last executing test programs: 9m15.077311576s ago: executing program 2 (id=2531): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) 9m14.916692949s ago: executing program 2 (id=2533): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/cgroups\x00', 0x0, 0x0) read(r0, &(0x7f0000002140)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0xf9a, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 9m14.772822904s ago: executing program 2 (id=2536): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) openat$dir(0xffffffffffffff9c, 0x0, 0x6001, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0xa) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r2, 0x402, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000180)={r3, 0x1, r1, 0x5, 0x80000}) 9m13.730003096s ago: executing program 2 (id=2548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_STEAL_TIME(r1, 0x4068aea3, &(0x7f0000000000)) 9m13.418094757s ago: executing program 2 (id=2553): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x400c404) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48c0) 9m12.472402509s ago: executing program 2 (id=2557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x148}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 8m57.236626214s ago: executing program 32 (id=2557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = syz_io_uring_setup(0x78ae, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x148}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8032, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 14.738778316s ago: executing program 4 (id=5798): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 13.154158261s ago: executing program 4 (id=5803): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @random="e62166ef05ef", 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000440)='J', 0x1}], 0x2}}], 0x1, 0x8000) 13.016318s ago: executing program 4 (id=5805): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (fail_nth: 2) 12.308309794s ago: executing program 4 (id=5806): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}) (fail_nth: 2) 11.419965914s ago: executing program 4 (id=5811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000300)}, 0x10) syz_emit_ethernet(0x24f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0x21) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0xfffffffd, 0x64, 0x2013, 0x7, 0x1, 0x8, 0x1, 0x4}}) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r6 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 9.905674061s ago: executing program 0 (id=5815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c000780060004"], 0x34}}, 0x0) (fail_nth: 2) 9.403203184s ago: executing program 0 (id=5819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9.250060019s ago: executing program 0 (id=5820): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x88, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00100000000000000000000000000000000000000000000000000000000000000000000000000000feffffff8800000000000000000000190000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00880000a10744b85d6a8e1982968b2a7fd9e16e01519bbcdbf0d3d7231e1b1c86109b3fbda903e7c59b0ccf617a3d3a845356ce46b5ad587034ffb3e4da523d06a1dad9317aa6cd1b64bae9468d2afc2109d85ad929c27e326c76ff86719996f2fe91f6ae6b7421aeb0c4b4442c7b8c1a5ff44e4d6b3242f54db61ac4e47c594f4e93e5b7f85f589aa54acda7754b4f2e6aeb30bd09c443dd1445ddc218b168f9ac1ef27298dabfbdf6d995a05d33ca10631974f757c8fa2ce58fac08"]}, 0x199) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./cgroup\x00', 0x381000b, 0x0, 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001cc0)='cpu.max\x00', 0x2, 0x0) io_setup(0xc9, &(0x7f0000000300)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xffffffff}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x12, r4, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) io_submit(r3, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x6c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001640)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f353163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b3107200773090acd3b0004000061d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0650060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc298a0acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93480d0000000000003271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 7.104345907s ago: executing program 0 (id=5828): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') linkat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f00000001c0)='./mnt\x00', 0x1400) r3 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{}]}) 6.491670046s ago: executing program 0 (id=5829): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000040) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1e) bind$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$kcm(0x29, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x80000000, {0x0, 0x0, 0x12, r7, {0x6, 0xffe0}, {0x18, 0xffff}, {0x7, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6.172453205s ago: executing program 3 (id=5830): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 5.798440788s ago: executing program 3 (id=5831): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109c82, 0x0) r3 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$kcm(0xa, 0x3, 0x87) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x100000000000004, 0x1, 0x8, 0x7fc0000000000000, 0x1, 0xff, 0x100000001, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r8, &(0x7f00000007c0)={0x22c, 0x2, 0x0, {{0x500, 0xeb, 0x0, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x10, '\bg\xa4m\v\x9c\r\xe2kw\x9c\xb0\x17\xc9l\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x22c) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000005c000380580000800800034000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) 4.58198764s ago: executing program 1 (id=5833): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) pipe2$9p(&(0x7f0000000000), 0x4800) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 3.851801009s ago: executing program 3 (id=5834): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0xfffff000, 0x7, 0x8000}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e25, 0x7fc, @mcast2, 0x5}}, 0x7, 0xfe04, 0x2, 0x2000003, 0x52, 0x4, 0xf5}, &(0x7f0000000480)=0x9c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="1a900ae6ccaa88bd1999010185f5e6dc06a272f2f9eb026623bf00"/37], 0x8) 3.628416975s ago: executing program 1 (id=5835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001fcffff0000000000000095000000000000000000000000000000005d410bd888cc416359f69960be4f61974633aa43bf6103923bfdb284769ee47ab8b3d07f6e01013e5a99a7f5b2ae169ba38758bc32579ebd761d3ed4d6176d68a2876fb6a1b319c7f8dcebc59d5a7974909fe76fa031d61076f457e71eb3fde71e8cc833dafb8fb56f4bd29b48861f3dab39d9f7054f1caecb9440e5e4bea9cd2110b4274b0b95a772d7e0d0e3190990553a4d6b468ab3050297"], &(0x7f0000000040)='GPL\x00'}, 0x90) 3.587916027s ago: executing program 3 (id=5836): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f0000000040)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xb4, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4e, 0xf, [@random={0x1, 0x48, "56ac39bc2c95fd3472f631445152bc614df08da6285e6cf8ee0809ae477cb8e8f3dc7bb8bc1cb88af3cda786faddf03b48b8c63f9d18ee72009c059d3b206405b04eda6d75956dc6"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 3.585603576s ago: executing program 5 (id=5837): r0 = socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r2, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x20004) r3 = openat(r2, &(0x7f0000000080)='./file0/file0\x00', 0x309c40, 0x40) getdents64(r1, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) getdents64(r1, 0x0, 0x0) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='builtin_trusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3a}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x40}}, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r3, 0x29, 0x1b, &(0x7f0000000340)=0x2, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000380)) 3.536444047s ago: executing program 0 (id=5838): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x1, 0x40c5fb, @name="47c7c39950407565a3c72f1b23d02ec6ad07746e1b3d953bb18da6f2229dec28"}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0) 3.478467817s ago: executing program 3 (id=5839): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f00000003c0)={0x0, 0x300000}) r8 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYBLOB='+cpu'], 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) 3.41418186s ago: executing program 5 (id=5840): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x1, 0x40c5fb, @name="47c7c39950407565a3c72f1b23d02ec6ad07746e1b3d953bb18da6f2229dec28"}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071", 0x4, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = openat$iommufd(0xffffff9c, &(0x7f0000000040), 0x4002, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r4, r0}, 0x0, 0x0, 0x0) 3.331393586s ago: executing program 1 (id=5841): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000240)="2a69c258ca", 0x5}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x20040040) r0 = syz_io_uring_setup(0x16eb, &(0x7f0000002100)={0x0, 0x213f, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d010203010902120001000010000904"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x3, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5}}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x2, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@local, 0x3502, 0x2, 0x0, 0x7, 0x7c, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in=@broadcast, 0x4d5, 0xff}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x1b8}}, 0x4000) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0xffffffff}]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) syz_usb_control_io$lan78xx(r3, &(0x7f0000000340)={0xc, &(0x7f0000000740)={0x20, 0x22, 0xe9, {0xe9, 0x3, "eee0f8277ae7c67f11407ca2722dd52b4b468abfa9822135c8614de8944dc455a63e599bf40029503539156919980b52a9c6c9dba15562754a2bc6589d76d60205e11fc8846f10631507851ca9668c4a8eddc2260326a8ae3a17a5cfdc631d3a0ef370ae0470b0c48393f5a0558d1020169b1f86df2e7415ab9efc049f2112f6e0ab9bff33c664d4d4038a9ea3044003345ce392a03c5f08cc348493b636bd95e3db1a55e6ed5f8c17c15c4f6ea3820521989d8bf18250d7f99aae4902511cbe3174d860dcc4570f97ac41020a0fd264438919a698749935f19e260fde00b81de9f0715180eff7"}}, &(0x7f0000000840)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "a0fbfd37e3c6931301764b0cbd01e87feb3978fb44e554bb497e9fe8dbc1402112f86ace20d282a3b90ecc21698258291bce55cec89e1d53967d4c92e5c8493a1ac64916bfbe90be7412c34db0d3a43393b9162fe03d9740ffc5e10434f06165484afe2efb46aa331fe57737317f8ef0c0aadabbeb5736b26fde6f9efb26954e1166e3bfce7f9c31877b0ef0bdb0a156af666eb4620f7a74d2ab15a16b36af6fef0b83268acc7e9f2f90d1c4306eb28badfca21627bd5b8f8ce76e8d3ae4871b3e8226876e3c01cb8fdcc1566ff0852d19a0fe742690"}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000400)={0x40, 0x1d, 0x40, "7a40722887e2a4fda298f30299882da0456c2df5678df32db4ad46d1e5783af18482778403c1e13617b910cf66196634cd2d9d0397954fbb681ef5f3b9e8f2ba"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x6}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "1ed652fa31f267778924bee86f122fc02a8ea5865006c08bb8fa1171fe6fc8731f3eb6c2789019d59e80a2a1e9d314"}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d645101020301090242000102000000090401000000068f000a2401020001020102052404"], 0x0) 3.165392006s ago: executing program 5 (id=5843): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x51, 0x8000000, r1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0xa43, 0x0) 3.07087935s ago: executing program 5 (id=5844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180), 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000300)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0x21) r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r7, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0xfffffffd, 0x64, 0x2013, 0x7, 0x1, 0x8, 0x1, 0x4}}) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1.096839391s ago: executing program 1 (id=5845): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 935.996184ms ago: executing program 1 (id=5846): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @mcast1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0xa) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f0000000040)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xb4, r3, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x4e, 0xf, [@random={0x1, 0x48, "56ac39bc2c95fd3472f631445152bc614df08da6285e6cf8ee0809ae477cb8e8f3dc7bb8bc1cb88af3cda786faddf03b48b8c63f9d18ee72009c059d3b206405b04eda6d75956dc6"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 728.381819ms ago: executing program 1 (id=5847): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0x4f}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfc], 0x80, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x4008804) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x3, 0x0, 0x10, 0x1840c, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x9, 0x6}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x4}, 0x38) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) 509.707125ms ago: executing program 5 (id=5848): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 306.698921ms ago: executing program 5 (id=5849): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000040) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1e) bind$pptp(r3, &(0x7f0000000280)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0xc) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$kcm(0x29, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x80000000, {0x0, 0x0, 0x12, r7, {0x6, 0xffe0}, {0x18, 0xffff}, {0x7, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 181.732312ms ago: executing program 4 (id=5850): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x0, './file1\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000200), 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x7, @local, 0x5}], 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}], 0x1c) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000240)=0x9) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x10001}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x3, @local, 0x7}], 0x58) sendto$inet6(r8, &(0x7f0000000440)="e408c68a4c5b9d5b729e4c4912d0e6b0fba36872e87414321791108510e710f1136e9195ce7ed7eb32ad57cb059942321da97d3db2ff00b3e2b6dd0247dbb2f49e8892c40800e41622ab2813104d054e126c199147b1705a32782d291fbd259432f0473523df25d8db3eea680f472060f0c864c2029e79d934711930a8019d336deb8547c10909659ab3fcb394e50d19dd61b21256e973b6e029683cf4e665cad4657918e02d3524c170039525171ed87b5b0a0d9fca301a1b65c67356", 0xbd, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 0s ago: executing program 3 (id=5851): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r9, @ANYBLOB="b07ff46b520791399f351f779310c68a600ed2f9b9db1cfce0c0965e14dce926f7935920d7e4f0596ee7b9527454c21703c7f1c7d5d211fe91595a0b220a2c343c0805db9c21f609bb9f068f70cb2d7521b014990ef2e87820f498aea42a26ca9b9c8c4765c4b3bfd69ff2a6da202cb3f706affed4d090581cddc70ee429ad662c391a0b564c2e2133b3e85feefd374b0046cf8c1d7f"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) pipe2(&(0x7f0000000040), 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="da000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000080)={0x50, 0x0, r11, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r10, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): kopt+0x10/0x10 [ 1246.741057][T22229] ? sock_recv_errqueue+0x4e0/0x510 [ 1246.741092][T22229] ? __lock_acquire+0x6b6/0x2cf0 [ 1246.741119][T22229] ? _parse_integer_limit+0x1ae/0x1f0 [ 1246.741155][T22229] ? aa_label_sk_perm+0x4c4/0x610 [ 1246.741183][T22229] ? kstrtoull+0x12f/0x1d0 [ 1246.741220][T22229] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1246.741250][T22229] ? get_pid_task+0x20/0x1f0 [ 1246.741279][T22229] ? get_pid_task+0x20/0x1f0 [ 1246.741314][T22229] ? get_pid_task+0x20/0x1f0 [ 1246.741341][T22229] ? get_pid_task+0x20/0x1f0 [ 1246.741366][T22229] ? get_pid_task+0x20/0x1f0 [ 1246.741406][T22229] ? aa_sk_perm+0x15f/0x920 [ 1246.741434][T22229] ? aa_sk_perm+0x7ee/0x920 [ 1246.741465][T22229] ? __pfx_aa_sk_perm+0x10/0x10 [ 1246.741498][T22229] tcp_getsockopt+0x83/0x130 [ 1246.741531][T22229] ? sock_recv_errqueue+0x4e0/0x510 [ 1246.741564][T22229] ? sock_recv_errqueue+0x4e0/0x510 [ 1246.741601][T22229] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1246.741638][T22229] do_sock_getsockopt+0x2b4/0x3d0 [ 1246.741667][T22229] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1246.741694][T22229] ? __fget_files+0x3a0/0x420 [ 1246.741722][T22229] ? __fget_files+0x2a/0x420 [ 1246.741758][T22229] __ia32_sys_getsockopt+0x1a5/0x250 [ 1246.741794][T22229] __do_fast_syscall_32+0x1dc/0x560 [ 1246.741820][T22229] ? lockdep_hardirqs_on+0x7b/0x110 [ 1246.741841][T22229] ? do_fast_syscall_32+0x34/0x80 [ 1246.741865][T22229] ? irqentry_exit+0x10f/0x660 [ 1246.741891][T22229] do_fast_syscall_32+0x34/0x80 [ 1246.741916][T22229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1246.741943][T22229] RIP: 0023:0xf703d539 [ 1246.741962][T22229] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1246.741982][T22229] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1246.742005][T22229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1246.742021][T22229] RDX: 0000000000000023 RSI: 0000000080000080 RDI: 0000000080000040 [ 1246.742044][T22229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1246.742057][T22229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1246.742071][T22229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1246.742104][T22229] [ 1247.657070][T10331] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 1247.691169][T10331] usb 1-1: USB disconnect, device number 20 [ 1248.015604][ T5894] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1248.185150][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1248.191232][ T5894] usb 6-1: no configurations [ 1248.201232][ T5894] usb 6-1: can't read configurations, error -22 [ 1248.356384][ T5894] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1248.535180][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1248.601513][ T5894] usb 6-1: no configurations [ 1248.638029][ T5894] usb 6-1: can't read configurations, error -22 [ 1248.659093][T22257] tipc: Started in network mode [ 1248.664465][ T5894] usb usb6-port1: attempt power cycle [ 1248.674503][T22257] tipc: Node identity ac1414aa, cluster identity 4711 [ 1248.688901][T22257] tipc: Enabled bearer , priority 10 [ 1248.985185][ T6908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1249.015260][ T5894] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1249.045964][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1249.054945][ T5894] usb 6-1: no configurations [ 1249.065195][ T5894] usb 6-1: can't read configurations, error -22 [ 1249.155199][ T6908] usb 2-1: Using ep0 maxpacket: 16 [ 1249.162933][ T6908] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1249.180393][ T6908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.205152][ T6908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.215200][ T5894] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1249.233911][ T6908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1249.248117][ T6908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.261332][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 1249.272475][ T5894] usb 6-1: no configurations [ 1249.279271][ T6908] usb 2-1: Product: syz [ 1249.287908][ T5894] usb 6-1: can't read configurations, error -22 [ 1249.296002][ T6908] usb 2-1: Manufacturer: syz [ 1249.306317][ T6908] usb 2-1: SerialNumber: syz [ 1249.312980][ T5894] usb usb6-port1: unable to enumerate USB device [ 1249.815262][ T5894] tipc: Node number set to 2886997162 [ 1249.862881][ T6908] usb 2-1: 0:2 : does not exist [ 1249.891574][ T6908] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1249.951446][ T6908] usb 2-1: USB disconnect, device number 28 [ 1250.020877][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.623314][T22289] FAULT_INJECTION: forcing a failure. [ 1250.623314][T22289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.636721][T22289] CPU: 0 UID: 0 PID: 22289 Comm: syz.1.5602 Not tainted syzkaller #0 PREEMPT(full) [ 1250.636743][T22289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.636754][T22289] Call Trace: [ 1250.636762][T22289] [ 1250.636770][T22289] dump_stack_lvl+0xe8/0x150 [ 1250.636795][T22289] should_fail_ex+0x414/0x560 [ 1250.636824][T22289] _copy_from_user+0x2d/0xb0 [ 1250.636845][T22289] do_tcp_getsockopt+0x1dd/0x2680 [ 1250.636877][T22289] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1250.636901][T22289] ? sock_recv_errqueue+0x4e0/0x510 [ 1250.636926][T22289] ? __lock_acquire+0x6b6/0x2cf0 [ 1250.636945][T22289] ? _parse_integer_limit+0x1ae/0x1f0 [ 1250.636970][T22289] ? aa_label_sk_perm+0x4c4/0x610 [ 1250.636990][T22289] ? kstrtoull+0x12f/0x1d0 [ 1250.637017][T22289] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1250.637037][T22289] ? get_pid_task+0x20/0x1f0 [ 1250.637059][T22289] ? get_pid_task+0x20/0x1f0 [ 1250.637084][T22289] ? get_pid_task+0x20/0x1f0 [ 1250.637103][T22289] ? get_pid_task+0x20/0x1f0 [ 1250.637121][T22289] ? get_pid_task+0x20/0x1f0 [ 1250.637149][T22289] ? aa_sk_perm+0x15f/0x920 [ 1250.637169][T22289] ? aa_sk_perm+0x7ee/0x920 [ 1250.637191][T22289] ? __pfx_aa_sk_perm+0x10/0x10 [ 1250.637213][T22289] tcp_getsockopt+0x83/0x130 [ 1250.637237][T22289] ? sock_recv_errqueue+0x4e0/0x510 [ 1250.637261][T22289] ? sock_recv_errqueue+0x4e0/0x510 [ 1250.637284][T22289] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1250.637309][T22289] do_sock_getsockopt+0x2b4/0x3d0 [ 1250.637330][T22289] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1250.637351][T22289] ? __fget_files+0x3a0/0x420 [ 1250.637371][T22289] ? __fget_files+0x2a/0x420 [ 1250.637395][T22289] __ia32_sys_getsockopt+0x1a5/0x250 [ 1250.637420][T22289] __do_fast_syscall_32+0x1dc/0x560 [ 1250.637439][T22289] ? lockdep_hardirqs_on+0x7b/0x110 [ 1250.637453][T22289] ? do_fast_syscall_32+0x34/0x80 [ 1250.637470][T22289] ? irqentry_exit+0x10f/0x660 [ 1250.637488][T22289] do_fast_syscall_32+0x34/0x80 [ 1250.637527][T22289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1250.637554][T22289] RIP: 0023:0xf70dd539 [ 1250.637573][T22289] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1250.637605][T22289] RSP: 002b:00000000f548b55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1250.637623][T22289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1250.637634][T22289] RDX: 0000000000000023 RSI: 0000000080000080 RDI: 0000000080000040 [ 1250.637645][T22289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.637654][T22289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1250.637664][T22289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.637686][T22289] [ 1251.285924][ T6908] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1251.446778][ T6908] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1251.457755][ T6908] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1251.495785][ T6908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1251.507124][ T6908] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1251.516728][ T6908] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1251.525186][ T6908] usb 5-1: Product: syz [ 1251.530555][ T6908] usb 5-1: Manufacturer: syz [ 1251.540773][ T6908] usb 5-1: SerialNumber: syz [ 1251.549940][ T6908] usb 5-1: config 0 descriptor?? [ 1251.563652][ T6908] hub 5-1:0.0: bad descriptor, ignoring hub [ 1251.570096][ T6908] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1251.582473][ T6908] usb 5-1: selecting invalid altsetting 0 [ 1251.905284][ T6908] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1252.060590][ T6908] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1252.082720][ T6908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.103604][ T6908] usb 1-1: config 0 descriptor?? [ 1252.456426][ T43] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 1252.486894][T22298] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 1252.498074][T22298] usb 5-1: device reset changed ep0 maxpacket size! [ 1252.515544][T10331] usb 5-1: USB disconnect, device number 27 [ 1252.618983][ T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 1252.630326][ T43] usb 6-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1252.653683][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1252.661790][ T43] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1252.671243][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.685746][ T43] usb 6-1: config 0 descriptor?? [ 1252.705350][T10331] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1252.754490][T22324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5615'. [ 1252.835157][ T5838] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1252.865699][T10331] usb 5-1: Using ep0 maxpacket: 16 [ 1252.873644][T10331] usb 5-1: config 212 has 0 interfaces, different from the descriptor's value: 4 [ 1252.886662][T10331] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 1252.896491][T10331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.904616][T10331] usb 5-1: Product: syz [ 1252.910995][T10331] usb 5-1: Manufacturer: syz [ 1252.916991][T10331] usb 5-1: SerialNumber: syz [ 1252.952704][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 1252.975308][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1252.985210][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 1253.001224][ T43] usb 6-1: USB disconnect, device number 58 [ 1253.016493][ T5838] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1253.036019][ T5838] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.046579][ T9900] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1253.063310][ T5838] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1253.078850][ T5838] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1253.089101][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.098727][ T5838] usb 4-1: Product: syz [ 1253.102929][ T5838] usb 4-1: Manufacturer: syz [ 1253.107681][ T5838] usb 4-1: SerialNumber: syz [ 1253.131153][ T6908] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 1253.152880][ T6908] usb 1-1: USB disconnect, device number 21 [ 1253.171154][T22298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.182637][T22298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.200057][ T5894] usb 5-1: USB disconnect, device number 28 [ 1253.205457][ T9900] usb 2-1: Using ep0 maxpacket: 32 [ 1253.233320][ T9900] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1253.247252][ T9900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.257176][ T9900] usb 2-1: Product: syz [ 1253.261399][ T9900] usb 2-1: Manufacturer: syz [ 1253.266959][ T9900] usb 2-1: SerialNumber: syz [ 1253.273991][ T9900] usb 2-1: config 0 descriptor?? [ 1253.375476][ T43] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1253.487129][ T9900] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 1253.496118][ T9900] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1253.518862][ T9900] usb 2-1: USB disconnect, device number 29 [ 1253.525173][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1253.534555][ T43] usb 6-1: no configurations [ 1253.539668][ T43] usb 6-1: can't read configurations, error -22 [ 1253.562016][ T5838] usb 4-1: 0:2 : does not exist [ 1253.573975][ T5838] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1253.601853][ T5838] usb 4-1: USB disconnect, device number 61 [ 1253.680564][ T43] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1253.841443][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1253.847586][ T43] usb 6-1: no configurations [ 1253.862565][ T43] usb 6-1: can't read configurations, error -22 [ 1253.872646][ T43] usb usb6-port1: attempt power cycle [ 1254.085237][ T6908] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1254.205165][ T5894] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1254.215215][ T43] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1254.247790][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1254.255109][ T6908] usb 1-1: Using ep0 maxpacket: 16 [ 1254.266013][ T43] usb 6-1: no configurations [ 1254.270752][ T43] usb 6-1: can't read configurations, error -22 [ 1254.505162][ T43] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1254.525125][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1254.530885][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1254.537519][ T43] usb 6-1: no configurations [ 1254.542622][ T43] usb 6-1: can't read configurations, error -22 [ 1254.549762][ T5894] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 1254.566003][ T5894] usb 5-1: config 0 has no interface number 0 [ 1254.574878][ T43] usb usb6-port1: unable to enumerate USB device [ 1254.581437][ T5838] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1254.592033][ T5894] usb 5-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1254.602144][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.610854][ T5894] usb 5-1: Product: syz [ 1254.616120][ T5894] usb 5-1: Manufacturer: syz [ 1254.622256][ T5894] usb 5-1: SerialNumber: syz [ 1254.633284][ T5894] usb 5-1: config 0 descriptor?? [ 1254.650669][ T5894] xr_serial 5-1:0.109: More than one union descriptor, skipping ... [ 1254.735846][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 1254.743806][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.755252][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.765459][ T5838] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1254.774704][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.791901][ T5838] usb 4-1: config 0 descriptor?? [ 1255.241427][ T5838] savu 0003:1E7D:2D5A.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1255.275238][ T5894] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1255.420167][T22345] ======================================================= [ 1255.420167][T22345] WARNING: The mand mount option has been deprecated and [ 1255.420167][T22345] and is ignored by this kernel. Remove the mand [ 1255.420167][T22345] option from the mount to silence this warning. [ 1255.420167][T22345] ======================================================= [ 1255.462648][T22345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.466070][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 1255.480818][T22345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.492621][ T5908] usb 4-1: USB disconnect, device number 62 [ 1255.509399][ T5894] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 1255.528522][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.538100][ T5894] usb 2-1: Product: syz [ 1255.542459][ T5894] usb 2-1: Manufacturer: syz [ 1255.549774][ T5894] usb 2-1: SerialNumber: syz [ 1255.564481][ T5894] usb 2-1: config 0 descriptor?? [ 1255.574473][ T5894] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1256.234119][T22360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.262972][T22360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.451801][ T5894] gspca_vc032x: reg_r err -71 [ 1256.471469][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.494388][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.504789][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.517542][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.524381][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.532319][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.538728][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.544805][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.550389][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.557193][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.562947][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.568405][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.573836][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.580429][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.585961][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.591641][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.600947][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.606651][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.612111][ T5894] gspca_vc032x: I2c Bus Busy Wait 00 [ 1256.617796][ T5894] gspca_vc032x: Unknown sensor... [ 1256.623103][ T5894] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1256.638893][ T5894] usb 2-1: USB disconnect, device number 30 [ 1256.725178][ T5908] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 1256.918663][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1256.933008][ T5894] usb 5-1: USB disconnect, device number 29 [ 1257.002924][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.033193][ T5908] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1257.054448][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.114864][ T5908] usb 4-1: config 0 descriptor?? [ 1257.287529][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5629'. [ 1257.310942][T22367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5626'. [ 1257.445576][ T5894] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1257.577265][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.584155][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.615103][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.622069][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.649397][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.675898][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1257.681144][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.745386][ T5908] isku 0003:1E7D:319C.002E: unknown main item tag 0x0 [ 1257.753459][T22365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.768906][ T5894] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1257.779847][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.788090][ T5894] usb 5-1: Product: syz [ 1257.792946][ T5908] isku 0003:1E7D:319C.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1257.804758][ T5894] usb 5-1: Manufacturer: syz [ 1257.809746][ T5894] usb 5-1: SerialNumber: syz [ 1257.828186][T22365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.845168][ T5838] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1257.876494][ T5894] usb 5-1: config 0 descriptor?? [ 1257.888890][ T5908] isku 0003:1E7D:319C.002E: couldn't init struct isku_device [ 1257.900219][ T5894] gspca_main: se401-2.14.0 probing 047d:5003 [ 1257.912137][ T5908] isku 0003:1E7D:319C.002E: couldn't install keyboard [ 1257.923768][ T5908] isku 0003:1E7D:319C.002E: probe with driver isku failed with error -71 [ 1257.936931][ T5908] usb 4-1: USB disconnect, device number 63 [ 1258.015171][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 1258.022400][ T5838] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1258.045262][ T5838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.060528][ T6908] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1258.069744][ T6908] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1258.079432][ T6908] usb 1-1: can't read configurations, error -71 [ 1258.111530][T22382] fido_id[22382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1258.130213][ T5838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1258.143329][ T5838] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1258.157644][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.166009][ T5838] usb 6-1: Product: syz [ 1258.170214][ T5838] usb 6-1: Manufacturer: syz [ 1258.174932][ T5838] usb 6-1: SerialNumber: syz [ 1258.290846][ T5894] gspca_se401: ExtraFeatures: 48 [ 1258.504976][ T5894] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 1258.572420][ T5894] usb 5-1: USB disconnect, device number 30 [ 1258.895196][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1258.963338][ T5838] usb 6-1: 0:2 : does not exist [ 1258.985594][ T5838] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1259.055213][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1259.061245][ T43] usb 4-1: no configurations [ 1259.072646][ T43] usb 4-1: can't read configurations, error -22 [ 1259.086579][ T5838] usb 6-1: USB disconnect, device number 63 [ 1259.235217][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1259.363954][T22399] FAULT_INJECTION: forcing a failure. [ 1259.363954][T22399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.380223][T22399] CPU: 0 UID: 0 PID: 22399 Comm: syz.1.5638 Not tainted syzkaller #0 PREEMPT(full) [ 1259.380254][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1259.380267][T22399] Call Trace: [ 1259.380277][T22399] [ 1259.380287][T22399] dump_stack_lvl+0xe8/0x150 [ 1259.380319][T22399] should_fail_ex+0x414/0x560 [ 1259.380358][T22399] _copy_from_user+0x2d/0xb0 [ 1259.380388][T22399] get_compat_msghdr+0xad/0x4a0 [ 1259.380423][T22399] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1259.380474][T22399] ? kstrtouint+0x6e/0xe0 [ 1259.380515][T22399] ___sys_sendmsg+0x193/0x2a0 [ 1259.380545][T22399] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.380571][T22399] ? get_pid_task+0x20/0x1f0 [ 1259.380600][T22399] ? get_pid_task+0x20/0x1f0 [ 1259.380626][T22399] ? get_pid_task+0x20/0x1f0 [ 1259.380682][T22399] ? __fget_files+0x2a/0x420 [ 1259.380706][T22399] ? __fget_files+0x3a0/0x420 [ 1259.380743][T22399] __sys_sendmsg+0x164/0x220 [ 1259.380772][T22399] ? __pfx___sys_sendmsg+0x10/0x10 [ 1259.380809][T22399] ? __pfx_ksys_write+0x10/0x10 [ 1259.380843][T22399] __do_fast_syscall_32+0x1dc/0x560 [ 1259.380870][T22399] ? lockdep_hardirqs_on+0x7b/0x110 [ 1259.380891][T22399] ? do_fast_syscall_32+0x34/0x80 [ 1259.380915][T22399] ? irqentry_exit+0x10f/0x660 [ 1259.380942][T22399] do_fast_syscall_32+0x34/0x80 [ 1259.380968][T22399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1259.380996][T22399] RIP: 0023:0xf70dd539 [ 1259.381016][T22399] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1259.381037][T22399] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1259.381061][T22399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 1259.381077][T22399] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.381091][T22399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.381104][T22399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1259.381118][T22399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.381151][T22399] [ 1259.405398][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1259.619960][ T43] usb 4-1: no configurations [ 1259.635847][ T43] usb 4-1: can't read configurations, error -22 [ 1259.645868][ T43] usb usb4-port1: attempt power cycle [ 1259.995183][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1260.026019][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1260.036808][ T43] usb 4-1: no configurations [ 1260.041519][ T43] usb 4-1: can't read configurations, error -22 [ 1260.130593][T22418] FAULT_INJECTION: forcing a failure. [ 1260.130593][T22418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.145358][T22418] CPU: 1 UID: 0 PID: 22418 Comm: syz.1.5643 Not tainted syzkaller #0 PREEMPT(full) [ 1260.145389][T22418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1260.145405][T22418] Call Trace: [ 1260.145415][T22418] [ 1260.145425][T22418] dump_stack_lvl+0xe8/0x150 [ 1260.145459][T22418] should_fail_ex+0x414/0x560 [ 1260.145499][T22418] _copy_from_user+0x2d/0xb0 [ 1260.145551][T22418] io_submit_one+0xc2/0x1430 [ 1260.145586][T22418] ? irqentry_exit+0x5dd/0x660 [ 1260.145609][T22418] ? lockdep_hardirqs_on+0x7b/0x110 [ 1260.145632][T22418] ? irqentry_exit+0x5dd/0x660 [ 1260.145660][T22418] ? __pfx_io_submit_one+0x10/0x10 [ 1260.145682][T22418] ? __might_fault+0xb0/0x130 [ 1260.145729][T22418] ? __might_fault+0xb0/0x130 [ 1260.145767][T22418] __ia32_compat_sys_io_submit+0x1c7/0x360 [ 1260.145804][T22418] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 1260.145836][T22418] ? ksys_write+0x22a/0x250 [ 1260.145876][T22418] __do_fast_syscall_32+0x1dc/0x560 [ 1260.145902][T22418] ? lockdep_hardirqs_on+0x7b/0x110 [ 1260.145922][T22418] ? do_fast_syscall_32+0x34/0x80 [ 1260.145947][T22418] ? irqentry_exit+0x10f/0x660 [ 1260.145973][T22418] do_fast_syscall_32+0x34/0x80 [ 1260.145999][T22418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1260.146026][T22418] RIP: 0023:0xf70dd539 [ 1260.146046][T22418] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1260.146066][T22418] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 1260.146090][T22418] RAX: ffffffffffffffda RBX: 00000000f7fde000 RCX: 0000000000000225 [ 1260.146106][T22418] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1260.146120][T22418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1260.146134][T22418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1260.146147][T22418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1260.146180][T22418] [ 1260.356994][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1260.387007][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1260.393156][ T43] usb 4-1: no configurations [ 1260.397985][ T43] usb 4-1: can't read configurations, error -22 [ 1260.404820][ T43] usb usb4-port1: unable to enumerate USB device [ 1260.415757][ T5838] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1260.545234][ T5838] usb 6-1: device descriptor read/64, error -71 [ 1260.725145][ T6908] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1260.785344][ T5838] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1260.885397][ T6908] usb 2-1: Using ep0 maxpacket: 16 [ 1260.892899][ T6908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1260.902510][ T6908] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1260.912030][ T6908] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1260.921146][ T6908] usb 2-1: Product: syz [ 1260.925550][ T5838] usb 6-1: device descriptor read/64, error -71 [ 1260.934710][ T6908] usb 2-1: Manufacturer: syz [ 1260.940053][ T6908] usb 2-1: SerialNumber: syz [ 1260.947972][ T6908] usb 2-1: config 0 descriptor?? [ 1261.036128][ T5838] usb usb6-port1: attempt power cycle [ 1261.125155][ T5894] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1261.183207][ T6908] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1261.212339][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1261.275250][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1261.283657][ T5894] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1261.293000][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.303286][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1261.314489][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1261.324097][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.332250][ T5894] usb 1-1: Product: syz [ 1261.336635][ T5894] usb 1-1: Manufacturer: syz [ 1261.341301][ T5894] usb 1-1: SerialNumber: syz [ 1261.373494][T22423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.375481][ T5838] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1261.393678][T22423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.407061][ T43] usb 2-1: USB disconnect, device number 31 [ 1261.426012][ T5838] usb 6-1: device descriptor read/8, error -71 [ 1261.665528][ T5838] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1261.695941][ T5838] usb 6-1: device descriptor read/8, error -71 [ 1261.731768][T22437] FAULT_INJECTION: forcing a failure. [ 1261.731768][T22437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.745482][T22437] CPU: 0 UID: 0 PID: 22437 Comm: syz.3.5651 Not tainted syzkaller #0 PREEMPT(full) [ 1261.745530][T22437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1261.745540][T22437] Call Trace: [ 1261.745547][T22437] [ 1261.745554][T22437] dump_stack_lvl+0xe8/0x150 [ 1261.745583][T22437] should_fail_ex+0x414/0x560 [ 1261.745612][T22437] _copy_from_user+0x2d/0xb0 [ 1261.745632][T22437] get_compat_msghdr+0xad/0x4a0 [ 1261.745658][T22437] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1261.745680][T22437] ? kstrtouint+0x6e/0xe0 [ 1261.745709][T22437] ___sys_sendmsg+0x193/0x2a0 [ 1261.745730][T22437] ? __pfx____sys_sendmsg+0x10/0x10 [ 1261.745748][T22437] ? get_pid_task+0x20/0x1f0 [ 1261.745768][T22437] ? get_pid_task+0x20/0x1f0 [ 1261.745787][T22437] ? get_pid_task+0x20/0x1f0 [ 1261.745827][T22437] ? __fget_files+0x2a/0x420 [ 1261.745847][T22437] ? __fget_files+0x3a0/0x420 [ 1261.745874][T22437] __sys_sendmsg+0x164/0x220 [ 1261.745895][T22437] ? __pfx___sys_sendmsg+0x10/0x10 [ 1261.745919][T22437] ? __pfx_ksys_write+0x10/0x10 [ 1261.745944][T22437] __do_fast_syscall_32+0x1dc/0x560 [ 1261.745961][T22437] ? lockdep_hardirqs_on+0x7b/0x110 [ 1261.745976][T22437] ? do_fast_syscall_32+0x34/0x80 [ 1261.745993][T22437] ? irqentry_exit+0x10f/0x660 [ 1261.746011][T22437] do_fast_syscall_32+0x34/0x80 [ 1261.746029][T22437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1261.746049][T22437] RIP: 0023:0xf7fb5539 [ 1261.746063][T22437] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1261.746094][T22437] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1261.746112][T22437] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1261.746123][T22437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1261.746133][T22437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.746142][T22437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1261.746152][T22437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1261.746174][T22437] [ 1261.806897][ T5838] usb usb6-port1: unable to enumerate USB device [ 1262.078263][ T5894] usb 1-1: 0:2 : does not exist [ 1262.098078][ T5894] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1262.140848][ T5894] usb 1-1: USB disconnect, device number 24 [ 1262.184469][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1262.255298][T22446] FAULT_INJECTION: forcing a failure. [ 1262.255298][T22446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.295445][T22446] CPU: 1 UID: 0 PID: 22446 Comm: syz.3.5655 Not tainted syzkaller #0 PREEMPT(full) [ 1262.295477][T22446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1262.295492][T22446] Call Trace: [ 1262.295501][T22446] [ 1262.295510][T22446] dump_stack_lvl+0xe8/0x150 [ 1262.295544][T22446] should_fail_ex+0x414/0x560 [ 1262.295585][T22446] _copy_from_user+0x2d/0xb0 [ 1262.295613][T22446] get_compat_msghdr+0xad/0x4a0 [ 1262.295639][T22446] ? aa_file_perm+0x139/0x1530 [ 1262.295674][T22446] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1262.295703][T22446] ? __lock_acquire+0x6b6/0x2cf0 [ 1262.295735][T22446] ___sys_recvmsg+0x17f/0x510 [ 1262.295762][T22446] ? _parse_integer_limit+0x1ae/0x1f0 [ 1262.295799][T22446] ? __pfx____sys_recvmsg+0x10/0x10 [ 1262.295825][T22446] ? kstrtoull+0x12f/0x1d0 [ 1262.295860][T22446] ? __fget_files+0x2a/0x420 [ 1262.295906][T22446] ? __fget_files+0x3a0/0x420 [ 1262.295945][T22446] do_recvmmsg+0x36a/0x770 [ 1262.295981][T22446] ? __pfx_do_recvmmsg+0x10/0x10 [ 1262.296009][T22446] ? ksys_write+0x1cb/0x250 [ 1262.296050][T22446] ? __fget_files+0x3a0/0x420 [ 1262.296084][T22446] __sys_recvmmsg+0x19d/0x280 [ 1262.296114][T22446] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1262.296142][T22446] ? __pfx_ksys_write+0x10/0x10 [ 1262.296171][T22446] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1262.296205][T22446] __do_fast_syscall_32+0x1dc/0x560 [ 1262.296231][T22446] ? lockdep_hardirqs_on+0x7b/0x110 [ 1262.296252][T22446] ? do_fast_syscall_32+0x34/0x80 [ 1262.296276][T22446] ? irqentry_exit+0x10f/0x660 [ 1262.296302][T22446] do_fast_syscall_32+0x34/0x80 [ 1262.296328][T22446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1262.296354][T22446] RIP: 0023:0xf7fb5539 [ 1262.296374][T22446] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1262.296393][T22446] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1262.296424][T22446] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007200 [ 1262.296440][T22446] RDX: 0000000000000001 RSI: 0000000000012021 RDI: 0000000000000000 [ 1262.296454][T22446] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1262.296468][T22446] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1262.296482][T22446] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1262.296514][T22446] [ 1262.577225][ T5894] hid-generic 0000:0003:0001.002F: unknown main item tag 0x0 [ 1262.598581][ T5894] hid-generic 0000:0003:0001.002F: unknown main item tag 0x0 [ 1262.623833][ T5894] hid-generic 0000:0003:0001.002F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1262.701258][T22452] fido_id[22452]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1263.085586][ T5894] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1263.185274][ T5908] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1263.246812][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 1263.255773][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.266776][ T5894] usb 4-1: config 0 has no interfaces? [ 1263.272427][ T5894] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1263.284437][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.302304][ T5894] usb 4-1: config 0 descriptor?? [ 1263.335302][ T6908] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1263.345127][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 1263.356646][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.368502][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.378611][ T6704] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1263.388788][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1263.402956][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1263.413821][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.428894][ T5908] usb 1-1: config 0 descriptor?? [ 1263.495799][ T6908] usb 6-1: Using ep0 maxpacket: 16 [ 1263.508054][ T6908] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1263.522042][ T6908] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1263.536918][ T6908] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1263.560758][ T6704] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1263.572881][ T6908] usb 6-1: Product: syz [ 1263.577844][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1263.593300][ T6908] usb 6-1: Manufacturer: syz [ 1263.598596][ T6908] usb 6-1: SerialNumber: syz [ 1263.614797][ T6704] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.629302][ T6908] usb 6-1: config 0 descriptor?? [ 1263.650832][ T6704] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1263.663804][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1263.677425][ T6704] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.700668][ T6704] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1263.719278][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1263.730353][ T6704] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1263.794499][ T6704] usb 2-1: string descriptor 0 read error: -22 [ 1263.800958][ T6704] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1263.810308][ T6704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.860240][ T6704] adutux 2-1:168.0: interrupt endpoints not found [ 1263.896203][ T6908] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1263.919858][ T5908] usbhid 1-1:0.0: can't add hid device: -71 [ 1263.928212][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1263.940253][ T5908] usb 1-1: USB disconnect, device number 25 [ 1263.973780][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.041641][ T5838] usb 6-1: USB disconnect, device number 68 [ 1265.155314][ T6908] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1265.305170][ T6908] usb 1-1: Using ep0 maxpacket: 8 [ 1265.312443][ T6908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1265.324445][ T6908] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1265.335463][ T6908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.350062][ T6908] usb 1-1: config 0 descriptor?? [ 1265.365127][ T5838] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1265.525146][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 1265.532865][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1265.544237][ T5838] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1265.554041][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.572711][ T5838] usb 5-1: config 0 descriptor?? [ 1265.596770][ T6908] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1265.790763][ T5838] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1265.821577][ T6908] usb 1-1: USB disconnect, device number 26 [ 1265.880387][ T5838] usb 4-1: USB disconnect, device number 68 [ 1266.001157][ T43] usb 5-1: USB disconnect, device number 31 [ 1266.117376][ T6908] usb 2-1: USB disconnect, device number 32 [ 1266.244008][T22500] loop2: detected capacity change from 0 to 7 [ 1266.252490][T16900] Dev loop2: unable to read RDB block 7 [ 1266.258767][T16900] loop2: unable to read partition table [ 1266.264873][T16900] loop2: partition table beyond EOD, truncated [ 1266.273979][T22500] Dev loop2: unable to read RDB block 7 [ 1266.281489][T22500] loop2: unable to read partition table [ 1266.287782][T22500] loop2: partition table beyond EOD, truncated [ 1266.295360][T22500] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1266.455579][ T43] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1266.635440][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1266.648356][ T43] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1266.665355][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.673722][ T43] usb 4-1: Product: syz [ 1266.679863][ T43] usb 4-1: Manufacturer: syz [ 1266.705247][ T43] usb 4-1: SerialNumber: syz [ 1266.717304][ T43] usb 4-1: config 0 descriptor?? [ 1266.930558][T22508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1266.959155][ T43] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 069 [ 1267.010899][T22513] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1267.157922][T22498] FAULT_INJECTION: forcing a failure. [ 1267.157922][T22498] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.212316][T22498] CPU: 1 UID: 0 PID: 22498 Comm: syz.3.5674 Not tainted syzkaller #0 PREEMPT(full) [ 1267.212340][T22498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1267.212351][T22498] Call Trace: [ 1267.212358][T22498] [ 1267.212366][T22498] dump_stack_lvl+0xe8/0x150 [ 1267.212392][T22498] should_fail_ex+0x414/0x560 [ 1267.212421][T22498] should_failslab+0xa8/0x100 [ 1267.212442][T22498] __kmalloc_noprof+0xdf/0x800 [ 1267.212458][T22498] ? kfree+0x4d/0x660 [ 1267.212483][T22498] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1267.212510][T22498] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1267.212533][T22498] ? tomoyo_domain+0xd8/0x130 [ 1267.212558][T22498] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1267.212576][T22498] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1267.212619][T22498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1267.212645][T22498] ? __lock_acquire+0x6b6/0x2cf0 [ 1267.212672][T22498] ? get_pid_task+0x20/0x1f0 [ 1267.212700][T22498] ? get_pid_task+0x20/0x1f0 [ 1267.212735][T22498] ? __fget_files+0x2a/0x420 [ 1267.212758][T22498] ? __fget_files+0x3a0/0x420 [ 1267.212777][T22498] ? __fget_files+0x2a/0x420 [ 1267.212800][T22498] security_file_ioctl_compat+0xcb/0x2d0 [ 1267.212820][T22498] __ia32_compat_sys_ioctl+0x128/0x840 [ 1267.212838][T22498] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1267.212854][T22498] ? __fget_files+0x3a0/0x420 [ 1267.212879][T22498] ? fput+0xa0/0xd0 [ 1267.212900][T22498] ? ksys_write+0x22a/0x250 [ 1267.212917][T22498] ? __pfx_ksys_write+0x10/0x10 [ 1267.212940][T22498] __do_fast_syscall_32+0x1dc/0x560 [ 1267.212959][T22498] ? lockdep_hardirqs_on+0x7b/0x110 [ 1267.212978][T22498] ? do_fast_syscall_32+0x34/0x80 [ 1267.212996][T22498] ? irqentry_exit+0x10f/0x660 [ 1267.213014][T22498] do_fast_syscall_32+0x34/0x80 [ 1267.213032][T22498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1267.213052][T22498] RIP: 0023:0xf7fb5539 [ 1267.213065][T22498] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1267.213079][T22498] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1267.213096][T22498] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1267.213107][T22498] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1267.213117][T22498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1267.213127][T22498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1267.213136][T22498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1267.213158][T22498] [ 1267.213243][T22498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1267.827166][ T6908] usb 4-1: USB disconnect, device number 69 [ 1268.805206][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1268.965298][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1268.988979][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1269.004495][ T43] usb 1-1: config 64 has an invalid interface number: 103 but max is 0 [ 1269.021581][ T43] usb 1-1: config 64 has no interface number 0 [ 1269.035798][ T43] usb 1-1: config 64 interface 103 has no altsetting 0 [ 1269.056808][ T43] usb 1-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=8d.88 [ 1269.072697][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.105153][ T43] usb 1-1: Product: syz [ 1269.115966][ T43] usb 1-1: Manufacturer: syz [ 1269.134034][ T43] usb 1-1: SerialNumber: syz [ 1269.358053][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5676'. [ 1269.475453][ T43] snd-usb-audio 1-1:64.103: probe with driver snd-usb-audio failed with error -71 [ 1269.501639][ T43] usb 1-1: USB disconnect, device number 27 [ 1269.884766][T22536] FAULT_INJECTION: forcing a failure. [ 1269.884766][T22536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.899265][T22536] CPU: 0 UID: 0 PID: 22536 Comm: syz.1.5683 Not tainted syzkaller #0 PREEMPT(full) [ 1269.899298][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1269.899313][T22536] Call Trace: [ 1269.899322][T22536] [ 1269.899332][T22536] dump_stack_lvl+0xe8/0x150 [ 1269.899367][T22536] should_fail_ex+0x414/0x560 [ 1269.899408][T22536] _copy_from_user+0x2d/0xb0 [ 1269.899437][T22536] do_sys_poll+0x242/0x1070 [ 1269.899470][T22536] ? __lock_acquire+0x6b6/0x2cf0 [ 1269.899500][T22536] ? __lock_acquire+0x6b6/0x2cf0 [ 1269.899522][T22536] ? __pfx_do_sys_poll+0x10/0x10 [ 1269.899554][T22536] ? aa_file_perm+0x139/0x1530 [ 1269.899687][T22536] ? set_compat_user_sigmask+0xbb/0x240 [ 1269.899712][T22536] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1269.899756][T22536] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 1269.899785][T22536] ? fput+0xa0/0xd0 [ 1269.899818][T22536] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 1269.899847][T22536] ? __pfx_ksys_write+0x10/0x10 [ 1269.899881][T22536] __do_fast_syscall_32+0x1dc/0x560 [ 1269.899907][T22536] ? lockdep_hardirqs_on+0x7b/0x110 [ 1269.899928][T22536] ? do_fast_syscall_32+0x34/0x80 [ 1269.899952][T22536] ? irqentry_exit+0x10f/0x660 [ 1269.899979][T22536] do_fast_syscall_32+0x34/0x80 [ 1269.900005][T22536] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1269.900037][T22536] RIP: 0023:0xf70dd539 [ 1269.900057][T22536] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1269.900077][T22536] RSP: 002b:00000000f54ac55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 1269.900101][T22536] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 1269.900118][T22536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.900132][T22536] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1269.900146][T22536] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1269.900160][T22536] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1269.900193][T22536] [ 1270.536167][ T6908] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1270.665551][ T5908] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1270.725104][ T6908] usb 4-1: Using ep0 maxpacket: 16 [ 1270.835213][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 1271.141225][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.155616][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1271.261871][ T5908] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1271.298882][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.323704][ T5908] usb 6-1: Product: syz [ 1271.349825][ T5908] usb 6-1: Manufacturer: syz [ 1271.376144][ T5908] usb 6-1: SerialNumber: syz [ 1271.403523][ T5908] usb 6-1: config 0 descriptor?? [ 1271.483255][T22557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1271.702951][T22562] FAULT_INJECTION: forcing a failure. [ 1271.702951][T22562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.716805][T22562] CPU: 1 UID: 0 PID: 22562 Comm: syz.0.5692 Not tainted syzkaller #0 PREEMPT(full) [ 1271.716837][T22562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1271.716852][T22562] Call Trace: [ 1271.716864][T22562] [ 1271.716875][T22562] dump_stack_lvl+0xe8/0x150 [ 1271.716912][T22562] should_fail_ex+0x414/0x560 [ 1271.716942][T22562] _copy_from_user+0x2d/0xb0 [ 1271.716977][T22562] get_compat_msghdr+0xad/0x4a0 [ 1271.717014][T22562] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1271.717043][T22562] ? kstrtouint+0x6e/0xe0 [ 1271.717083][T22562] ___sys_sendmsg+0x193/0x2a0 [ 1271.717104][T22562] ? __pfx____sys_sendmsg+0x10/0x10 [ 1271.717136][T22562] ? get_pid_task+0x20/0x1f0 [ 1271.717165][T22562] ? get_pid_task+0x20/0x1f0 [ 1271.717189][T22562] ? get_pid_task+0x20/0x1f0 [ 1271.717244][T22562] ? __fget_files+0x2a/0x420 [ 1271.717264][T22562] ? __fget_files+0x3a0/0x420 [ 1271.717311][T22562] __sys_sendmsg+0x164/0x220 [ 1271.717346][T22562] ? __pfx___sys_sendmsg+0x10/0x10 [ 1271.717385][T22562] ? __pfx_ksys_write+0x10/0x10 [ 1271.717409][T22562] __do_fast_syscall_32+0x1dc/0x560 [ 1271.717428][T22562] ? lockdep_hardirqs_on+0x7b/0x110 [ 1271.717458][T22562] ? do_fast_syscall_32+0x34/0x80 [ 1271.717482][T22562] ? irqentry_exit+0x10f/0x660 [ 1271.717507][T22562] do_fast_syscall_32+0x34/0x80 [ 1271.717532][T22562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1271.717559][T22562] RIP: 0023:0xf7f54539 [ 1271.717574][T22562] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1271.717589][T22562] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1271.717623][T22562] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1271.717640][T22562] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.717653][T22562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1271.717666][T22562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1271.717679][T22562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1271.717710][T22562] [ 1272.935140][ T9900] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1273.065145][ T9900] usb 5-1: device descriptor read/64, error -71 [ 1273.085166][ T43] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1273.248175][ T43] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 1273.265565][ T43] usb 1-1: config 0 has no interface number 0 [ 1273.277047][ T43] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1273.299584][ T43] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1273.315172][ T9900] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1273.328067][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.346016][ T43] usb 1-1: Product: syz [ 1273.357166][ T43] usb 1-1: Manufacturer: syz [ 1273.368434][ T43] usb 1-1: SerialNumber: syz [ 1273.389964][ T43] usb 1-1: config 0 descriptor?? [ 1273.417554][ T43] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 1273.445136][ T9900] usb 5-1: device descriptor read/64, error -71 [ 1273.466408][ T43] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1273.494682][ T5908] usb 6-1: USB disconnect, device number 69 [ 1273.585596][ T9900] usb usb5-port1: attempt power cycle [ 1273.906364][ T43] usb 1-1: USB disconnect, device number 28 [ 1273.916545][ T43] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1273.937857][ T9900] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1273.976157][ T9900] usb 5-1: device descriptor read/8, error -71 [ 1274.006640][ T43] kobil_sct 1-1:0.148: device disconnected [ 1274.235279][ T9900] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1274.278494][ T9900] usb 5-1: device descriptor read/8, error -71 [ 1274.415264][ T43] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1274.423359][ T9900] usb usb5-port1: unable to enumerate USB device [ 1274.701664][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.804612][ T43] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.845794][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1274.868954][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1274.909849][ T43] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1274.943025][ T43] usb 1-1: Product: syz [ 1274.960216][ T43] usb 1-1: Manufacturer: syz [ 1274.976861][ T43] usb 1-1: SerialNumber: syz [ 1275.009975][ T43] usb 1-1: config 0 descriptor?? [ 1275.298757][ T43] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1275.387962][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1275.630588][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1275.657253][ T43] usb 1-1: USB disconnect, device number 29 [ 1275.792254][ T6908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1275.836287][ T6908] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 1275.845107][ T6908] usb 4-1: chopping to 0 config(s) [ 1275.850379][ T6908] usb 4-1: can't read configurations, error -32 [ 1275.986074][ T6908] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1276.421202][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1276.478896][T22621] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5706'. [ 1276.502398][T22623] usb usb8: usbfs: process 22623 (syz.5.5707) did not claim interface 0 before use [ 1276.518894][T22602] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1276.577469][T22622] macvlan6: entered promiscuous mode [ 1276.597607][T22622] macvlan6: entered allmulticast mode [ 1276.916921][T22628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5708'. [ 1277.798764][T22645] FAULT_INJECTION: forcing a failure. [ 1277.798764][T22645] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.831058][T22645] CPU: 1 UID: 0 PID: 22645 Comm: syz.1.5714 Not tainted syzkaller #0 PREEMPT(full) [ 1277.831091][T22645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1277.831106][T22645] Call Trace: [ 1277.831116][T22645] [ 1277.831126][T22645] dump_stack_lvl+0xe8/0x150 [ 1277.831162][T22645] should_fail_ex+0x414/0x560 [ 1277.831204][T22645] should_failslab+0xa8/0x100 [ 1277.831233][T22645] __kmalloc_noprof+0xdf/0x800 [ 1277.831257][T22645] ? tomoyo_encode+0x28b/0x550 [ 1277.831292][T22645] tomoyo_encode+0x28b/0x550 [ 1277.831329][T22645] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1277.831371][T22645] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1277.831397][T22645] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1277.831427][T22645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1277.831452][T22645] ? __lock_acquire+0x6b6/0x2cf0 [ 1277.831479][T22645] ? get_pid_task+0x20/0x1f0 [ 1277.831524][T22645] ? get_pid_task+0x20/0x1f0 [ 1277.831573][T22645] ? __fget_files+0x2a/0x420 [ 1277.831607][T22645] ? __fget_files+0x3a0/0x420 [ 1277.831633][T22645] ? __fget_files+0x2a/0x420 [ 1277.831666][T22645] security_file_ioctl_compat+0xcb/0x2d0 [ 1277.831694][T22645] __ia32_compat_sys_ioctl+0x128/0x840 [ 1277.831721][T22645] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1277.831744][T22645] ? __fget_files+0x3a0/0x420 [ 1277.831781][T22645] ? fput+0xa0/0xd0 [ 1277.831811][T22645] ? ksys_write+0x22a/0x250 [ 1277.831836][T22645] ? __pfx_ksys_write+0x10/0x10 [ 1277.831871][T22645] __do_fast_syscall_32+0x1dc/0x560 [ 1277.831905][T22645] ? lockdep_hardirqs_on+0x7b/0x110 [ 1277.831927][T22645] ? do_fast_syscall_32+0x34/0x80 [ 1277.831952][T22645] ? irqentry_exit+0x10f/0x660 [ 1277.831979][T22645] do_fast_syscall_32+0x34/0x80 [ 1277.832005][T22645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.832033][T22645] RIP: 0023:0xf70dd539 [ 1277.832052][T22645] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1277.832072][T22645] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1277.832096][T22645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040047459 [ 1277.832112][T22645] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1277.832126][T22645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1277.832140][T22645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1277.832154][T22645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.832186][T22645] [ 1277.832519][T22645] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1278.343739][T22647] FAULT_INJECTION: forcing a failure. [ 1278.343739][T22647] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.404720][T22647] CPU: 0 UID: 0 PID: 22647 Comm: syz.3.5716 Not tainted syzkaller #0 PREEMPT(full) [ 1278.404753][T22647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1278.404768][T22647] Call Trace: [ 1278.404778][T22647] [ 1278.404789][T22647] dump_stack_lvl+0xe8/0x150 [ 1278.404823][T22647] should_fail_ex+0x414/0x560 [ 1278.404865][T22647] should_failslab+0xa8/0x100 [ 1278.404895][T22647] __kmalloc_noprof+0xdf/0x800 [ 1278.404917][T22647] ? tomoyo_encode+0x28b/0x550 [ 1278.404952][T22647] tomoyo_encode+0x28b/0x550 [ 1278.404988][T22647] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1278.405031][T22647] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1278.405055][T22647] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1278.405081][T22647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1278.405104][T22647] ? __lock_acquire+0x6b6/0x2cf0 [ 1278.405129][T22647] ? get_pid_task+0x20/0x1f0 [ 1278.405168][T22647] ? get_pid_task+0x20/0x1f0 [ 1278.405216][T22647] ? __fget_files+0x2a/0x420 [ 1278.405250][T22647] ? __fget_files+0x3a0/0x420 [ 1278.405275][T22647] ? __fget_files+0x2a/0x420 [ 1278.405304][T22647] security_file_ioctl_compat+0xcb/0x2d0 [ 1278.405331][T22647] __ia32_compat_sys_ioctl+0x128/0x840 [ 1278.405358][T22647] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1278.405382][T22647] ? __fget_files+0x3a0/0x420 [ 1278.405416][T22647] ? fput+0xa0/0xd0 [ 1278.405446][T22647] ? ksys_write+0x22a/0x250 [ 1278.405470][T22647] ? __pfx_ksys_write+0x10/0x10 [ 1278.405503][T22647] __do_fast_syscall_32+0x1dc/0x560 [ 1278.405528][T22647] ? lockdep_hardirqs_on+0x7b/0x110 [ 1278.405549][T22647] ? do_fast_syscall_32+0x34/0x80 [ 1278.405573][T22647] ? irqentry_exit+0x10f/0x660 [ 1278.405608][T22647] do_fast_syscall_32+0x34/0x80 [ 1278.405634][T22647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1278.405663][T22647] RIP: 0023:0xf7fb5539 [ 1278.405682][T22647] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1278.405702][T22647] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1278.405726][T22647] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c004743e [ 1278.405741][T22647] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.405753][T22647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.405764][T22647] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1278.405774][T22647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.405799][T22647] [ 1278.686126][T22647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1278.823276][ T30] audit: type=1326 audit(1767075956.176:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.869132][T22658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5719'. [ 1278.928451][ T30] audit: type=1326 audit(1767075956.176:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.953526][ T30] audit: type=1326 audit(1767075956.176:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1278.987701][ T30] audit: type=1326 audit(1767075956.176:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.043109][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1279.052375][ T30] audit: type=1326 audit(1767075956.176:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.075787][ T30] audit: type=1326 audit(1767075956.176:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.098714][ T30] audit: type=1326 audit(1767075956.176:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.128638][ T30] audit: type=1326 audit(1767075956.176:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=19 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.153190][ T30] audit: type=1326 audit(1767075956.176:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.176395][ T30] audit: type=1326 audit(1767075956.206:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22657 comm="syz.1.5719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1279.265214][ T9900] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1279.285217][ T6908] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1279.425204][ T9900] usb 4-1: Using ep0 maxpacket: 8 [ 1279.432656][ T9900] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff [ 1279.442738][ T9900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.445897][ T6908] usb 5-1: Using ep0 maxpacket: 32 [ 1279.460803][ T9900] usb 4-1: config 0 descriptor?? [ 1279.462743][ T6908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.477510][ T9900] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 1279.488054][ T6908] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1279.497536][ T6908] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1279.506892][ T6908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.523797][ T6908] usb 5-1: config 0 descriptor?? [ 1279.676660][ T9900] usb 4-1: USB disconnect, device number 72 [ 1280.475262][ T6908] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1280.625118][ T6908] usb 4-1: Using ep0 maxpacket: 16 [ 1280.633242][ T6908] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1280.650328][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.662486][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.680519][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.695193][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.720025][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.740337][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.754179][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.766927][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.779356][ T6908] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1280.791309][ T6908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1280.801541][ T6908] usb 4-1: SerialNumber: syz [ 1280.811057][ T6908] usb 4-1: config 0 descriptor?? [ 1280.826778][ T6908] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 1281.043902][ T5184] bcm5974 4-1:0.0: could not read from device [ 1281.059410][T22689] loop6: detected capacity change from 0 to 2640 [ 1281.086845][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.117541][ T5184] bcm5974 4-1:0.0: could not read from device [ 1281.118999][ T6908] usb 4-1: USB disconnect, device number 73 [ 1281.132918][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.171801][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.198891][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.216388][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.228371][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.244676][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.268331][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.276572][T22689] ldm_validate_partition_table(): Disk read failed. [ 1281.296529][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.348959][T22689] Buffer I/O error on dev loop6, logical block 0, async page read [ 1281.374657][T22689] Dev loop6: unable to read RDB block 0 [ 1281.413591][T22689] loop6: unable to read partition table [ 1281.424218][T22689] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1281.606558][ T9900] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1281.769699][ T9900] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1281.781107][ T9900] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1281.792056][ T9900] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1281.801479][ T9900] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1281.812220][T22692] warning: `syz.3.5728' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1281.830706][ T9900] usb 1-1: Product: syz [ 1281.834952][ T9900] usb 1-1: Manufacturer: syz [ 1281.844517][ T9900] usb 1-1: SerialNumber: syz [ 1281.853448][ T9900] usb 1-1: config 0 descriptor?? [ 1281.880575][ T9900] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1281.955843][T16900] udevd[16900]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.091821][ T6908] usb 5-1: USB disconnect, device number 36 [ 1282.193146][T22697] tipc: Started in network mode [ 1282.199485][T22697] tipc: Node identity be770d27baf7, cluster identity 4711 [ 1282.209455][T22697] tipc: Enabled bearer , priority 0 [ 1282.236122][T22697] syzkaller0: entered promiscuous mode [ 1282.247231][T22697] syzkaller0: entered allmulticast mode [ 1282.270416][T22698] tipc: Resetting bearer [ 1282.280601][T22696] tipc: Resetting bearer [ 1282.295742][ T5908] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1282.304714][T22696] tipc: Disabling bearer [ 1282.475184][ T6908] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1282.495805][ T5908] usb 6-1: Using ep0 maxpacket: 16 [ 1282.503150][ T5908] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.514926][ T5908] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1282.522311][ T5908] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1282.533108][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.544149][ T5908] usb 6-1: config 0 descriptor?? [ 1282.657522][ T6908] usb 4-1: Using ep0 maxpacket: 16 [ 1282.665748][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.676335][ T6908] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1282.707688][ T6908] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1282.717022][ T6908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.725947][ T6908] usb 4-1: Product: syz [ 1282.730292][ T6908] usb 4-1: Manufacturer: syz [ 1282.734948][ T6908] usb 4-1: SerialNumber: syz [ 1282.751156][ T6908] usb 4-1: config 0 descriptor?? [ 1282.997199][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 1283.003485][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1283.038443][ T5908] usb 6-1: USB disconnect, device number 70 [ 1283.131851][T22712] FAULT_INJECTION: forcing a failure. [ 1283.131851][T22712] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.149278][T22712] CPU: 1 UID: 0 PID: 22712 Comm: syz.1.5735 Not tainted syzkaller #0 PREEMPT(full) [ 1283.149325][T22712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1283.149349][T22712] Call Trace: [ 1283.149365][T22712] [ 1283.149379][T22712] dump_stack_lvl+0xe8/0x150 [ 1283.149415][T22712] should_fail_ex+0x414/0x560 [ 1283.149456][T22712] should_failslab+0xa8/0x100 [ 1283.149486][T22712] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1283.149524][T22712] ? __alloc_skb+0x1dc/0x3a0 [ 1283.149545][T22712] ? __local_bh_enable_ip+0xd0/0x130 [ 1283.149571][T22712] ? __alloc_skb+0x198/0x3a0 [ 1283.149594][T22712] __alloc_skb+0x1dc/0x3a0 [ 1283.149622][T22712] netlink_dump+0x1b7/0xe90 [ 1283.149662][T22712] ? __pfx_netlink_dump+0x10/0x10 [ 1283.149707][T22712] ? kmem_cache_free+0x197/0x620 [ 1283.149728][T22712] ? netlink_recvmsg+0x5b2/0xa30 [ 1283.149763][T22712] netlink_recvmsg+0x676/0xa30 [ 1283.149802][T22712] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1283.149837][T22712] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1283.149867][T22712] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1283.149888][T22712] ? security_socket_recvmsg+0x7e/0x2e0 [ 1283.149920][T22712] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1283.149950][T22712] sock_recvmsg+0x22c/0x270 [ 1283.149987][T22712] sock_read_iter+0x231/0x2f0 [ 1283.150020][T22712] ? __pfx_sock_read_iter+0x10/0x10 [ 1283.150073][T22712] do_iter_readv_writev+0x623/0x8c0 [ 1283.150103][T22712] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1283.150124][T22712] ? common_file_perm+0x1b5/0x220 [ 1283.150166][T22712] ? bpf_lsm_file_permission+0x9/0x20 [ 1283.150189][T22712] ? security_file_permission+0x75/0x290 [ 1283.150216][T22712] ? rw_verify_area+0x2a6/0x4d0 [ 1283.150241][T22712] vfs_readv+0x253/0x850 [ 1283.150273][T22712] ? __pfx_vfs_readv+0x10/0x10 [ 1283.150313][T22712] ? __fget_files+0x2a/0x420 [ 1283.150342][T22712] ? __fget_files+0x3a0/0x420 [ 1283.150364][T22712] ? __fget_files+0x2a/0x420 [ 1283.150393][T22712] do_readv+0x14d/0x2d0 [ 1283.150418][T22712] ? __pfx_do_readv+0x10/0x10 [ 1283.150449][T22712] __do_fast_syscall_32+0x1dc/0x560 [ 1283.150469][T22712] ? lockdep_hardirqs_on+0x7b/0x110 [ 1283.150485][T22712] ? do_fast_syscall_32+0x34/0x80 [ 1283.150504][T22712] ? irqentry_exit+0x10f/0x660 [ 1283.150525][T22712] do_fast_syscall_32+0x34/0x80 [ 1283.150544][T22712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1283.150566][T22712] RIP: 0023:0xf70dd539 [ 1283.150582][T22712] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1283.150598][T22712] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 1283.150617][T22712] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 1283.150630][T22712] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1283.150640][T22712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1283.150651][T22712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1283.150661][T22712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1283.150686][T22712] [ 1284.097892][ T6908] usb 1-1: USB disconnect, device number 30 [ 1284.136808][T22730] loop2: detected capacity change from 0 to 7 [ 1284.144641][T22730] Dev loop2: unable to read RDB block 7 [ 1284.150517][T22730] loop2: unable to read partition table [ 1284.159844][T22730] loop2: partition table beyond EOD, truncated [ 1284.171121][T22730] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1284.176537][ T5908] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1284.285355][ T9900] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1284.318501][T22733] trusted_key: syz.1.5745 sent an empty control message without MSG_MORE. [ 1284.385307][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 1284.402986][ T5908] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.436922][ T5908] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1284.445864][ T9900] usb 6-1: Using ep0 maxpacket: 16 [ 1284.462410][ T9900] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.488161][ T9900] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1284.498628][ T5908] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1284.517111][ T9900] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1284.526409][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.534136][ T9900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.556213][ T5908] usb 5-1: config 0 descriptor?? [ 1284.565886][ T9900] usb 6-1: config 0 descriptor?? [ 1285.005151][ T9900] usbhid 6-1:0.0: can't add hid device: -71 [ 1285.015485][ T9900] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1285.038546][ T9900] usb 6-1: USB disconnect, device number 71 [ 1285.233924][ T9900] usb 4-1: USB disconnect, device number 74 [ 1285.714376][T22758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.781314][T22758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1285.845186][T22758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.553797][T22774] loop2: detected capacity change from 0 to 7 [ 1286.568279][T22774] Dev loop2: unable to read RDB block 7 [ 1286.574522][T22774] loop2: AHDI p2 [ 1286.581878][T22774] loop2: partition table partially beyond EOD, truncated [ 1286.976646][ T9900] usb 5-1: USB disconnect, device number 37 [ 1287.475206][ T9900] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1287.650186][ T9900] usb 5-1: Using ep0 maxpacket: 16 [ 1287.672415][ T9900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.697829][ T9900] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1287.756677][ T9900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1287.776168][ T9900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.805566][ T9900] usb 5-1: Product: syz [ 1287.809808][ T9900] usb 5-1: Manufacturer: syz [ 1287.817081][ T9900] usb 5-1: SerialNumber: syz [ 1287.828482][ T9900] usb 5-1: config 0 descriptor?? [ 1288.357673][T22788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5759'. [ 1289.040166][T22811] ip6t_srh: unknown srh match flags 448C [ 1289.068887][T22812] vivid-003: disconnect [ 1289.456327][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5765'. [ 1289.471098][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5765'. [ 1289.613181][T22820] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5766'. [ 1289.856354][T22810] vivid-003: reconnect [ 1289.928151][ T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1290.098737][ T43] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1290.107958][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.140762][ T43] usb 4-1: config 0 descriptor?? [ 1290.172703][ T9900] usb 5-1: USB disconnect, device number 38 [ 1290.413294][T22832] loop2: detected capacity change from 0 to 7 [ 1290.436472][T16900] Dev loop2: unable to read RDB block 7 [ 1290.449490][T16900] loop2: unable to read partition table [ 1290.474920][T16900] loop2: partition table beyond EOD, truncated [ 1290.499027][T22832] Dev loop2: unable to read RDB block 7 [ 1290.528230][T22832] loop2: unable to read partition table [ 1290.545377][T22832] loop2: partition table beyond EOD, truncated [ 1290.563357][T22832] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1291.216875][ T43] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1291.250546][ T43] usb 4-1: USB disconnect, device number 75 [ 1291.445132][ T9900] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1291.606966][ T9900] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.617949][ T9900] usb 5-1: config 0 has no interface number 0 [ 1291.627816][ T9900] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1291.637644][ T9900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.646112][ T9900] usb 5-1: Product: syz [ 1291.650420][ T9900] usb 5-1: Manufacturer: syz [ 1291.655490][ T9900] usb 5-1: SerialNumber: syz [ 1291.671364][ T9900] usb 5-1: config 0 descriptor?? [ 1291.893418][ T9900] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1291.914006][ T9900] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1291.946740][ T5908] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1291.972014][ T9900] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1291.996634][ T9900] usb 5-1: media controller created [ 1292.051742][ T9900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1292.125236][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 1292.133838][ T5908] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1292.144450][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.155748][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.170804][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1292.181429][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.190695][ T5908] usb 1-1: Product: syz [ 1292.196145][ T5908] usb 1-1: Manufacturer: syz [ 1292.201469][ T5908] usb 1-1: SerialNumber: syz [ 1292.285232][ T43] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1292.460661][ T43] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1292.475111][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.497885][ T43] usb 4-1: config 0 descriptor?? [ 1292.787352][ T5908] usb 1-1: 0:2 : does not exist [ 1292.803121][ T5908] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1292.838339][ T5908] usb 1-1: USB disconnect, device number 31 [ 1292.893684][T18164] udevd[18164]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1293.096076][ T6908] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1293.197514][ T9900] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1293.256845][ T6908] usb 2-1: Using ep0 maxpacket: 16 [ 1293.265337][ T6908] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.277145][ T6908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1293.283969][ T6908] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1293.294739][ T6908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.307804][ T6908] usb 2-1: config 0 descriptor?? [ 1293.332372][ T43] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 1293.353568][ T43] usb 4-1: USB disconnect, device number 76 [ 1293.499706][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1293.846866][ T5908] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1293.938930][ T6908] usbhid 2-1:0.0: can't add hid device: -71 [ 1293.945420][ T6908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1293.958576][ T6908] usb 2-1: USB disconnect, device number 33 [ 1294.015151][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 1294.034439][ T5908] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1294.053616][ T5908] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1294.073465][ T5908] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1294.085410][ T5908] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1294.105777][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.114958][ T5908] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1294.129397][ T5908] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1294.155678][ T5908] usb 1-1: Product: syz [ 1294.169795][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1294.169814][ T30] audit: type=1326 audit(1767075971.526:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22866 comm="syz.5.5781" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703d539 code=0x0 [ 1294.245347][ T5908] usb 1-1: Manufacturer: syz [ 1294.298394][ T5908] usb 1-1: SerialNumber: syz [ 1294.329904][ T9900] usb 5-1: USB disconnect, device number 39 [ 1294.405354][ T5908] usb 1-1: config 0 descriptor?? [ 1294.482304][ T5908] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1294.570022][ T5908] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1294.783691][ T6908] usb 1-1: USB disconnect, device number 32 [ 1294.789804][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 1294.830985][ T6908] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1294.855389][ T5908] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1295.025178][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 1295.072240][ T5908] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1295.104531][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.135308][ T5908] usb 5-1: Product: syz [ 1295.155668][ T5908] usb 5-1: Manufacturer: syz [ 1295.173392][ T5908] usb 5-1: SerialNumber: syz [ 1295.425766][T22875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1295.446511][ T6908] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1295.483148][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5782'. [ 1295.545459][ T5908] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 1295.574458][ T5908] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1295.618721][ T5908] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1295.659071][ T6908] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.669661][ T5908] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1295.684896][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1295.708711][ T5908] usb 5-1: USB disconnect, device number 40 [ 1295.720541][ T6908] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.743778][ T5908] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1295.770600][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1295.791613][ T5908] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1295.806559][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1295.819011][ T5908] visor 5-1:1.0: device disconnected [ 1295.837794][ T6908] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.859047][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1295.875889][ T6908] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1295.892104][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1295.920413][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1295.942571][ T6908] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1295.959965][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1295.983315][ T6908] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.002773][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1296.024560][ T6908] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1296.739895][T22896] libceph: resolve '. [ 1296.739895][T22896] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1296.739895][T22896] ' (ret=-3): failed [ 1297.737447][ T9900] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1297.895184][ T9900] usb 4-1: Using ep0 maxpacket: 32 [ 1297.904556][ T9900] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1297.915256][ T9900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.935819][ T9900] usb 4-1: config 0 descriptor?? [ 1298.159493][ T6908] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1298.175090][ T6908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.183893][ T9900] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1298.217278][ T9900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1298.228526][ T6908] usb 2-1: can't set config #168, error -71 [ 1298.250823][ T9900] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1298.267463][ T9900] usb 4-1: media controller created [ 1298.269676][ T6908] usb 2-1: USB disconnect, device number 34 [ 1298.355757][ T9900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1298.385257][T22908] dib0700: tx buffer length is larger than 4. Not supported. [ 1298.554599][ T9900] DVB: Unable to find symbol dib7000p_attach() [ 1298.564341][ T9900] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1298.675593][ T9900] rc_core: IR keymap rc-dib0700-rc5 not found [ 1298.696037][ T9900] Registered IR keymap rc-empty [ 1298.703870][ T9900] dvb-usb: could not initialize remote control. [ 1298.711237][ T9900] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1298.715267][ T6908] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1298.743105][ T9900] usb 4-1: USB disconnect, device number 77 [ 1298.807431][ T9900] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1298.917997][ T6908] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1298.949960][ T6908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.980893][ T6908] usb 2-1: config 0 descriptor?? [ 1299.295206][ T5908] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1299.455154][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 1299.465777][ T5908] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.492806][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1299.513507][ T5908] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1299.543538][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.591987][ T5908] usb 4-1: config 0 descriptor?? [ 1299.782074][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5795'. [ 1299.792630][T22930] FAULT_INJECTION: forcing a failure. [ 1299.792630][T22930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.806136][T22930] CPU: 0 UID: 0 PID: 22930 Comm: syz.0.5795 Not tainted syzkaller #0 PREEMPT(full) [ 1299.806157][T22930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1299.806167][T22930] Call Trace: [ 1299.806174][T22930] [ 1299.806181][T22930] dump_stack_lvl+0xe8/0x150 [ 1299.806206][T22930] should_fail_ex+0x414/0x560 [ 1299.806239][T22930] _copy_from_user+0x2d/0xb0 [ 1299.806260][T22930] get_compat_msghdr+0xad/0x4a0 [ 1299.806285][T22930] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1299.806307][T22930] ? kstrtouint+0x6e/0xe0 [ 1299.806336][T22930] ___sys_sendmsg+0x193/0x2a0 [ 1299.806357][T22930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1299.806375][T22930] ? get_pid_task+0x20/0x1f0 [ 1299.806396][T22930] ? get_pid_task+0x20/0x1f0 [ 1299.806414][T22930] ? get_pid_task+0x20/0x1f0 [ 1299.806455][T22930] ? __fget_files+0x2a/0x420 [ 1299.806475][T22930] ? __fget_files+0x3a0/0x420 [ 1299.806502][T22930] __sys_sendmsg+0x164/0x220 [ 1299.806529][T22930] ? __pfx___sys_sendmsg+0x10/0x10 [ 1299.806554][T22930] ? __pfx_ksys_write+0x10/0x10 [ 1299.806578][T22930] __do_fast_syscall_32+0x1dc/0x560 [ 1299.806596][T22930] ? lockdep_hardirqs_on+0x7b/0x110 [ 1299.806611][T22930] ? do_fast_syscall_32+0x34/0x80 [ 1299.806628][T22930] ? irqentry_exit+0x10f/0x660 [ 1299.806646][T22930] do_fast_syscall_32+0x34/0x80 [ 1299.806664][T22930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1299.806683][T22930] RIP: 0023:0xf7f54539 [ 1299.806697][T22930] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1299.806711][T22930] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1299.806728][T22930] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1299.806739][T22930] RDX: 0000000024040808 RSI: 0000000000000000 RDI: 0000000000000000 [ 1299.806749][T22930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1299.806758][T22930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1299.806768][T22930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1299.806792][T22930] [ 1300.036055][ T6908] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 1300.048507][ T6908] usb 2-1: USB disconnect, device number 35 [ 1300.133685][T22934] FAULT_INJECTION: forcing a failure. [ 1300.133685][T22934] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.148656][T22934] CPU: 0 UID: 0 PID: 22934 Comm: syz.0.5799 Not tainted syzkaller #0 PREEMPT(full) [ 1300.148678][T22934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1300.148689][T22934] Call Trace: [ 1300.148695][T22934] [ 1300.148703][T22934] dump_stack_lvl+0xe8/0x150 [ 1300.148732][T22934] should_fail_ex+0x414/0x560 [ 1300.148761][T22934] should_failslab+0xa8/0x100 [ 1300.148782][T22934] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1300.148808][T22934] ? __alloc_skb+0x198/0x3a0 [ 1300.148825][T22934] ? __alloc_skb+0x1dc/0x3a0 [ 1300.148839][T22934] ? __local_bh_enable_ip+0xd0/0x130 [ 1300.148856][T22934] ? __alloc_skb+0x198/0x3a0 [ 1300.148872][T22934] __alloc_skb+0x1dc/0x3a0 [ 1300.148891][T22934] netlink_sendmsg+0x5c6/0xb30 [ 1300.148925][T22934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.148948][T22934] ? __import_iovec+0x5d4/0x7f0 [ 1300.148966][T22934] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1300.148988][T22934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1300.149003][T22934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.149024][T22934] __sock_sendmsg+0x21c/0x270 [ 1300.149049][T22934] ____sys_sendmsg+0x505/0x820 [ 1300.149072][T22934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1300.149095][T22934] ? kstrtouint+0x6e/0xe0 [ 1300.149123][T22934] ___sys_sendmsg+0x21f/0x2a0 [ 1300.149144][T22934] ? __pfx____sys_sendmsg+0x10/0x10 [ 1300.149162][T22934] ? get_pid_task+0x20/0x1f0 [ 1300.149181][T22934] ? get_pid_task+0x20/0x1f0 [ 1300.149200][T22934] ? get_pid_task+0x20/0x1f0 [ 1300.149240][T22934] ? __fget_files+0x2a/0x420 [ 1300.149261][T22934] ? __fget_files+0x3a0/0x420 [ 1300.149288][T22934] __sys_sendmsg+0x164/0x220 [ 1300.149308][T22934] ? __pfx___sys_sendmsg+0x10/0x10 [ 1300.149333][T22934] ? __pfx_ksys_write+0x10/0x10 [ 1300.149356][T22934] __do_fast_syscall_32+0x1dc/0x560 [ 1300.149374][T22934] ? lockdep_hardirqs_on+0x7b/0x110 [ 1300.149389][T22934] ? do_fast_syscall_32+0x34/0x80 [ 1300.149406][T22934] ? irqentry_exit+0x10f/0x660 [ 1300.149424][T22934] do_fast_syscall_32+0x34/0x80 [ 1300.149442][T22934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1300.149467][T22934] RIP: 0023:0xf7f54539 [ 1300.149482][T22934] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1300.149495][T22934] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1300.149513][T22934] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1300.149525][T22934] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1300.149535][T22934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1300.149544][T22934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1300.149554][T22934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1300.149576][T22934] [ 1300.429980][ T6704] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1300.625101][ T6704] usb 6-1: Using ep0 maxpacket: 32 [ 1300.632598][ T6704] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1300.642734][ T6704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.654565][ T6704] usb 6-1: config 0 descriptor?? [ 1300.755656][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 1300.761957][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1300.804277][ T5908] usb 4-1: USB disconnect, device number 78 [ 1300.863352][ T6704] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1300.873302][ T6704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1300.900205][ T6704] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1300.929496][ T6704] usb 6-1: media controller created [ 1300.972378][ T6704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.085876][T22928] FAULT_INJECTION: forcing a failure. [ 1301.085876][T22928] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.128023][ T6704] DVB: Unable to find symbol dib7000p_attach() [ 1301.134236][ T6704] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1301.141523][T22928] CPU: 0 UID: 0 PID: 22928 Comm: syz.5.5797 Not tainted syzkaller #0 PREEMPT(full) [ 1301.141551][T22928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1301.141565][T22928] Call Trace: [ 1301.141574][T22928] [ 1301.141582][T22928] dump_stack_lvl+0xe8/0x150 [ 1301.141615][T22928] should_fail_ex+0x414/0x560 [ 1301.141654][T22928] should_failslab+0xa8/0x100 [ 1301.141681][T22928] __kmalloc_noprof+0xdf/0x800 [ 1301.141704][T22928] ? tomoyo_encode+0x28b/0x550 [ 1301.141739][T22928] tomoyo_encode+0x28b/0x550 [ 1301.141775][T22928] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1301.141818][T22928] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1301.141843][T22928] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1301.141872][T22928] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1301.141897][T22928] ? __lock_acquire+0x6b6/0x2cf0 [ 1301.141923][T22928] ? get_pid_task+0x20/0x1f0 [ 1301.141963][T22928] ? get_pid_task+0x20/0x1f0 [ 1301.142012][T22928] ? __fget_files+0x2a/0x420 [ 1301.142045][T22928] ? __fget_files+0x3a0/0x420 [ 1301.142072][T22928] ? __fget_files+0x2a/0x420 [ 1301.142106][T22928] security_file_ioctl_compat+0xcb/0x2d0 [ 1301.142134][T22928] __ia32_compat_sys_ioctl+0x128/0x840 [ 1301.142161][T22928] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1301.142200][T22928] ? __fget_files+0x3a0/0x420 [ 1301.142236][T22928] ? fput+0xa0/0xd0 [ 1301.142267][T22928] ? ksys_write+0x22a/0x250 [ 1301.142291][T22928] ? __pfx_ksys_write+0x10/0x10 [ 1301.142326][T22928] __do_fast_syscall_32+0x1dc/0x560 [ 1301.142352][T22928] ? lockdep_hardirqs_on+0x7b/0x110 [ 1301.142373][T22928] ? do_fast_syscall_32+0x34/0x80 [ 1301.142455][T22928] ? irqentry_exit+0x10f/0x660 [ 1301.142487][T22928] do_fast_syscall_32+0x34/0x80 [ 1301.142514][T22928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1301.142540][T22928] RIP: 0023:0xf703d539 [ 1301.142559][T22928] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1301.142576][T22928] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1301.142598][T22928] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1301.142612][T22928] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.142626][T22928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1301.142639][T22928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1301.142652][T22928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1301.142684][T22928] [ 1301.142955][T22928] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1301.408680][ T9900] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 1301.576728][ T6704] rc_core: IR keymap rc-dib0700-rc5 not found [ 1301.595087][ T6704] Registered IR keymap rc-empty [ 1301.602395][ T6704] dvb-usb: could not initialize remote control. [ 1301.622746][ T6704] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1301.767276][ T9900] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1301.775231][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1301.820191][ T9900] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1301.847394][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1301.881660][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1301.909845][ T9900] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1301.935298][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1301.946248][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1301.962238][T22960] FAULT_INJECTION: forcing a failure. [ 1301.962238][T22960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.981380][ T9900] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1301.983620][T22960] CPU: 0 UID: 0 PID: 22960 Comm: syz.4.5805 Not tainted syzkaller #0 PREEMPT(full) [ 1301.983696][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1301.983737][T22960] Call Trace: [ 1301.983760][T22960] [ 1301.983789][T22960] dump_stack_lvl+0xe8/0x150 [ 1301.983874][T22960] should_fail_ex+0x414/0x560 [ 1301.983979][T22960] strncpy_from_user+0x36/0x2c0 [ 1301.984072][T22960] getname_flags+0xf3/0x540 [ 1301.984155][T22960] do_sys_openat2+0xbc/0x200 [ 1301.984240][T22960] ? __pfx_do_sys_openat2+0x10/0x10 [ 1301.984338][T22960] ? ksys_write+0x22a/0x250 [ 1301.984422][T22960] ? __pfx_ksys_write+0x10/0x10 [ 1301.984485][T22960] __ia32_compat_sys_openat+0x131/0x160 [ 1301.984584][T22960] __do_fast_syscall_32+0x1dc/0x560 [ 1301.984667][T22960] ? lockdep_hardirqs_on+0x7b/0x110 [ 1301.984719][T22960] ? do_fast_syscall_32+0x34/0x80 [ 1301.984783][T22960] ? irqentry_exit+0x10f/0x660 [ 1301.984859][T22960] do_fast_syscall_32+0x34/0x80 [ 1301.984924][T22960] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1301.984996][T22960] RIP: 0023:0xf7f26539 [ 1301.985034][T22960] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1301.985088][T22960] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1301.985149][T22960] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 1301.985190][T22960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.985223][T22960] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1301.985262][T22960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1301.985294][T22960] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1301.985380][T22960] [ 1302.275186][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1302.306959][ T43] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1302.326857][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.379405][ T43] usb 2-1: config 0 descriptor?? [ 1302.409857][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1302.437353][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1302.494733][ T9900] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1302.506015][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1302.521483][ T9900] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1302.548026][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1302.597599][ T43] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1302.619030][ T9900] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1302.669035][ T43] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1302.678698][ T43] dib0700: firmware download failed at 7 with -22 [ 1302.741973][T22963] FAULT_INJECTION: forcing a failure. [ 1302.741973][T22963] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.742044][T22963] CPU: 0 UID: 0 PID: 22963 Comm: syz.4.5806 Not tainted syzkaller #0 PREEMPT(full) [ 1302.742074][T22963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1302.742087][T22963] Call Trace: [ 1302.742095][T22963] [ 1302.742105][T22963] dump_stack_lvl+0xe8/0x150 [ 1302.742135][T22963] should_fail_ex+0x414/0x560 [ 1302.742164][T22963] should_failslab+0xa8/0x100 [ 1302.742205][T22963] __kmalloc_noprof+0xdf/0x800 [ 1302.742228][T22963] ? tomoyo_encode+0x28b/0x550 [ 1302.742305][T22963] tomoyo_encode+0x28b/0x550 [ 1302.742414][T22963] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1302.742465][T22963] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1302.742535][T22963] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1302.742595][T22963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1302.742623][T22963] ? __lock_acquire+0x6b6/0x2cf0 [ 1302.742648][T22963] ? get_pid_task+0x20/0x1f0 [ 1302.742689][T22963] ? get_pid_task+0x20/0x1f0 [ 1302.742723][T22963] ? __fget_files+0x2a/0x420 [ 1302.742766][T22963] ? __fget_files+0x3a0/0x420 [ 1302.742793][T22963] ? __fget_files+0x2a/0x420 [ 1302.742824][T22963] security_file_ioctl_compat+0xcb/0x2d0 [ 1302.742850][T22963] __ia32_compat_sys_ioctl+0x128/0x840 [ 1302.742869][T22963] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1302.742885][T22963] ? __fget_files+0x3a0/0x420 [ 1302.742929][T22963] ? fput+0xa0/0xd0 [ 1302.742959][T22963] ? ksys_write+0x22a/0x250 [ 1302.742982][T22963] ? __pfx_ksys_write+0x10/0x10 [ 1302.743012][T22963] __do_fast_syscall_32+0x1dc/0x560 [ 1302.743031][T22963] ? lockdep_hardirqs_on+0x7b/0x110 [ 1302.743046][T22963] ? do_fast_syscall_32+0x34/0x80 [ 1302.743081][T22963] ? irqentry_exit+0x10f/0x660 [ 1302.743106][T22963] do_fast_syscall_32+0x34/0x80 [ 1302.743131][T22963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1302.743163][T22963] RIP: 0023:0xf7f26539 [ 1302.743178][T22963] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1302.743192][T22963] RSP: 002b:00000000f53f555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1302.743272][T22963] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000004b66 [ 1302.743294][T22963] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 1302.743309][T22963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1302.743319][T22963] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1302.743328][T22963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1302.743351][T22963] [ 1302.745759][T22963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1302.758804][T22928] dib0700: could not acquire lock [ 1302.896381][T22951] dib0700: tx buffer length is larger than 4. Not supported. [ 1302.902698][ T5838] usb 2-1: USB disconnect, device number 36 [ 1302.902774][ T6704] usb 6-1: USB disconnect, device number 72 [ 1302.978506][ T6704] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1304.740515][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5813'. [ 1304.839506][ T9900] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1304.865675][ T9900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.912892][ T9900] usb 1-1: can't set config #168, error -71 [ 1304.941106][ T9900] usb 1-1: USB disconnect, device number 33 [ 1304.972115][ T52] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 1305.122961][T23003] FAULT_INJECTION: forcing a failure. [ 1305.122961][T23003] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.137157][T23003] CPU: 1 UID: 0 PID: 23003 Comm: syz.0.5815 Not tainted syzkaller #0 PREEMPT(full) [ 1305.137189][T23003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1305.137204][T23003] Call Trace: [ 1305.137215][T23003] [ 1305.137224][T23003] dump_stack_lvl+0xe8/0x150 [ 1305.137259][T23003] should_fail_ex+0x414/0x560 [ 1305.137300][T23003] should_failslab+0xa8/0x100 [ 1305.137330][T23003] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1305.137369][T23003] ? __alloc_skb+0x1dc/0x3a0 [ 1305.137394][T23003] ? __alloc_skb+0x198/0x3a0 [ 1305.137418][T23003] __alloc_skb+0x1dc/0x3a0 [ 1305.137445][T23003] netlink_sendmsg+0x5c6/0xb30 [ 1305.137485][T23003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.137517][T23003] ? __import_iovec+0x5d4/0x7f0 [ 1305.137541][T23003] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1305.137570][T23003] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1305.137591][T23003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.137622][T23003] __sock_sendmsg+0x21c/0x270 [ 1305.137658][T23003] ____sys_sendmsg+0x505/0x820 [ 1305.137691][T23003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1305.137724][T23003] ? kstrtouint+0x6e/0xe0 [ 1305.137764][T23003] ___sys_sendmsg+0x21f/0x2a0 [ 1305.137794][T23003] ? __pfx____sys_sendmsg+0x10/0x10 [ 1305.137819][T23003] ? get_pid_task+0x20/0x1f0 [ 1305.137846][T23003] ? get_pid_task+0x20/0x1f0 [ 1305.137871][T23003] ? get_pid_task+0x20/0x1f0 [ 1305.137938][T23003] ? __fget_files+0x2a/0x420 [ 1305.137966][T23003] ? __fget_files+0x3a0/0x420 [ 1305.138012][T23003] __sys_sendmsg+0x164/0x220 [ 1305.138042][T23003] ? __pfx___sys_sendmsg+0x10/0x10 [ 1305.138077][T23003] ? __pfx_ksys_write+0x10/0x10 [ 1305.138112][T23003] __do_fast_syscall_32+0x1dc/0x560 [ 1305.138138][T23003] ? lockdep_hardirqs_on+0x7b/0x110 [ 1305.138159][T23003] ? do_fast_syscall_32+0x34/0x80 [ 1305.138184][T23003] ? irqentry_exit+0x10f/0x660 [ 1305.138210][T23003] do_fast_syscall_32+0x34/0x80 [ 1305.138236][T23003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1305.138263][T23003] RIP: 0023:0xf7f54539 [ 1305.138282][T23003] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1305.138302][T23003] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1305.138326][T23003] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001240 [ 1305.138343][T23003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1305.138356][T23003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1305.138369][T23003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1305.138384][T23003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1305.138416][T23003] [ 1305.746825][T23014] FAULT_INJECTION: forcing a failure. [ 1305.746825][T23014] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.763219][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.770609][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.793779][T23014] CPU: 1 UID: 0 PID: 23014 Comm: syz.1.5821 Not tainted syzkaller #0 PREEMPT(full) [ 1305.793812][T23014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1305.793827][T23014] Call Trace: [ 1305.793838][T23014] [ 1305.793848][T23014] dump_stack_lvl+0xe8/0x150 [ 1305.793880][T23014] should_fail_ex+0x414/0x560 [ 1305.793914][T23014] should_failslab+0xa8/0x100 [ 1305.793939][T23014] __kmalloc_noprof+0xdf/0x800 [ 1305.793958][T23014] ? alloc_pipe_info+0x1fd/0x4d0 [ 1305.793986][T23014] alloc_pipe_info+0x1fd/0x4d0 [ 1305.794012][T23014] splice_direct_to_actor+0xa5d/0xcc0 [ 1305.794051][T23014] ? get_pid_task+0x20/0x1f0 [ 1305.794086][T23014] ? __pfx_aa_file_perm+0x10/0x10 [ 1305.794165][T23014] ? __pfx_direct_splice_actor+0x10/0x10 [ 1305.794195][T23014] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1305.794236][T23014] do_splice_direct+0x181/0x270 [ 1305.794269][T23014] ? __pfx_do_splice_direct+0x10/0x10 [ 1305.794296][T23014] ? common_file_perm+0x1b5/0x220 [ 1305.794324][T23014] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1305.794356][T23014] ? bpf_lsm_file_permission+0x9/0x20 [ 1305.794379][T23014] ? security_file_permission+0x75/0x290 [ 1305.794401][T23014] ? rw_verify_area+0x255/0x4d0 [ 1305.794425][T23014] do_sendfile+0x4da/0x7e0 [ 1305.794464][T23014] ? __pfx_do_sendfile+0x10/0x10 [ 1305.794493][T23014] ? __pfx_ksys_write+0x10/0x10 [ 1305.794519][T23014] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 1305.794554][T23014] __do_fast_syscall_32+0x1dc/0x560 [ 1305.794579][T23014] ? lockdep_hardirqs_on+0x7b/0x110 [ 1305.794600][T23014] ? do_fast_syscall_32+0x34/0x80 [ 1305.794629][T23014] ? irqentry_exit+0x10f/0x660 [ 1305.794655][T23014] do_fast_syscall_32+0x34/0x80 [ 1305.794681][T23014] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1305.794709][T23014] RIP: 0023:0xf70dd539 [ 1305.794728][T23014] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1305.794748][T23014] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 1305.794772][T23014] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000005 [ 1305.794788][T23014] RDX: 0000000000000000 RSI: 000000001d00c0d0 RDI: 0000000000000000 [ 1305.794802][T23014] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1305.794815][T23014] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1305.794829][T23014] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1305.794861][T23014] [ 1306.279753][T23017] FAULT_INJECTION: forcing a failure. [ 1306.279753][T23017] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.292757][T23017] CPU: 1 UID: 0 PID: 23017 Comm: syz.5.5822 Not tainted syzkaller #0 PREEMPT(full) [ 1306.292788][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1306.292804][T23017] Call Trace: [ 1306.292813][T23017] [ 1306.292823][T23017] dump_stack_lvl+0xe8/0x150 [ 1306.292859][T23017] should_fail_ex+0x414/0x560 [ 1306.292900][T23017] should_failslab+0xa8/0x100 [ 1306.292930][T23017] __kmalloc_noprof+0xdf/0x800 [ 1306.292953][T23017] ? iovec_from_user+0x87/0x250 [ 1306.292985][T23017] iovec_from_user+0x87/0x250 [ 1306.293017][T23017] __import_iovec+0x163/0x7f0 [ 1306.293055][T23017] import_iovec+0x74/0xa0 [ 1306.293087][T23017] get_compat_msghdr+0x37e/0x4a0 [ 1306.293123][T23017] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1306.293173][T23017] ___sys_sendmsg+0x193/0x2a0 [ 1306.293203][T23017] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.293229][T23017] ? kstrtoull+0x12f/0x1d0 [ 1306.293266][T23017] ? kstrtouint+0x6e/0xe0 [ 1306.293327][T23017] ? __fget_files+0x2a/0x420 [ 1306.293356][T23017] ? __fget_files+0x3a0/0x420 [ 1306.293395][T23017] __sys_sendmmsg+0x28e/0x430 [ 1306.293428][T23017] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1306.293454][T23017] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1306.293506][T23017] ? ksys_write+0x22a/0x250 [ 1306.293531][T23017] ? __pfx_ksys_write+0x10/0x10 [ 1306.293560][T23017] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1306.293593][T23017] __do_fast_syscall_32+0x1dc/0x560 [ 1306.293618][T23017] ? lockdep_hardirqs_on+0x7b/0x110 [ 1306.293638][T23017] ? do_fast_syscall_32+0x34/0x80 [ 1306.293663][T23017] ? irqentry_exit+0x10f/0x660 [ 1306.293689][T23017] do_fast_syscall_32+0x34/0x80 [ 1306.293715][T23017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.293742][T23017] RIP: 0023:0xf703d539 [ 1306.293762][T23017] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1306.293781][T23017] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1306.293806][T23017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0 [ 1306.293823][T23017] RDX: 0000000000000172 RSI: 0000000004000000 RDI: 0000000000000000 [ 1306.293837][T23017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.293850][T23017] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1306.293863][T23017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.293896][T23017] [ 1307.425289][ T6704] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1307.460853][T23030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1307.568566][T23036] random: crng reseeded on system resumption [ 1307.599767][ T6704] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1307.627880][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1307.644139][ T6704] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.704098][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.722153][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1307.820471][ T6704] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1307.835427][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1307.871694][ T6704] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.935504][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.953784][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1308.015266][ T6704] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1308.046783][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1308.091904][ T9900] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1308.128885][ T6704] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1308.216610][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1308.235696][ T6704] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1308.361525][ T9900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.376571][ T9900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1308.390369][ T9900] usb 6-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice=e3.00 [ 1308.399727][ T9900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.429879][ T9900] usb 6-1: config 0 descriptor?? [ 1308.988281][ T9900] maltron 0003:058F:9410.0030: item fetching failed at offset 0/7 [ 1309.028537][ T9900] maltron 0003:058F:9410.0030: probe with driver maltron failed with error -22 [ 1309.175153][ T43] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1309.251546][T23045] overlayfs: missing 'lowerdir' [ 1309.345182][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1309.371777][ T43] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.422538][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1309.454412][ T43] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1309.493086][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.535612][ T43] usb 1-1: config 0 descriptor?? [ 1309.626521][T23046] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1309.661955][T23046] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1310.058709][ T6704] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1310.070510][ T6704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.166146][ T30] audit: type=1326 audit(1767075987.526:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23048 comm="syz.1.5832" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x0 [ 1310.256093][ T6704] usb 2-1: can't set config #168, error -71 [ 1310.287527][ T6704] usb 2-1: USB disconnect, device number 37 [ 1310.629889][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 1310.643940][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1310.691318][ T43] usb 1-1: USB disconnect, device number 34 [ 1311.176945][ T6704] usb 6-1: USB disconnect, device number 73 [ 1311.274385][T23056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1311.642564][T23074] xfrm0: entered promiscuous mode [ 1311.653863][T23074] xfrm0: entered allmulticast mode [ 1311.706412][T23074] libceph: resolve '. [ 1311.706412][T23074] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1311.706412][T23074] ' (ret=-3): failed [ 1311.865463][ T6704] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1311.973271][T23081] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1311.984397][T23081] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1311.993282][T23081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1312.014933][T23081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1312.023110][T23081] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1312.045173][ T6704] usb 2-1: Using ep0 maxpacket: 32 [ 1312.111257][ T6704] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 1312.126656][ T6704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.136052][ T6704] usb 2-1: Product: syz [ 1312.142608][ T6704] usb 2-1: Manufacturer: syz [ 1312.147958][ T6704] usb 2-1: SerialNumber: syz [ 1312.169843][ T6704] usb 2-1: config 0 descriptor?? [ 1312.201762][ T6704] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1312.665805][T23084] chnl_net:caif_netlink_parms(): no params data found [ 1312.859104][T23089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.885566][T23089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.099499][ T6704] gspca_vc032x: reg_r err -71 [ 1313.109830][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.121024][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.133484][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.145126][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.156663][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.166725][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.178065][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.190546][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.202001][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.232743][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.251022][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.267219][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.284033][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.299361][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.314726][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.332336][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.366957][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.383835][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.413733][ T6704] gspca_vc032x: I2c Bus Busy Wait 00 [ 1313.433851][ T6704] gspca_vc032x: Unknown sensor... [ 1313.450214][ T6704] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1313.484733][ T6704] usb 2-1: USB disconnect, device number 38 [ 1314.075619][T23081] Bluetooth: hci0: command tx timeout [ 1314.586107][ T9900] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1314.677216][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5847'. [ 1314.746845][ T9900] usb 2-1: Using ep0 maxpacket: 16 [ 1314.768477][ T9900] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1314.786556][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1314.794437][ T9900] usb 2-1: config 0 has no interface number 0 [ 1314.808499][ T9900] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1314.846114][ T9900] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1314.868388][ T9900] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1314.883033][ T9900] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1314.891390][ T9900] usb 2-1: Product: syz [ 1314.897390][ T9900] usb 2-1: SerialNumber: syz [ 1314.909477][ T9900] usb 2-1: config 0 descriptor?? [ 1314.926413][ T9900] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input37 [ 1314.928672][ T9900] ------------[ cut here ]------------ [ 1314.929036][ T9900] URB ffff88814c9aa900 submitted while active [ 1314.929067][ T9900] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18d0, CPU#1: kworker/1:3/9900 [ 1314.929112][ T9900] Modules linked in: [ 1314.929192][ T9900] CPU: 1 UID: 0 PID: 9900 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1314.929221][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1314.929240][ T9900] Workqueue: usb_hub_wq hub_event [ 1314.929273][ T9900] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 1314.929307][ T9900] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e7 ad 28 fb 49 83 3e 00 74 40 e8 ac 8d c2 fa 48 8d 3d 45 79 90 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 8d c2 fa eb 05 e8 8a 8d [ 1314.929331][ T9900] RSP: 0018:ffffc90003b9ead8 EFLAGS: 00010287 [ 1314.929356][ T9900] RAX: ffffffff86fe6a14 RBX: ffff88814c9aa900 RCX: 0000000000100000 [ 1314.929377][ T9900] RDX: ffffc90019c97000 RSI: ffff88814c9aa900 RDI: ffffffff8f8ee360 [ 1314.929397][ T9900] RBP: 000000000000000f R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 1314.929415][ T9900] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: 0000000000000cc0 [ 1314.929433][ T9900] R13: ffff88807e4a7848 R14: ffff88814c9aa908 R15: dffffc0000000000 [ 1314.929454][ T9900] FS: 0000000000000000(0000) GS:ffff888125f21000(0000) knlGS:0000000000000000 [ 1314.929476][ T9900] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1314.929501][ T9900] CR2: 0000000056c134c0 CR3: 00000000251f4000 CR4: 00000000003526f0 [ 1314.929527][ T9900] Call Trace: [ 1314.929537][ T9900] [ 1314.929550][ T9900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1314.929576][ T9900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1314.929611][ T9900] ? __pm_runtime_resume+0x129/0x180 [ 1314.929646][ T9900] cm109_input_open+0x1fe/0x4b0 [ 1314.929678][ T9900] input_open_device+0x1d3/0x390 [ 1314.929720][ T9900] kbd_connect+0xf6/0x150 [ 1314.929749][ T9900] input_register_device+0xd00/0x1170 [ 1314.929798][ T9900] cm109_usb_probe+0x118c/0x1690 [ 1314.929849][ T9900] usb_probe_interface+0x668/0xc90 [ 1314.929896][ T9900] ? __pfx_usb_probe_interface+0x10/0x10 [ 1314.929929][ T9900] really_probe+0x26d/0xad0 [ 1314.929966][ T9900] __driver_probe_device+0x18c/0x320 [ 1314.929998][ T9900] driver_probe_device+0x4f/0x240 [ 1314.930032][ T9900] __device_attach_driver+0x279/0x430 [ 1314.930065][ T9900] bus_for_each_drv+0x251/0x2e0 [ 1314.930100][ T9900] ? __pfx___device_attach_driver+0x10/0x10 [ 1314.930129][ T9900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1314.930165][ T9900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1314.930191][ T9900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1314.930237][ T9900] __device_attach+0x2b8/0x430 [ 1314.930268][ T9900] ? __pfx___device_attach+0x10/0x10 [ 1314.930313][ T9900] ? _raw_spin_unlock+0x28/0x50 [ 1314.930355][ T9900] device_initial_probe+0xa1/0xd0 [ 1314.930387][ T9900] bus_probe_device+0x12a/0x220 [ 1314.930422][ T9900] ? device_add+0x726/0xb80 [ 1314.930450][ T9900] device_add+0x7b6/0xb80 [ 1314.930480][ T9900] usb_set_configuration+0x1a87/0x2110 [ 1314.930547][ T9900] usb_generic_driver_probe+0x8d/0x150 [ 1314.930581][ T9900] usb_probe_device+0x1c4/0x3c0 [ 1314.930621][ T9900] ? __pfx_usb_probe_device+0x10/0x10 [ 1314.930652][ T9900] really_probe+0x26d/0xad0 [ 1314.930690][ T9900] __driver_probe_device+0x18c/0x320 [ 1314.930723][ T9900] driver_probe_device+0x4f/0x240 [ 1314.930756][ T9900] __device_attach_driver+0x279/0x430 [ 1314.930792][ T9900] bus_for_each_drv+0x251/0x2e0 [ 1314.930829][ T9900] ? __pfx___device_attach_driver+0x10/0x10 [ 1314.930859][ T9900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1314.930896][ T9900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1314.930922][ T9900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1314.930967][ T9900] __device_attach+0x2b8/0x430 [ 1314.930998][ T9900] ? __pfx___device_attach+0x10/0x10 [ 1314.931030][ T9900] ? _raw_spin_unlock+0x28/0x50 [ 1314.931073][ T9900] device_initial_probe+0xa1/0xd0 [ 1314.931104][ T9900] bus_probe_device+0x12a/0x220 [ 1314.931138][ T9900] ? device_add+0x726/0xb80 [ 1314.931165][ T9900] device_add+0x7b6/0xb80 [ 1314.931195][ T9900] usb_new_device+0xa39/0x1720 [ 1314.931237][ T9900] ? __pfx_usb_new_device+0x10/0x10 [ 1314.931269][ T9900] ? _raw_spin_unlock_irq+0x23/0x50 [ 1314.931323][ T9900] hub_event+0x29b1/0x4ef0 [ 1314.931415][ T9900] ? __pfx_hub_event+0x10/0x10 [ 1314.931446][ T9900] ? process_scheduled_works+0x9ef/0x1770 [ 1314.931484][ T9900] ? process_scheduled_works+0x9ef/0x1770 [ 1314.931514][ T9900] ? process_scheduled_works+0x9ef/0x1770 [ 1314.931543][ T9900] process_scheduled_works+0xad1/0x1770 [ 1314.931602][ T9900] ? __pfx_process_scheduled_works+0x10/0x10 [ 1314.931628][ T9900] ? do_raw_spin_lock+0x121/0x290 [ 1314.931683][ T9900] worker_thread+0x8a0/0xda0 [ 1314.931727][ T9900] ? __kthread_parkme+0x7b/0x200 [ 1314.931770][ T9900] kthread+0x711/0x8a0 [ 1314.931807][ T9900] ? __pfx_worker_thread+0x10/0x10 [ 1314.931834][ T9900] ? __pfx_kthread+0x10/0x10 [ 1314.931872][ T9900] ? _raw_spin_unlock_irq+0x23/0x50 [ 1314.931910][ T9900] ? __pfx_kthread+0x10/0x10 [ 1314.931945][ T9900] ret_from_fork+0x510/0xa50 [ 1314.931975][ T9900] ? __pfx_ret_from_fork+0x10/0x10 [ 1314.931998][ T9900] ? __switch_to+0xc9e/0x1480 [ 1314.932039][ T9900] ? __pfx_kthread+0x10/0x10 [ 1314.932074][ T9900] ret_from_fork_asm+0x1a/0x30 [ 1314.932130][ T9900] [ 1314.932145][ T9900] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1314.932163][ T9900] CPU: 1 UID: 0 PID: 9900 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1314.932191][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1314.932208][ T9900] Workqueue: usb_hub_wq hub_event [ 1314.932238][ T9900] Call Trace: [ 1314.932248][ T9900] [ 1314.932260][ T9900] vpanic+0x1e0/0x670 [ 1314.932303][ T9900] panic+0xb9/0xc0 [ 1314.932334][ T9900] ? __pfx_panic+0x10/0x10 [ 1314.932376][ T9900] ? ret_from_fork_asm+0x1a/0x30 [ 1314.932417][ T9900] __warn+0x317/0x4b0 [ 1314.932446][ T9900] ? usb_submit_urb+0x7b/0x18d0 [ 1314.932475][ T9900] ? usb_submit_urb+0x7b/0x18d0 [ 1314.932498][ T9900] __report_bug+0x288/0x500 [ 1314.932522][ T9900] ? __pfx___schedule+0x10/0x10 [ 1314.932557][ T9900] ? usb_submit_urb+0x7b/0x18d0 [ 1314.932588][ T9900] ? __pfx___report_bug+0x10/0x10 [ 1314.932623][ T9900] ? preempt_schedule_common+0x83/0xd0 [ 1314.932656][ T9900] report_bug_entry+0x19a/0x290 [ 1314.932680][ T9900] ? usb_submit_urb+0x7e/0x18d0 [ 1314.932701][ T9900] ? usb_submit_urb+0x83/0x18d0 [ 1314.932724][ T9900] handle_bug+0xca/0x200 [ 1314.932755][ T9900] exc_invalid_op+0x1a/0x50 [ 1314.932785][ T9900] asm_exc_invalid_op+0x1a/0x20 [ 1314.932808][ T9900] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 1314.932833][ T9900] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e7 ad 28 fb 49 83 3e 00 74 40 e8 ac 8d c2 fa 48 8d 3d 45 79 90 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 8d c2 fa eb 05 e8 8a 8d [ 1314.932855][ T9900] RSP: 0018:ffffc90003b9ead8 EFLAGS: 00010287 [ 1314.932878][ T9900] RAX: ffffffff86fe6a14 RBX: ffff88814c9aa900 RCX: 0000000000100000 [ 1314.932897][ T9900] RDX: ffffc90019c97000 RSI: ffff88814c9aa900 RDI: ffffffff8f8ee360 [ 1314.932917][ T9900] RBP: 000000000000000f R08: ffffffff8f822177 R09: 1ffffffff1f0442e [ 1314.932935][ T9900] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: 0000000000000cc0 [ 1314.932953][ T9900] R13: ffff88807e4a7848 R14: ffff88814c9aa908 R15: dffffc0000000000 [ 1314.932981][ T9900] ? usb_submit_urb+0x74/0x18d0 [ 1314.933013][ T9900] ? usb_submit_urb+0x74/0x18d0 [ 1314.933037][ T9900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1314.933062][ T9900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1314.933099][ T9900] ? __pm_runtime_resume+0x129/0x180 [ 1314.933132][ T9900] cm109_input_open+0x1fe/0x4b0 [ 1314.933162][ T9900] input_open_device+0x1d3/0x390 [ 1314.933203][ T9900] kbd_connect+0xf6/0x150 [ 1314.933231][ T9900] input_register_device+0xd00/0x1170 [ 1314.933278][ T9900] cm109_usb_probe+0x118c/0x1690 [ 1314.933336][ T9900] usb_probe_interface+0x668/0xc90 [ 1314.933382][ T9900] ? __pfx_usb_probe_interface+0x10/0x10 [ 1314.933413][ T9900] really_probe+0x26d/0xad0 [ 1314.933450][ T9900] __driver_probe_device+0x18c/0x320 [ 1314.933478][ T9900] driver_probe_device+0x4f/0x240 [ 1314.933510][ T9900] __device_attach_driver+0x279/0x430 [ 1314.933541][ T9900] bus_for_each_drv+0x251/0x2e0 [ 1314.933576][ T9900] ? __pfx___device_attach_driver+0x10/0x10 [ 1314.933604][ T9900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1314.933639][ T9900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1314.933663][ T9900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1314.933706][ T9900] __device_attach+0x2b8/0x430 [ 1314.933736][ T9900] ? __pfx___device_attach+0x10/0x10 [ 1314.933767][ T9900] ? _raw_spin_unlock+0x28/0x50 [ 1314.933807][ T9900] device_initial_probe+0xa1/0xd0 [ 1314.933836][ T9900] bus_probe_device+0x12a/0x220 [ 1314.933932][ T9900] ? device_add+0x726/0xb80 [ 1314.934032][ T9900] device_add+0x7b6/0xb80 [ 1314.934119][ T9900] usb_set_configuration+0x1a87/0x2110 [ 1314.934294][ T9900] usb_generic_driver_probe+0x8d/0x150 [ 1314.934380][ T9900] usb_probe_device+0x1c4/0x3c0 [ 1314.934475][ T9900] ? __pfx_usb_probe_device+0x10/0x10 [ 1314.934549][ T9900] really_probe+0x26d/0xad0 [ 1314.934643][ T9900] __driver_probe_device+0x18c/0x320 [ 1314.934719][ T9900] driver_probe_device+0x4f/0x240 [ 1314.934803][ T9900] __device_attach_driver+0x279/0x430 [ 1314.934889][ T9900] bus_for_each_drv+0x251/0x2e0 [ 1314.934977][ T9900] ? __pfx___device_attach_driver+0x10/0x10 [ 1314.935050][ T9900] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1314.935135][ T9900] ? lockdep_hardirqs_on+0x7b/0x110 [ 1314.935239][ T9900] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1314.935356][ T9900] __device_attach+0x2b8/0x430 [ 1314.935433][ T9900] ? __pfx___device_attach+0x10/0x10 [ 1314.935517][ T9900] ? _raw_spin_unlock+0x28/0x50 [ 1314.935650][ T9900] device_initial_probe+0xa1/0xd0 [ 1314.935724][ T9900] bus_probe_device+0x12a/0x220 [ 1314.935802][ T9900] ? device_add+0x726/0xb80 [ 1314.935866][ T9900] device_add+0x7b6/0xb80 [ 1314.935941][ T9900] usb_new_device+0xa39/0x1720 [ 1314.936041][ T9900] ? __pfx_usb_new_device+0x10/0x10 [ 1314.936122][ T9900] ? _raw_spin_unlock_irq+0x23/0x50 [ 1314.936244][ T9900] hub_event+0x29b1/0x4ef0 [ 1314.936473][ T9900] ? __pfx_hub_event+0x10/0x10 [ 1314.936511][ T9900] ? process_scheduled_works+0x9ef/0x1770 [ 1314.936576][ T9900] ? process_scheduled_works+0x9ef/0x1770 [ 1314.936641][ T9900] ? process_scheduled_works+0x9ef/0x1770 [ 1314.936724][ T9900] process_scheduled_works+0xad1/0x1770 [ 1314.936871][ T9900] ? __pfx_process_scheduled_works+0x10/0x10 [ 1314.936934][ T9900] ? do_raw_spin_lock+0x121/0x290 [ 1314.937115][ T9900] worker_thread+0x8a0/0xda0 [ 1314.937219][ T9900] ? __kthread_parkme+0x7b/0x200 [ 1314.937326][ T9900] kthread+0x711/0x8a0 [ 1314.937413][ T9900] ? __pfx_worker_thread+0x10/0x10 [ 1314.937477][ T9900] ? __pfx_kthread+0x10/0x10 [ 1314.937575][ T9900] ? _raw_spin_unlock_irq+0x23/0x50 [ 1314.937670][ T9900] ? __pfx_kthread+0x10/0x10 [ 1314.937755][ T9900] ret_from_fork+0x510/0xa50 [ 1314.937823][ T9900] ? __pfx_ret_from_fork+0x10/0x10 [ 1314.937884][ T9900] ? __switch_to+0xc9e/0x1480 [ 1314.937980][ T9900] ? __pfx_kthread+0x10/0x10 [ 1314.938071][ T9900] ret_from_fork_asm+0x1a/0x30 [ 1314.938211][ T9900] [ 1314.944616][ T9900] Kernel Offset: disabled