? __raw_spin_lock_init+0x45/0x100 [ 236.729188][ T8024] v9fs_session_init+0x1d7/0x19a0 [ 236.729237][ T8024] ? __pfx_v9fs_session_init+0x10/0x10 [ 236.729267][ T8024] ? __kasan_kmalloc+0x93/0xb0 [ 236.729300][ T8024] ? v9fs_mount+0xb2/0xa50 [ 236.729327][ T8024] v9fs_mount+0xc8/0xa50 [ 236.729351][ T8024] ? __pfx_aa_get_newest_label+0x10/0x10 [ 236.729388][ T8024] ? __pfx_v9fs_mount+0x10/0x10 [ 236.729414][ T8024] ? rcu_is_watching+0x15/0xb0 [ 236.729445][ T8024] legacy_get_tree+0xfa/0x1a0 [ 236.729471][ T8024] ? __pfx_v9fs_mount+0x10/0x10 [ 236.729496][ T8024] vfs_get_tree+0x92/0x2b0 [ 236.729522][ T8024] do_new_mount+0x2a2/0x9e0 [ 236.729570][ T8024] ? ns_capable+0x8a/0xf0 [ 236.729594][ T8024] ? __pfx_do_new_mount+0x10/0x10 [ 236.729632][ T8024] ? path_mount+0x61c/0xfe0 [ 236.729653][ T8024] ? user_path_at+0x44/0x60 [ 236.729681][ T8024] __se_sys_mount+0x317/0x410 [ 236.729713][ T8024] ? __pfx___se_sys_mount+0x10/0x10 [ 236.729737][ T8024] ? rcu_is_watching+0x15/0xb0 [ 236.729766][ T8024] ? do_syscall_64+0xbe/0x3b0 [ 236.729786][ T8024] ? __x64_sys_mount+0x20/0xc0 [ 236.729814][ T8024] do_syscall_64+0xfa/0x3b0 [ 236.729833][ T8024] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.729852][ T8024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.729871][ T8024] ? clear_bhb_loop+0x60/0xb0 [ 236.729895][ T8024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.729914][ T8024] RIP: 0033:0x7f193ef8e929 [ 236.729933][ T8024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.729949][ T8024] RSP: 002b:00007f193fd11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.729971][ T8024] RAX: ffffffffffffffda RBX: 00007f193f1b5fa0 RCX: 00007f193ef8e929 [ 236.729985][ T8024] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 236.729998][ T8024] RBP: 00007f193fd11090 R08: 0000200000000300 R09: 0000000000000000 [ 236.730011][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.730023][ T8024] R13: 0000000000000000 R14: 00007f193f1b5fa0 R15: 00007ffc68cc4d58 [ 236.730052][ T8024] [ 237.069492][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.082029][ T5919] tipc: Node number set to 2886997162 [ 237.103602][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.128219][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.128402][ T5899] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 237.137352][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.137399][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.137438][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.146318][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.182179][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.191307][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.208414][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.217571][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.226691][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.235767][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.246404][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.255538][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.264664][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.273870][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.285049][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.295209][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 237.310316][ T5919] usb 5-1: USB disconnect, device number 52 [ 237.314242][ T5899] usb 2-1: USB disconnect, device number 69 [ 237.367581][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.183432][ T8061] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 238.403887][ T8071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.719245][ T5899] usb 3-1: USB disconnect, device number 44 [ 238.890035][ T8083] FAULT_INJECTION: forcing a failure. [ 238.890035][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 238.950748][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.1.737 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 238.950778][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.950791][ T8083] Call Trace: [ 238.950799][ T8083] [ 238.950808][ T8083] dump_stack_lvl+0x189/0x250 [ 238.950843][ T8083] ? __pfx____ratelimit+0x10/0x10 [ 238.950863][ T8083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.950892][ T8083] ? __pfx__printk+0x10/0x10 [ 238.950924][ T8083] ? __pfx___might_resched+0x10/0x10 [ 238.950949][ T8083] ? fs_reclaim_acquire+0x7d/0x100 [ 238.950976][ T8083] should_fail_ex+0x414/0x560 [ 238.951022][ T8083] should_failslab+0xa8/0x100 [ 238.951043][ T8083] __kmalloc_noprof+0xcb/0x4f0 [ 238.951072][ T8083] ? tomoyo_encode+0x28b/0x550 [ 238.951104][ T8083] tomoyo_encode+0x28b/0x550 [ 238.951136][ T8083] tomoyo_realpath_from_path+0x58d/0x5d0 [ 238.951166][ T8083] ? tomoyo_domain+0xd9/0x130 [ 238.951199][ T8083] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 238.951221][ T8083] tomoyo_path_number_perm+0x1e8/0x5a0 [ 238.951246][ T8083] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.951286][ T8083] ? __lock_acquire+0xab9/0xd20 [ 238.951330][ T8083] ? __fget_files+0x2a/0x420 [ 238.951358][ T8083] ? __fget_files+0x2a/0x420 [ 238.951382][ T8083] ? __fget_files+0x3a0/0x420 [ 238.951406][ T8083] ? __fget_files+0x2a/0x420 [ 238.951436][ T8083] security_file_ioctl+0xcb/0x2d0 [ 238.951458][ T8083] __se_sys_ioctl+0x47/0x170 [ 238.951481][ T8083] do_syscall_64+0xfa/0x3b0 [ 238.951501][ T8083] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.951520][ T8083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.951539][ T8083] ? clear_bhb_loop+0x60/0xb0 [ 238.951563][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.951582][ T8083] RIP: 0033:0x7ff4e258e929 [ 238.951598][ T8083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.951615][ T8083] RSP: 002b:00007ff4e3454038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.951649][ T8083] RAX: ffffffffffffffda RBX: 00007ff4e27b5fa0 RCX: 00007ff4e258e929 [ 238.951663][ T8083] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000004 [ 238.951676][ T8083] RBP: 00007ff4e3454090 R08: 0000000000000000 R09: 0000000000000000 [ 238.951687][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.951698][ T8083] R13: 0000000000000000 R14: 00007ff4e27b5fa0 R15: 00007ffc8273d568 [ 238.951728][ T8083] [ 238.951749][ T8083] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.229094][ T5919] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 239.343711][ T8094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.357097][ T5862] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 239.377332][ T5919] usb 5-1: device descriptor read/64, error -71 [ 239.527670][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 239.553763][ T5862] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 239.571073][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.583459][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.597522][ T5862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.607104][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.615186][ T5862] usb 6-1: Product: syz [ 239.620152][ T5862] usb 6-1: Manufacturer: syz [ 239.624783][ T5862] usb 6-1: SerialNumber: syz [ 239.647093][ T5919] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 239.656961][ T5899] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 239.796867][ T5919] usb 5-1: device descriptor read/64, error -71 [ 239.808547][ T5899] usb 2-1: not running at top speed; connect to a high speed hub [ 239.820562][ T5899] usb 2-1: config 1 interface 0 altsetting 130 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 239.831949][ T5899] usb 2-1: config 1 interface 0 has no altsetting 0 [ 239.846254][ T5899] usb 2-1: New USB device found, idVendor=2087, idProduct=0f01, bcdDevice= 0.40 [ 239.855477][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.864423][ T5899] usb 2-1: Product: syz [ 239.868688][ T5899] usb 2-1: Manufacturer: syz [ 239.873317][ T5899] usb 2-1: SerialNumber: syz [ 239.882075][ T8096] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 239.910917][ T5919] usb usb5-port1: attempt power cycle [ 239.947821][ T5972] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 240.046084][ T5862] usb 6-1: 0:2 : does not exist [ 240.103719][ T5899] usbhid 2-1:1.0: can't add hid device: -71 [ 240.108583][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 240.112810][ T5899] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 240.123670][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.133437][ T5899] usb 2-1: USB disconnect, device number 70 [ 240.135392][ T5972] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.149711][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 240.159198][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.172465][ T5972] usb 3-1: config 0 descriptor?? [ 240.256758][ T5919] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 240.278901][ T5919] usb 5-1: device descriptor read/8, error -71 [ 240.516798][ T5919] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 240.537358][ T5919] usb 5-1: device descriptor read/8, error -71 [ 240.650227][ T5919] usb usb5-port1: unable to enumerate USB device [ 240.683624][ T5862] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 240.737147][ T5862] usb 6-1: USB disconnect, device number 22 [ 241.466427][ T5919] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 241.632663][ T5919] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 241.651535][ T5919] usb 6-1: config 0 has no interfaces? [ 241.668022][ T5919] usb 6-1: config 0 has no interfaces? [ 241.677867][ T5919] usb 6-1: config 0 has no interfaces? [ 241.687740][ T5919] usb 6-1: config 0 has no interfaces? [ 241.702259][ T5919] usb 6-1: config 0 has no interfaces? [ 241.708863][ T5919] usb 6-1: config 0 has no interfaces? [ 241.715304][ T5919] usb 6-1: config 0 has no interfaces? [ 241.723114][ T5919] usb 6-1: config 0 has no interfaces? [ 241.731895][ T5919] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.741329][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.751447][ T5919] usb 6-1: Product: syz [ 241.755652][ T5919] usb 6-1: Manufacturer: syz [ 241.760394][ T5919] usb 6-1: SerialNumber: syz [ 241.768930][ T5919] usb 6-1: config 0 descriptor?? [ 241.985718][ T5862] usb 6-1: USB disconnect, device number 23 [ 242.458521][ T5919] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 242.606991][ T5906] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 242.626847][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 242.633827][ T5919] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.642712][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.648336][ T5920] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 242.652904][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.672969][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.682523][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.690614][ T5919] usb 2-1: Product: syz [ 242.694811][ T5919] usb 2-1: Manufacturer: syz [ 242.699527][ T5919] usb 2-1: SerialNumber: syz [ 242.739806][ T5972] usb 3-1: USB disconnect, device number 45 [ 242.775501][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 242.787797][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 242.805603][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.832908][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 242.850033][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.854526][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 242.859422][ T5906] usb 5-1: Product: syz [ 242.875867][ T5906] usb 5-1: Manufacturer: syz [ 242.880597][ T5906] usb 5-1: SerialNumber: syz [ 242.907374][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.922665][ T5906] usb 5-1: config 0 descriptor?? [ 242.931468][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 242.962648][ T5920] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 242.973613][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.983357][ T5920] usb 6-1: Product: syz [ 242.989011][ T5920] usb 6-1: Manufacturer: syz [ 242.994033][ T5920] usb 6-1: SerialNumber: syz [ 243.002682][ T5920] usb 6-1: config 0 descriptor?? [ 243.130502][ T5919] usb 2-1: 0:2 : does not exist [ 243.137250][ T5906] appledisplay: Apple Cinema Display connected [ 243.212775][ T5920] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 243.355676][ T5920] usb 5-1: USB disconnect, device number 57 [ 243.355699][ C1] usb 5-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 243.374763][ T5920] appledisplay: Apple Cinema Display disconnected [ 243.423500][ T8116] fuse: Bad value for 'fd' [ 243.663508][ T5920] usb 6-1: USB disconnect, device number 24 [ 243.957317][ T5919] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 244.150571][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 244.345187][ T5919] usb 2-1: USB disconnect, device number 71 [ 244.413826][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.651546][ T8165] netlink: 'syz.1.768': attribute type 21 has an invalid length. [ 244.696730][ T8165] netlink: 128 bytes leftover after parsing attributes in process `syz.1.768'. [ 244.729616][ T8165] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 244.739890][ T8165] netlink: 3 bytes leftover after parsing attributes in process `syz.1.768'. [ 244.777298][ T8163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 244.936923][ T5919] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 244.986714][ T5920] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 245.108314][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 245.129061][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.144884][ T5919] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.154445][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 245.166775][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 245.171249][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.178680][ T5920] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 245.188658][ T5920] usb 3-1: config 0 has no interface number 0 [ 245.194807][ T5920] usb 3-1: config 0 interface 23 has no altsetting 0 [ 245.201705][ T5919] usb 5-1: config 0 descriptor?? [ 245.255535][ T5920] usb 3-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 245.326018][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.356689][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 245.377918][ T5920] usb 3-1: Product: syz [ 245.383167][ T5920] usb 3-1: Manufacturer: syz [ 245.406722][ T5920] usb 3-1: SerialNumber: syz [ 245.416691][ T5920] usb 3-1: config 0 descriptor?? [ 245.630330][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 245.654370][ T9] usb 6-1: config 6 has an invalid interface number: 252 but max is 0 [ 245.663856][ T5920] kaweth 3-1:0.23: Firmware present in device. [ 245.671306][ T9] usb 6-1: config 6 has no interface number 0 [ 245.678000][ T9] usb 6-1: config 6 interface 252 has no altsetting 0 [ 245.688029][ T9] usb 6-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=76.22 [ 245.706762][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.714863][ T9] usb 6-1: Product: syz [ 245.739775][ T9] usb 6-1: Manufacturer: syz [ 245.747129][ T9] usb 6-1: SerialNumber: syz [ 245.829722][ T5920] kaweth 3-1:0.23: Statistics collection: 0 [ 245.837927][ T5920] kaweth 3-1:0.23: Multicast filter limit: 0 [ 245.853722][ T5920] kaweth 3-1:0.23: MTU: 0 [ 245.860802][ T5920] kaweth 3-1:0.23: Read MAC address 00:00:00:00:00:00 [ 246.170871][ T9] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 246.230925][ T5920] kaweth 3-1:0.23: Error setting SOFS wait [ 246.261735][ T5920] kaweth 3-1:0.23: probe with driver kaweth failed with error -5 [ 246.280622][ T5920] usb 3-1: USB disconnect, device number 46 [ 246.365091][ T9] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 246.375869][ T9] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 246.386344][ T9] usb 6-1: media controller created [ 246.394827][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.409572][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 246.420937][ T9] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 246.516792][ T9] rc_core: IR keymap rc-dtt200u not found [ 246.522771][ T9] Registered IR keymap rc-empty [ 246.531806][ T9] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 246.545850][ T9] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input19 [ 246.569466][ T8180] binder: BINDER_SET_CONTEXT_MGR already set [ 246.570894][ T9] dvb-usb: schedule remote query interval to 300 msecs. [ 246.580308][ T8180] binder: 8179:8180 ioctl 4018620d 200000000040 returned -16 [ 246.587610][ T9] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 246.609714][ T9] usb 6-1: USB disconnect, device number 25 [ 246.647050][ T9] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 247.066837][ T5906] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 247.240416][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 247.252293][ T5906] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 247.264562][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.280465][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.293582][ T5906] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.313049][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.322780][ T5906] usb 3-1: Product: syz [ 247.328306][ T5906] usb 3-1: Manufacturer: syz [ 247.336819][ T5906] usb 3-1: SerialNumber: syz [ 247.773187][ T5862] usb 5-1: USB disconnect, device number 58 [ 247.782523][ T5906] usb 3-1: 0:2 : does not exist [ 248.070614][ T8226] XFS (rnullb0): Invalid superblock magic number [ 248.080365][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 248.492347][ T5906] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 248.582469][ T8237] netlink: 'syz.1.786': attribute type 10 has an invalid length. [ 248.595355][ T8237] hsr_slave_0: entered allmulticast mode [ 248.617791][ T5906] usb 3-1: USB disconnect, device number 47 [ 248.628880][ T8237] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 248.664274][ T8237] overlayfs: missing 'lowerdir' [ 248.690259][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.797685][ T5972] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 248.813671][ T8244] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 248.830119][ T8244] netlink: 'syz.5.787': attribute type 1 has an invalid length. [ 248.989712][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 249.002180][ T5972] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 249.029858][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.047586][ T5972] usb 5-1: config 0 has no interface number 0 [ 249.053926][ T5972] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 249.066084][ T5972] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 249.078561][ T5972] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 249.096198][ T5972] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 249.119349][ T5972] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 249.129811][ T5972] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 249.144798][ T5972] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 249.155776][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.167835][ T5972] usb 5-1: config 0 descriptor?? [ 249.173609][ T8235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 249.197317][ T5972] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.361331][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.385774][ T5972] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 249.557206][ T5920] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 249.727103][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 249.740685][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 249.755436][ T5920] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 249.765383][ T5862] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 249.773629][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 249.782444][ T5920] usb 6-1: Product: syz [ 249.786744][ T5920] usb 6-1: Manufacturer: syz [ 249.791389][ T5920] usb 6-1: SerialNumber: syz [ 249.805642][ T5920] usb 6-1: config 0 descriptor?? [ 249.811439][ T8253] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 249.823615][ T5920] hub 6-1:0.0: bad descriptor, ignoring hub [ 249.830983][ T5920] hub 6-1:0.0: probe with driver hub failed with error -5 [ 249.936697][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 249.943427][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.953677][ T5862] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.962797][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 249.966811][ T5972] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 249.971968][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.990375][ T5862] usb 3-1: config 0 descriptor?? [ 250.136748][ T5972] usb 2-1: device descriptor read/64, error -71 [ 250.137495][ T5862] usb 6-1: USB disconnect, device number 26 [ 250.376830][ T5972] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 250.506875][ T5972] usb 2-1: device descriptor read/64, error -71 [ 250.617113][ T5972] usb usb2-port1: attempt power cycle [ 250.957935][ T5972] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 250.998513][ T5972] usb 2-1: device descriptor read/8, error -71 [ 251.212885][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'. [ 251.246844][ T5972] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 251.269064][ T5972] usb 2-1: device descriptor read/8, error -71 [ 251.399787][ T5972] usb usb2-port1: unable to enumerate USB device [ 251.625855][ T5862] usb 5-1: USB disconnect, device number 59 [ 252.066742][ T5862] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 252.110267][ T5920] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 252.216819][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 252.223524][ T5862] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 252.232619][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.242804][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.251838][ T5920] usb 6-1: device descriptor read/64, error -71 [ 252.260380][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.269521][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.277673][ T5862] usb 5-1: Product: syz [ 252.281883][ T5862] usb 5-1: Manufacturer: syz [ 252.286474][ T5862] usb 5-1: SerialNumber: syz [ 252.354053][ T3501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.436018][ T3501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.506927][ T5920] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 252.509586][ T3501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.567133][ T5899] usb 3-1: USB disconnect, device number 48 [ 252.637041][ T5920] usb 6-1: device descriptor read/64, error -71 [ 252.658261][ T3501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.720313][ T5862] usb 5-1: 0:2 : does not exist [ 252.747051][ T5920] usb usb6-port1: attempt power cycle [ 252.920148][ T3501] bridge_slave_1: left allmulticast mode [ 252.926475][ T3501] bridge_slave_1: left promiscuous mode [ 252.935069][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.947037][ T5899] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 252.957731][ T3501] bridge_slave_0: left allmulticast mode [ 252.963438][ T3501] bridge_slave_0: left promiscuous mode [ 252.970682][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.118420][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 253.123781][ T5920] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 253.144262][ T5899] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 253.153821][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.164258][ T5920] usb 6-1: device descriptor read/8, error -71 [ 253.170557][ T5899] usb 3-1: Product: syz [ 253.174803][ T5899] usb 3-1: Manufacturer: syz [ 253.185442][ T5899] usb 3-1: SerialNumber: syz [ 253.194189][ T5899] usb 3-1: config 0 descriptor?? [ 253.205626][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 253.356334][ T5862] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 253.396523][ T5862] usb 5-1: USB disconnect, device number 60 [ 253.447063][ T5920] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 253.458534][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.507498][ T5920] usb 6-1: device descriptor read/8, error -71 [ 253.567133][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.581903][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.592953][ T3501] bond0 (unregistering): Released all slaves [ 253.610755][ T8292] syz_tun: entered allmulticast mode [ 253.617332][ T5920] usb usb6-port1: unable to enumerate USB device [ 254.275574][ T8308] kAFS: unparsable volume name [ 254.553180][ T3501] hsr_slave_0: left promiscuous mode [ 254.597251][ T3501] hsr_slave_1: left promiscuous mode [ 254.622323][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.650804][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.678304][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.702708][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.826415][ T3501] veth1_macvtap: left promiscuous mode [ 254.878217][ T3501] veth0_macvtap: left promiscuous mode [ 254.894475][ T3501] veth1_vlan: left promiscuous mode [ 254.904491][ T3501] veth0_vlan: left promiscuous mode [ 255.129720][ T5899] gspca_sonixj: reg_r err -32 [ 255.186213][ T5899] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 255.418214][ T5972] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 255.580456][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 255.597195][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.612213][ T5972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.621842][ T5972] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 255.634133][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.652535][ T5972] usb 5-1: config 0 descriptor?? [ 255.750404][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 255.793753][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 256.264443][ T43] usb 3-1: USB disconnect, device number 49 [ 256.545893][ T8332] syzkaller0: entered promiscuous mode [ 256.551693][ T8332] syzkaller0: entered allmulticast mode [ 256.564706][ T43] IPVS: starting estimator thread 0... [ 256.573215][ T8335] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 256.669871][ T8340] IPVS: using max 28 ests per chain, 67200 per kthread [ 256.724987][ T8347] gfs2: not a GFS2 filesystem [ 256.889369][ T8354] comedi comedi1: dmm32at: I/O port conflict (0xffffffffffffffff,16) [ 256.936802][ T5899] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 257.130184][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 257.155759][ T5899] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 257.169697][ T5899] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.185711][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.266358][ T5899] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 257.286114][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.342049][ T5899] usb 6-1: Product: syz [ 257.346275][ T5899] usb 6-1: Manufacturer: syz [ 257.379958][ T5899] usb 6-1: SerialNumber: syz [ 257.845371][ T5899] usb 6-1: 0:2 : does not exist [ 258.215060][ T5862] usb 5-1: USB disconnect, device number 61 [ 258.464607][ T5899] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 258.527160][ T5899] usb 6-1: USB disconnect, device number 31 [ 258.555107][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.574837][ T8392] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 258.829572][ T5862] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 258.966709][ T5862] usb 2-1: device descriptor read/64, error -71 [ 259.160590][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.237024][ T5862] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 259.386773][ T5862] usb 2-1: device descriptor read/64, error -71 [ 259.502636][ T5862] usb usb2-port1: attempt power cycle [ 259.869159][ T5862] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 259.898001][ T5862] usb 2-1: device descriptor read/8, error -71 [ 260.139804][ T5862] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 260.207572][ T5862] usb 2-1: device descriptor read/8, error -71 [ 260.245160][ T8411] XFS (rnullb0): Invalid superblock magic number [ 260.327098][ T5862] usb usb2-port1: unable to enumerate USB device [ 260.530706][ T8429] Can't find a SQUASHFS superblock on rnullb0 [ 260.677153][ T5920] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 260.856906][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 260.864562][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.877185][ T5920] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 260.886491][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.905468][ T5920] usb 3-1: config 0 descriptor?? [ 260.922460][ T5920] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 261.127864][ T5920] gspca_vc032x: reg_r err -32 [ 261.133105][ T5920] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 261.246896][ T5972] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 261.408183][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 261.420473][ T5972] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.440213][ T5972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.451084][ T5972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.479582][ T5972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.493821][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.516762][ T5972] usb 5-1: Product: syz [ 261.521005][ T5972] usb 5-1: Manufacturer: syz [ 261.538564][ T5972] usb 5-1: SerialNumber: syz [ 261.968479][ T5972] usb 5-1: 0:2 : does not exist [ 262.024841][ T5919] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 262.171841][ T8471] comedi comedi1: Cannot bond this driver to itself! [ 262.199636][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.218674][ T5919] usb 2-1: config 0 has no interfaces? [ 262.241999][ T5919] usb 2-1: string descriptor 0 read error: -22 [ 262.258419][ T5919] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 262.286760][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.322325][ T5919] usb 2-1: config 0 descriptor?? [ 262.562154][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.562354][ T8462] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 262.573063][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.591546][ T5899] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 262.602759][ T5972] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 262.614144][ T5862] usb 2-1: USB disconnect, device number 80 [ 262.680260][ T5972] usb 5-1: USB disconnect, device number 62 [ 262.711709][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.766713][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 262.782618][ T5899] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 229, changing to 11 [ 262.794454][ T5899] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.807986][ T5899] usb 6-1: config 1 interface 0 has no altsetting 0 [ 262.826545][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40 [ 262.836041][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.849589][ T5899] usb 6-1: Product: ﺡퟅ‥뤸쟆뾖칓㒛ꔖᴼꚡ꒖Ͳ鎍䞓覗̹ⷨ靯垨빩剚ከ鍱焞㪖떪㿜肕岏ꍾ졏崁좮낧뭐黬䙟宸ꐯ똘渄鳺ὴ헋鐡쪑䫆뜻ꑋ妀극풥ᔗ꒘ᩆ䯎⤽邳ﮟﻖ諧町⫥偁粉Ωᵿ鴥঻Ʃ磥盲埐梨啵넗ゔ㴃凴ਅ鏕새뤼㫾傩봆ᇼ쌪莥摀꣮뷸璪籰胟㊍Ϗ뿿ൟ◊ [ 262.882606][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.889380][ T5899] usb 6-1: Manufacturer: 䶙顄ꓦሜ⹾෇잤쌑樳 [ 262.896363][ T5899] usb 6-1: SerialNumber: ѕ [ 263.262536][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 263.333827][ T5899] usbhid 6-1:1.0: can't add hid device: -71 [ 263.344245][ T5899] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 263.360964][ T5899] usb 6-1: USB disconnect, device number 32 [ 263.497499][ T5862] usb 3-1: USB disconnect, device number 50 [ 263.654817][ T8510] random: crng reseeded on system resumption [ 264.288256][ T5919] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 264.457023][ T5862] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 264.483669][ T5919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.506762][ T5919] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.539860][ T5919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.555954][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.574484][ T5919] usb 3-1: Product: syz [ 264.584273][ T5919] usb 3-1: Manufacturer: syz [ 264.596028][ T5919] usb 3-1: SerialNumber: syz [ 264.631260][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 264.633132][ T5856] Bluetooth: hci0: command 0x0c20 tx timeout [ 264.645276][ T5862] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 264.666833][ T5862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.679593][ T5899] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 264.715304][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.743239][ T5862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.760642][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.781396][ T5862] usb 6-1: Product: syz [ 264.801175][ T5862] usb 6-1: Manufacturer: syz [ 264.805852][ T5862] usb 6-1: SerialNumber: syz [ 264.846962][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 264.873520][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.905774][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 264.921624][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.941404][ T5899] usb 5-1: config 0 descriptor?? [ 264.963904][ T5899] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 265.165849][ T5899] gspca_vc032x: reg_r err -32 [ 265.172157][ T5899] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 265.247111][ T5862] usb 6-1: 0:2 : does not exist [ 265.825818][ T5919] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 265.840898][ T5919] cdc_ncm 3-1:1.0: dwNtbInMaxSize=256 is too small. Using 2048 [ 265.861580][ T5919] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 265.895639][ T5862] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 265.964579][ T5862] usb 6-1: USB disconnect, device number 33 [ 266.034829][ T5919] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 266.094939][ T5919] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 266.652518][ T5899] usb 3-1: USB disconnect, device number 51 [ 266.681340][ T5899] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 267.537410][ T5862] usb 5-1: USB disconnect, device number 63 [ 267.661245][ T8619] FAULT_INJECTION: forcing a failure. [ 267.661245][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 267.738949][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.2.863 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 267.738979][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.738992][ T8619] Call Trace: [ 267.739001][ T8619] [ 267.739010][ T8619] dump_stack_lvl+0x189/0x250 [ 267.739043][ T8619] ? __pfx____ratelimit+0x10/0x10 [ 267.739063][ T8619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.739092][ T8619] ? __pfx__printk+0x10/0x10 [ 267.739126][ T8619] ? __pfx___might_resched+0x10/0x10 [ 267.739150][ T8619] ? fs_reclaim_acquire+0x7d/0x100 [ 267.739177][ T8619] should_fail_ex+0x414/0x560 [ 267.739214][ T8619] should_failslab+0xa8/0x100 [ 267.739236][ T8619] __kmalloc_noprof+0xcb/0x4f0 [ 267.739265][ T8619] ? kvm_vm_ioctl_set_pmu_event_filter+0x157/0x620 [ 267.739300][ T8619] kvm_vm_ioctl_set_pmu_event_filter+0x157/0x620 [ 267.739329][ T8619] ? look_up_lock_class+0x74/0x170 [ 267.739351][ T8619] ? __pfx_kvm_vm_ioctl_set_pmu_event_filter+0x10/0x10 [ 267.739388][ T8619] ? __lock_acquire+0xab9/0xd20 [ 267.739420][ T8619] kvm_arch_vm_ioctl+0xa5c/0x16b0 [ 267.739449][ T8619] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 267.739476][ T8619] ? __lock_acquire+0xab9/0xd20 [ 267.739505][ T8619] ? __lock_acquire+0xab9/0xd20 [ 267.739540][ T8619] ? __lock_acquire+0xab9/0xd20 [ 267.739573][ T8619] ? __lock_acquire+0xab9/0xd20 [ 267.739624][ T8619] ? is_bpf_text_address+0x26/0x2b0 [ 267.739654][ T8619] ? is_bpf_text_address+0x292/0x2b0 [ 267.739677][ T8619] ? is_bpf_text_address+0x26/0x2b0 [ 267.739704][ T8619] ? kernel_text_address+0xa5/0xe0 [ 267.739724][ T8619] ? __kernel_text_address+0xd/0x40 [ 267.739743][ T8619] ? unwind_get_return_address+0x4d/0x90 [ 267.739768][ T8619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.739798][ T8619] ? arch_stack_walk+0xfc/0x150 [ 267.739840][ T8619] ? stack_trace_save+0x9c/0xe0 [ 267.739872][ T8619] ? stack_depot_save_flags+0x40/0x900 [ 267.739913][ T8619] ? kasan_save_track+0x4f/0x80 [ 267.739939][ T8619] ? kasan_save_track+0x3e/0x80 [ 267.739964][ T8619] ? kasan_save_free_info+0x46/0x50 [ 267.739991][ T8619] ? __kasan_slab_free+0x62/0x70 [ 267.740018][ T8619] ? kfree+0x18e/0x440 [ 267.740042][ T8619] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 267.740062][ T8619] ? security_file_ioctl+0xcb/0x2d0 [ 267.740079][ T8619] ? __se_sys_ioctl+0x47/0x170 [ 267.740096][ T8619] ? do_syscall_64+0xfa/0x3b0 [ 267.740116][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.740148][ T8619] kvm_vm_ioctl+0x85f/0xc60 [ 267.740177][ T8619] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 267.740221][ T8619] ? kasan_quarantine_put+0xdd/0x220 [ 267.740260][ T8619] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 267.740283][ T8619] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 267.740307][ T8619] ? do_vfs_ioctl+0xbe8/0x1430 [ 267.740330][ T8619] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 267.740364][ T8619] ? __lock_acquire+0xab9/0xd20 [ 267.740407][ T8619] ? __fget_files+0x2a/0x420 [ 267.740436][ T8619] ? __fget_files+0x2a/0x420 [ 267.740460][ T8619] ? __fget_files+0x3a0/0x420 [ 267.740483][ T8619] ? __fget_files+0x2a/0x420 [ 267.740512][ T8619] ? bpf_lsm_file_ioctl+0x9/0x20 [ 267.740540][ T8619] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 267.740565][ T8619] __se_sys_ioctl+0xfc/0x170 [ 267.740611][ T8619] do_syscall_64+0xfa/0x3b0 [ 267.740632][ T8619] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.740651][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.740671][ T8619] ? clear_bhb_loop+0x60/0xb0 [ 267.740696][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.740716][ T8619] RIP: 0033:0x7f6a1b18e929 [ 267.740734][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.740752][ T8619] RSP: 002b:00007f6a1bf8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.740774][ T8619] RAX: ffffffffffffffda RBX: 00007f6a1b3b5fa0 RCX: 00007f6a1b18e929 [ 267.740789][ T8619] RDX: 0000200000000300 RSI: 000000004020aeb2 RDI: 0000000000000004 [ 267.740802][ T8619] RBP: 00007f6a1bf8c090 R08: 0000000000000000 R09: 0000000000000000 [ 267.740813][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.740825][ T8619] R13: 0000000000000000 R14: 00007f6a1b3b5fa0 R15: 00007ffe7c62db88 [ 267.740857][ T8619] [ 268.596875][ T5862] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 268.797709][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 268.816928][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 268.847511][ T5862] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 268.860769][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.888612][ T5899] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 268.907702][ T5862] usb 6-1: config 0 descriptor?? [ 269.076902][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 269.096009][ T5899] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 269.136778][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.157802][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.179012][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.197394][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.215751][ T5899] usb 3-1: Product: syz [ 269.227041][ T5899] usb 3-1: Manufacturer: syz [ 269.231808][ T5899] usb 3-1: SerialNumber: syz [ 269.333327][ T5862] uclogic 0003:28BD:0055.000A: interface is invalid, ignoring [ 269.676102][ T5899] usb 3-1: 0:2 : does not exist [ 270.345658][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.357939][ T5899] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 270.376162][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.478399][ T5899] usb 3-1: USB disconnect, device number 52 [ 270.576341][ T8668] comedi comedi1: Minor 513 is invalid! [ 270.996940][ T5919] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 271.167784][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 271.197285][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.218220][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 271.256781][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.279077][ T5919] usb 5-1: config 0 descriptor?? [ 271.308263][ T5919] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 271.317418][ T8694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.343343][ T8694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.494493][ T5919] gspca_vc032x: reg_r err -32 [ 271.527123][ T5919] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 273.663901][ T8730] loop2: detected capacity change from 0 to 6 [ 273.683385][ T5846] Dev loop2: unable to read RDB block 6 [ 273.689772][ T5846] loop2: unable to read partition table [ 273.704736][ T5846] loop2: partition table beyond EOD, truncated [ 273.729090][ T8730] Dev loop2: unable to read RDB block 6 [ 273.734927][ T8730] loop2: unable to read partition table [ 273.747645][ T8730] loop2: partition table beyond EOD, truncated [ 273.761935][ T8730] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 273.837026][ T5920] usb 5-1: USB disconnect, device number 64 [ 274.766797][ T982] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 274.793347][ T8757] random: crng reseeded on system resumption [ 274.946826][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 274.973234][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.015364][ T982] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 275.027848][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.048777][ T982] usb 2-1: config 0 descriptor?? [ 275.472916][ T982] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 275.480275][ T982] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 275.499940][ T982] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 275.569371][ T982] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 275.581122][ T8781] syzkaller1: entered promiscuous mode [ 275.586959][ T8781] syzkaller1: entered allmulticast mode [ 275.598004][ T982] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 275.856834][ T982] usb 2-1: USB disconnect, device number 81 [ 276.052662][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.065294][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.376123][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 276.970881][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 277.043565][ T8811] netlink: 'syz.4.910': attribute type 1 has an invalid length. [ 277.570043][ T8835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.847096][ T5919] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 278.009941][ T5919] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 278.046040][ T5919] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 278.101264][ T5919] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.172002][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.907417][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aead000: rx timeout, send abort [ 279.246781][ T5972] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 279.408544][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a469400: rx timeout, send abort [ 279.416859][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 279.417133][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aead000: abort rx timeout. Force session deactivation [ 279.436332][ T5972] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 279.454617][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.481588][ T5972] usb 3-1: Product: syz [ 279.548489][ T5972] usb 3-1: Manufacturer: syz [ 279.554966][ T5972] usb 3-1: SerialNumber: syz [ 279.564719][ T5972] usb 3-1: config 0 descriptor?? [ 279.916886][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a469400: abort rx timeout. Force session deactivation [ 279.927572][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea2c00: rx timeout, send abort [ 280.061334][ T5972] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 280.073950][ T5972] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.093144][ T5972] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 280.111692][ T5972] usb 3-1: media controller created [ 280.154168][ T5972] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.435814][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aea2c00: abort rx timeout. Force session deactivation [ 280.737968][ T5972] zl10353_read_register: readreg error (reg=127, ret==0) [ 280.746755][ T8819] dtv5100: wlen = 0, aborting. [ 280.814303][ T5972] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 280.850780][ T5972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 280.897805][ T5972] usb 3-1: USB disconnect, device number 53 [ 280.980860][ T5920] usb 2-1: USB disconnect, device number 82 [ 280.991288][ T8833] delete_channel: no stack [ 281.133049][ T5972] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 281.466798][ T5920] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 281.637817][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 281.645499][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.660253][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.735771][ T5920] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 281.765509][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.813022][ T5920] usb 2-1: config 0 descriptor?? [ 282.334871][ T5920] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 282.534422][ T5920] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 282.547083][ T5920] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71 [ 282.565591][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 282.607882][ T5920] usb 2-1: USB disconnect, device number 83 [ 282.678845][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.736036][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.226954][ T5856] Bluetooth: hci1: command 0x0405 tx timeout [ 290.724975][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.967'. [ 290.780211][ T9053] netlink: 16 bytes leftover after parsing attributes in process `syz.5.967'. [ 291.218364][ T982] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 291.391700][ T982] usb 3-1: Using ep0 maxpacket: 16 [ 291.428835][ T982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.442787][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 291.452267][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 291.466015][ T982] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.476434][ T982] usb 3-1: New USB device found, idVendor=2179, idProduct=9153, bcdDevice= 0.66 [ 291.497703][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.527857][ T982] usb 3-1: config 0 descriptor?? [ 291.797935][ T9076] ================================================================== [ 291.806041][ T9076] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 291.814123][ T9076] Read of size 4 at addr ffff8880780495d0 by task syz.1.974/9076 [ 291.821841][ T9076] [ 291.824176][ T9076] CPU: 1 UID: 0 PID: 9076 Comm: syz.1.974 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 291.824195][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.824206][ T9076] Call Trace: [ 291.824212][ T9076] [ 291.824218][ T9076] dump_stack_lvl+0x189/0x250 [ 291.824245][ T9076] ? __virt_addr_valid+0x1c8/0x5c0 [ 291.824269][ T9076] ? rcu_is_watching+0x15/0xb0 [ 291.824289][ T9076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.824310][ T9076] ? rcu_is_watching+0x15/0xb0 [ 291.824330][ T9076] ? lock_release+0x4b/0x3e0 [ 291.824346][ T9076] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 291.824371][ T9076] ? __virt_addr_valid+0x1c8/0x5c0 [ 291.824393][ T9076] ? __virt_addr_valid+0x4a5/0x5c0 [ 291.824416][ T9076] print_report+0xca/0x230 [ 291.824431][ T9076] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 291.824455][ T9076] kasan_report+0x118/0x150 [ 291.824471][ T9076] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 291.824497][ T9076] tcp_prune_ofo_queue+0x37e/0x6e0 [ 291.824528][ T9076] tcp_try_rmem_schedule+0xb6b/0x1830 [ 291.824556][ T9076] tcp_data_queue+0x4e3/0x6380 [ 291.824586][ T9076] ? __pfx_tcp_data_queue+0x10/0x10 [ 291.824608][ T9076] ? __pfx_tcp_urg+0x10/0x10 [ 291.824629][ T9076] ? read_tsc+0x9/0x20 [ 291.824647][ T9076] tcp_rcv_established+0xf9e/0x1eb0 [ 291.824671][ T9076] ? rt_is_expired+0x1c/0x2d0 [ 291.824692][ T9076] ? __pfx_tcp_rcv_established+0x10/0x10 [ 291.824713][ T9076] ? rt_is_expired+0x1c/0x2d0 [ 291.824729][ T9076] ? rt_is_expired+0x1c/0x2d0 [ 291.824747][ T9076] ? rt_is_expired+0x250/0x2d0 [ 291.824764][ T9076] ? __pfx_ipv4_dst_check+0x10/0x10 [ 291.824782][ T9076] ? __pfx_ipv4_dst_check+0x10/0x10 [ 291.824800][ T9076] tcp_v4_do_rcv+0xa23/0xce0 [ 291.824818][ T9076] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 291.824833][ T9076] __release_sock+0x21c/0x350 [ 291.824862][ T9076] release_sock+0x5f/0x1f0 [ 291.824877][ T9076] tcp_sendmsg+0x39/0x50 [ 291.824899][ T9076] __sock_sendmsg+0x19c/0x270 [ 291.824923][ T9076] __sys_sendto+0x3bd/0x520 [ 291.824941][ T9076] ? __pfx___sys_sendto+0x10/0x10 [ 291.824955][ T9076] ? do_futex+0x395/0x420 [ 291.824991][ T9076] ? rcu_is_watching+0x15/0xb0 [ 291.825011][ T9076] __x64_sys_sendto+0xde/0x100 [ 291.825029][ T9076] do_syscall_64+0xfa/0x3b0 [ 291.825045][ T9076] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.825059][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.825074][ T9076] ? clear_bhb_loop+0x60/0xb0 [ 291.825091][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.825106][ T9076] RIP: 0033:0x7ff4e258e929 [ 291.825120][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.825133][ T9076] RSP: 002b:00007ff4e3454038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 291.825149][ T9076] RAX: ffffffffffffffda RBX: 00007ff4e27b5fa0 RCX: 00007ff4e258e929 [ 291.825160][ T9076] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 291.825170][ T9076] RBP: 00007ff4e2610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 291.825179][ T9076] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 291.825189][ T9076] R13: 0000000000000000 R14: 00007ff4e27b5fa0 R15: 00007ffc8273d568 [ 291.825205][ T9076] [ 291.825210][ T9076] [ 292.141244][ T9076] Allocated by task 9076: [ 292.145583][ T9076] kasan_save_track+0x3e/0x80 [ 292.150277][ T9076] __kasan_slab_alloc+0x6c/0x80 [ 292.155139][ T9076] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 292.161063][ T9076] __alloc_skb+0x112/0x2d0 [ 292.165489][ T9076] tcp_stream_alloc_skb+0x3d/0x340 [ 292.170625][ T9076] tcp_write_xmit+0xeec/0x67f0 [ 292.175395][ T9076] __tcp_push_pending_frames+0x97/0x360 [ 292.180950][ T9076] tcp_sendmsg_locked+0x483c/0x56d0 [ 292.186157][ T9076] tcp_sendmsg+0x2f/0x50 [ 292.190409][ T9076] __sock_sendmsg+0x19c/0x270 [ 292.195099][ T9076] __sys_sendto+0x3bd/0x520 [ 292.199603][ T9076] __x64_sys_sendto+0xde/0x100 [ 292.204373][ T9076] do_syscall_64+0xfa/0x3b0 [ 292.208893][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.214803][ T9076] [ 292.217133][ T9076] Freed by task 9076: [ 292.221108][ T9076] kasan_save_track+0x3e/0x80 [ 292.225792][ T9076] kasan_save_free_info+0x46/0x50 [ 292.230841][ T9076] __kasan_slab_free+0x62/0x70 [ 292.235622][ T9076] kmem_cache_free+0x18f/0x400 [ 292.240418][ T9076] tcp_prune_ofo_queue+0x198/0x6e0 [ 292.245562][ T9076] tcp_try_rmem_schedule+0xb6b/0x1830 [ 292.250957][ T9076] tcp_data_queue+0x4e3/0x6380 [ 292.255744][ T9076] tcp_rcv_established+0xf9e/0x1eb0 [ 292.260964][ T9076] tcp_v4_do_rcv+0xa23/0xce0 [ 292.265569][ T9076] __release_sock+0x21c/0x350 [ 292.270261][ T9076] release_sock+0x5f/0x1f0 [ 292.274682][ T9076] tcp_sendmsg+0x39/0x50 [ 292.278937][ T9076] __sock_sendmsg+0x19c/0x270 [ 292.283644][ T9076] __sys_sendto+0x3bd/0x520 [ 292.288148][ T9076] __x64_sys_sendto+0xde/0x100 [ 292.292913][ T9076] do_syscall_64+0xfa/0x3b0 [ 292.297423][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.303344][ T9076] [ 292.305687][ T9076] The buggy address belongs to the object at ffff888078049400 [ 292.305687][ T9076] which belongs to the cache skbuff_fclone_cache of size 488 [ 292.320468][ T9076] The buggy address is located 464 bytes inside of [ 292.320468][ T9076] freed 488-byte region [ffff888078049400, ffff8880780495e8) [ 292.334287][ T9076] [ 292.336631][ T9076] The buggy address belongs to the physical page: [ 292.343052][ T9076] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78048 [ 292.351819][ T9076] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 292.360320][ T9076] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 292.368311][ T9076] page_type: f5(slab) [ 292.372308][ T9076] raw: 00fff00000000040 ffff888140adcb40 0000000000000000 dead000000000001 [ 292.380991][ T9076] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 292.389591][ T9076] head: 00fff00000000040 ffff888140adcb40 0000000000000000 dead000000000001 [ 292.398266][ T9076] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 292.406936][ T9076] head: 00fff00000000001 ffffea0001e01201 00000000ffffffff 00000000ffffffff [ 292.415631][ T9076] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 292.424295][ T9076] page dumped because: kasan: bad access detected [ 292.430706][ T9076] page_owner tracks the page as allocated [ 292.436445][ T9076] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5738, tgid 5738 (sshd-session), ts 76373148933, free_ts 33654295504 [ 292.457820][ T9076] post_alloc_hook+0x240/0x2a0 [ 292.462632][ T9076] get_page_from_freelist+0x21e4/0x22c0 [ 292.468186][ T9076] __alloc_frozen_pages_noprof+0x181/0x370 [ 292.473998][ T9076] alloc_pages_mpol+0x232/0x4a0 [ 292.478866][ T9076] allocate_slab+0x8a/0x370 [ 292.483374][ T9076] ___slab_alloc+0xbeb/0x1410 [ 292.488081][ T9076] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 292.493984][ T9076] __alloc_skb+0x112/0x2d0 [ 292.498406][ T9076] tcp_stream_alloc_skb+0x3d/0x340 [ 292.503531][ T9076] tcp_sendmsg_locked+0xefc/0x56d0 [ 292.508654][ T9076] tcp_sendmsg+0x2f/0x50 [ 292.512908][ T9076] __sock_sendmsg+0x19c/0x270 [ 292.517593][ T9076] sock_write_iter+0x258/0x330 [ 292.522366][ T9076] vfs_write+0x54b/0xa90 [ 292.526609][ T9076] ksys_write+0x145/0x250 [ 292.530940][ T9076] do_syscall_64+0xfa/0x3b0 [ 292.535472][ T9076] page last free pid 1 tgid 1 stack trace: [ 292.541279][ T9076] __free_frozen_pages+0xbc4/0xd30 [ 292.546411][ T9076] free_contig_range+0x1bd/0x4a0 [ 292.551363][ T9076] destroy_args+0x7e/0x5d0 [ 292.555785][ T9076] debug_vm_pgtable+0x404/0x420 [ 292.560651][ T9076] do_one_initcall+0x233/0x820 [ 292.565431][ T9076] do_initcall_level+0x137/0x1f0 [ 292.570371][ T9076] do_initcalls+0x69/0xd0 [ 292.574712][ T9076] kernel_init_freeable+0x3d9/0x590 [ 292.579920][ T9076] kernel_init+0x1d/0x1d0 [ 292.584267][ T9076] ret_from_fork+0x3f9/0x770 [ 292.588953][ T9076] ret_from_fork_asm+0x1a/0x30 [ 292.593856][ T9076] [ 292.596206][ T9076] Memory state around the buggy address: [ 292.601938][ T9076] ffff888078049480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.610136][ T9076] ffff888078049500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.618216][ T9076] >ffff888078049580: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 292.626283][ T9076] ^ [ 292.632960][ T9076] ffff888078049600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.641031][ T9076] ffff888078049680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 292.649099][ T9076] ================================================================== [ 292.680428][ T9076] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.687777][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.1.974 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 292.699175][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.709261][ T9076] Call Trace: [ 292.712564][ T9076] [ 292.715519][ T9076] dump_stack_lvl+0x99/0x250 [ 292.720150][ T9076] ? __asan_memcpy+0x40/0x70 [ 292.724775][ T9076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.730011][ T9076] ? __pfx__printk+0x10/0x10 [ 292.734659][ T9076] vpanic+0x281/0x750 [ 292.738667][ T9076] ? preempt_schedule+0xae/0xc0 [ 292.743542][ T9076] ? __pfx_vpanic+0x10/0x10 [ 292.748313][ T9076] ? preempt_schedule_common+0x83/0xd0 [ 292.753795][ T9076] ? preempt_schedule+0xae/0xc0 [ 292.758664][ T9076] ? __pfx_preempt_schedule+0x10/0x10 [ 292.764057][ T9076] panic+0xb9/0xc0 [ 292.767790][ T9076] ? __pfx_panic+0x10/0x10 [ 292.772219][ T9076] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 292.778158][ T9076] ? is_module_address+0x17/0xf0 [ 292.783205][ T9076] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 292.788512][ T9076] check_panic_on_warn+0x89/0xb0 [ 292.793541][ T9076] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 292.798840][ T9076] end_report+0x78/0x160 [ 292.803097][ T9076] kasan_report+0x129/0x150 [ 292.807626][ T9076] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 292.813024][ T9076] tcp_prune_ofo_queue+0x37e/0x6e0 [ 292.818171][ T9076] tcp_try_rmem_schedule+0xb6b/0x1830 [ 292.823573][ T9076] tcp_data_queue+0x4e3/0x6380 [ 292.828362][ T9076] ? __pfx_tcp_data_queue+0x10/0x10 [ 292.833589][ T9076] ? __pfx_tcp_urg+0x10/0x10 [ 292.838192][ T9076] ? read_tsc+0x9/0x20 [ 292.842276][ T9076] tcp_rcv_established+0xf9e/0x1eb0 [ 292.847493][ T9076] ? rt_is_expired+0x1c/0x2d0 [ 292.852385][ T9076] ? __pfx_tcp_rcv_established+0x10/0x10 [ 292.858037][ T9076] ? rt_is_expired+0x1c/0x2d0 [ 292.862730][ T9076] ? rt_is_expired+0x1c/0x2d0 [ 292.867425][ T9076] ? rt_is_expired+0x250/0x2d0 [ 292.872206][ T9076] ? __pfx_ipv4_dst_check+0x10/0x10 [ 292.877445][ T9076] ? __pfx_ipv4_dst_check+0x10/0x10 [ 292.882663][ T9076] tcp_v4_do_rcv+0xa23/0xce0 [ 292.887274][ T9076] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 292.892392][ T9076] __release_sock+0x21c/0x350 [ 292.897103][ T9076] release_sock+0x5f/0x1f0 [ 292.901526][ T9076] tcp_sendmsg+0x39/0x50 [ 292.905784][ T9076] __sock_sendmsg+0x19c/0x270 [ 292.910475][ T9076] __sys_sendto+0x3bd/0x520 [ 292.914983][ T9076] ? __pfx___sys_sendto+0x10/0x10 [ 292.920026][ T9076] ? do_futex+0x395/0x420 [ 292.924387][ T9076] ? rcu_is_watching+0x15/0xb0 [ 292.929166][ T9076] __x64_sys_sendto+0xde/0x100 [ 292.933940][ T9076] do_syscall_64+0xfa/0x3b0 [ 292.938460][ T9076] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.943669][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.949751][ T9076] ? clear_bhb_loop+0x60/0xb0 [ 292.954442][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.960347][ T9076] RIP: 0033:0x7ff4e258e929 [ 292.964766][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.984375][ T9076] RSP: 002b:00007ff4e3454038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 292.992821][ T9076] RAX: ffffffffffffffda RBX: 00007ff4e27b5fa0 RCX: 00007ff4e258e929 [ 293.000809][ T9076] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 293.008787][ T9076] RBP: 00007ff4e2610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 293.016767][ T9076] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 293.024753][ T9076] R13: 0000000000000000 R14: 00007ff4e27b5fa0 R15: 00007ffc8273d568 [ 293.032739][ T9076] [ 293.036121][ T9076] Kernel Offset: disabled [ 293.040447][ T9076] Rebooting in 86400 seconds..