last executing test programs: 3m27.790315225s ago: executing program 0 (id=2947): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r2, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000440)=[{0x0, 0x60}, {&(0x7f0000000080)="55c9", 0x2}], 0x2}, 0x24880) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x100000000000001c) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2465) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x601}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x40) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) 3m26.158007882s ago: executing program 0 (id=2952): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xa, 0x2, 0x8, 0x7fffffff, 0x1a, "58b52d9abf3991ab5ba90fd2ee26ed2ee2f419"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x6, 0x7fff, 0xe, "99212c0155b6056ee613657266ec62b016d5a9"}) 3m26.114180697s ago: executing program 0 (id=2953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x400}, 0x1c) close(r6) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000100)) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000380)={0x400000, 0xa, 0x9df3acad800699f6}, 0x18) 3m24.826719315s ago: executing program 0 (id=2960): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000015000000000000000000000002"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010800000000084) timer_create(0xa, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000070c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010100}, 0x1d, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r6, @multicast2, @broadcast}}}], 0x20}}], 0x1, 0x90) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m23.845870121s ago: executing program 0 (id=2971): r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) socket$nl_generic(0x10, 0x3, 0x10) sendto$rxrpc(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x7, {0xa, 0x4e23, 0xe34, @local, 0x9}}, 0x24) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042406001c002b8008000800", @ANYRES32=r8, @ANYBLOB="000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x44}}, 0x0) 3m23.441882026s ago: executing program 0 (id=2973): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010030000000fddbdf25e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffbffffffffffbaf44598000000000000000000000000000000000000000200"/98], 0xc4}}, 0x2c000010) 3m22.614397412s ago: executing program 32 (id=2973): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010030000000fddbdf25e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffbffffffffffbaf44598000000000000000000000000000000000000000200"/98], 0xc4}}, 0x2c000010) 8.931171959s ago: executing program 4 (id=3739): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x2, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d80)={0x0, 0x6, 0x1a, "5ad67a3f09e269f49bd372307fd411c57d4935fbd3367689bb53"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x20, 0x0, 0xfd, "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"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x200, 0x1, 0x5, 0x8, 0x9, 0x5, 0xa, 0x93, 0x4}}, &(0x7f0000000200)={0x20, 0x85, 0x4}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x9}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) 7.378314584s ago: executing program 3 (id=3744): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x544}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r3, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002700)="ab", 0x1}, {0x0}], 0x2}}], 0x1, 0x4040000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r5, 0xb, 0x1) r6 = syz_io_uring_setup(0x2d25, &(0x7f0000000140)={0x0, 0x5885, 0x400, 0x0, 0x0, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r11 = syz_open_dev$audion(&(0x7f00000001c0), 0x8, 0x2800) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000380)={0xb, "671907b52d8f4f0eacc5448ffdcc74affbb9d2362b3cc77c37f65b297e4bc58f", 0x3, 0xfffffffe, 0xf, 0x1000, 0x8}) fcntl$F_SET_RW_HINT(r11, 0x40c, &(0x7f0000000400)=0x2) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="02002abd7000ffdbdf250900000005002f090000000008003a000400000005002e000000000008003c00beee0000"], 0x34}}, 0x44040) r12 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r12, 0xc040ff0b, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0xc, &(0x7f0000000280)=0xa4d4, 0x4) 6.489345149s ago: executing program 3 (id=3747): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(r3, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00080000000000000000000000e2ff0000000000e3b859cdf0e7dae244343e4d398aa99c6d44d400"/50, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000aabe431dda2b18677007f88e7b5dc4a7bb4376e21adbc3e8740a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000460000007600001fbf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0xa, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) r8 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@deltaction={0x168, 0x31, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffce}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5132c625}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4}]}, 0x168}, 0x1, 0x7a00}, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x400, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="bafe3a52d8944d83c9ca4dc628af54846da317e97fdb02d49cef9823f2e9566ee6ebe7158ac279f052ab124e7214ea4a1e9055584473b98e843461ae5284da37e1d9dbb2c591880aa70da49c267ef07b9c431b749e7aa69725a4b6ec220db7fd03e456d80ec37e3883233080bec0d7c707dcba451e971604", 0x78}, {&(0x7f00000005c0)="4b72383d4cd500240a319cdd6012a14d1b217cd8db7d9517602a", 0x1a}, {&(0x7f00000002c0)="7e947f3b335873cbdd0c28de19732b5aac62620b170affd923616e58a17c9ad01e5e05cd07d5ff5a780165e62657296024921a6f861304e8c812279109cccecc0811cb186690770c96136aa3d956c62b602be3ef6891acedf213a3188c30ffe74e811c60c8922ae46633e7edb555bd86059f480b1cb27e1578a31177340b53a26cde1c0d15838e7ec343af4facdb1374b96f5cbee9c887159b6729f4820db24ae56fa9d18388ab98c75848c621920bce94ab6e75df7dd814ee3ec94698ac2a6897dcf13a8c161baa15a1577f13544219935c81497e462336b2fa5232bbdc732eb553c407883aaab0cb678d4e7a349361", 0xf0}, {0x0}], 0x4}, 0x11}], 0x1, 0x4001c00) 5.829841797s ago: executing program 4 (id=3749): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001900000019000000020000c5061a7d23c5ae3177e4a00f3c4c8821d367000a5f"], 0x0, 0x36, 0x0, 0x1, 0x100}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$FIOCLEX(r1, 0x5451) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf2514000000240007800c00030004000000000000000800020007"], 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5a880e9118d470a96e76651fd260be705ae7065ad2be1a389007a9dbacdbcfba83e4f7b489276edae1126e7e293aacd32e02a0496b7945246237c7378debba862acf9c7b732878427e09fe5a313a74f152d6f7279c8b0346784e6ad7e68a1ba1c0a07a9ff6c9590d7d1edc5526c695d364ee2cc64175a57d6631034e26b8d3733d8ae25440856c83f2c883", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 5.4499996s ago: executing program 4 (id=3750): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xc7f8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0xc000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$netlink(0x10, 0x3, 0x15) (async) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)) 5.13116743s ago: executing program 4 (id=3751): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00']) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000200)={0xf, 0x9a, {0x54, 0x4, 0x9, {0x76f1, 0x70}, {0x1ff, 0x1}, @const={0x7f, {0x4, 0x6, 0x2, 0x1}}}, {0x56, 0x6, 0x8, {0x6, 0x4}, {0x6}, @const={0x3, {0x10, 0xc4, 0xe00a, 0x200}}}}) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00e5"]) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, {{@in=@dev={0xac, 0x14, 0x14, 0x3d}, @in=@local, 0x4e24, 0x8, 0x4e23, 0x6, 0xa, 0x30, 0x80, 0xc}}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "cfbc6ac116946cf4a5b2f81c4d07"}}]}, 0x30}}, 0x4044040) r8 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000980)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SNDCTL_SEQ_CTRLRATE(r5, 0xc0045103, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x3, 0x57, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x97, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, 'H'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x9, 0xa}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x9, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf8, 0x72, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x7}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x90, 0x81, 0x1, 0x20, 0x40}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0x40, 0xe}]}}) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000000000005500000000010000000200000000086c9b9b5b8d4c30630bc47d0083262917504f36c353b8cb67ea3c02a8b7f91bddacede5290079aafbe90804bbfc98f7b9602fe7494739c8e43114cdaa6b36570635bd450600000000000000046365516719c4b2dab9f0f4093ad337a1d030cafbc020ec39907c3e8971851d15f81ac25c9a6b051779a0a29e"], 0x2a) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x103981) ioctl$USBDEVFS_DROP_PRIVILEGES(r9, 0x4004551e, &(0x7f0000000080)=0xba) 4.421981013s ago: executing program 5 (id=3753): syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000040)={0x0, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 4.233881256s ago: executing program 3 (id=3754): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa5, 0x5c}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}], 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_buf(r5, 0x0, 0x2c, 0x0, 0x0) (async) setsockopt$inet_buf(r5, 0x0, 0x2c, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef9800090506"], 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) getdents64(r4, 0xffffffffffffffff, 0x43) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xc200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x3c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x9, 0x7fff}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r7, 0x8, 0x4, 0x5, 0x5, 0x8}, 0x14) sendto$inet6(r0, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) memfd_secret(0x0) (async) r8 = memfd_secret(0x0) r9 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000180)={r9}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000180)={r9}) write$P9_RREADDIR(r4, &(0x7f0000000040)={0x2a, 0x29, 0x1, {0x3, [{{0x40, 0x1, 0x7}, 0x10001, 0x9, 0x7, './file0'}]}}, 0x2a) (async) write$P9_RREADDIR(r4, &(0x7f0000000040)={0x2a, 0x29, 0x1, {0x3, [{{0x40, 0x1, 0x7}, 0x10001, 0x9, 0x7, './file0'}]}}, 0x2a) 4.164663275s ago: executing program 5 (id=3755): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x3, 0x1, 0xf}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x400c0d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x222400, 0x16d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0x7}, 0x18) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0xc7, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000001100)=[{&(0x7f0000000880)=""/1, 0x1}], 0x1) r6 = socket(0x1f, 0xa, 0x3) getsockopt$inet6_mreq(r6, 0x29, 0x1a, 0x0, &(0x7f0000000240)) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000003c0)=""/4096) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x0, @random="442da5380ee5"}, 0x3c, {0x2, 0x4e23, @empty}, 'dummy0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000003000000fd09", @ANYRES32, @ANYBLOB="7db77ebdc3fa000000f4ffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000001700)="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", &(0x7f0000000380), 0x800, r8}, 0x38) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0d, &(0x7f0000000040)) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 4.015536321s ago: executing program 3 (id=3756): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) unshare(0x20000) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00') lseek(r1, 0xfffffffffffffffe, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r3], 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x5, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.842001499s ago: executing program 1 (id=3757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000200)) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', '\xc5\x00'}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 2.634705828s ago: executing program 1 (id=3758): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000040)={0x1, 0x1, @start={0x40}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="c80000000000000029000000040000001615000000000000c2048000000104a343850eabaecdf2ebf1d94cb752be3f0dc8fa4b4a15586a937007e4a61d4dfaf8e41901873f10756f84f3a37fa33859bf01e8b379c4c1b7f8d6983849501d8c47caa348dd620fcb5cff991f40cd7c31392431c86695f8e2dfe327a5059eeb09d2490c6c35127aec4be7219c9fdb7cbb240b44e281ef57576ca8d6cb0f29a04f7cf5c6760e8dc9898d4f38daee849b7fda943bd6f37075ab0bd1e1af91e5d247f4c6199bf300000000d0010000000000002900000004"], 0x5c0}}], 0x1, 0x8044) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) rt_sigprocmask(0x0, &(0x7f00000001c0)={[0x1d61]}, 0x0, 0x8) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0xa2264400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') lseek(r4, 0x1fff, 0x3) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000100)={0x0, 0x6}) ioctl$FBIOPUT_VSCREENINFO(r3, 0xc0684608, 0x0) pidfd_send_signal(r2, 0x12, 0x0, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@host}) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000180)=0x8) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) 2.446084945s ago: executing program 5 (id=3760): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010000000000fddbdf25e00000020000000030000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffbffffffffffbaf44598000000000000000000000000000000000000000200"/98], 0xc4}}, 0x2c000010) 2.4294255s ago: executing program 5 (id=3761): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 2.355270081s ago: executing program 1 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000740)="18", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.297947353s ago: executing program 5 (id=3763): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) unshare(0x2040400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, 0x0, 0x0, 0x4}, 0x20) mprotect(&(0x7f0000ea5000/0x4000)=nil, 0x4000, 0x200000c) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) 2.286112132s ago: executing program 1 (id=3764): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x200000, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4004085, 0x0, 0x0) setsockopt$inet_buf(r5, 0x0, 0x4, &(0x7f0000000080)="ed2859f9c8d80fd0ccf717a3252912eaac00600149d6e8a50d6fc202cc806d7c2271a1d2", 0x24) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r9 = getpgid(0x0) kcmp(r9, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x6, 0x200) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r10, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000080)=""/186, 0xba) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0x4, 0x4, 0x0, 0x1}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0002060001000700000008000b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20) r8 = syz_io_uring_setup(0x2a37, &(0x7f0000000280)={0x0, 0x1, 0x80, 0xfd}, &(0x7f0000000400), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x19, 0x20000000, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000280)=0x1000200, 0x4) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000300)={0x53, 0x20, 0x6, 0x0, @scatter={0x3, 0x3, &(0x7f0000000580)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}, {&(0x7f0000000480)=""/209, 0xd1}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.631346241s ago: executing program 2 (id=3767): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x626280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000048d"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.625459341s ago: executing program 5 (id=3768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000200)) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', '\xc5\x00'}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) 1.570808416s ago: executing program 2 (id=3769): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ftruncate(r0, 0x80000000000a2ef) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000011c0)={0x5, 0xf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x1, 0xfd, 0x0, 0x1, 0xf8}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r7, 0x3}, 0x8) close(r5) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x61, 0x4) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) futex_waitv(&(0x7f00000004c0)=[{0xd, &(0x7f0000000100)=0x2, 0x2}, {0xb, &(0x7f0000000140)=0x6a, 0x82}, {0xc, &(0x7f0000000240)=0x2, 0x2}, {0x80000000, &(0x7f0000000280)=0xfffffffffffffffc, 0x2}, {0xf9, &(0x7f0000000300)=0x100, 0x2}, {0x2, &(0x7f0000000340)=0x3, 0x2}, {0x4, &(0x7f0000000380)=0x6, 0x2}, {0x7fffffff, &(0x7f00000003c0)=0x6, 0x2}, {0x8, &(0x7f0000000480)=0x2, 0x82}], 0x9, 0x0, &(0x7f00000005c0), 0x0) 1.160693596s ago: executing program 1 (id=3770): socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x130) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_TID={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x4004000) 1.054072918s ago: executing program 2 (id=3771): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001900010000000000fddbdf25e000000200ffffff80000000000000000000000000000000000000000000000000000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0300001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffbffffffffffbaf44598000000000000000000000000000000000000000200"/98], 0xc4}}, 0x2c000010) 902.96303ms ago: executing program 3 (id=3772): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=ANY=[@ANYBLOB="040100001a0001000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b000000e000000200000000000000000000000000f4ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001002000000000005063f5758dd441c6000014000e00200100"/196], 0x104}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) (async) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x9bf\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) syz_emit_ethernet(0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000001704b45adbde810000000808450000700000000000019078ac1e0001ac1414aa05009078e00000e0450000000000000000110000ac1414aa00000000830300443c00030a01060001000000e000000200000000ffffffff00000000ac141400"/130], 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x288, 0x160, 0x160, 0xffffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@empty, @ipv6=@remote, 0x1}}, @common=@ttl={{0x28}, {0x1, 0xa8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x0, 0x0, 0xf, 0x4, 0x4], 0x6, 0x6}, {0xffffffffffffffff, [0x6, 0x4, 0x2, 0x5, 0x1, 0x3], 0x2, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffff80, 'team0\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x1, 0x3, 0x4}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x2}}, @common=@inet=@length={{0x28}, {0x9, 0x4, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xd3, 0x40, {0x80000001}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x5], 0x1}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv6=@private2, [0xff000000, 0xe378886e5c00f094, 0xff000000, 0xff000000], @ipv4=@local, [0xff, 0x0, 0xffffffff, 0xffffff00], 0xfffffffb, 0x9, 0x3a, 0x4e24, 0x4e21, 0x4e23, 0x4e23, 0x452, 0x82}, 0x1, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) (async) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r6, &(0x7f0000004080)="611c", 0x2, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async) r7 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, 0x0, &(0x7f0000000080)=0x44) (async) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) (async) r10 = syz_open_dev$swradio(&(0x7f0000000640), 0x0, 0x2) sendmsg$nl_netfilter(r4, &(0x7f00000006c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000002740)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB], 0x106c}, 0x1, 0x0, 0x0, 0x4004}, 0x448d1) (async) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x10001, 0x2, 0x1}) 876.090513ms ago: executing program 1 (id=3773): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0xe71}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x2, 0x0, 0x10001, 0xfffffffffffffffa}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x3cf}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 579.658985ms ago: executing program 2 (id=3774): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x220080, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, 0x0, 0x25, 0x10, @val=@kprobe_multi=@addrs={0x1, 0x4, 0x0, &(0x7f0000000a40)=[0x9, 0xa, 0x5, 0x3], 0x2}}, 0x30) r7 = syz_io_uring_complete(0x0) r8 = pidfd_getfd(r2, r0, 0x0) syz_clone3(&(0x7f0000000c40)={0x4800, &(0x7f0000000ac0)=0xffffffffffffffff, &(0x7f0000000b00), &(0x7f0000000b40), {0xd}, &(0x7f0000000b80)=""/37, 0x25, &(0x7f0000000bc0)=""/24, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000d00)={0x0, &(0x7f0000000cc0)=[@uexit={0x0, 0x18, 0x3ff}], 0x18}) read$FUSE(r2, &(0x7f0000000d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fcntl$getownex(r3, 0x10, &(0x7f0000002d80)={0x0, 0x0}) stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000002f40)=0x0) sendmmsg$unix(r3, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000240)="69dbf0547d37c95e35676e7d088707a74be3a079dc3015c2938fe376978b5064d98808b6328c00ec0eb9bee1ff3f2f50ef5c53f9f173ff5ddb223cea9d77dc5a311d2388996755297f0fdf356dd24448f4ec2ea2306e4f6c1bee9e32963389b723f8602b1ffae4e038c82ea51a08815f70ea99cbee022863dd0fcd44a417830bd9de2b294032f0cc590f6670baee", 0x8e}, {&(0x7f0000000300)="aae14c658bfeac927c263a368b520f9367c6899322f2694f667dcc76acf2d21761449543b1380e2831adeed7be881424be8ce1743e2bdac1eb2f1ff6d985e73ccef3f691f62386d101833ece57ab8f55949cfb1bf01bb2262b0d707aa5cecbe544011b77b6a157a538cf4c376c2d783dcfa4496507fd1f6cf487b7c2a38adf1b9a9acee16d62ffafa16bc8c4b3b7aa1714ab17f2821f0aefbd17fae95feffd76a7ab1bbccb521b90ec6900461a9a55bdd29cfdec0791f881dcf17c9b886319f8875f496582906f5fd0e253fe4be3ca537034f33a63041aafa02d16025d583e92238f9025403752167ebf57b6", 0xec}, {&(0x7f0000000400)="fffc7d860c3c5a2a0df24ab5ba4374a3b945a45df0060d57258b25a52665bd1403e57bcbce85297c29aeaf7c9035d10649c4943be450a154c40dfd8227edd02fe439f88cff36bc9abe4711afa5a50c14499cb6", 0x53}, {&(0x7f0000000480)="6877bdf7dedc62558acd9cb6a3beee380a405f7f747efc101ce5c96ddfa888ad9443d049f9ce0e32938f14228f75fde2b3016c61d5a0087a14ca77558aa4e96f1d350a09d10d702a234d1300ad2431064e12450c5267283a4261c609989b9b048f482c0b4a921e2297d467d6e3d3287ed40dd9ce59baf3aaa497ff66167fbadfb56474840c12d29416cdf4e9dbdd802fe0c6d7ce4debdb06f22faef3ea1023502597a99317c4a152c231c69adac11c262d450bd460be97e62ffeb052f56efa0b", 0xc0}, {&(0x7f0000000540)="49dde82d969da6c0dcce3ec445308d6704c093786aadb2003187ab391ef2446bc7e046af1aedf4ffa9efb335c930da1cf2b2178aa94d40197d04e78f279a9aa98b8cb5c729b1e5f275c6f706", 0x4c}, {&(0x7f00000005c0)="86246899cb3d8076777d03094aede49cbc86baaa0a4f1faf4c8ff673ca7a16e4a94d156f7a0104aaf058b7d22735f0db321950ac5f908f38890436ffe31449df213929c7e6f512601c06f63f1a558c2014c84a21bfd4c998f66305b48cb6b7b674397bc537edee7c1869f25b89c9d67a45a81b91262023e267a4af7c87b7fe2159fb3bcfb65d7432688fb7bc4ae32e90674396129e92b00943590bdd92435a1555c18d0124915038d972b6968d6f41be3275d5a6d8323bedd04d4fe2758b031c12", 0xc1}, {&(0x7f00000006c0)="7090af962d202533c155b58f5d4958bfdf5c3400223424c20e3e39a2e598dee3a408587f188e3a15f36d1b4658dc4a68f699fd4c3d97041123e951a78cf34146f83bcc6a2b97d2b7fd13f4b24dacc98efe8851845cf249d18f73690e4b6c024ae0db556873e0cadbc36ccfdbf1a7d03d5d4b31e9e4e9e5b7", 0x78}, {&(0x7f0000000740)="ae2244c8f6516ba4d8d53fd8e2bf4b8c07d600168b1c71c2ae16c0c5e4772595ec9f88474732dbb99205d50b8e6120fa87ff6d088af7cb7c039ea7deef3e3cca42dc1a49230c3beb9b37f14898eba4ec092b2a09abf9d9aa873316b4e8c299f5739cbaabbf4ce1f47613dcf5a6e1218b8620a054ac24bc65b80fbd45df15627c1b8c8c2fc8517dc93b53e7cc09c12bf078a01e51970d865ea47f09fda563a21b8d5dab3534c5d18be3f40d45481234d6e336fd5d7f36663a1f19f350573b21b3261ab89be14e2697ad9e3306ff1cbd", 0xcf}, {&(0x7f0000000840)="6adb6edc96e28d46f9d597fc2da05cb70e4042f9ac3a52b6e49e83f081b8d5d62bb3b264cdd054126394ffa4f346eccea4be5ae7aa8c4b67e9d074dfa37e783aaefa90200251974e9b37de7f4c0d122b3e99e1c89de8392c19c90fd15cc2527259325296518b0621fc48d6097805a4d515dd828cfc766d5c567a06242e17fd5c2cc6a8b39b73749f6ef02bad35830e4254f2f0a00c3ac68e2955cf3e4fb9093ce7dc6a931579eada1890815d98d700c09c658b9a13387d210118cea8ebdcc1c3a71d56e9746030df036354c0c04c4a74dbed07f481b9c73336c64889913283d0f3bdd3c675dace3cffead78c6d4a2ba4c3", 0xf1}, {&(0x7f0000000940)="869f1392d08addc67cdfe59bf05f741389", 0x11}], 0xa, &(0x7f0000002f80)=[@rights={{0x34, 0x1, 0x1, [r2, r1, r5, r6, r1, r7, r4, r1, r8]}}, @rights={{0x38, 0x1, 0x1, [r1, r3, r0, r5, r9, r3, r3, r1, r5, r10]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15}}}], 0xd0, 0x48000}}], 0x1, 0x0) pidfd_send_signal(r2, 0x10, &(0x7f00000030c0)={0x1a, 0xfffffffa, 0x5939}, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000003140)={0x1, 0x1, 0x3, 0x0, 0x2, 0x4}) r16 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000003180)='./binderfs/binder-control\x00', 0x2, 0x0) fadvise64(r16, 0x6, 0x10001, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r7, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003280)={&(0x7f0000003200)={0x48, 0x140a, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000004500)={0x4, 0x0, [{0xf000, 0x1000, &(0x7f0000003300)=""/4096}, {0xdddd1000, 0x2, &(0x7f0000004300)=""/2}, {0x0, 0xd5, &(0x7f0000004340)=""/213}, {0x0, 0xb3, &(0x7f0000004440)=""/179}]}) sendmsg$inet6(r8, &(0x7f0000004840)={&(0x7f00000045c0)={0xa, 0x4e22, 0x4, @remote, 0x3ff}, 0x1c, &(0x7f00000046c0)=[{&(0x7f0000004600)="e41de237204843fce00b5e6541a5c3cf8fc95e56a9e61c95c4e42557d804b119d139b55315ff88bf9f479a3e8519703f29dbb43b22f109635eb3ae09bbcad7394efd2757c3cb82c2d5ca65ad76d18baf6cedeb2400ab3115f31ac6e5282d92c7ad65adad2e555a85a7857d2f8edc214c4d1a60a040b2cbb7d4e168dfb8b27834ea30cc070314", 0x86}], 0x1, &(0x7f0000004700)=[@flowinfo={{0x14, 0x29, 0xb, 0x101}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x67, 0x14, '\x00', [@generic={0x4b, 0xa3, "7e46229cc81b988fa98ebc8abd0b0cd947e60550adc8f5774efe66cbeaaa5845557ce90c70cf05fdd9424767468f63d7d22f35d3ad423a3a500bc90fff05936ebfd78a5b52115874492b8e89d9a494c357bd8eac7824907ff133039c81b2711fd42355ce90edb0ea217cb1ba2fab395b219a8782db13b3490b962c864b2fa8b895573183222dd7fe574d61b902f2e633b4a1cf15894ce13a519a786a73798c6d036a27"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x108}, 0x10000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000004880)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000004940)={0x20, r17, &(0x7f0000004900)=[{0x0, 0x3}, {}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x6}) pwrite64(r0, &(0x7f0000004980)="c6c9583f385248a2ff17d2dbf85234c46288b18816c2770e96715ae7e213cb2a6828bf357ea7d535ca40e98d7640f53139198c5a3e99a442b5650f71eed35700bc3f8aa26c897a7f2a6c20784e235c890d123682fbabce46223128e7ea16ff0eb7fa0c50b1da1be2118f9845966545ac1f7e45bdcf4f0e261fe57f5c15e4de6b09c66bbd31db89d3b4451af3abf2f62de73521c0273ce9fdb7a15ca2d01e477b836ae55a9c9d15d256e25327d38173b6dc58c02933f0f0", 0xb7, 0x41c8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000004a80)=@generic={&(0x7f0000004a40)='./file0\x00', 0x0, 0x18}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000004ac0), 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000004b40), &(0x7f0000004b80)=@v2={0x2000000, [{0x8, 0xce}, {0x1, 0x3}]}, 0x14, 0x1) 507.809582ms ago: executing program 3 (id=3775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x925, 0x5, "f06fca79266e6c5e443b04683cc267a000", 0xe, 0x2}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x53, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffda3}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000000c0)="0393511a330c47c780dd3090a4b683fab6cc2efe6ba842", 0x17, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x42800) close(r2) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000002300)="8332dc80f0d9e1551a26bddb19fafb8b59c1c47a41aaca2c34765a0f4c00c2ca59f37acb52d527f6e8ec616edb24c090a772e78e5d82994bee32c4da07a75bcd44fbfb9a34db358def5dd0b6aaa0bf6e13dc2190871cb8db948f1fbe55289560247c5dc4a45d63a06d90bdfcec9ed20e4f977d9f452153c842e9330c799c3bb623ffeb21116a62f527f36c4ccb34d8b71a6a2be00131deb6fcec097b8098cdf4767a39feddf014c223464e98a22b2275c2b7356853d7ae171e29ff77d3ec5641bca482d2e8191cfaa55c54839a833822e77c44d3bd3dd5a9d5dd3c71c21b1bb449a4bec50fb0c68f227257caaa7eb894a669e3942e345e204daa13aed5cfaede408bce81a192a1c7331aa9b651f127856677d69d326f2b0aee016dde112ee0ce55d0e4e6a37cb0e5ef8005476a977b7a2bacd9ac844f10d1518e6c2cdb4f4a60f59131f6dc200c7acfb031e578e25ccdba4280911faf559ed337605079f68cb7ad450f1a8965493103a0d5921e18c1ae0b6caf99f4e4672c5464f3e28dfc0b3392b4e062594c9a21866f85f18634f5d89a037703ac337156cb98eae7fac8e22e118b8c2b6470a0b4cba046cac7b0a794c96a38f83fbe1230535433a225a9326cfaf398a7a453feed4cc88b6fd9b8287b3dbf742f0c1c672e07be41185a791e3400b6c09ba8b1ba249f07f726496f48f9fef2df32a9051bf1693b59f3268e7496905a5df6bc2314d10c73ee2d283ca795b4d6b6da4839ab18bf5540031316d2bd6f41e51d32b1bc2ca0e9688ee45cc4f217dadb07f9508ee0a3bf16db4e453b9394cb9f8f04f1ab8653b87193157f06f698f0774bf3b992d904235a4fe9d72ddfff96c3706b01046fc490137a4b7482e57871c051c554927ea75eaf2292e0e31ba28638016f1bda4f18b5d2ce074e8db2a679433de4f39789534a4a8c99e10139d4959eabdee2c061b49b4e9487ba36f50b321b13481d4c3444ea5e9cf25d11cc11272edd56a25e7fc011502040f7b881037793ddc9f71b40d780d4050c146e4b7b29e085996e128f21730a0c4d3330399f2b97c1cd8668b611a88377bf1664be7438f0bc22bec73e37b8d3fc1f4804364dc6c2b0cd6b3b32fb0bebc21a7e7d633a36a89ef46433507513d8da864c38b93ab415a25b075a9109dc5b2aaaff100d97d5a0ebb7bfdfb152fb8ac05907dae1fc785fcdc46212f83066664663c45e4682667118dd9480c6f4add9ab40105c9357d533f5df960cf370326f25a82c43d7b65d5863cd763a81feada619b90e5b0ec77b32bd517fed2cde85e2ad1e51af8244d8701f5ef06d67398530c26ff6aebb7c5426be5a3380939915ecc88b1472e33b1a4da579924f4fd4197c7db5b40c1c38c0c123c1bdcfb3e3b3f3de1d4b2a4a36e3daec2a6319a2b05d725a3901ed084ff22c8db80bc4dd270c5a05d52f6141c42b56fc326d3b335757724b2866ab2e29ad312f7a34ee1b926b5af8a651b4fe2ae66d6704cb5887fb867bc47a42f9ba23ae66b4ba5c933b0fb62c3253a5813870fa4fbd54152cf9990103a49af2f90fff760749f1d2b049ecaceeb04fce9d6a3c596e1cf0d8341e6c1f948f830a59121c3841b95289ad401b35b0edc212ceccd53cf366a69cc2adddd8c053826c1e5ab1926451b45b56de411589f55ef4a1f0d9670b36aefd0640e54f18f82c24484773bb2363d9f0ca728a93d4199a9dd6ae523fc492c05fa24524ad8f383d0df9ea55fb6c13fa0b10f6ae833c0f5d98cfaea271c2303f9c0de869b582fa2caafed0c47921bedfc1ed6cedfaea0c3c3b3bc19eee9e0a6f796d787976a0e2bf0b246c74e03e9f197ea27f1eb6f465a93a32bc56588a87d2d9b3af2ce38b9bf05fd3b876bdc4375e200c3008cf8b88d9e98e74e30434ff22cdebb5af19c3796584de206407bc1c44bccc3ea21d79c2bbfeb16e48f0322907b911e802bfa90df95305eb31ff0a3c872c0b2f2a57e1ae0e006e9448c4d6361e85da2253f3103739fbcc0980eade4e6e012ecc8a39026a53927ab630517d1c10940da9dacbd5e3fc39d69e683934d099c1f536a74c967bbc8a6acaaee4d401f759b6bf1f643f152af6312d848535a429cd53137794d2386580e5b048ad5f3989348d0fa4559df61eb9a6972ad52e14b02cc9eb6d4c63a14cdc2d43a834997faf4d2826f11dbd5a02ebf7b816c5acf93eef0d068e663e2cf631ef6087c185b83168ce76999b33a919b5566b7d177c4c45a18d97631fc2a9e71aaa099b50aaef9a77c2bc8e7a2ac589c7f2de671091ec0be7ab13c10a1e98a8c7c5a34bbb03ee8a80f024961568a228662ddb1b791fad5ef6d4a4535db8505fae512fd29f660e08e0b406b6a61c5cf008ba9243ae799192b1c1e9d8802663ddbb343c04d0a832649afbc8ce8ddd9d5d4da27a2c379b6feec1ddf956c87b24b29aa413f7d75625a9cddf61553bdb1986169d8702f09e268aa499d1f4d0510228f9c2066977ebdc41eb7a31eb38e754a584db9642acff1395e013ce242e4afceabfaa80fe360cdd11b66dae3b854490c59523a0ffcc98726f7ac0b3bac63757f7d89949f7db576d58e13531b41d9f7b3af01c455cf3d580c3415f7dfad5aa9141e864f9dc3f48bbe8528af64de51aef54e5eb6e83bc0f8ab087e4afb778866601c48890cc051b00667960248962ecdea4cd3339838a5a1c6d2c000eda8a7a11dc5b238333a501f18612a50088dff8a8af3366c8ed96d6c42e1510bcd6412ef5457f7c9e9677ae9c5e7d6670039cf98ce7bbdb9843c0ecedef31d99de5474f999b0ebbea6a5f61a32800a9dfb9ffd67477b785d5120214dd51b4fd0ab937e9e919f5aae54cd926bcac65c7edc504088bfdf40243f148c65ade6fb8046aeea23be71f3a0be8c0c810a7a289ed9afa124735c15e12ba3206a59e07ec15fad101011b305fd285d3cd8fcc263ae017f9dc614e28051ecf2d7f803aacf4adc6865504fc1fa064f3bc2c5fb5505003d297cbc94ae87f8fce0b54f8e8b13ef742b08767cb812994a31c3bbfd7d9aed6cc75d28951f87c9f5579fe59f0737fee8bc88ee310932dbafb09438b853ba299aa0d3394c733c6a09bb0f2469314a908204a88e0c3593c01189885703cf1d29f370007b7bc385de4af2863ba840990277a2134a153ad5f275347af766edf556fb24dea7800c9e9d7648a0cc099fda4fc3d71503623c9e7577478101dbe05bbb3b0d593daf1d487ee94c56bb86e6e4e9f6deb68e546313006139a7a2bf4d9378691488bff8889996643842fb7d1859bdfb6161ec4e1d9d455ea1057b0737e694250d6eb8717b8b762c224fa583466f72eb068fb045a112f6f96bb09c06cb4dde0e5addbfb88d7b6e311f2d0c13fc81f75321c93b688f5687ec5dbe865ae56607a7d87414cfcee2228613b8fab39978c689d03cdca61eb42747aade6573a26a5340c2a44c9d32cd88aadd08906cde4b89d6f559f757c2c2ca3e0e36bda991d0af6ee3b39dcc6afc8c0be282236f820a08a17be67087c45c82aeaca29c933e42e198a6700d86e86e6e2b2ae641da36eee30fa2d5fc6d3234c1d7d657c93d23efe2ddc351a00698992d5ee4a3d3f32cec291f5dfcad9596e731e654361ca36d5de513b677850a122c974c70088695cce771ccee0e1270e447404c6a42857b87a6555df8c8a967b66afe758feeda9647088227a3abf057cc29e033be8e1a7bdfb53bd33b8f4f8f95d5420b75c15e83024b847cf87e9c21ac2e39fa3da027864c9b5b96f4463c978e60723b0cc80866d9b6b5a4b7e885c7c5bc1a7fc2ecb5bd17477a36279651cf2670911a2f92d20032fd36bba622f40e97491cc46da303e571de88b353b1eea5dfcbbfbae34db548cd7144da675a2055eef446bddfae7fa0fa7f76dffea47b901f9e41ea3e923193db3d3bae2194a106c9c41e1ecf539e9584608983e2ec127f99ac3e7cd6fab0fa77b471e786515dd5aa68baa6d74bb7a30046ef992fc978711b7532246c9fde6d3c6fd59737008cbfd004a1dbc7677f649b13d296ab859e1f0f81bd88ed264c1555d77a2c62fc3ae6062be235f681babaf202439f70e14b1d903b032c9a7a14f150b9bc1a89b9e3b2a2a6368bb32870ac167ab4a8f5b87714cb4292623d392d4fd00a86bcf8d0845a34d3cf133087cf404d6debc3037059f1434be83ccf686ffc1c9a2280c5d7ec02d21d79fccacba99d4e10fb819965db7189f58a2be169c700777931aa8c9f2a7dfc67b80d6979a8aabed5191d4e7c19ff48017a5a76ca621919c0f9471cdb5a9a4436e5ecb89405e3fe2e7dfe426e21e3d4526efb276fc06cd11e377eddda33e53263da3cb394a442db272355ab241dc8d22664ad28fabb39bd18e86b7fa0514ccdae13ded6f9331ca02e087c174497652e4e3fdcb20931a6437e13857c97e2c043d15983d0a663700538a54d8e12f2c37f238ac6e9da84d7a71b21918c2e86e204d2215752b71d724f45dd72821ec3f5df49f2a69439ce3d83884792b718295b5c0b8efca4c2b4a4f635587f85a2484ab523495f021b2e1658df958f6f03c8162b337f96cad9e44fb1586d5e10056771d82428efce294ebbe8d29de400258777afb3efc7dc18e0039bc30025e0b926b8ee7e92b4d571d072617479d105c443efbb52813d372c777950940710ed6e9a710ae541058f8aa448d124da2421467cb93ce116dc9e3b45424b59c19b30cc7013b0e22ecd8a78ed71c42ff18abfdb7a0cbd18e4344ba89ba5a923e8e70ffb4070db1f884261089d0e49ebcc2a00b84b51394c5cff30509ec606cd0206618f078c7c825e307e91a0eb3487102b9eebf89d2c29da5212917d852e86b4516b04af925737068df7311449d214ed14731ece93fa8115ba1e03ae5951662ef328452738dd09947c22f0e80a7c7051cb7bb0884e7697694fe0bcd610289c7f0670aa2168512e500a10dfdb44f97d72f717f3b80a180ebfec184ec555369d8b939c773a52ca42162cf0f958c01e2280090675036b8cbd81c34ca4c22dd04d378d415fb5973b938f40a5a72894138324dcf8c9717c9e84e21bc13927e269dcb66389fcc7f6beb71d0846653bbcbb8d044e2a6b3a6c8b68ff88372313ac46ed4d3006c9cab20e27735afeadb1b576a27b05c25a8594a7c10c30e676fc8b2cc7ea1e9822ac2fb3a837845ef0cd7fe44e4bdfd0a57449e056cf01d512e47c0257dccb4faca4cac390c7035ccddb3aae16f22401cc416d406b05dd872a4dc477ea90f4591a73fce22a5dd7c35fb9e1c774eb9b9b1b157b1a369d65229670fd3321bdefde7e840771f16e532a65947d3b4a3dfb34f78c263a7285b2b12e421a8ad6eff505ebe997540ab54425d68c58ed7e3032abc5d2966e494ecaffa5ae5ef566a205bb4ebfc88ed60c93ee6abb1b0d65dc96911975d0caab3a5", 0xf00) r7 = fanotify_init(0x200, 0x0) r8 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r9 = dup(r8) fanotify_mark(r7, 0x1, 0x48001059, r9, 0x0) r10 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r10, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='cubic', 0x5) unshare(0x68040200) socket$nl_xfrm(0x10, 0x3, 0x6) 173.24335ms ago: executing program 2 (id=3776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r0, 0xffffffffffffffff, 0xd, 0x0, @val=@tracing={0x0, 0xa85b}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0xfffffffc, 0x7, 0x0, 0x0, 0x1, 0x7, 0x640, 0x7, 0x9b83, 0x9, 0x8001, 0x7, 0xfee, 0x1, 0x2, 0x20, {0x80, 0x7}, 0x5, 0x7}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200000, 0x2, 0x0, 0x1, 0x3}, 0x20) 0s ago: executing program 2 (id=3777): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x40000000, 0x5a0e) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000becd0f2016001200"/25, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000030000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000100000000000a330000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703670000000000850000000c000000b700000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x25, &(0x7f0000000300)=""/37, 0x40f00, 0x3, '\x00', 0x0, @sock_ops, r2, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x8, 0x7, 0xc}, 0x10, 0x0, r2, 0x8, &(0x7f0000000580)=[r2, r2, r7, r2, r1, r8, r9, 0xffffffffffffffff, r2, r2], &(0x7f00000005c0)=[{0x5, 0x2, 0x4}, {0x3, 0x4, 0x0, 0x6}, {0x5, 0x2, 0xd, 0x5}, {0x4, 0x2, 0x4, 0x7}, {0x0, 0x4, 0xf, 0xb}, {0x4, 0x4, 0x9, 0x6}, {0x2, 0x5, 0x5, 0x4}, {0x0, 0x1, 0x3, 0x7}], 0x10, 0x6}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000ffffffffffff"]) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r13, 0xae80, 0x0) kernel console output (not intermixed with test programs): ][T30886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3280'. [ 903.362177][T30889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3280'. [ 903.368828][T29995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.471319][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 903.545821][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.560254][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.575328][T29995] veth0_vlan: entered promiscuous mode [ 903.578246][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 903.627166][T30894] unsupported nla_type 52263 [ 903.644476][T29995] veth1_vlan: entered promiscuous mode [ 903.648239][ T982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 903.682248][ T982] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 903.698463][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.717182][T29995] veth0_macvtap: entered promiscuous mode [ 903.717894][ T982] usb 2-1: config 0 descriptor?? [ 903.754862][ T30] audit: type=1326 audit(1760316432.741:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30893 comm="syz.2.3281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaf1b8eec9 code=0x0 [ 903.787252][T29995] veth1_macvtap: entered promiscuous mode [ 903.827621][T30906] netlink: 'syz.5.3283': attribute type 2 has an invalid length. [ 903.835948][T30906] netlink: 119 bytes leftover after parsing attributes in process `syz.5.3283'. [ 903.892978][T29995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.924556][T29995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.964691][ T3561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.986263][ T3561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.032016][ T3561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.047237][ T3561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.117386][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3285'. [ 904.195903][T30915] fuse: Unknown parameter '000000000000000000000160000000000000000000000400000000000000000000' [ 904.243399][ T982] hid-u2fzero 0003:10C4:8ACF.002F: unknown main item tag 0x0 [ 904.275726][ T982] hid-u2fzero 0003:10C4:8ACF.002F: unknown main item tag 0x0 [ 904.278436][ T3561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.294125][ T982] hid-u2fzero 0003:10C4:8ACF.002F: unknown main item tag 0x0 [ 904.323736][ T982] hid-u2fzero 0003:10C4:8ACF.002F: unknown main item tag 0x0 [ 904.331901][ T3561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.345738][ T982] hid-u2fzero 0003:10C4:8ACF.002F: unknown main item tag 0x0 [ 904.373328][ T982] hid-u2fzero 0003:10C4:8ACF.002F: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 904.422882][T30876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.475243][ T982] hid-u2fzero 0003:10C4:8ACF.002F: U2F Zero LED initialised [ 904.481712][T30876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.523669][ T982] hid-u2fzero 0003:10C4:8ACF.002F: U2F Zero RNG initialised [ 904.565446][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.641753][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.682353][ T982] usb 2-1: USB disconnect, device number 34 [ 905.229681][ T979] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 905.392239][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 905.407989][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.474882][ T979] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 905.496546][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.527696][ T979] usb 4-1: config 0 descriptor?? [ 906.064741][T30975] : renamed from batadv_slave_1 (while UP) [ 906.138821][ T979] savu 0003:1E7D:2D5A.0030: global environment stack underflow [ 906.155665][ T979] savu 0003:1E7D:2D5A.0030: item 0 4 1 11 parsing failed [ 906.174670][ T979] savu 0003:1E7D:2D5A.0030: parse failed [ 906.191853][ T979] savu 0003:1E7D:2D5A.0030: probe with driver savu failed with error -22 [ 906.541581][T31022] netlink: 'syz.4.3294': attribute type 1 has an invalid length. [ 906.657077][T31022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.829300][T31027] bond1: (slave ip6erspan0): making interface the new active one [ 906.838896][T31027] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 907.723767][T31092] loop6: detected capacity change from 0 to 7 [ 907.762029][T31092] Dev loop6: unable to read RDB block 7 [ 907.794275][T31092] loop6: unable to read partition table [ 907.820408][T31092] loop6: partition table beyond EOD, truncated [ 907.845179][T31092] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 907.969842][ T982] usb 4-1: USB disconnect, device number 34 [ 908.220231][T31127] FAULT_INJECTION: forcing a failure. [ 908.220231][T31127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.354998][T31127] CPU: 0 UID: 0 PID: 31127 Comm: syz.4.3302 Not tainted syzkaller #0 PREEMPT(full) [ 908.355015][T31127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 908.355022][T31127] Call Trace: [ 908.355027][T31127] [ 908.355032][T31127] dump_stack_lvl+0x189/0x250 [ 908.355049][T31127] ? __pfx____ratelimit+0x10/0x10 [ 908.355065][T31127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.355075][T31127] ? __pfx__printk+0x10/0x10 [ 908.355086][T31127] ? __might_fault+0xb0/0x130 [ 908.355102][T31127] should_fail_ex+0x414/0x560 [ 908.355120][T31127] _copy_from_user+0x2d/0xb0 [ 908.355134][T31127] ___sys_sendmsg+0x158/0x2a0 [ 908.355151][T31127] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.355182][T31127] ? __fget_files+0x2a/0x420 [ 908.355194][T31127] ? __fget_files+0x3a0/0x420 [ 908.355210][T31127] __x64_sys_sendmsg+0x19b/0x260 [ 908.355221][T31127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.355240][T31127] ? __pfx_ksys_write+0x10/0x10 [ 908.355253][T31127] ? do_syscall_64+0xbe/0xfa0 [ 908.355265][T31127] do_syscall_64+0xfa/0xfa0 [ 908.355273][T31127] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.355283][T31127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.355293][T31127] ? clear_bhb_loop+0x60/0xb0 [ 908.355305][T31127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.355314][T31127] RIP: 0033:0x7f7da238eec9 [ 908.355325][T31127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.355334][T31127] RSP: 002b:00007f7da3275038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.355346][T31127] RAX: ffffffffffffffda RBX: 00007f7da25e5fa0 RCX: 00007f7da238eec9 [ 908.355353][T31127] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 908.355360][T31127] RBP: 00007f7da3275090 R08: 0000000000000000 R09: 0000000000000000 [ 908.355366][T31127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.355373][T31127] R13: 00007f7da25e6038 R14: 00007f7da25e5fa0 R15: 00007f7da270fa28 [ 908.355389][T31127] [ 908.369922][T31134] fuse: Unknown parameter 'fJ' [ 908.565483][T17041] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 908.662624][T31134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 908.743200][T17041] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 908.764137][T17041] usb 6-1: config 0 has no interface number 0 [ 908.779459][T17041] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.869034][T17041] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.880716][T17041] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 908.890708][T17041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.917846][T17041] usb 6-1: config 0 descriptor?? [ 909.149207][T31120] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 909.394962][T17041] usbhid 6-1:0.1: can't add hid device: -71 [ 909.404716][T17041] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 909.451776][T17041] usb 6-1: USB disconnect, device number 13 [ 909.798361][ T5845] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 909.978348][ T5845] usb 2-1: device descriptor read/64, error -71 [ 910.218490][ T5845] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 910.413406][ T5845] usb 2-1: device descriptor read/64, error -71 [ 910.599476][ T5845] usb usb2-port1: attempt power cycle [ 910.678318][ T982] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 910.765010][T31218] Option '[y$ [ 910.765010][T31218] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 910.884988][ T982] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 910.904840][ T982] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 910.920358][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.934601][ T982] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 910.943681][ T982] usb 4-1: config 0 has no interface number 0 [ 910.948323][ T5845] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 910.950146][ T982] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 910.969151][ T982] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 910.975744][ T5845] usb 2-1: device descriptor read/8, error -71 [ 910.980840][ T982] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 910.997586][ T982] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.011498][ T982] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 911.020958][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.038931][ T982] usb 4-1: config 0 descriptor?? [ 911.053241][ T982] gspca_main: spca561-2.14.0 probing abcd:cdee [ 911.238302][ T5845] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 911.289919][ T5845] usb 2-1: device descriptor read/8, error -71 [ 911.306000][ T982] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 911.327728][ T982] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.345088][ T982] usb 4-1: MIDIStreaming interface descriptor not found [ 911.408763][ T5845] usb usb2-port1: unable to enumerate USB device [ 911.433895][ T982] usb 4-1: USB disconnect, device number 35 [ 911.482322][T31250] fuse: Bad value for 'max_read' [ 913.208323][ T5918] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 913.421870][ T30] audit: type=1326 audit(1760316442.411:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31312 comm="syz.2.3328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x0 [ 913.485018][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 913.670614][ T5918] usb 4-1: not running at top speed; connect to a high speed hub [ 913.722387][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.784739][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 913.911457][ T5918] usb 4-1: string descriptor 0 read error: -22 [ 913.920462][ T5918] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 913.962367][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.022847][T31330] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3330'. [ 914.160169][ T5918] usb 4-1: 0:2 : does not exist [ 914.760146][T31340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'. [ 915.844765][T31363] blktrace: Concurrent blktraces are not allowed on sg0 [ 916.032703][ T5918] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 916.054328][ T5918] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 916.189072][ T5918] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 916.242808][ T5918] usb 4-1: USB disconnect, device number 36 [ 916.518375][T17041] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 916.702665][T17041] usb 6-1: Using ep0 maxpacket: 32 [ 916.704734][T17041] usb 6-1: unable to get BOS descriptor or descriptor too short [ 916.705673][T17041] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 916.705697][T17041] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.707620][T17041] usb 6-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 916.707637][T17041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.707647][T17041] usb 6-1: Product: syz [ 916.707656][T17041] usb 6-1: Manufacturer: syz [ 916.707665][T17041] usb 6-1: SerialNumber: syz [ 916.709469][T17041] usb 6-1: config 0 descriptor?? [ 916.973548][ T24] usb 6-1: USB disconnect, device number 14 [ 917.608829][T31427] FAULT_INJECTION: forcing a failure. [ 917.608829][T31427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.648286][T31427] CPU: 0 UID: 0 PID: 31427 Comm: syz.3.3340 Not tainted syzkaller #0 PREEMPT(full) [ 917.648317][T31427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 917.648329][T31427] Call Trace: [ 917.648337][T31427] [ 917.648346][T31427] dump_stack_lvl+0x189/0x250 [ 917.648371][T31427] ? __pfx____ratelimit+0x10/0x10 [ 917.648398][T31427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.648418][T31427] ? __pfx__printk+0x10/0x10 [ 917.648437][T31427] ? __might_fault+0xb0/0x130 [ 917.648468][T31427] should_fail_ex+0x414/0x560 [ 917.648499][T31427] _copy_from_user+0x2d/0xb0 [ 917.648523][T31427] ___sys_sendmsg+0x158/0x2a0 [ 917.648552][T31427] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.648604][T31427] ? __might_fault+0xb0/0x130 [ 917.648621][T31427] __sys_sendmmsg+0x227/0x430 [ 917.648638][T31427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 917.648658][T31427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 917.648686][T31427] ? ksys_write+0x22a/0x250 [ 917.648703][T31427] ? __pfx_ksys_write+0x10/0x10 [ 917.648721][T31427] __x64_sys_sendmmsg+0xa0/0xc0 [ 917.648736][T31427] do_syscall_64+0xfa/0xfa0 [ 917.648749][T31427] ? lockdep_hardirqs_on+0x9c/0x150 [ 917.648763][T31427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.648776][T31427] ? clear_bhb_loop+0x60/0xb0 [ 917.648793][T31427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.648807][T31427] RIP: 0033:0x7f182af8eec9 [ 917.648821][T31427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.648834][T31427] RSP: 002b:00007f182be38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 917.648850][T31427] RAX: ffffffffffffffda RBX: 00007f182b1e6090 RCX: 00007f182af8eec9 [ 917.648878][T31427] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000007 [ 917.648887][T31427] RBP: 00007f182be38090 R08: 0000000000000000 R09: 0000000000000000 [ 917.648896][T31427] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000002 [ 917.648910][T31427] R13: 00007f182b1e6128 R14: 00007f182b1e6090 R15: 00007f182b30fa28 [ 917.648933][T31427] [ 918.918466][ T5918] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 919.103345][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 919.111544][ T5918] usb 2-1: not running at top speed; connect to a high speed hub [ 919.120465][ T5918] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 919.136706][ T5918] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 919.332974][T31472] netlink: 'syz.2.3349': attribute type 11 has an invalid length. [ 919.362271][ T5918] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 919.401382][ T5918] usb 2-1: config 2 has no interface number 0 [ 919.407718][ T5918] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 919.426743][ T5918] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 919.458238][ T5918] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 919.489625][ T5918] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 919.498705][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.506817][ T5918] usb 2-1: Product: Ў [ 919.516988][ T5918] usb 2-1: Manufacturer: ᠊ [ 919.527259][ T5918] usb 2-1: SerialNumber: syz [ 919.792513][ T5918] usb 2-1: USB disconnect, device number 39 [ 919.890762][T31494] FAULT_INJECTION: forcing a failure. [ 919.890762][T31494] name failslab, interval 1, probability 0, space 0, times 0 [ 919.949359][T31494] CPU: 0 UID: 0 PID: 31494 Comm: syz.3.3352 Not tainted syzkaller #0 PREEMPT(full) [ 919.949387][T31494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 919.949398][T31494] Call Trace: [ 919.949407][T31494] [ 919.949416][T31494] dump_stack_lvl+0x189/0x250 [ 919.949441][T31494] ? __pfx____ratelimit+0x10/0x10 [ 919.949467][T31494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 919.949487][T31494] ? __pfx__printk+0x10/0x10 [ 919.949512][T31494] ? __ip_dev_find+0x444/0x4e0 [ 919.949533][T31494] should_fail_ex+0x414/0x560 [ 919.949565][T31494] should_failslab+0xa8/0x100 [ 919.949590][T31494] kmem_cache_alloc_noprof+0x74/0x6e0 [ 919.949610][T31494] ? dst_alloc+0x105/0x170 [ 919.949634][T31494] dst_alloc+0x105/0x170 [ 919.949651][T31494] ? ip_check_mc_rcu+0x443/0x680 [ 919.949673][T31494] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 919.949704][T31494] ? ip_route_output_key_hash+0xc1/0x280 [ 919.949727][T31494] ip_route_output_key_hash+0x174/0x280 [ 919.949751][T31494] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 919.949778][T31494] ? ip_cmsg_send+0x9c3/0xa70 [ 919.949808][T31494] ip_route_output_flow+0x2a/0x150 [ 919.949825][T31494] ? security_sk_classify_flow+0x70/0x180 [ 919.949852][T31494] raw_sendmsg+0x1039/0x18b0 [ 919.949890][T31494] ? __pfx_raw_sendmsg+0x10/0x10 [ 919.949930][T31494] ? aa_sk_perm+0x81e/0x950 [ 919.949961][T31494] ? __pfx_aa_sk_perm+0x10/0x10 [ 919.949977][T31494] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 919.950003][T31494] ? sock_rps_record_flow+0x19/0x410 [ 919.950028][T31494] ? inet_sendmsg+0x2f4/0x370 [ 919.950050][T31494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 919.950076][T31494] __sock_sendmsg+0x19c/0x270 [ 919.950101][T31494] ____sys_sendmsg+0x505/0x830 [ 919.950133][T31494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 919.950168][T31494] ? import_iovec+0x74/0xa0 [ 919.950195][T31494] ___sys_sendmsg+0x21f/0x2a0 [ 919.950223][T31494] ? __pfx____sys_sendmsg+0x10/0x10 [ 919.950285][T31494] ? __fget_files+0x2a/0x420 [ 919.950306][T31494] ? __fget_files+0x3a0/0x420 [ 919.950337][T31494] __x64_sys_sendmsg+0x19b/0x260 [ 919.950358][T31494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 919.950394][T31494] ? __pfx_ksys_write+0x10/0x10 [ 919.950416][T31494] ? do_syscall_64+0xbe/0xfa0 [ 919.950436][T31494] do_syscall_64+0xfa/0xfa0 [ 919.950453][T31494] ? lockdep_hardirqs_on+0x9c/0x150 [ 919.950471][T31494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.950488][T31494] ? clear_bhb_loop+0x60/0xb0 [ 919.950510][T31494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.950528][T31494] RIP: 0033:0x7f182af8eec9 [ 919.950544][T31494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.950559][T31494] RSP: 002b:00007f182be59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.950580][T31494] RAX: ffffffffffffffda RBX: 00007f182b1e5fa0 RCX: 00007f182af8eec9 [ 919.950594][T31494] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 919.950606][T31494] RBP: 00007f182be59090 R08: 0000000000000000 R09: 0000000000000000 [ 919.950618][T31494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.950629][T31494] R13: 00007f182b1e6038 R14: 00007f182b1e5fa0 R15: 00007f182b30fa28 [ 919.950661][T31494] [ 919.951510][T31495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3353'. [ 921.389999][ T5868] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 921.568877][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 921.682758][ T5868] usb 4-1: config 0 has no interfaces? [ 921.710365][ T5868] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 921.738275][ T5868] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 921.746328][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032c57c00: rx timeout, send abort [ 921.754874][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888032c57c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 921.796854][T31558] loop2: detected capacity change from 0 to 7 [ 921.809555][T31558] loop2: [ 921.812511][T31558] loop2: partition table partially beyond EOD, truncated [ 921.980790][T31573] usb usb8: usbfs: process 31573 (syz.5.3362) did not claim interface 0 before use [ 922.097088][ T5868] usb 4-1: Manufacturer: syz [ 922.307692][ T5868] usb 4-1: config 0 descriptor?? [ 924.476009][ T5868] usb 4-1: USB disconnect, device number 37 [ 925.645998][ T5868] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 925.838290][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 925.843759][ T30] audit: type=1326 audit(1760316454.831:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31702 comm="syz.2.3380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaf1b8eec9 code=0x0 [ 925.893339][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.909061][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 925.923422][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.966764][ T5868] usb 4-1: config 0 descriptor?? [ 925.995870][ T5868] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 926.643172][ T5868] gspca_vc032x: reg_r err -110 [ 926.673661][T31723] Cannot find add_set index 0 as target [ 926.764230][ T5868] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 927.820560][T31742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3385'. [ 927.931245][T31743] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3385'. [ 928.072240][T31748] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3385'. [ 928.370479][ T5845] usb 4-1: USB disconnect, device number 38 [ 928.381168][T31761] FAULT_INJECTION: forcing a failure. [ 928.381168][T31761] name failslab, interval 1, probability 0, space 0, times 0 [ 928.400298][T31761] CPU: 1 UID: 0 PID: 31761 Comm: syz.2.3387 Not tainted syzkaller #0 PREEMPT(full) [ 928.400323][T31761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 928.400334][T31761] Call Trace: [ 928.400342][T31761] [ 928.400351][T31761] dump_stack_lvl+0x189/0x250 [ 928.400375][T31761] ? __pfx____ratelimit+0x10/0x10 [ 928.400401][T31761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.400420][T31761] ? __pfx__printk+0x10/0x10 [ 928.400443][T31761] ? __pfx___might_resched+0x10/0x10 [ 928.400470][T31761] should_fail_ex+0x414/0x560 [ 928.400499][T31761] should_failslab+0xa8/0x100 [ 928.400524][T31761] __kmalloc_noprof+0xcb/0x7f0 [ 928.400541][T31761] ? kfree+0x4d/0x6d0 [ 928.400555][T31761] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 928.400580][T31761] tomoyo_realpath_from_path+0xe3/0x5d0 [ 928.400602][T31761] ? tomoyo_domain+0xd9/0x130 [ 928.400627][T31761] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 928.400653][T31761] tomoyo_path_number_perm+0x1e8/0x5a0 [ 928.400681][T31761] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 928.400744][T31761] ? __fget_files+0x2a/0x420 [ 928.400769][T31761] ? __fget_files+0x3a0/0x420 [ 928.400789][T31761] ? __fget_files+0x2a/0x420 [ 928.400814][T31761] security_file_ioctl+0xcb/0x2d0 [ 928.400840][T31761] __se_sys_ioctl+0x47/0x170 [ 928.400860][T31761] do_syscall_64+0xfa/0xfa0 [ 928.400875][T31761] ? lockdep_hardirqs_on+0x9c/0x150 [ 928.400892][T31761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.400908][T31761] ? clear_bhb_loop+0x60/0xb0 [ 928.400930][T31761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.400956][T31761] RIP: 0033:0x7fcaf1b8eec9 [ 928.400973][T31761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.400988][T31761] RSP: 002b:00007fcaf2a2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 928.401007][T31761] RAX: ffffffffffffffda RBX: 00007fcaf1de5fa0 RCX: 00007fcaf1b8eec9 [ 928.401021][T31761] RDX: 0000000000000000 RSI: 00000000c040ff0b RDI: 0000000000000003 [ 928.401033][T31761] RBP: 00007fcaf2a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 928.401045][T31761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.401056][T31761] R13: 00007fcaf1de6038 R14: 00007fcaf1de5fa0 R15: 00007fcaf1f0fa28 [ 928.401088][T31761] [ 928.401096][T31761] ERROR: Out of memory at tomoyo_realpath_from_path. [ 929.046726][T31787] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 929.078367][T31787] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 929.098734][ T5845] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 929.109459][T31787] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 929.289117][ T5845] usb 6-1: config 4 has an invalid interface number: 5 but max is 0 [ 929.310685][ T5845] usb 6-1: config 4 has no interface number 0 [ 929.327503][ T5845] usb 6-1: New USB device found, idVendor=12d1, idProduct=b9c7, bcdDevice=80.e8 [ 929.343410][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.362092][ T5845] usb 6-1: Product: syz [ 929.369799][ T5845] usb 6-1: Manufacturer: syz [ 929.380972][ T5845] usb 6-1: SerialNumber: syz [ 929.405577][ T5845] option 6-1:4.5: GSM modem (1-port) converter detected [ 929.548373][T31803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3395'. [ 929.576849][T31803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3395'. [ 929.630673][ T5868] usb 6-1: USB disconnect, device number 15 [ 929.641201][ T5868] option 6-1:4.5: device disconnected [ 929.784725][T31822] FAULT_INJECTION: forcing a failure. [ 929.784725][T31822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.798577][T31822] CPU: 1 UID: 0 PID: 31822 Comm: syz.3.3397 Not tainted syzkaller #0 PREEMPT(full) [ 929.798604][T31822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 929.798616][T31822] Call Trace: [ 929.798624][T31822] [ 929.798633][T31822] dump_stack_lvl+0x189/0x250 [ 929.798658][T31822] ? __pfx____ratelimit+0x10/0x10 [ 929.798684][T31822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.798704][T31822] ? __pfx__printk+0x10/0x10 [ 929.798723][T31822] ? __might_fault+0xb0/0x130 [ 929.798753][T31822] should_fail_ex+0x414/0x560 [ 929.798792][T31822] _copy_from_user+0x2d/0xb0 [ 929.798816][T31822] ___sys_sendmsg+0x158/0x2a0 [ 929.798845][T31822] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.798905][T31822] ? __might_fault+0xb0/0x130 [ 929.798922][T31822] __sys_sendmmsg+0x227/0x430 [ 929.798940][T31822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 929.798960][T31822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 929.798987][T31822] ? ksys_write+0x22a/0x250 [ 929.799004][T31822] ? __pfx_ksys_write+0x10/0x10 [ 929.799024][T31822] __x64_sys_sendmmsg+0xa0/0xc0 [ 929.799039][T31822] do_syscall_64+0xfa/0xfa0 [ 929.799052][T31822] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.799066][T31822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.799080][T31822] ? clear_bhb_loop+0x60/0xb0 [ 929.799097][T31822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.799110][T31822] RIP: 0033:0x7f182af8eec9 [ 929.799124][T31822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.799136][T31822] RSP: 002b:00007f182be38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 929.799152][T31822] RAX: ffffffffffffffda RBX: 00007f182b1e6090 RCX: 00007f182af8eec9 [ 929.799163][T31822] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000007 [ 929.799172][T31822] RBP: 00007f182be38090 R08: 0000000000000000 R09: 0000000000000000 [ 929.799181][T31822] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000002 [ 929.799190][T31822] R13: 00007f182b1e6128 R14: 00007f182b1e6090 R15: 00007f182b30fa28 [ 929.799213][T31822] [ 930.539762][T31831] syzkaller0: entered promiscuous mode [ 930.559899][T31831] syzkaller0: entered allmulticast mode [ 930.905687][T31867] FAULT_INJECTION: forcing a failure. [ 930.905687][T31867] name failslab, interval 1, probability 0, space 0, times 0 [ 930.956696][T31867] CPU: 0 UID: 0 PID: 31867 Comm: syz.1.3401 Not tainted syzkaller #0 PREEMPT(full) [ 930.956722][T31867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 930.956733][T31867] Call Trace: [ 930.956741][T31867] [ 930.956748][T31867] dump_stack_lvl+0x189/0x250 [ 930.956771][T31867] ? __pfx____ratelimit+0x10/0x10 [ 930.956796][T31867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.956814][T31867] ? __pfx__printk+0x10/0x10 [ 930.956838][T31867] ? __pfx___might_resched+0x10/0x10 [ 930.956859][T31867] ? fs_reclaim_acquire+0x7d/0x100 [ 930.956884][T31867] should_fail_ex+0x414/0x560 [ 930.956916][T31867] should_failslab+0xa8/0x100 [ 930.956946][T31867] __kmalloc_noprof+0xcb/0x7f0 [ 930.956964][T31867] ? tomoyo_encode+0x28b/0x550 [ 930.956989][T31867] tomoyo_encode+0x28b/0x550 [ 930.957014][T31867] tomoyo_realpath_from_path+0x58d/0x5d0 [ 930.957037][T31867] ? tomoyo_domain+0xd9/0x130 [ 930.957066][T31867] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 930.957092][T31867] tomoyo_path_number_perm+0x1e8/0x5a0 [ 930.957120][T31867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 930.957182][T31867] ? __fget_files+0x2a/0x420 [ 930.957208][T31867] ? __fget_files+0x3a0/0x420 [ 930.957227][T31867] ? __fget_files+0x2a/0x420 [ 930.957251][T31867] security_file_ioctl+0xcb/0x2d0 [ 930.957279][T31867] __se_sys_ioctl+0x47/0x170 [ 930.957300][T31867] do_syscall_64+0xfa/0xfa0 [ 930.957321][T31867] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.957339][T31867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.957357][T31867] ? clear_bhb_loop+0x60/0xb0 [ 930.957379][T31867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.957396][T31867] RIP: 0033:0x7fa06f78eec9 [ 930.957414][T31867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.957429][T31867] RSP: 002b:00007fa070701038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.957449][T31867] RAX: ffffffffffffffda RBX: 00007fa06f9e5fa0 RCX: 00007fa06f78eec9 [ 930.957463][T31867] RDX: 0000000000000000 RSI: 00000000c040ff0b RDI: 0000000000000003 [ 930.957474][T31867] RBP: 00007fa070701090 R08: 0000000000000000 R09: 0000000000000000 [ 930.957486][T31867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.957497][T31867] R13: 00007fa06f9e6038 R14: 00007fa06f9e5fa0 R15: 00007fa06fb0fa28 [ 930.957528][T31867] [ 930.957978][T31867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.461481][T31879] netlink: 39 bytes leftover after parsing attributes in process `syz.1.3404'. [ 931.568817][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.575287][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.592043][T31879] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3404'. [ 932.240387][ T30] audit: type=1326 audit(1760316461.211:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 932.616593][T31899] tipc: Enabling of bearer rejected, failed to enable media [ 932.696815][ T30] audit: type=1326 audit(1760316461.211:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 932.795504][ T30] audit: type=1326 audit(1760316461.211:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 932.848344][ T30] audit: type=1326 audit(1760316461.211:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 932.871352][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.974362][ T30] audit: type=1326 audit(1760316461.261:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 932.998011][ T30] audit: type=1326 audit(1760316461.261:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 933.056250][ T30] audit: type=1326 audit(1760316461.261:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 933.127419][ T30] audit: type=1326 audit(1760316461.261:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f182af8d710 code=0x7ffc0000 [ 933.178253][ T30] audit: type=1326 audit(1760316461.261:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 933.238262][ T30] audit: type=1326 audit(1760316461.261:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31892 comm="syz.3.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 933.460038][T31923] loop2: detected capacity change from 0 to 7 [ 933.472671][T31924] FAULT_INJECTION: forcing a failure. [ 933.472671][T31924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.499754][T31923] loop2: [ 933.508662][T31923] loop2: partition table partially beyond EOD, truncated [ 933.529383][T31924] CPU: 1 UID: 0 PID: 31924 Comm: syz.3.3414 Not tainted syzkaller #0 PREEMPT(full) [ 933.529408][T31924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 933.529419][T31924] Call Trace: [ 933.529426][T31924] [ 933.529435][T31924] dump_stack_lvl+0x189/0x250 [ 933.529460][T31924] ? __pfx____ratelimit+0x10/0x10 [ 933.529486][T31924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.529504][T31924] ? __pfx__printk+0x10/0x10 [ 933.529530][T31924] should_fail_ex+0x414/0x560 [ 933.529561][T31924] _copy_to_user+0x31/0xb0 [ 933.529587][T31924] simple_read_from_buffer+0xe1/0x170 [ 933.529613][T31924] proc_fail_nth_read+0x1b3/0x220 [ 933.529642][T31924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.529679][T31924] ? rw_verify_area+0x2a6/0x4d0 [ 933.529695][T31924] ? __lock_acquire+0xab9/0xd20 [ 933.529713][T31924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.529737][T31924] vfs_read+0x200/0xa30 [ 933.529754][T31924] ? fdget_pos+0x247/0x320 [ 933.529780][T31924] ? __pfx___mutex_lock+0x10/0x10 [ 933.529798][T31924] ? __pfx_vfs_read+0x10/0x10 [ 933.529819][T31924] ? __fget_files+0x2a/0x420 [ 933.529842][T31924] ? __fget_files+0x3a0/0x420 [ 933.529861][T31924] ? __fget_files+0x2a/0x420 [ 933.529890][T31924] ksys_read+0x145/0x250 [ 933.529907][T31924] ? __fget_files+0x2a/0x420 [ 933.529929][T31924] ? __pfx_ksys_read+0x10/0x10 [ 933.529950][T31924] ? do_syscall_64+0xbe/0xfa0 [ 933.529972][T31924] do_syscall_64+0xfa/0xfa0 [ 933.529987][T31924] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.530005][T31924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.530023][T31924] ? clear_bhb_loop+0x60/0xb0 [ 933.530045][T31924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.530060][T31924] RIP: 0033:0x7f182af8d8dc [ 933.530077][T31924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 933.530092][T31924] RSP: 002b:00007f182be59030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.530111][T31924] RAX: ffffffffffffffda RBX: 00007f182b1e5fa0 RCX: 00007f182af8d8dc [ 933.530124][T31924] RDX: 000000000000000f RSI: 00007f182be590a0 RDI: 0000000000000004 [ 933.530136][T31924] RBP: 00007f182be59090 R08: 0000000000000000 R09: 0000000000000000 [ 933.530147][T31924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.530158][T31924] R13: 00007f182b1e6038 R14: 00007f182b1e5fa0 R15: 00007f182b30fa28 [ 933.530188][T31924] [ 933.610476][T31932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3416'. [ 933.613270][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.789842][ C1] vkms_vblank_simulate: vblank timer overrun [ 934.120777][T31953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3420'. [ 935.322918][T31985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3425'. [ 935.414412][T31990] loop2: detected capacity change from 0 to 7 [ 935.436236][T11926] loop2: [ 935.439311][T11926] loop2: partition table partially beyond EOD, truncated [ 935.450566][T31990] loop2: [ 935.456549][T31990] loop2: partition table partially beyond EOD, truncated [ 935.621130][T17041] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 935.838245][T17041] usb 2-1: Using ep0 maxpacket: 32 [ 935.942777][ T5918] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 935.969308][T17041] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 935.981514][T17041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 935.992857][T17041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.004744][T17041] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 936.014231][T17041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.046548][T17041] usb 2-1: config 0 descriptor?? [ 936.053371][T31985] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 936.063480][T17041] hub 2-1:0.0: USB hub found [ 936.138320][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 936.145376][ T5918] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 936.156043][ T5918] usb 4-1: config 0 has no interface number 0 [ 936.162707][ T5918] usb 4-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 936.181939][ T5918] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 936.194680][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.207420][ T5918] usb 4-1: Product: syz [ 936.211980][ T5918] usb 4-1: Manufacturer: syz [ 936.216747][ T5918] usb 4-1: SerialNumber: syz [ 936.230732][ T5918] usb 4-1: config 0 descriptor?? [ 936.239405][ T5918] kvaser_usb 4-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 936.441595][T31998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.451636][T31998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.465533][ T5918] usb 4-1: USB disconnect, device number 39 [ 937.232225][T32031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3431'. [ 937.535697][T32057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 937.574544][T32057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3433'. [ 938.440681][T17041] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 938.490441][T17041] usbhid 2-1:0.0: can't add hid device: -71 [ 938.508707][T17041] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 938.584647][T32063] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 938.607091][T17041] usb 2-1: USB disconnect, device number 40 [ 938.838707][T32087] vxcan1: tx address claim with dlc 0 [ 938.852477][T32087] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3437'. [ 938.940444][T32094] loop2: detected capacity change from 0 to 7 [ 938.965581][T11926] loop2: [ 938.971746][T11926] loop2: partition table partially beyond EOD, truncated [ 939.022354][T32094] loop2: [ 939.025364][T32094] loop2: partition table partially beyond EOD, truncated [ 939.909828][T32120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'. [ 939.987547][T32126] syzkaller1: entered promiscuous mode [ 940.021365][T32126] syzkaller1: entered allmulticast mode [ 940.064857][T32131] netlink: 'syz.2.3445': attribute type 11 has an invalid length. [ 940.116219][T32136] FAULT_INJECTION: forcing a failure. [ 940.116219][T32136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.146375][T32136] CPU: 0 UID: 0 PID: 32136 Comm: syz.1.3447 Not tainted syzkaller #0 PREEMPT(full) [ 940.146401][T32136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 940.146411][T32136] Call Trace: [ 940.146419][T32136] [ 940.146427][T32136] dump_stack_lvl+0x189/0x250 [ 940.146453][T32136] ? __pfx____ratelimit+0x10/0x10 [ 940.146480][T32136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.146499][T32136] ? __pfx__printk+0x10/0x10 [ 940.146518][T32136] ? __might_fault+0xb0/0x130 [ 940.146548][T32136] should_fail_ex+0x414/0x560 [ 940.146581][T32136] _copy_from_user+0x2d/0xb0 [ 940.146605][T32136] csum_and_copy_from_iter_full+0x694/0x1ed0 [ 940.146652][T32136] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 940.146681][T32136] ? __alloc_skb+0x142/0x2d0 [ 940.146707][T32136] ? rcu_is_watching+0x15/0xb0 [ 940.146733][T32136] ? trace_kmalloc+0x1f/0xd0 [ 940.146749][T32136] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 940.146774][T32136] ip_generic_getfrag+0x12f/0x2b0 [ 940.146825][T32136] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 940.146850][T32136] ? skb_put+0x11b/0x210 [ 940.146877][T32136] __ip_append_data+0x3ba4/0x40c0 [ 940.146918][T32136] ? __pfx_raw_getfrag+0x10/0x10 [ 940.146958][T32136] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 940.146979][T32136] ? __pfx___ip_append_data+0x10/0x10 [ 940.146997][T32136] ? ip_setup_cork+0x322/0x9a0 [ 940.147022][T32136] ? ip_setup_cork+0x577/0x9a0 [ 940.147046][T32136] ip_append_data+0x10e/0x190 [ 940.147070][T32136] ? __pfx_raw_getfrag+0x10/0x10 [ 940.147094][T32136] raw_sendmsg+0x13d8/0x18b0 [ 940.147132][T32136] ? __pfx_raw_sendmsg+0x10/0x10 [ 940.147172][T32136] ? aa_sk_perm+0x81e/0x950 [ 940.147197][T32136] ? __pfx_aa_sk_perm+0x10/0x10 [ 940.147213][T32136] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 940.147238][T32136] ? sock_rps_record_flow+0x19/0x410 [ 940.147265][T32136] ? inet_sendmsg+0x2f4/0x370 [ 940.147286][T32136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.147312][T32136] __sock_sendmsg+0x19c/0x270 [ 940.147336][T32136] ____sys_sendmsg+0x505/0x830 [ 940.147369][T32136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.147404][T32136] ? import_iovec+0x74/0xa0 [ 940.147431][T32136] ___sys_sendmsg+0x21f/0x2a0 [ 940.147460][T32136] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.147522][T32136] ? __fget_files+0x2a/0x420 [ 940.147543][T32136] ? __fget_files+0x3a0/0x420 [ 940.147574][T32136] __x64_sys_sendmsg+0x19b/0x260 [ 940.147595][T32136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.147631][T32136] ? __pfx_ksys_write+0x10/0x10 [ 940.147654][T32136] ? do_syscall_64+0xbe/0xfa0 [ 940.147677][T32136] do_syscall_64+0xfa/0xfa0 [ 940.147693][T32136] ? lockdep_hardirqs_on+0x9c/0x150 [ 940.147711][T32136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.147730][T32136] ? clear_bhb_loop+0x60/0xb0 [ 940.147751][T32136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.147769][T32136] RIP: 0033:0x7fa06f78eec9 [ 940.147788][T32136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.147803][T32136] RSP: 002b:00007fa070701038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.147828][T32136] RAX: ffffffffffffffda RBX: 00007fa06f9e5fa0 RCX: 00007fa06f78eec9 [ 940.147841][T32136] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 940.147852][T32136] RBP: 00007fa070701090 R08: 0000000000000000 R09: 0000000000000000 [ 940.147863][T32136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 940.147874][T32136] R13: 00007fa06f9e6038 R14: 00007fa06f9e5fa0 R15: 00007fa06fb0fa28 [ 940.147905][T32136] [ 941.085988][T32157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3450'. [ 941.747352][ T5868] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 941.898263][ T5868] usb 4-1: device descriptor read/64, error -71 [ 942.148906][ T5868] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 942.303042][T32199] vlan2: entered promiscuous mode [ 942.359007][T32199] bridge0: entered promiscuous mode [ 942.366958][T32204] FAULT_INJECTION: forcing a failure. [ 942.366958][T32204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.464936][T32204] CPU: 1 UID: 0 PID: 32204 Comm: syz.2.3458 Not tainted syzkaller #0 PREEMPT(full) [ 942.464962][T32204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 942.464973][T32204] Call Trace: [ 942.464981][T32204] [ 942.464991][T32204] dump_stack_lvl+0x189/0x250 [ 942.465016][T32204] ? __pfx____ratelimit+0x10/0x10 [ 942.465042][T32204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 942.465061][T32204] ? __pfx__printk+0x10/0x10 [ 942.465081][T32204] ? __might_fault+0xb0/0x130 [ 942.465111][T32204] should_fail_ex+0x414/0x560 [ 942.465143][T32204] _copy_from_user+0x2d/0xb0 [ 942.465167][T32204] csum_and_copy_from_iter_full+0x694/0x1ed0 [ 942.465215][T32204] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 942.465244][T32204] ? __alloc_skb+0x142/0x2d0 [ 942.465270][T32204] ? rcu_is_watching+0x15/0xb0 [ 942.465295][T32204] ? trace_kmalloc+0x1f/0xd0 [ 942.465312][T32204] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 942.465336][T32204] ip_generic_getfrag+0x12f/0x2b0 [ 942.465362][T32204] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 942.465386][T32204] ? skb_put+0x11b/0x210 [ 942.465413][T32204] __ip_append_data+0x3ba4/0x40c0 [ 942.465453][T32204] ? __pfx_raw_getfrag+0x10/0x10 [ 942.465494][T32204] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 942.465514][T32204] ? __pfx___ip_append_data+0x10/0x10 [ 942.465533][T32204] ? ip_setup_cork+0x322/0x9a0 [ 942.465558][T32204] ? ip_setup_cork+0x577/0x9a0 [ 942.465582][T32204] ip_append_data+0x10e/0x190 [ 942.465607][T32204] ? __pfx_raw_getfrag+0x10/0x10 [ 942.465630][T32204] raw_sendmsg+0x13d8/0x18b0 [ 942.465669][T32204] ? __pfx_raw_sendmsg+0x10/0x10 [ 942.465710][T32204] ? aa_sk_perm+0x81e/0x950 [ 942.465735][T32204] ? __pfx_aa_sk_perm+0x10/0x10 [ 942.465751][T32204] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 942.465776][T32204] ? sock_rps_record_flow+0x19/0x410 [ 942.465803][T32204] ? inet_sendmsg+0x2f4/0x370 [ 942.465824][T32204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 942.465850][T32204] __sock_sendmsg+0x19c/0x270 [ 942.465875][T32204] ____sys_sendmsg+0x505/0x830 [ 942.465913][T32204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.465948][T32204] ? import_iovec+0x74/0xa0 [ 942.465975][T32204] ___sys_sendmsg+0x21f/0x2a0 [ 942.466003][T32204] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.466066][T32204] ? __fget_files+0x2a/0x420 [ 942.466086][T32204] ? __fget_files+0x3a0/0x420 [ 942.466119][T32204] __x64_sys_sendmsg+0x19b/0x260 [ 942.466139][T32204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 942.466176][T32204] ? __pfx_ksys_write+0x10/0x10 [ 942.466200][T32204] ? do_syscall_64+0xbe/0xfa0 [ 942.466222][T32204] do_syscall_64+0xfa/0xfa0 [ 942.466255][T32204] ? lockdep_hardirqs_on+0x9c/0x150 [ 942.466272][T32204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.466298][T32204] ? clear_bhb_loop+0x60/0xb0 [ 942.466321][T32204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.466339][T32204] RIP: 0033:0x7fcaf1b8eec9 [ 942.466357][T32204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.466372][T32204] RSP: 002b:00007fcaf2a2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.466393][T32204] RAX: ffffffffffffffda RBX: 00007fcaf1de5fa0 RCX: 00007fcaf1b8eec9 [ 942.466407][T32204] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 942.466419][T32204] RBP: 00007fcaf2a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 942.466431][T32204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 942.466442][T32204] R13: 00007fcaf1de6038 R14: 00007fcaf1de5fa0 R15: 00007fcaf1f0fa28 [ 942.466474][T32204] [ 942.813918][ T5868] usb 4-1: device descriptor read/64, error -71 [ 942.928997][ T5868] usb usb4-port1: attempt power cycle [ 943.287028][ T5868] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 943.325931][ T5868] usb 4-1: device descriptor read/8, error -71 [ 943.581711][ T5868] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 943.668001][ T5868] usb 4-1: device descriptor read/8, error -71 [ 943.687057][ T5937] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 943.752842][T32266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 943.811138][ T5868] usb usb4-port1: unable to enumerate USB device [ 943.875556][ T5937] usb 6-1: config 0 has no interfaces? [ 943.935010][ T5937] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 943.987397][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.010915][ T5937] usb 6-1: Product: syz [ 944.024955][ T5937] usb 6-1: Manufacturer: syz [ 944.037315][ T5937] usb 6-1: SerialNumber: syz [ 944.056444][ T5937] usb 6-1: config 0 descriptor?? [ 944.428553][T32223] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.473281][T32223] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.518298][ T979] usb 6-1: USB disconnect, device number 16 [ 944.524514][T32324] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 944.692656][T32309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.441914][T32349] 8021q: VLANs not supported on vxcan0 [ 946.006054][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 946.006073][ T30] audit: type=1326 audit(1760316474.991:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.044199][ T30] audit: type=1326 audit(1760316475.021:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.067222][ T30] audit: type=1326 audit(1760316475.031:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.091120][ T30] audit: type=1326 audit(1760316475.031:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.121075][ T30] audit: type=1326 audit(1760316475.031:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.179465][T32359] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3475'. [ 946.207141][ T30] audit: type=1326 audit(1760316475.031:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.230832][ T30] audit: type=1326 audit(1760316475.071:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.253161][ C1] vkms_vblank_simulate: vblank timer overrun [ 946.288353][ T30] audit: type=1326 audit(1760316475.071:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.321197][ T30] audit: type=1326 audit(1760316475.071:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32362 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f579cfc1785 code=0x7ffc0000 [ 946.343853][ T30] audit: type=1326 audit(1760316475.091:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.5.3475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 946.578127][T32371] tipc: Enabling of bearer rejected, failed to enable media [ 947.419780][T32400] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 947.459810][T32400] bond1: entered promiscuous mode [ 947.476586][T32400] bond1: entered allmulticast mode [ 947.483206][T32400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 947.501691][T32400] bridge1: entered promiscuous mode [ 947.507110][T32400] bridge1: entered allmulticast mode [ 947.513187][ T5937] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 947.519387][T32400] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 947.557570][T32435] vxcan0: Master is either lo or non-ether device [ 947.565074][T32313] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 947.682151][ T5937] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 947.690490][T32313] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 947.737691][ T5937] usb 2-1: config 0 has no interface number 0 [ 947.744176][ T5937] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 947.755126][ T5937] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 947.771809][ T5937] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 947.781709][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.802976][ T5937] usb 2-1: Product: syz [ 947.809210][ T5937] usb 2-1: Manufacturer: syz [ 947.814485][ T5937] usb 2-1: SerialNumber: syz [ 947.822453][ T5937] usb 2-1: config 0 descriptor?? [ 947.830677][T32390] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 947.839999][ T5937] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 947.857440][ T5937] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 948.275958][ T5937] usb 2-1: USB disconnect, device number 41 [ 948.303810][ T5937] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 948.348605][ T5937] cyberjack 2-1:0.69: device disconnected [ 948.462694][T32502] batadv1: entered promiscuous mode [ 948.601548][T32496] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 948.612946][T32496] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 948.768394][ T979] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 948.918350][ T5918] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 948.933939][ T979] usb 6-1: config index 0 descriptor too short (expected 514, got 77) [ 948.942230][ T979] usb 6-1: config 0 has too many interfaces: 34, using maximum allowed: 32 [ 948.952679][ T979] usb 6-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 949.068244][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 949.079039][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.089499][ T5845] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 949.090479][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.523625][ T979] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 34 [ 949.555265][ T979] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 949.564872][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.573455][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 949.578264][ T979] usb 6-1: Product: syz [ 949.591958][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 949.602329][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.615689][ T979] usb 6-1: Manufacturer: syz [ 949.637638][ T979] usb 6-1: SerialNumber: syz [ 949.647839][ T5845] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.696539][ T5845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 949.707407][ T979] usb 6-1: config 0 descriptor?? [ 949.716771][ T5918] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 949.729295][ T5918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 949.798523][ T5845] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 949.803778][ T5918] usb 2-1: Manufacturer: syz [ 949.833668][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.848887][ T5845] usb 4-1: config 0 descriptor?? [ 949.854782][ T5918] usb 2-1: config 0 descriptor?? [ 950.178754][ T5918] rc_core: IR keymap rc-hauppauge not found [ 950.201800][ T5918] Registered IR keymap rc-empty [ 950.217368][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.248438][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.270475][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 950.310610][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input140 [ 950.331745][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.369459][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.408485][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.420366][T32561] vivid-000: ================= START STATUS ================= [ 950.431461][T32561] vivid-000: Generate PTS: true [ 950.441707][T32561] vivid-000: Generate SCR: true [ 950.453301][T32561] tpg source WxH: 1280x720 (Y'CbCr) [ 950.458661][T32561] tpg field: 1 [ 950.462116][T32561] tpg crop: (0,0)/64x64 [ 950.466303][T32561] tpg compose: (0,0)/16x16 [ 950.472423][T32561] tpg colorspace: 9 [ 950.476328][T32561] tpg transfer function: 7/0 [ 950.496838][T32573] [U] V3Fپ"S/4:XTZWTLW= [ 950.510350][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.517765][T32561] tpg Y'CbCr encoding: 0/0 [ 950.599489][T32517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.605061][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.626928][T32517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.669976][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.708505][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.748119][T32561] tpg quantization: 1/0 [ 950.759022][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.950981][T32573] [U] J"E:" [ 950.965878][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 950.967399][T32561] tpg RGB range: 0/1 [ 951.043901][ T5918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 951.095770][ T5918] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 951.107470][T32561] vivid-000: ================== END STATUS ================== [ 951.116025][ T5918] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 951.133439][ T5918] usb 2-1: USB disconnect, device number 42 [ 951.236139][ T5845] hid (null): unknown global tag 0xd [ 951.295543][ T5845] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x6 [ 951.353787][ T5845] logitech-djreceiver 0003:046D:C71B.0031: unknown global tag 0xd [ 951.372499][ T5845] logitech-djreceiver 0003:046D:C71B.0031: item 0 0 1 13 parsing failed [ 951.395078][ T5845] logitech-djreceiver 0003:046D:C71B.0031: logi_dj_probe: parse failed [ 951.404027][ T5845] logitech-djreceiver 0003:046D:C71B.0031: probe with driver logitech-djreceiver failed with error -22 [ 951.478065][ T979] usb 6-1: USB disconnect, device number 17 [ 951.543785][ T5845] usb 4-1: USB disconnect, device number 44 [ 951.608557][T32612] loop2: detected capacity change from 0 to 7 [ 951.640620][T32612] Dev loop2: unable to read RDB block 7 [ 951.646243][T32612] loop2: AHDI p2 p3 [ 951.670343][T32612] loop2: partition table partially beyond EOD, truncated [ 951.713400][T32612] loop2: p2 start 13841266 is beyond EOD, truncated [ 954.111536][T22488] Bluetooth: hci3: command 0x0406 tx timeout [ 954.598245][ T979] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 954.908318][ T979] usb 4-1: device descriptor read/64, error -71 [ 955.218976][ T979] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 955.281030][T32697] loop2: detected capacity change from 0 to 7 [ 955.299329][T32697] Dev loop2: unable to read RDB block 7 [ 955.313740][T32697] loop2: AHDI p2 p3 [ 955.328002][T32697] loop2: partition table partially beyond EOD, truncated [ 955.358296][ T979] usb 4-1: device descriptor read/64, error -71 [ 955.366219][T32697] loop2: p2 start 13841266 is beyond EOD, truncated [ 955.486737][ T979] usb usb4-port1: attempt power cycle [ 955.838344][ T979] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 955.901253][ T979] usb 4-1: device descriptor read/8, error -71 [ 955.970714][T32720] loop6: detected capacity change from 0 to 7 [ 955.979927][T11926] Dev loop6: unable to read RDB block 7 [ 955.985524][T11926] loop6: unable to read partition table [ 956.018492][T11926] loop6: partition table beyond EOD, truncated [ 956.045830][T32720] Dev loop6: unable to read RDB block 7 [ 956.051512][T32720] loop6: unable to read partition table [ 956.057343][T32720] loop6: partition table beyond EOD, truncated [ 956.063907][T32720] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 956.168301][ T979] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 956.229513][ T979] usb 4-1: device descriptor read/8, error -71 [ 956.288894][T32739] netlink: 'syz.1.3521': attribute type 10 has an invalid length. [ 956.354554][ T979] usb usb4-port1: unable to enumerate USB device [ 956.368737][T32739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3521'. [ 956.412762][T32739] team0: Port device geneve0 added [ 956.510758][T32755] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3522'. [ 956.548345][T32755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'. [ 956.601867][T32755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'. [ 956.630925][T32755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'. [ 956.868283][ T5868] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 957.030825][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 957.095313][ T5868] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 957.104533][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.112826][ T5868] usb 2-1: Product: syz [ 957.117119][ T5868] usb 2-1: Manufacturer: syz [ 957.121999][ T5868] usb 2-1: SerialNumber: syz [ 957.131363][ T5868] usb 2-1: config 0 descriptor?? [ 957.154272][ T5868] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 958.392763][ T331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 958.575160][ T5868] gspca_topro: Sensor soi763a [ 958.779568][T17041] usb 2-1: USB disconnect, device number 43 [ 959.258285][ T5868] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 959.417290][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 959.429568][ T5868] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 959.448135][ T5868] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 959.456414][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.487091][ T5868] usb 4-1: config 0 has no interface number 0 [ 959.589192][ T5868] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 959.598459][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.607797][ T5868] usb 4-1: Product: syz [ 959.618390][ T5868] usb 4-1: Manufacturer: syz [ 959.629543][ T5868] usb 4-1: SerialNumber: syz [ 959.659201][ T5868] usb 4-1: config 0 descriptor?? [ 959.692276][ T5868] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 959.897530][ T353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3529'. [ 960.488570][T17041] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 960.640106][T17041] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 960.648826][T17041] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 960.659126][T17041] usb 2-1: config 8 has no interface number 0 [ 960.665325][T17041] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 960.679422][T17041] usb 2-1: config 8 interface 177 has no altsetting 0 [ 960.686322][T17041] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 960.695558][T17041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.714207][T17041] ir_toy 2-1:8.177: required endpoints not found [ 960.859385][ T5845] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 960.912000][T17041] usb 2-1: USB disconnect, device number 44 [ 961.018559][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 961.026102][ T5845] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 961.038675][ T5845] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.049912][ T5845] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 961.073092][ T5845] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 961.082461][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.090701][ T5845] usb 6-1: Product: syz [ 961.095066][ T5845] usb 6-1: Manufacturer: syz [ 961.100378][ T5845] usb 6-1: SerialNumber: syz [ 961.325384][ T393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.338835][ T393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.384786][ T5845] usb 6-1: USB disconnect, device number 18 [ 961.624797][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 961.638500][ T438] netlink: 'syz.1.3539': attribute type 20 has an invalid length. [ 961.646346][ T438] netlink: 'syz.1.3539': attribute type 21 has an invalid length. [ 961.726951][ T447] loop2: detected capacity change from 0 to 7 [ 961.735087][T11926] Dev loop2: unable to read RDB block 7 [ 961.744632][T11926] loop2: AHDI p2 p3 [ 961.748855][T11926] loop2: partition table partially beyond EOD, truncated [ 961.764008][T11926] loop2: p2 start 13841266 is beyond EOD, truncated [ 961.772611][ T447] Dev loop2: unable to read RDB block 7 [ 961.778497][ T447] loop2: AHDI p2 p3 [ 961.783519][ T447] loop2: partition table partially beyond EOD, truncated [ 961.793813][ T447] loop2: p2 start 13841266 is beyond EOD, truncated [ 961.984143][ T5845] usb 4-1: USB disconnect, device number 49 [ 962.143071][ T466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3541'. [ 962.152159][ T466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3541'. [ 962.211724][ T466] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3541'. [ 962.609641][ T5845] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 962.678276][T17041] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 962.788258][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 962.833366][T17041] usb 6-1: device descriptor read/64, error -71 [ 962.868587][ T5845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 962.880365][ T5845] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 962.891934][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.916607][ T5845] usb 4-1: config 0 descriptor?? [ 962.918799][ T489] tipc: Started in network mode [ 962.926860][ T489] tipc: Node identity 080211, cluster identity 4711 [ 962.934059][ T489] tipc: Enabled bearer , priority 0 [ 962.945925][ T489] mac80211_hwsim hwsim60 syzkaller0: entered promiscuous mode [ 962.954089][ T489] mac80211_hwsim hwsim60 syzkaller0: entered allmulticast mode [ 963.074632][ T489] tipc: Resetting bearer [ 963.108282][T17041] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 963.248324][T17041] usb 6-1: device descriptor read/64, error -71 [ 963.337588][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.345114][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.352576][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.360183][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.367586][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.375218][T17041] usb usb6-port1: attempt power cycle [ 963.381639][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.389346][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.397434][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.404967][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.412672][ T5845] hid-generic 0003:0DFC:0101.0032: unknown main item tag 0x0 [ 963.432115][ T5845] hid-generic 0003:0DFC:0101.0032: hidraw0: USB HID v0.00 Device [HID 0dfc:0101] on usb-dummy_hcd.3-1/input0 [ 963.533071][ T473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.543580][ T473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.718374][T17041] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 963.739381][T17041] usb 6-1: device descriptor read/8, error -71 [ 963.885902][ T513] raw_sendmsg: syz.1.3549 forgot to set AF_INET. Fix it! [ 963.930484][ T5845] tipc: Node number set to 134353152 [ 963.978298][T17041] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 963.998773][T17041] usb 6-1: device descriptor read/8, error -71 [ 964.108930][T17041] usb usb6-port1: unable to enumerate USB device [ 964.754099][ T521] loop2: detected capacity change from 0 to 7 [ 964.761298][ T524] binder: 523:524 ioctl c0306201 200000000080 returned -14 [ 964.773625][ T524] Dev loop2: unable to read RDB block 7 [ 964.779858][ T524] loop2: AHDI p2 p3 [ 964.783885][ T524] loop2: partition table partially beyond EOD, truncated [ 964.791870][ T524] loop2: p2 start 13841266 is beyond EOD, truncated [ 964.800289][ T521] Dev loop2: unable to read RDB block 7 [ 964.805963][ T521] loop2: AHDI p2 p3 [ 964.810176][ T521] loop2: partition table partially beyond EOD, truncated [ 964.817809][ T521] loop2: p2 start 13841266 is beyond EOD, truncated [ 965.610658][ T982] usb 4-1: USB disconnect, device number 50 [ 966.238263][ T982] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 966.411932][ T982] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 966.430905][ T982] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 966.568947][ T982] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 966.650673][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.799640][ T982] usb 4-1: Product: syz [ 966.803886][ T982] usb 4-1: Manufacturer: syz [ 966.874122][ T982] usb 4-1: SerialNumber: syz [ 967.000610][ T982] rndis_host 4-1:7.0: skipping garbage [ 967.006160][ T982] usb 4-1: bad CDC descriptors [ 967.065490][ T982] option 4-1:7.0: GSM modem (1-port) converter detected [ 967.527519][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 967.527538][ T30] audit: type=1326 audit(1760316496.511:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 967.555851][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.867988][ T30] audit: type=1326 audit(1760316496.511:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 967.890220][ C0] vkms_vblank_simulate: vblank timer overrun [ 968.003512][ T30] audit: type=1326 audit(1760316496.511:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 968.158274][ T30] audit: type=1326 audit(1760316496.561:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 968.284270][ T30] audit: type=1326 audit(1760316496.561:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 968.402568][ T30] audit: type=1326 audit(1760316496.561:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 968.610572][ T30] audit: type=1326 audit(1760316496.561:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 968.879642][ T982] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 968.894019][ T30] audit: type=1326 audit(1760316496.561:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 968.971829][ T630] syzkaller1: entered promiscuous mode [ 968.978816][ T630] syzkaller1: entered allmulticast mode [ 969.143028][ T30] audit: type=1326 audit(1760316496.801:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 969.270238][ T982] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 969.355318][ T982] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 969.388301][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.396340][ T982] usb 6-1: Product: syz [ 969.400705][ T982] usb 6-1: Manufacturer: syz [ 969.405713][ T982] usb 6-1: SerialNumber: syz [ 969.427326][ T982] usb 6-1: config 0 descriptor?? [ 969.534303][ T30] audit: type=1326 audit(1760316496.801:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=607 comm="syz.2.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 969.649056][ T982] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 969.812731][T11926] udevd[11926]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.848742][ T982] usb 4-1: USB disconnect, device number 51 [ 969.883377][ T982] option 4-1:7.0: device disconnected [ 969.995014][ T655] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 970.530119][ T664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.581034][ T664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.630783][ T670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.657253][ T670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 970.739248][ T674] ptrace attach of "./syz-executor exec"[28377] was attempted by ""[674] [ 970.748299][ T982] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 970.878435][ T982] usb 4-1: device descriptor read/64, error -71 [ 971.118225][ T982] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 971.426657][T17041] usb 6-1: USB disconnect, device number 23 [ 971.428275][ T982] usb 4-1: device descriptor read/64, error -71 [ 971.578872][ T982] usb usb4-port1: attempt power cycle [ 972.009354][ T982] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 972.041958][ T707] tipc: Enabling of bearer rejected, already enabled [ 972.100165][ T982] usb 4-1: device descriptor read/8, error -71 [ 972.613912][ T982] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 972.661814][ T982] usb 4-1: device descriptor read/8, error -71 [ 972.778318][ T982] usb usb4-port1: unable to enumerate USB device [ 973.224847][ T735] random: crng reseeded on system resumption [ 973.656010][ T5868] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 973.746280][ T767] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 973.849845][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 973.864005][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 973.879889][ T5868] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 973.946343][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.958946][ T5868] usb 6-1: Product: syz [ 973.964347][ T5868] usb 6-1: Manufacturer: syz [ 973.969303][ T5868] usb 6-1: SerialNumber: syz [ 973.990998][ T5868] usb 6-1: config 0 descriptor?? [ 974.059856][ T767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 974.580226][T22488] Bluetooth: hci1: command 0x0406 tx timeout [ 974.652646][ T30] audit: type=1326 audit(1760316503.641:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=823 comm="syz.2.3588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x0 [ 974.674311][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.159982][ T5918] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 976.264343][ T5868] usb 6-1: USB disconnect, device number 24 [ 976.481391][ T979] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 976.482127][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 976.536377][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 976.581799][ T5918] usb 2-1: can't read configurations, error -22 [ 976.649828][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.693547][ T979] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 976.754707][ T5918] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 976.844806][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.859867][ T979] usb 4-1: config 0 descriptor?? [ 976.874655][ T979] pwc: Askey VC010 type 2 USB webcam detected. [ 977.041749][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 977.078009][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 977.086483][ T5918] usb 2-1: can't read configurations, error -22 [ 977.093126][ T5918] usb usb2-port1: attempt power cycle [ 977.276550][ T979] pwc: recv_control_msg error -32 req 02 val 2b00 [ 977.458317][ T5918] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 977.489701][ T979] pwc: recv_control_msg error -32 req 02 val 2c00 [ 977.501411][ T979] pwc: recv_control_msg error -32 req 04 val 1000 [ 977.513839][ T979] pwc: recv_control_msg error -32 req 04 val 1300 [ 977.545720][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 977.554501][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 977.562971][ T5918] usb 2-1: can't read configurations, error -22 [ 977.579130][ T979] pwc: recv_control_msg error -32 req 04 val 1400 [ 977.588837][ T979] pwc: recv_control_msg error -32 req 02 val 2000 [ 977.595924][ T979] pwc: recv_control_msg error -32 req 02 val 2100 [ 977.606098][ T979] pwc: recv_control_msg error -32 req 04 val 1500 [ 977.626657][ T979] pwc: recv_control_msg error -32 req 02 val 2500 [ 977.698396][ T5918] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 977.698428][ T979] pwc: recv_control_msg error -71 req 02 val 2400 [ 977.716427][ T979] pwc: recv_control_msg error -71 req 02 val 2600 [ 977.739286][ T979] pwc: recv_control_msg error -71 req 02 val 2900 [ 977.755924][ T979] pwc: recv_control_msg error -71 req 02 val 2800 [ 977.773843][ T979] pwc: recv_control_msg error -71 req 04 val 1100 [ 977.781447][ T979] pwc: recv_control_msg error -71 req 04 val 1200 [ 977.789145][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 977.796062][ T979] pwc: Registered as video103. [ 977.797663][ T5918] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 977.828952][ T5918] usb 2-1: can't read configurations, error -22 [ 977.846272][ T979] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input142 [ 977.850112][ T5918] usb usb2-port1: unable to enumerate USB device [ 977.921312][ T979] usb 4-1: USB disconnect, device number 56 [ 978.240513][ T30] audit: type=1326 audit(1760316507.221:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.272614][ T957] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 978.281307][ T957] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 978.292363][ T957] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 978.343215][ T30] audit: type=1326 audit(1760316507.221:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.387577][ T30] audit: type=1326 audit(1760316507.261:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.434573][ T30] audit: type=1326 audit(1760316507.261:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.473636][ T30] audit: type=1326 audit(1760316507.261:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.500310][ T30] audit: type=1326 audit(1760316507.261:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.527934][ T30] audit: type=1326 audit(1760316507.261:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.551537][ T30] audit: type=1326 audit(1760316507.261:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 978.575946][ T30] audit: type=1326 audit(1760316507.261:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=950 comm="syz.2.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fcaf1b8eec9 code=0x7ffc0000 [ 979.120762][ T978] loop2: detected capacity change from 0 to 7 [ 979.154524][ T978] loop2: [ 979.157802][ T978] loop2: partition table partially beyond EOD, truncated [ 979.174750][ T961] dns_resolver: Unsupported server list version (0) [ 979.194544][ T961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3602'. [ 979.493347][ T999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3607'. [ 980.768299][ T979] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 981.018341][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 981.077989][ T979] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 981.090531][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.102049][ T1026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3610'. [ 981.114685][ T979] usb 6-1: Product: syz [ 981.119230][ T979] usb 6-1: Manufacturer: syz [ 981.124010][ T979] usb 6-1: SerialNumber: syz [ 981.135143][ T979] usb 6-1: config 0 descriptor?? [ 981.156370][ T979] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 981.328974][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 981.328993][ T30] audit: type=1326 audit(1760316510.311:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1044 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 981.357455][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.450631][ T30] audit: type=1326 audit(1760316510.361:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1044 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 981.628766][ T1057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3616'. [ 981.648921][ T30] audit: type=1326 audit(1760316510.361:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1044 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 981.693080][ T30] audit: type=1326 audit(1760316510.361:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1044 comm="syz.3.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 982.107148][ T979] gspca_sonixj: reg_r err -110 [ 982.114398][ T979] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 982.279546][ T1072] loop2: detected capacity change from 0 to 7 [ 982.287038][ T1072] loop2: [ 982.290106][ T1072] loop2: partition table partially beyond EOD, truncated [ 982.790876][ T1091] fuse: Bad value for 'group_id' [ 982.796603][ T1091] fuse: Bad value for 'group_id' [ 983.365672][ T979] usb 6-1: USB disconnect, device number 25 [ 983.739130][ T1109] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3623'. [ 983.778464][ T1109] openvswitch: netlink: Message has 512 unknown bytes. [ 983.827202][ T1110] sctp: [Deprecated]: syz.4.3623 (pid 1110) Use of int in maxseg socket option. [ 983.827202][ T1110] Use struct sctp_assoc_value instead [ 984.299507][ T1141] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3625'. [ 984.319545][ T1141] openvswitch: netlink: Message has 512 unknown bytes. [ 984.608039][ T1154] loop2: detected capacity change from 0 to 7 [ 984.628398][ T1154] loop2: [ 984.631473][ T1154] loop2: partition table partially beyond EOD, truncated [ 984.667157][ T1159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.691258][ T1159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.829803][ T1181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.841755][ T1181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.858956][ T1181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.868678][ T1181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.586259][ T1250] loop2: detected capacity change from 0 to 7 [ 986.612576][T11750] loop2: [ 986.621038][T11750] loop2: partition table partially beyond EOD, truncated [ 986.632416][ T1250] loop2: [ 986.639274][ T1250] loop2: partition table partially beyond EOD, truncated [ 986.928284][ T979] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 986.988392][ T5868] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 986.997074][ T1271] netlink: 212160 bytes leftover after parsing attributes in process `syz.3.3647'. [ 987.006467][ T1271] openvswitch: netlink: Message has 512 unknown bytes. [ 987.178222][ T979] usb 6-1: Using ep0 maxpacket: 8 [ 987.188246][ T979] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 987.188636][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 987.196521][ T979] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 987.196545][ T979] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 987.196563][ T979] usb 6-1: config 250 has no interface number 0 [ 987.196614][ T979] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 987.238240][ T979] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 987.249871][ T979] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 987.262103][ T979] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 987.263927][ T5868] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 987.272667][ T979] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 987.295970][ T979] usb 6-1: config 250 interface 228 has no altsetting 0 [ 987.296150][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.305290][ T979] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 987.321454][ T979] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 987.324748][ T5868] usb 2-1: config 0 descriptor?? [ 987.468830][ T979] usb 6-1: Product: syz [ 987.475967][ T979] usb 6-1: SerialNumber: syz [ 987.589960][ T979] hub 6-1:250.228: bad descriptor, ignoring hub [ 987.614460][ T979] hub 6-1:250.228: probe with driver hub failed with error -5 [ 987.780575][ T1256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.898013][ T1256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.070822][ T1293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.115785][ T979] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 26 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 988.146687][ T1293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.159900][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.178847][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.412330][ T1306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 988.512462][ T979] usb 6-1: USB disconnect, device number 26 [ 988.530941][ T5868] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 988.532377][ T979] usblp0: removed [ 988.551887][ T5868] asix 2-1:0.0: probe with driver asix failed with error -71 [ 988.790560][ T5868] usb 2-1: USB disconnect, device number 49 [ 989.446327][ T1353] sctp: [Deprecated]: syz.5.3654 (pid 1353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 989.446327][ T1353] Use struct sctp_sack_info instead [ 989.668266][ T5868] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 989.687325][ T1359] loop2: detected capacity change from 0 to 7 [ 989.698680][ T1359] loop2: [ 989.703918][ T1359] loop2: partition table partially beyond EOD, truncated [ 989.828405][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 989.875394][ T5868] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.918648][ T5868] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 989.933403][ T5868] usb 4-1: config 1 has no interface number 1 [ 989.942609][ T5868] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 989.963358][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.972175][ T5868] usb 4-1: Product: syz [ 989.976690][ T5868] usb 4-1: Manufacturer: syz [ 989.982053][ T5868] usb 4-1: SerialNumber: syz [ 990.083380][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888058622c00: rx timeout, send abort [ 990.091976][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888058622c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 990.211833][ T5868] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 990.222944][ T5868] usb 4-1: 2:1 : format type 6 is not supported yet [ 990.385509][ T5868] usb 4-1: USB disconnect, device number 57 [ 990.595720][ T1407] CUSE: DEVNAME unspecified [ 991.158279][T17041] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 991.165944][ T979] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 991.298249][ T979] usb 6-1: device descriptor read/64, error -71 [ 991.318311][T17041] usb 4-1: Using ep0 maxpacket: 32 [ 991.324943][T17041] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 991.333611][T17041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.343881][T17041] usb 4-1: config 0 has no interface number 0 [ 991.350840][T17041] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 991.365923][T17041] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 991.375106][T17041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.383235][T17041] usb 4-1: Product: syz [ 991.387404][T17041] usb 4-1: Manufacturer: syz [ 991.392082][T17041] usb 4-1: SerialNumber: syz [ 991.398996][T17041] usb 4-1: config 0 descriptor?? [ 991.407068][T17041] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 991.414895][T17041] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 991.548306][ T979] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 991.605732][T17041] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 991.678372][ T979] usb 6-1: device descriptor read/64, error -71 [ 991.789258][ T979] usb usb6-port1: attempt power cycle [ 991.813864][ T1435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.829142][T17041] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 991.835768][ T1435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.016247][ T5918] usb 4-1: USB disconnect, device number 58 [ 992.023582][ T5918] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 992.138278][ T979] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 992.158830][ T979] usb 6-1: device descriptor read/8, error -71 [ 992.398365][ T979] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 992.421536][ T979] usb 6-1: device descriptor read/8, error -71 [ 992.528620][ T979] usb usb6-port1: unable to enumerate USB device [ 992.928253][ T982] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 992.985899][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.992329][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.078276][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 993.087940][ T982] usb 4-1: no configurations [ 993.093553][ T982] usb 4-1: can't read configurations, error -22 [ 993.228313][ T982] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 993.378282][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 993.384298][ T982] usb 4-1: no configurations [ 993.389126][ T982] usb 4-1: can't read configurations, error -22 [ 993.397782][ T982] usb usb4-port1: attempt power cycle [ 993.738340][ T982] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 993.759342][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 993.765058][ T982] usb 4-1: no configurations [ 993.769843][ T982] usb 4-1: can't read configurations, error -22 [ 993.908299][ T982] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 993.939261][ T982] usb 4-1: Using ep0 maxpacket: 8 [ 993.952495][ T982] usb 4-1: no configurations [ 993.957135][ T982] usb 4-1: can't read configurations, error -22 [ 993.973454][ T982] usb usb4-port1: unable to enumerate USB device [ 994.127184][ T1497] tipc: Started in network mode [ 994.132123][ T1497] tipc: Node identity 924924087246, cluster identity 4711 [ 994.139610][ T1497] tipc: Enabled bearer , priority 0 [ 994.147265][ T1497] syzkaller0: entered promiscuous mode [ 994.152890][ T1497] syzkaller0: entered allmulticast mode [ 994.191382][ T1497] tipc: Resetting bearer [ 994.356326][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804ddc8000: rx timeout, send abort [ 994.365000][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804ddc8000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 994.386460][ T5918] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 994.528248][ T979] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 994.578302][ T5918] usb 6-1: device descriptor read/64, error -71 [ 994.744914][ T979] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 994.778468][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.798089][ T979] usb 2-1: Product: syz [ 994.809056][ T979] usb 2-1: Manufacturer: syz [ 994.813745][ T979] usb 2-1: SerialNumber: syz [ 994.846324][ T5918] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 994.847526][ T979] usb 2-1: config 0 descriptor?? [ 995.098254][ T5918] usb 6-1: device descriptor read/64, error -71 [ 995.109056][ T979] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 995.119106][ T1534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'. [ 995.182016][T17041] tipc: Node number set to 3759088648 [ 995.209775][ T5918] usb usb6-port1: attempt power cycle [ 995.568558][ T1503] netlink: del zone limit has 4 unknown bytes [ 995.948341][ T979] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 995.956049][ T979] sq905c 2-1:0.0: Reading version command failed [ 996.109805][ T979] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 996.298825][ T5918] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 996.330139][ T5918] usb 6-1: device descriptor read/8, error -71 [ 996.561792][ T1566] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 996.570571][ T1566] macsec1: entered allmulticast mode [ 996.577972][ T1566] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 996.585174][ T5918] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 996.609054][ T5918] usb 6-1: device descriptor read/8, error -71 [ 996.718923][ T5918] usb usb6-port1: unable to enumerate USB device [ 997.282076][ T24] usb 2-1: USB disconnect, device number 50 [ 997.468647][T17041] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 997.638233][T17041] usb 6-1: Using ep0 maxpacket: 8 [ 997.652229][T17041] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 997.674421][T17041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.703202][T17041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.715068][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 997.801818][T17041] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 997.815893][T17041] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 997.825844][T17041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.849298][T17041] usb 6-1: config 0 descriptor?? [ 997.859072][ T24] usb 2-1: device descriptor read/64, error -71 [ 998.108718][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 998.248326][ T24] usb 2-1: device descriptor read/64, error -71 [ 998.312904][T17041] usbhid 6-1:0.0: can't add hid device: -71 [ 998.320305][T17041] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 998.328582][T22860] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 998.339423][T17041] usb 6-1: USB disconnect, device number 35 [ 998.368767][ T24] usb usb2-port1: attempt power cycle [ 998.498315][T22860] usb 4-1: Using ep0 maxpacket: 32 [ 998.504920][T22860] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 998.513956][T22860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.524608][T22860] usb 4-1: config 0 has no interface number 0 [ 998.531014][T22860] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 998.546023][T22860] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 998.555202][T22860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.563420][T22860] usb 4-1: Product: syz [ 998.567597][T22860] usb 4-1: Manufacturer: syz [ 998.572290][T22860] usb 4-1: SerialNumber: syz [ 998.580053][T22860] usb 4-1: config 0 descriptor?? [ 998.591768][T22860] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 998.599386][T22860] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 998.708362][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 998.728810][ T24] usb 2-1: device descriptor read/8, error -71 [ 998.791747][T22860] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 998.865294][ T30] audit: type=1326 audit(1760316527.851:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 998.887972][ T30] audit: type=1326 audit(1760316527.851:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 998.913314][ T30] audit: type=1326 audit(1760316527.851:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 998.939869][ T30] audit: type=1326 audit(1760316527.851:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 998.962338][ T30] audit: type=1326 audit(1760316527.851:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 998.984731][ T30] audit: type=1326 audit(1760316527.851:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 999.007130][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 999.007413][ T30] audit: type=1326 audit(1760316527.851:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 999.015112][T22860] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 999.042949][ T30] audit: type=1326 audit(1760316527.851:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 999.068891][ T24] usb 2-1: device descriptor read/8, error -71 [ 999.071271][ T30] audit: type=1326 audit(1760316527.851:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 999.098079][T22860] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 999.098466][ T30] audit: type=1326 audit(1760316527.851:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1623 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f579cf8eec9 code=0x7ffc0000 [ 999.135499][T22860] usb 4-1: USB disconnect, device number 63 [ 999.143153][T22860] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 999.179040][ T24] usb usb2-port1: unable to enumerate USB device [ 999.198258][ T5918] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 999.358261][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 999.380028][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 999.394949][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 999.415219][ T5918] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 999.425679][ T5918] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 999.428963][ T1653] x_tables: duplicate entry at hook 2 [ 999.435325][ T5918] usb 6-1: Product: syz [ 999.443870][ T5918] usb 6-1: Manufacturer: syz [ 999.448569][ T5918] usb 6-1: SerialNumber: syz [ 999.459314][ T5918] usb 6-1: config 0 descriptor?? [ 999.486775][ T5918] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 999.738558][ T3462] usb 6-1: Failed to submit usb control message: -71 [ 999.753210][ T5918] usb 6-1: USB disconnect, device number 36 [ 999.769070][ T3462] usb 6-1: unable to send the bmi data to the device: -71 [ 999.776505][ T3462] usb 6-1: unable to get target info from device [ 999.799603][ T3462] usb 6-1: could not get target info (-71) [ 999.818391][ T3462] usb 6-1: could not probe fw (-71) [ 1000.965093][ T1761] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3699'. [ 1001.612685][ T1782] FAULT_INJECTION: forcing a failure. [ 1001.612685][ T1782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.728412][ T1782] CPU: 1 UID: 0 PID: 1782 Comm: syz.5.3706 Not tainted syzkaller #0 PREEMPT(full) [ 1001.728438][ T1782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1001.728447][ T1782] Call Trace: [ 1001.728454][ T1782] [ 1001.728462][ T1782] dump_stack_lvl+0x189/0x250 [ 1001.728484][ T1782] ? __pfx____ratelimit+0x10/0x10 [ 1001.728506][ T1782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.728521][ T1782] ? __pfx__printk+0x10/0x10 [ 1001.728535][ T1782] ? __might_fault+0xb0/0x130 [ 1001.728558][ T1782] should_fail_ex+0x414/0x560 [ 1001.728583][ T1782] _copy_from_user+0x2d/0xb0 [ 1001.728603][ T1782] ipv6_flowlabel_opt+0x11a/0x23a0 [ 1001.728631][ T1782] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1001.728653][ T1782] ? register_lock_class+0x51/0x320 [ 1001.728675][ T1782] ? __lock_acquire+0xab9/0xd20 [ 1001.728702][ T1782] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1001.728724][ T1782] ? lockdep_hardirqs_on+0x9c/0x150 [ 1001.728741][ T1782] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1001.728769][ T1782] do_ipv6_setsockopt+0xdb0/0x2eb0 [ 1001.728794][ T1782] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1001.728813][ T1782] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1001.728837][ T1782] ? vfs_write+0x956/0xb30 [ 1001.728854][ T1782] ? __pfx___might_resched+0x10/0x10 [ 1001.728878][ T1782] ? __lock_acquire+0xab9/0xd20 [ 1001.728900][ T1782] ? aa_sk_perm+0x81e/0x950 [ 1001.728918][ T1782] ? __pfx_aa_sk_perm+0x10/0x10 [ 1001.728941][ T1782] ? aa_sock_opt_perm+0xff/0x1b0 [ 1001.728959][ T1782] ipv6_setsockopt+0x59/0x170 [ 1001.728975][ T1782] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1001.728995][ T1782] do_sock_setsockopt+0x17c/0x1b0 [ 1001.729030][ T1782] __x64_sys_setsockopt+0x13f/0x1b0 [ 1001.729054][ T1782] do_syscall_64+0xfa/0xfa0 [ 1001.729067][ T1782] ? lockdep_hardirqs_on+0x9c/0x150 [ 1001.729080][ T1782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.729094][ T1782] ? clear_bhb_loop+0x60/0xb0 [ 1001.729111][ T1782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.729124][ T1782] RIP: 0033:0x7f579cf8eec9 [ 1001.729138][ T1782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.729152][ T1782] RSP: 002b:00007f579dedd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1001.729167][ T1782] RAX: ffffffffffffffda RBX: 00007f579d1e5fa0 RCX: 00007f579cf8eec9 [ 1001.729178][ T1782] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1001.729192][ T1782] RBP: 00007f579dedd090 R08: 0000000000000020 R09: 0000000000000000 [ 1001.729202][ T1782] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1001.729211][ T1782] R13: 00007f579d1e6038 R14: 00007f579d1e5fa0 R15: 00007f579d30fa28 [ 1001.729234][ T1782] [ 1002.365784][ T1786] veth1_to_batadv: entered promiscuous mode [ 1002.374503][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1003.314537][ T1826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1003.705890][ T1834] FAULT_INJECTION: forcing a failure. [ 1003.705890][ T1834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.763678][ T1834] CPU: 0 UID: 0 PID: 1834 Comm: syz.5.3717 Not tainted syzkaller #0 PREEMPT(full) [ 1003.763705][ T1834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1003.763717][ T1834] Call Trace: [ 1003.763725][ T1834] [ 1003.763734][ T1834] dump_stack_lvl+0x189/0x250 [ 1003.763759][ T1834] ? __pfx____ratelimit+0x10/0x10 [ 1003.763786][ T1834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1003.763805][ T1834] ? __pfx__printk+0x10/0x10 [ 1003.763837][ T1834] should_fail_ex+0x414/0x560 [ 1003.763870][ T1834] _copy_to_user+0x31/0xb0 [ 1003.763895][ T1834] simple_read_from_buffer+0xe1/0x170 [ 1003.763922][ T1834] proc_fail_nth_read+0x1b3/0x220 [ 1003.763952][ T1834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1003.763982][ T1834] ? rw_verify_area+0x2a6/0x4d0 [ 1003.764000][ T1834] ? __lock_acquire+0xab9/0xd20 [ 1003.764031][ T1834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1003.764058][ T1834] vfs_read+0x200/0xa30 [ 1003.764076][ T1834] ? fdget_pos+0x247/0x320 [ 1003.764102][ T1834] ? __pfx___mutex_lock+0x10/0x10 [ 1003.764123][ T1834] ? __pfx_vfs_read+0x10/0x10 [ 1003.764143][ T1834] ? __fget_files+0x2a/0x420 [ 1003.764168][ T1834] ? __fget_files+0x3a0/0x420 [ 1003.764188][ T1834] ? __fget_files+0x2a/0x420 [ 1003.764219][ T1834] ksys_read+0x145/0x250 [ 1003.764240][ T1834] ? __pfx_ksys_read+0x10/0x10 [ 1003.764263][ T1834] ? do_syscall_64+0xbe/0xfa0 [ 1003.764284][ T1834] do_syscall_64+0xfa/0xfa0 [ 1003.764301][ T1834] ? lockdep_hardirqs_on+0x9c/0x150 [ 1003.764319][ T1834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.764337][ T1834] ? clear_bhb_loop+0x60/0xb0 [ 1003.764359][ T1834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.764377][ T1834] RIP: 0033:0x7f579cf8d8dc [ 1003.764394][ T1834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1003.764410][ T1834] RSP: 002b:00007f579dedd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1003.764431][ T1834] RAX: ffffffffffffffda RBX: 00007f579d1e5fa0 RCX: 00007f579cf8d8dc [ 1003.764445][ T1834] RDX: 000000000000000f RSI: 00007f579dedd0a0 RDI: 0000000000000005 [ 1003.764457][ T1834] RBP: 00007f579dedd090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.764469][ T1834] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1003.764481][ T1834] R13: 00007f579d1e6038 R14: 00007f579d1e5fa0 R15: 00007f579d30fa28 [ 1003.764512][ T1834] [ 1004.548254][ T5918] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1004.549573][ T1895] could not allocate digest TFM handle poly1305-neon [ 1004.664364][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 1004.664381][ T30] audit: type=1326 audit(1760316533.651:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 1004.709255][ T30] audit: type=1326 audit(1760316533.651:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 1004.745589][ T30] audit: type=1326 audit(1760316533.691:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 1004.772197][ T30] audit: type=1326 audit(1760316533.691:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 1004.795723][ T30] audit: type=1326 audit(1760316533.691:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f182af8ef03 code=0x7ffc0000 [ 1004.818444][ T5918] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1004.827492][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.848115][ T5918] usb 6-1: Product: syz [ 1004.852405][ T5918] usb 6-1: Manufacturer: syz [ 1004.857003][ T5918] usb 6-1: SerialNumber: syz [ 1004.869727][ T30] audit: type=1326 audit(1760316533.691:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f182af8ef87 code=0x7ffc0000 [ 1004.905425][ T5918] usb 6-1: config 0 descriptor?? [ 1004.908687][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3726'. [ 1004.936263][ T30] audit: type=1326 audit(1760316533.691:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f182af4632d code=0x7ffc0000 [ 1004.986104][ T30] audit: type=1326 audit(1760316533.691:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f182afc3609 code=0x7ffc0000 [ 1005.009516][ T30] audit: type=1326 audit(1760316533.691:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f182af46397 code=0x7ffc0000 [ 1005.043101][ T30] audit: type=1326 audit(1760316533.691:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1908 comm="syz.3.3725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182af8eec9 code=0x7ffc0000 [ 1005.336355][ T5918] airspy 6-1:0.0: Board ID: 00 [ 1005.341258][ T5918] airspy 6-1:0.0: Firmware version: [ 1005.593957][ T5918] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 1005.622029][ T5918] airspy 6-1:0.0: Registered as swradio24 [ 1005.638484][ T5918] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1005.678530][ T5918] usb 6-1: USB disconnect, device number 37 [ 1005.748264][T17041] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1005.887040][ T1994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1006.062091][T17041] usb 4-1: Using ep0 maxpacket: 16 [ 1006.162882][T17041] usb 4-1: config 0 has no interfaces? [ 1006.178105][T17041] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1006.215995][T17041] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1006.254967][T17041] usb 4-1: Manufacturer: syz [ 1006.356684][T17041] usb 4-1: config 0 descriptor?? [ 1006.800590][ T2013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3736'. [ 1006.976246][ T2022] netlink: 'syz.5.3737': attribute type 4 has an invalid length. [ 1007.886140][ T2040] loop2: detected capacity change from 0 to 7 [ 1007.902239][T11926] loop2: [ 1007.905300][T11926] loop2: partition table partially beyond EOD, truncated [ 1007.916420][ T2040] loop2: [ 1007.923905][ T2040] loop2: partition table partially beyond EOD, truncated [ 1008.434102][ T5918] usb 4-1: USB disconnect, device number 64 [ 1009.136372][ T2091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.149171][ T2091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.388321][ T979] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1009.419481][T17041] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1009.565088][ T979] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1009.577985][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.586148][ T979] usb 2-1: Product: syz [ 1009.590426][T17041] usb 6-1: Using ep0 maxpacket: 16 [ 1009.597345][T17041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.685649][T17041] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.724023][ T979] usb 2-1: Manufacturer: syz [ 1009.737311][ T979] usb 2-1: SerialNumber: syz [ 1009.746008][T17041] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1009.800789][T17041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.902898][T17041] usb 6-1: Product: syz [ 1009.914965][ T979] usb 2-1: config 0 descriptor?? [ 1009.920370][T17041] usb 6-1: Manufacturer: syz [ 1009.929542][T17041] usb 6-1: SerialNumber: syz [ 1010.144348][ T2123] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3749'. [ 1010.174617][ T2123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3749'. [ 1010.238489][T17041] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1010.325860][T17041] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1010.396170][ T2065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.408290][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.419047][T17041] usb 6-1: USB disconnect, device number 38 [ 1010.428223][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.436098][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 1010.488400][ T2065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.566226][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1010.566240][ T30] audit: type=1326 audit(1760316539.551:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2064 comm="syz.1.3745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa06f78eec9 code=0x0 [ 1010.641970][T11750] udevd[11750]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1010.685248][ T979] usb 2-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 1010.713879][ T979] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1010.757836][ T979] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1010.815815][ T979] usb 2-1: USB disconnect, device number 55 [ 1011.555235][ T2174] loop2: detected capacity change from 0 to 7 [ 1011.572242][T11926] loop2: [ 1011.580953][T11926] loop2: partition table partially beyond EOD, truncated [ 1011.597419][ T2174] loop2: [ 1011.600796][ T2174] loop2: partition table partially beyond EOD, truncated [ 1011.978399][ T5918] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1012.157302][ T2199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3757'. [ 1012.194363][ T5937] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1012.238461][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 1012.245639][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1012.257141][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1012.267444][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1012.277602][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.358554][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1012.367830][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.378426][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 1012.396190][ T5937] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1012.418560][ T5937] usb 4-1: config 0 has no interface number 0 [ 1012.437652][ T5937] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1012.458724][ T5937] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1012.469502][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.477766][ T5937] usb 4-1: Product: syz [ 1012.483736][ T5937] usb 4-1: Manufacturer: syz [ 1012.488865][ T5937] usb 4-1: SerialNumber: syz [ 1012.504492][ T5937] usb 4-1: config 0 descriptor?? [ 1012.513589][ T5937] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1012.530877][ T5937] em28xx 4-1:0.132: Video interface 132 found: [ 1012.588391][ T5918] usb 6-1: GET_CAPABILITIES returned 0 [ 1012.593981][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 1012.793120][ T5918] usb 6-1: USB disconnect, device number 39 [ 1012.976943][ T5937] em28xx 4-1:0.132: chip ID is em2840 [ 1013.314469][ T30] audit: type=1326 audit(1760316542.301:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2230 comm="syz.2.3759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcaf1b8eec9 code=0x0 [ 1013.336390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.374764][ T2233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3760'. [ 1013.419584][ T2235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1013.441201][ T2234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1013.534720][ T2241] input: syz0 as /devices/virtual/input/input146 [ 1014.163862][ T5937] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1014.221845][ T5937] em28xx 4-1:0.132: board has no eeprom [ 1014.308943][ T5937] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1014.355284][ T5937] em28xx 4-1:0.132: analog set to bulk mode. [ 1014.394722][ T5918] em28xx 4-1:0.132: Registering V4L2 extension [ 1014.612601][ T2282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3768'. [ 1014.670914][ T5918] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1014.720426][ T5918] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1014.749620][ T5918] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1014.796764][ T5918] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1014.917558][T22860] usb 4-1: USB disconnect, device number 65 [ 1014.928758][T22860] em28xx 4-1:0.132: Disconnecting em28xx [ 1014.958004][ T2287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1015.007558][ T2295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3772'. [ 1015.066381][ T2298] libceph: resolve '. [ 1015.066381][ T2298] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1015.066381][ T2298] ' (ret=-3): failed [ 1015.244245][ T2295] xt_recent: Unsupported userspace flags (000000b1) [ 1015.255132][ T5918] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1015.270054][ T5918] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1015.277223][ T5918] em28xx 4-1:0.132: No AC97 audio processor [ 1015.343553][ T5918] usb 4-1: Decoder not found [ 1015.723194][ T5918] em28xx 4-1:0.132: failed to create media graph [ 1015.954578][ T5918] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1015.987907][ T5918] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1015.988502][ T2313] ================================================================== [ 1016.004593][ T2313] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1016.011952][ T2313] Read of size 8 at addr ffff888063b2c740 by task v4l_id/2313 [ 1016.019383][ T2313] [ 1016.021690][ T2313] CPU: 1 UID: 0 PID: 2313 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1016.021705][ T2313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1016.021712][ T2313] Call Trace: [ 1016.021718][ T2313] [ 1016.021724][ T2313] dump_stack_lvl+0x189/0x250 [ 1016.021738][ T2313] ? __virt_addr_valid+0x1c8/0x5c0 [ 1016.021749][ T2313] ? rcu_is_watching+0x15/0xb0 [ 1016.021762][ T2313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.021772][ T2313] ? rcu_is_watching+0x15/0xb0 [ 1016.021784][ T2313] ? lock_release+0x4b/0x3e0 [ 1016.021796][ T2313] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1016.021812][ T2313] ? __virt_addr_valid+0x1c8/0x5c0 [ 1016.021821][ T2313] ? __virt_addr_valid+0x4a5/0x5c0 [ 1016.021831][ T2313] print_report+0xca/0x240 [ 1016.021843][ T2313] ? v4l2_fh_open+0xac/0x420 [ 1016.021856][ T2313] kasan_report+0x118/0x150 [ 1016.021869][ T2313] ? v4l2_fh_open+0xac/0x420 [ 1016.021879][ T2313] v4l2_fh_open+0xac/0x420 [ 1016.021888][ T2313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1016.021900][ T2313] em28xx_v4l2_open+0x157/0x9a0 [ 1016.021915][ T2313] v4l2_open+0x1bf/0x3a0 [ 1016.021926][ T2313] chrdev_open+0x4cc/0x5e0 [ 1016.021943][ T2313] ? __pfx_chrdev_open+0x10/0x10 [ 1016.021954][ T2313] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1016.021968][ T2313] ? __pfx_chrdev_open+0x10/0x10 [ 1016.021979][ T2313] do_dentry_open+0x953/0x13f0 [ 1016.021995][ T2313] vfs_open+0x3b/0x340 [ 1016.022006][ T2313] ? path_openat+0x2ecd/0x3830 [ 1016.022016][ T2313] path_openat+0x2ee5/0x3830 [ 1016.022032][ T2313] ? __pfx_path_openat+0x10/0x10 [ 1016.022044][ T2313] do_filp_open+0x1fa/0x410 [ 1016.022053][ T2313] ? __lock_acquire+0xab9/0xd20 [ 1016.022064][ T2313] ? __pfx_do_filp_open+0x10/0x10 [ 1016.022077][ T2313] ? _raw_spin_unlock+0x28/0x50 [ 1016.022090][ T2313] ? alloc_fd+0x64c/0x6c0 [ 1016.022102][ T2313] do_sys_openat2+0x121/0x1c0 [ 1016.022116][ T2313] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.022129][ T2313] ? exc_page_fault+0x82/0x100 [ 1016.022139][ T2313] ? do_user_addr_fault+0xc85/0x1380 [ 1016.022151][ T2313] __x64_sys_openat+0x138/0x170 [ 1016.022165][ T2313] do_syscall_64+0xfa/0xfa0 [ 1016.022175][ T2313] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.022183][ T2313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.022194][ T2313] ? clear_bhb_loop+0x60/0xb0 [ 1016.022204][ T2313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.022214][ T2313] RIP: 0033:0x7fd944aa7407 [ 1016.022226][ T2313] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1016.022234][ T2313] RSP: 002b:00007ffd13b94160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1016.022246][ T2313] RAX: ffffffffffffffda RBX: 00007fd9452a6880 RCX: 00007fd944aa7407 [ 1016.022254][ T2313] RDX: 0000000000000000 RSI: 00007ffd13b95f1a RDI: ffffffffffffff9c [ 1016.022261][ T2313] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1016.022267][ T2313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1016.022273][ T2313] R13: 00007ffd13b943b0 R14: 00007fd94540d000 R15: 000055754ef9f4d8 [ 1016.022284][ T2313] [ 1016.022288][ T2313] [ 1016.323944][ T2313] Allocated by task 5918: [ 1016.328249][ T2313] kasan_save_track+0x3e/0x80 [ 1016.332908][ T2313] __kasan_kmalloc+0x93/0xb0 [ 1016.337480][ T2313] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1016.342829][ T2313] em28xx_v4l2_init+0x10b/0x2e70 [ 1016.347748][ T2313] em28xx_init_extension+0x120/0x1c0 [ 1016.353012][ T2313] process_scheduled_works+0xae1/0x17b0 [ 1016.358536][ T2313] worker_thread+0x8a0/0xda0 [ 1016.363107][ T2313] kthread+0x711/0x8a0 [ 1016.367153][ T2313] ret_from_fork+0x4bc/0x870 [ 1016.371719][ T2313] ret_from_fork_asm+0x1a/0x30 [ 1016.376460][ T2313] [ 1016.378759][ T2313] Freed by task 5918: [ 1016.382711][ T2313] kasan_save_track+0x3e/0x80 [ 1016.387364][ T2313] __kasan_save_free_info+0x46/0x50 [ 1016.392543][ T2313] __kasan_slab_free+0x5c/0x80 [ 1016.397284][ T2313] kfree+0x19a/0x6d0 [ 1016.401157][ T2313] em28xx_v4l2_init+0x1683/0x2e70 [ 1016.406164][ T2313] em28xx_init_extension+0x120/0x1c0 [ 1016.411422][ T2313] process_scheduled_works+0xae1/0x17b0 [ 1016.416949][ T2313] worker_thread+0x8a0/0xda0 [ 1016.421525][ T2313] kthread+0x711/0x8a0 [ 1016.425587][ T2313] ret_from_fork+0x4bc/0x870 [ 1016.430171][ T2313] ret_from_fork_asm+0x1a/0x30 [ 1016.434926][ T2313] [ 1016.437242][ T2313] The buggy address belongs to the object at ffff888063b2c000 [ 1016.437242][ T2313] which belongs to the cache kmalloc-8k of size 8192 [ 1016.451273][ T2313] The buggy address is located 1856 bytes inside of [ 1016.451273][ T2313] freed 8192-byte region [ffff888063b2c000, ffff888063b2e000) [ 1016.465221][ T2313] [ 1016.467526][ T2313] The buggy address belongs to the physical page: [ 1016.473912][ T2313] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63b28 [ 1016.482655][ T2313] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1016.491130][ T2313] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1016.499086][ T2313] page_type: f5(slab) [ 1016.503046][ T2313] raw: 00fff00000000040 ffff88813ffa7280 ffffea00018ec800 0000000000000005 [ 1016.511602][ T2313] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1016.520159][ T2313] head: 00fff00000000040 ffff88813ffa7280 ffffea00018ec800 0000000000000005 [ 1016.528807][ T2313] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1016.537456][ T2313] head: 00fff00000000003 ffffea00018eca01 00000000ffffffff 00000000ffffffff [ 1016.546108][ T2313] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1016.554753][ T2313] page dumped because: kasan: bad access detected [ 1016.561148][ T2313] page_owner tracks the page as allocated [ 1016.566838][ T2313] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1624, tgid 1623 (syz.5.3687), ts 999799406165, free_ts 999786114738 [ 1016.589568][ T2313] post_alloc_hook+0x240/0x2a0 [ 1016.594486][ T2313] get_page_from_freelist+0x2365/0x2440 [ 1016.600009][ T2313] __alloc_frozen_pages_noprof+0x181/0x370 [ 1016.605793][ T2313] alloc_pages_mpol+0x232/0x4a0 [ 1016.610625][ T2313] allocate_slab+0x96/0x3a0 [ 1016.615110][ T2313] ___slab_alloc+0xe94/0x18a0 [ 1016.619764][ T2313] __slab_alloc+0x65/0x100 [ 1016.624172][ T2313] __kmalloc_cache_noprof+0x411/0x6f0 [ 1016.629518][ T2313] audit_log_d_path+0xb8/0x1a0 [ 1016.634272][ T2313] audit_log_d_path_exe+0x42/0x70 [ 1016.639272][ T2313] audit_log_task+0x2b3/0x3c0 [ 1016.643926][ T2313] audit_seccomp+0x86/0x190 [ 1016.648407][ T2313] __seccomp_filter+0xce4/0x1e10 [ 1016.653321][ T2313] syscall_trace_enter+0xaa/0x160 [ 1016.658319][ T2313] do_syscall_64+0xd3/0xfa0 [ 1016.662800][ T2313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.668666][ T2313] page last free pid 1624 tgid 1623 stack trace: [ 1016.675000][ T2313] __free_frozen_pages+0xbc4/0xd30 [ 1016.680101][ T2313] __put_partials+0x146/0x170 [ 1016.684765][ T2313] put_cpu_partial+0x1f2/0x2e0 [ 1016.689513][ T2313] __slab_free+0x2b9/0x390 [ 1016.693916][ T2313] qlist_free_all+0x97/0x140 [ 1016.698482][ T2313] kasan_quarantine_reduce+0x148/0x160 [ 1016.703919][ T2313] __kasan_slab_alloc+0x22/0x80 [ 1016.708745][ T2313] kmem_cache_alloc_noprof+0x367/0x6e0 [ 1016.714179][ T2313] audit_log_start+0x101/0xa20 [ 1016.718918][ T2313] audit_seccomp+0x64/0x190 [ 1016.723398][ T2313] __seccomp_filter+0xce4/0x1e10 [ 1016.728318][ T2313] syscall_trace_enter+0xaa/0x160 [ 1016.733320][ T2313] do_syscall_64+0xd3/0xfa0 [ 1016.737800][ T2313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.743673][ T2313] [ 1016.745978][ T2313] Memory state around the buggy address: [ 1016.751581][ T2313] ffff888063b2c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.759624][ T2313] ffff888063b2c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.767661][ T2313] >ffff888063b2c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.775694][ T2313] ^ [ 1016.781827][ T2313] ffff888063b2c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.789866][ T2313] ffff888063b2c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.797906][ T2313] ================================================================== [ 1016.867301][T22860] em28xx 4-1:0.132: Closing input extension [ 1016.908306][ T2313] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1016.915548][ T2313] CPU: 1 UID: 0 PID: 2313 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1016.924490][ T2313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1016.934555][ T2313] Call Trace: [ 1016.937836][ T2313] [ 1016.940761][ T2313] dump_stack_lvl+0x99/0x250 [ 1016.945353][ T2313] ? __asan_memcpy+0x40/0x70 [ 1016.950034][ T2313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.955228][ T2313] ? __pfx__printk+0x10/0x10 [ 1016.959807][ T2313] vpanic+0x237/0x6d0 [ 1016.963784][ T2313] ? __pfx_vpanic+0x10/0x10 [ 1016.968274][ T2313] ? preempt_schedule+0xae/0xc0 [ 1016.973117][ T2313] ? __pfx_preempt_schedule+0x10/0x10 [ 1016.978482][ T2313] panic+0xb9/0xc0 [ 1016.982193][ T2313] ? __pfx_panic+0x10/0x10 [ 1016.986599][ T2313] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1016.992483][ T2313] ? is_module_address+0x17/0xf0 [ 1016.997405][ T2313] ? v4l2_fh_open+0xac/0x420 [ 1017.001982][ T2313] check_panic_on_warn+0x89/0xb0 [ 1017.006907][ T2313] ? v4l2_fh_open+0xac/0x420 [ 1017.011485][ T2313] end_report+0x78/0x160 [ 1017.015727][ T2313] kasan_report+0x129/0x150 [ 1017.020222][ T2313] ? v4l2_fh_open+0xac/0x420 [ 1017.024801][ T2313] v4l2_fh_open+0xac/0x420 [ 1017.029199][ T2313] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1017.035173][ T2313] em28xx_v4l2_open+0x157/0x9a0 [ 1017.040019][ T2313] v4l2_open+0x1bf/0x3a0 [ 1017.044254][ T2313] chrdev_open+0x4cc/0x5e0 [ 1017.048661][ T2313] ? __pfx_chrdev_open+0x10/0x10 [ 1017.053598][ T2313] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1017.059930][ T2313] ? __pfx_chrdev_open+0x10/0x10 [ 1017.064858][ T2313] do_dentry_open+0x953/0x13f0 [ 1017.069624][ T2313] vfs_open+0x3b/0x340 [ 1017.073685][ T2313] ? path_openat+0x2ecd/0x3830 [ 1017.078439][ T2313] path_openat+0x2ee5/0x3830 [ 1017.083022][ T2313] ? __pfx_path_openat+0x10/0x10 [ 1017.087959][ T2313] do_filp_open+0x1fa/0x410 [ 1017.092445][ T2313] ? __lock_acquire+0xab9/0xd20 [ 1017.097286][ T2313] ? __pfx_do_filp_open+0x10/0x10 [ 1017.102300][ T2313] ? _raw_spin_unlock+0x28/0x50 [ 1017.107138][ T2313] ? alloc_fd+0x64c/0x6c0 [ 1017.111461][ T2313] do_sys_openat2+0x121/0x1c0 [ 1017.116133][ T2313] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.121319][ T2313] ? exc_page_fault+0x82/0x100 [ 1017.126067][ T2313] ? do_user_addr_fault+0xc85/0x1380 [ 1017.131340][ T2313] __x64_sys_openat+0x138/0x170 [ 1017.136188][ T2313] do_syscall_64+0xfa/0xfa0 [ 1017.140674][ T2313] ? lockdep_hardirqs_on+0x9c/0x150 [ 1017.145862][ T2313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.151913][ T2313] ? clear_bhb_loop+0x60/0xb0 [ 1017.156578][ T2313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.162485][ T2313] RIP: 0033:0x7fd944aa7407 [ 1017.166892][ T2313] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1017.186482][ T2313] RSP: 002b:00007ffd13b94160 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1017.194887][ T2313] RAX: ffffffffffffffda RBX: 00007fd9452a6880 RCX: 00007fd944aa7407 [ 1017.202850][ T2313] RDX: 0000000000000000 RSI: 00007ffd13b95f1a RDI: ffffffffffffff9c [ 1017.210813][ T2313] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1017.218767][ T2313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1017.226728][ T2313] R13: 00007ffd13b943b0 R14: 00007fd94540d000 R15: 000055754ef9f4d8 [ 1017.234701][ T2313] [ 1017.237965][ T2313] Kernel Offset: disabled [ 1017.242271][ T2313] Rebooting in 86400 seconds..