last executing test programs: 11.455822614s ago: executing program 1 (id=1417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000045c0)=0x1) r1 = syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in=@empty, 0xfffe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000}, {}, 0x0, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x40000000}}, 0xe8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x1, 0x2, 0x1}}, 0x2e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x1, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0x20000}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "ab84411f518dc9d5565b9e05de67830aeb529f334e285efe3786823a0a1e08b53bec30240d4d6f58f05cd36e941758cf60d4c5a818aca82c12697c43daf8000000"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)) socket$kcm(0x10, 0x2, 0x0) 9.85136373s ago: executing program 3 (id=1423): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@private2, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=@delchain={0x9b0, 0x64, 0xf31, 0xfffffffb, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x35}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x3}}, @TCA_U32_INDEV={0x14, 0x8, 'geneve0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x95}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg1\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa}, @TCA_U32_DIVISOR={0x8, 0x4, 0x53}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_fw={{0x7}, {0x900, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0xffff}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0xb}}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xffe0}}, @TCA_FW_ACT={0x490, 0x4, [@m_ct={0xc4, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_MARK={0x8, 0x5, 0x38b07aee}, @TCA_CT_MARK={0x8, 0x5, 0x3}]}, {0x83, 0x6, "1536575e8dcdfbec9d6991bd8b2c80d3ab59408ca109e3d8979e80394d4624c79fe107982214378639a488456d90078370a9d50457103e753680fd5feb4616c12a3ee6824bf93a28e5908ac1bf1974bd14a87ed6003f213220d9a0b390ebc717d82a91331ca0cace3334553ad208f9af67b678f08f74b5762cf10eda13a63f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x120, 0x1d, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff6, 0x1ff, 0x0, 0x200}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x9, 0x3, 0x7, 0x80000001}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x101, 0x1, 0xf5a, 0x5}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x2, 0x3, 0x56e10891, 0x1}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x4, 0x2, 0x9}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0xf982, 0x20000000, 0xfc78, 0x9}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x79, 0xfffffff9, 0x10000000, 0x5, 0x5}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xffffffff, 0x4, 0x7, 0x4}, 0x4a}}]}, {0x12, 0x6, "8b0c5f7d9ba7ab80d0b46a3c8107"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x160, 0xe, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcc, 0xd12, 0x2, 0x5f4b, 0x4}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x0, 0x3c, 0x5}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80000001, 0x8, 0xb30b, 0x1ff}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xaa11, 0x1, 0x10000000, 0x8, 0x5}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x84, 0x5, 0x0, 0x6, 0x8}, 0x58}}]}, {0xa6, 0x6, "59003b1b99294d9b362c3d12d26ae583e8d9f2f774623d6f99fbf5456197f1d237cce06e9b5f5eb48c513fab072186f2fa8f135d896909986895eaafbaab7a664f0a9e6ea7387e98b814cb9cbad5637b5ea15806246f58f7cc0a4290b9cb0e519c48c80825e730c566fdc6332b89a7e3ddbf6a4a427d18ee5da9d5539a15b49ded51342b145f8fc25d20642c8f62638c885552293cec3950e459be3316837495c9cd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x94, 0xb, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfffffa67, 0x1, 0x2436, 0x7fff}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000000, 0x20002, 0x5, 0xd31, 0x6}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x20000000, 0x101, 0x7fffffff}, 0x1, r10}}]}, {0x7, 0x6, "dbaec1"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xb4, 0x8, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xac, 0x1, 0x0, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0x47, 0x6, "00372a6d599b893e97e8b43f2fb73688101639488f031a44bf17f6cc54d3ee9d5a0a6023ce1023579e4d9ed081085db8aeee0169507592fcdae649f05fe000d9ff76a6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_POLICE={0x43c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x101, 0x101, 0x4, 0x9, 0x0, 0xedc, 0x3a39, 0x7, 0x6338, 0x44, 0x8000, 0x7, 0x3, 0x3, 0x240, 0x3, 0x3, 0x2, 0x1, 0x2, 0x1, 0x0, 0x4, 0x5, 0x9, 0x9d2, 0x7, 0x6, 0x1, 0x0, 0x1, 0x7, 0x8, 0x8, 0x3, 0x1, 0x800, 0x6, 0x8b7, 0xbf, 0x10000, 0x6, 0x1, 0x3, 0x1, 0x400, 0x0, 0x401, 0x4, 0x4, 0x0, 0x9, 0x29, 0x6, 0x2, 0x554a, 0xfffffffa, 0xc, 0x5, 0xef, 0xffffffff, 0xd, 0x8, 0xfffff937, 0xdc24, 0x5c, 0x0, 0x7, 0x5, 0xfb27, 0xfd, 0x4, 0x2, 0x1ff, 0x8000, 0x8, 0x4, 0x0, 0x0, 0x80000000, 0xfffffffe, 0x0, 0x6, 0xf8, 0xf, 0x400, 0x3e7, 0x4, 0x6, 0x3c6, 0x2, 0x7, 0x2, 0xffff, 0x8, 0x6, 0xe, 0x0, 0x8, 0x6, 0x2, 0x1000000, 0x200, 0x80000001, 0x4, 0x1, 0x7ff, 0x7, 0xc, 0xfffffffd, 0x401, 0x3, 0x200, 0x3, 0x6, 0x40, 0x2, 0x5, 0x7e, 0x4fd3ed8b, 0x2, 0xd9ec, 0x4, 0x5, 0x9, 0x9d5, 0x5, 0xde54, 0x4, 0x5, 0x3, 0xfff, 0x1, 0x8, 0xe0, 0x5, 0x1000, 0x7f, 0x9cda, 0x4, 0x5, 0x8001, 0x800, 0x8001, 0x8, 0x9, 0x3, 0x8, 0xfffffffa, 0x6, 0x100, 0x1, 0x2, 0x80000001, 0xfffffffb, 0x7, 0x7, 0x0, 0x2, 0x9, 0x4, 0x6, 0x4, 0x5, 0xfffffead, 0x3, 0x9, 0x2, 0x1000, 0x75e, 0x3, 0xd36a, 0x4, 0xee9a, 0x0, 0xff, 0x5, 0x5, 0xfffffff9, 0x1, 0xb, 0x0, 0x14, 0x5, 0x2, 0x0, 0x4, 0x4, 0x0, 0x6, 0x6, 0xfffffbff, 0x0, 0x1, 0x11, 0xfffffffa, 0xa0, 0x7, 0x1, 0x4, 0x1, 0x6, 0x10000, 0x10, 0x5, 0x10000, 0x4, 0x2d5d, 0x1000, 0x7f, 0x3, 0x10001, 0xb, 0xff, 0x61d, 0xfffffff8, 0x7, 0xd, 0x81, 0xc7e7, 0x4, 0x145, 0xd2, 0xe2, 0x7f, 0x8, 0xd, 0xb, 0x7, 0x3ff, 0x0, 0x3, 0x7, 0x45, 0xfffffffc, 0x0, 0x2, 0x8, 0x7, 0x10001, 0x20, 0x7fff, 0x4, 0x1ff, 0x8000, 0x6, 0x8, 0x5, 0x4ce6537c, 0xf, 0x40000000, 0x7fffffff, 0x3, 0x2, 0x4]}]}]}}]}, 0x9b0}, 0x1, 0x0, 0x0, 0xc075}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x20, 0x3, 0x7b, {0x7b, 0x31, "98db2441b766f143ea852cc55794a93cc470f2c203c0a984422c4e15ec1b939a6233ca901f413c941581fcb39b2e3b107d1bdf808a92bc44f64b28072f0879bc12adf2ebcf2282d95c11b57b6d6a9c4b8b7e7202210fa0ecd7043d6135ccc34983b7baae672288e79eb70e772355a3da50cddedb84dd2034fc"}}, &(0x7f00000003c0)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "11357fa8b27eb7be33d5246f7f6dd9a20ce52b0a320fe9fe4d33dd1dc8a874640d11a413bee4f1eb09a485eb931836af8422056eff0c26d52ed8ec00b34e4a96eeb3319c8fc8d2eafdf0c6d131d304b8ea2a791e485f614e0a97ebbe1d4d855d41677f8073538be8c33049604ddfa51c145db4ada626701a5a17ecef3d2853a1c798669ea824ed9b0f94c76bfda4b51a37af2137753ff802690510e563e78c36e85551ee56204db0a7dcdb6f0fa1eb04d282ec01566aea43c51a8679f32e11435c9a856216d432fcaecde3c8f434fe"}}, &(0x7f0000000180)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x62, 0xf9, 0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0xe8, 0x2, "8da66e8a", "9e3ecab7"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6f, 0x0, 0x2, 0x7f, 0x10, 0x5, 0xd}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x40, 0x5, 0xcb, "2030b75bdc0bbbbbe030b61dab8d6fc94d6f4e979ef01d434b4fdda1859782599450fe4dbc7279b19335012e8915e7ca9499f20873d2497fcd098d3b91e04ce8029f9777f9fdf395abe646fd7acd86aab99443845b839f58711d21f5681575e1008ff4be6dfbbd3a5d53c5a2e6cd18bc60b4c69153582c60ac05a2fa46ab876376d7ff8b98136c1a0265468d988c059e87a0fc027a87dd3165b30d35bb6fa91fd591646bfa975f362453aabed4f77353565bbfdff01e61d949b91b7c66e696211827c98060ae70ace6be42"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x160, 0x20, [0xf0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xc5}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0xb, 0x2, "f1c0"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "cd85"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xc06b}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x7}}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) 8.116290352s ago: executing program 3 (id=1425): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x20000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0xf1, [{{0x9, 0x4, 0x0, 0x26, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x9e, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x75, 0x9}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0}) (async) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0xf1, [{{0x9, 0x4, 0x0, 0x26, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x9e, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x75, 0x9}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) syz_open_dev$sg(0x0, 0x0, 0x8002) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775b31b", 0xfffff, 0xfffffffffffffffc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) getitimer(0x1, &(0x7f0000000000)) setitimer(0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 7.220972757s ago: executing program 1 (id=1429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000002000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c617374"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 7.000164567s ago: executing program 1 (id=1430): getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/29, 0x1d) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) 6.862028153s ago: executing program 1 (id=1432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0xe0df, 0x100, 0x3, 0xffffffff}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47b8, 0x2669, 0x0, 0x0, 0x0) r8 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 6.735972895s ago: executing program 0 (id=1433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.423860906s ago: executing program 0 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000010000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100008b58d33c34a959510e820f70f6a80017e20b4000000000300004802c0001800b00010065787468647200001c000280080001400000000c080003400000000005000200070000000900010073797a3000000000140000001100010000000000000000000700000a60b50988d6d61e592dedc748975ccbde7ea7f852b97495696c81c07f20"], 0xcc}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.134742136s ago: executing program 0 (id=1435): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) 4.707661176s ago: executing program 0 (id=1436): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xb8, 0x109, 0xfffffeff, "c2252885b7203925610eae9e4889462273b17edeaf14a02e1fbbb525b667a73e05f96b87d2393898c9a842d5aa79c5b5cdbda3fd6697aef667443a8e74081e6ed75f7a9fd870a4fa2efba36d952516e6cc6248c41d2a51aa99ea327424fd47a347c6eb06032eefd4b882716366d434dc8f9eded1515ddc5e9ef05020383375b6178ad798fd8275868d03e1e4391eaef9edf933aae4a881cb9f46063fdc3a4279f3"}], 0xb8}}], 0x1, 0x8087) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="8ae91834b509f865917cb233e9d2f03eb6a5661ddf1b3e7e2db876ac4712c52f327ee646cb3e8cc0a4fc4b09bd6ab754e474", 0x32}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f00000002c0)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001080)="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", 0x155}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f0000000cc0), 0x34}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000480)="7cb4ed8d75b2bf3112799fd6df65ec2e59789849019ba02cf53691cc6a3861c12a7561473f42faa934fbade4b821748f020274d96c341c767249d5c73a686846b2277104adaec1988872649bfc0b166d57f560d39595e97c35abc2e5ab6e198601eb33839b2423b4ddfda82faca046d05d68", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = epoll_create(0xd8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, 0x0}, 0x4080) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x2, r5, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x200, 0x3, &(0x7f00000003c0)=[r5, r6, r5], &(0x7f0000000340)=[0x7ff], &(0x7f00000005c0), &(0x7f0000000580)=[0x8000, 0x400, 0x1, 0x3, 0x80], 0x0, 0x101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000001c0)={r10, 0xdc6, 0xdb}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000040)={r10, 0x9}, &(0x7f00000000c0)=0x8) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.702140874s ago: executing program 3 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400feff05000b"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.167823998s ago: executing program 4 (id=1440): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0xfd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 4.167444628s ago: executing program 3 (id=1441): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x3, @local}}, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$cdc_ecm(0x4, 0x95, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "c314c110"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x7, 0x2}, [@mdlm_detail={0x33, 0x24, 0x13, 0x6, "e3a7c295c7e766f05893033bcec9a203b039c7629dd17b5cbd3c9d073ea4ea629199fe078a1dc5bc66749cc9e5bf3e"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x8, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xfe, 0x9, 0x9, 0x8, 0x3}, 0x72, &(0x7f00000009c0)={0x5, 0xf, 0x72, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x9, 0x8}, @ss_container_id={0x0, 0x10, 0x4, 0x1f, "b0a6630927f51e8d95be95e263ebd773"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x71, 0x6, 0x9, 0x3, 0xff}, @generic={0x39, 0x10, 0x3, "1984710ae67b216210973afa2b0f28c9ce212b5e41b9fe3ed3016c31426a8648f6d79c1a3784edf6d942d1fb00a4f553c35041ca0f29"}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x8, 0xff00, 0xe, [0xff3fcf, 0x9f00, 0xc03f]}]}, 0x8, [{0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "f248c7bd4195348b2a2db8c58b217fb2069db6844f1fba8fce94ce930f8c501afa1c2e7f815ee28baa294f1a8999b973c4648c2d1c9f99540c365409f3b161fd2cd682d1afbd3b370711a310d2cb13749dfaed6f2f4db00c70863b87ef4c88e7c52838097c98c1b81789fde351b791433d4f5f30da4b791a7f3334fecc6b4e4eae16b2a1ebea88e0c7ab7cc2ade0215122e6aeb4379dae65d978dc2e524084964a7f33f2edd489a75a5721d33eeef1df61d9192fe39d1fed4dc589b4d9d01d4137a54da6e4cf7f1c3eb6a61b3bb02fea0b80d9b8"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}, {0xb, &(0x7f0000000240)=@string={0xb, 0x3, "19914f63758afe82ac"}}, {0xed, &(0x7f0000000440)=@string={0xed, 0x3, "d9b158716ab10e98293acf28cb7bf907dde1f0290f10dc1272458c7a117b6906c47c3d95578aefdb550853a51de45afb5b0c142203c6b212514021fae3f02baa941443c28c6a1425691777a37174bb8d618973789325acd41edb74ce2336bbfccce4b1b5fff8866fe827ea13c1d8eb0dfcb00081e1f1dde7fc0e64648182f2b1cb7a6ba47daa5c8e9c9233c250be774597f11647760a3cb6c7e684e355ebd99a5ccbbf46471865009ecd82c0c27835d8cd5bfe68ce7f1be66786cf36eaf2eb96822dc3a7ea6988df2bd9307605e739fc855ff93ea2cb1d3619d254fc2190f83440aa17ea68573b62b5766f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x23, 0x3, 0x2401}}, {0xc3, &(0x7f0000000580)=@string={0xc3, 0x3, "b29c1b4eea6001a9af3135c9063f85dd5b624a6319805246fd66f5d4f407933c94eee3e9bfc5ddd39c9fcbd7474582992cb71b6cdaf80864359bde516838c97fdf429dc0273d44da346467205e71ed2bbf17b3e019a1a71021a78b3819a3ed5bd31d09312fd57c7effaf6cde3f20f48d1d847db966f5753bb25e8dc4a54a7ba084f1414e2c29bc1e9eec05a3d287d18033e88f936c4c2e1ef44f17c145da06bbbe77c78b0e1df1154efae8c760218bcfba3a6ec9e3e4861e3761222ea4507c2044"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x43e}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @random="010000201000"}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000800)={0x14, &(0x7f0000000780)={0x40, 0xa, 0xe, {0xe, 0x22, "717a4c8eb092c0e9a871f12e"}}, &(0x7f00000007c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000840)={0x0, 0x12, 0x8a, "cd17a0c32d320d156638166dee04a160f893b955f7411d857b60d483ca0221fdaf0f88a911f8597f0974a6e17d560754dbed57be16a732f6841cf6c8fc19a362fdc0ea64548c2115a0da635d6913bfc787817451856ca3e8f96aeac37679da14d9f5c6e6b9af638b7e7a238c3ddf9c4ecd3be67264ea7115580de1b5336cfefd48f9f8b749bf2f49039e"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000940)={0x0, 0x8, 0x1}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x188400) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008855) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r5) 3.953666187s ago: executing program 4 (id=1442): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/29, 0x1d) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.876315616s ago: executing program 4 (id=1443): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa7, 0x6c, 0xf8, 0x20, 0x6d0, 0x622, 0x70f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x2, 0xe2, 0x66, 0xf2, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = socket$inet(0x2, 0x5, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0xe1, 0x20, 0x10, 0x40, {{0xc, 0x4, 0x2, 0x6, 0x30, 0x64, 0x0, 0xb5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x5, [{@loopback, 0x4}, {@remote, 0x6}, {@empty, 0x7}]}]}}}}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, {[0x8000000000000001]}}, 0x0, 0x8, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x2000000000c, 0x2000, 0x0, {0x4, 0x0, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x8411, 0x8000, 0x0, r6, r7, 0xa2d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@remote, @in=@remote, 0x4e24, 0x4, 0x4e22, 0x2, 0x2, 0x100, 0xa0, 0x32, r2, r6}, {0x6, 0xc97, 0x5, 0x5, 0x4717d1c0, 0x9c}, {0xd, 0x8, 0x9, 0x4}, 0x7, 0x5b, 0x2, 0x1, 0x0, 0x2}, {{@in6=@local, 0x4d6, 0xff}, 0x2, @in=@local, 0x3503, 0x4, 0x3, 0x4, 0x0, 0xd, 0x4}}, 0xe8) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001010090780000000060fa0a6b0000000020010000000000000000000000000001ff010000000000e4cd850000000000000000012c000000000000000000040000000000"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_DISASSOCIATE(r8, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x35, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x7}}, @tim={0x5, 0x26, {0x0, 0x7c, 0x7, "0120427c922db6c9c3355a5462ee9adac77b9c3e4e91795f0c08c41f377be75d14908f"}}, @dsss={0x3, 0x1, 0x8c}]}]}, 0x4c}}, 0x840) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.659956596s ago: executing program 0 (id=1444): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x578, 0x3f, 0x4, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x4, 0x100}) unshare(0x42060000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r7 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_getsetattr(r7, &(0x7f0000000700)={0x800, 0x10, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x1000000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x0, 0x0) 2.46153808s ago: executing program 2 (id=1449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000400)) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@generic={0x88, 0x7, "bb94f2d8dc"}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000100)='.\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) syz_io_uring_setup(0x5e59, &(0x7f0000000000)={0x0, 0x4101, 0x20000, 0x3, 0x355, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001580)=ANY=[@ANYBLOB="180000006a0001"], 0x18}, 0x1, 0x0, 0x0, 0x20000007}, 0x40) 2.114857268s ago: executing program 1 (id=1450): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba", 0x2) close(r3) fcntl$setsig(r2, 0xa, 0x21) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = mq_open(0x0, 0x40, 0x8, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b657400017c000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) 2.047728927s ago: executing program 2 (id=1451): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c12) 2.013618038s ago: executing program 2 (id=1452): syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x9, "c1aa545883"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x2, 0x5, 0x900, 0x9, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0xe}, @feature_unit={0x7, 0x24, 0x6, 0x0, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x205, 0x0, 0x5}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x0, 0x1, [0x6]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x20, {0x7}}}}}}}]}}, 0x0) 1.011675825s ago: executing program 3 (id=1453): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/29, 0x1d) getdents64(r0, 0xfffffffffffffffe, 0x29) 871.693835ms ago: executing program 3 (id=1454): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000003640)=ANY=[@ANYBLOB="12010002f638d408f01002204ddc0102030109021b"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000400)="04c6a9c756754e10ed8d88c06d7a674db97cd0e21437530a3945ac896fa7f8e368f87de9", 0x24}], 0x2}], 0x1, 0x40800) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f00000000c0)={0xeb, 0x0, 0x6}) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000003700)=""/73, 0x49) 840.322778ms ago: executing program 2 (id=1455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x17) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000040)=[{0x28, 0xff, 0x53, 0xfffff008}, {0x6, 0xc, 0x8, 0x1bfd154b}, {0x100, 0x0, 0x9, 0x9}, {0x3, 0xfb, 0xb, 0x3}]}, 0x10) 822.253907ms ago: executing program 4 (id=1456): socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f00000000c0)='.\x00', 0x800, 0xd0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304efffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 621.114151ms ago: executing program 4 (id=1457): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x20, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 406.23959ms ago: executing program 2 (id=1458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@gettfilter={0x5c, 0x2e, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0xfff2, 0xa}, {0xffff, 0x6}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x1}]}, 0x5c}}, 0x4870) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x10001, 0x9, {{0x31, 0x4, 0x3, 0x0, 0xc4, 0x68, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @empty, {[@end, @timestamp_addr={0x44, 0x2c, 0x81, 0x1, 0x5, [{@rand_addr=0x64010101, 0x6}, {@private=0xa010101, 0x7}, {@remote, 0x5}, {@rand_addr=0x64010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}]}, @rr={0x7, 0x2b, 0x2b, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010102]}, @timestamp_prespec={0x44, 0x1c, 0x97, 0x3, 0x1, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@multicast2, 0x4}]}, @ssrr={0x89, 0x27, 0xd, [@private=0xb, @broadcast, @broadcast, @multicast1, @local, @empty, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x3, [{@rand_addr=0x64010101, 0x3}]}]}}}}}) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f0000000180)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="5d773b64a6f29ff0a859bd1eced90a1b54dae70a5707560f4297bd86d16ea4542815f742a210055b22fac727542b0d6df88128f9b83b7f55384235cd82acf4bc9260810f8c5353705b9cc88a3eac3c1c0796f1ddb391acd286b1a8be59ebc59707207819353d4e5671969085a28f1178f5a2c63fb7c488fd0bc92e232633e47bd060debc20cf221a4073ca0ca67e75f04bb6bb48eeea2c958c", 0x99}, {&(0x7f0000000280)="e79e14a72fd16f6ccbdf53787caeb5eb5c6d407e1e9de259d77af2dd", 0x1c}], 0x2, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x43, 0x25}}, @dstopts={{0x28, 0x29, 0x37, {0x5c, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x400}, @enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffc}}, @hoplimit_2292={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x41}, r1}}}, @hopopts={{0x130, 0x29, 0x36, {0x8, 0x23, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x2, [0x3]}}, @generic={0xfd, 0xfd, "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"}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x38, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}}}], 0x1e8}, 0x40) sendto$inet(r0, &(0x7f0000000680)="1976e20ba1ee9556a5343cb6ec6bd4eea0ab6d615c62c14269816ae45b82241e3651a2f70718058504ffdc3dbcf233079d148ec544d4b5d6a3a079268c4eca8b252f7fea5d84161d1052529c5657c7dfa1979d39c64ccdb045ad9c9ae127e6a77a9f78bc", 0x64, 0x4000090, &(0x7f0000000700)={0x2, 0x4e22, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000740)="1c316a4b616c3867a5d0ce2660cc25bc", 0x10) sendto$inet6(r0, &(0x7f0000000780)="bf32d7fe345971a24bef0d0b38ce460b224a7324580b5335766f4db0fc03338b7bdb5d1d62aced5bc3d120d01e0fb9ed95c3356ccdd737fe5d645fa89c04ccbf7e51da91bcefbb6d5b30aad04138fd23a33f695e9574d0954131dfd2a1c71362184a9d519e1f96b0ed0253d9ac809630ecfee7debe8f5bbf2985157e5238b61108ebe7ffce26468487af72369967a0a884c7ef8e4636d92b6e36ae2f05e665513b", 0xa1, 0x60001, &(0x7f0000000840)={0xa, 0x4e20, 0x1, @empty, 0x7f}, 0x1c) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000880)={0x5}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000008c0)) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000900), &(0x7f0000000940)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x104, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8744}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8eaf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3e1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd588}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8810}, 0x40815) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r0, 0x0, r4, 0x0) ptrace$setregs(0xf, 0x0, 0x100000001, &(0x7f0000000d80)="ac530c0f2851296e9327afd22a9446219cab282a906c31b706989fd5779d6b961ff81b047c695f6742f038c78d7736dd65bd35a759aa06b4c8ebca0947e6bc20d98f2734ce927a42636faab69d43d00b5adfd54ddedf6efb04e285c1124ade74b7bd007013c145feac85a6932143d8a0e99490b9bb0a356bb771f82cdcc6630590d79baebb47916b6e13b36b70aab1388069c3") ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x18, 0x1407, 0x400, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4894}, 0x20000000) r5 = socket(0x22, 0x5, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000f40)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x140e, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x44) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001080), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000010c0)={0x10201, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000001100), &(0x7f0000001140)=0xe) fcntl$notify(r0, 0x402, 0x80000028) socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000001180)={{0x2, 0x4e24, @broadcast}, {0x6, @multicast}, 0x2a, {0x2, 0x4e20, @loopback}, 'syzkaller1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@getneigh={0x14, 0x1e, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x1) 381.36185ms ago: executing program 1 (id=1459): ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000000)={{0x1, 0x1, 0x7f, 0x3, 0x6, 0x1}, 0x60, [0x7, 0x7fffffff, 0xc146, 0x2, 0x7fffffff, 0x40, 0xf, 0x3ef, 0x7fff, 0x7, 0x462a, 0x2, 0xf, 0x9, 0x1, 0x1, 0x1, 0x1, 0x5, 0x4, 0x4, 0xa59c, 0x10001, 0x7ff, 0x5, 0x80000000, 0x1, 0x38000, 0x0, 0xe, 0x1346, 0x2, 0x10, 0x800, 0xffffffff, 0xffffdd51, 0x8, 0x7ff, 0x7ff, 0x2, 0x8, 0x4, 0x1, 0x6, 0x9, 0x2, 0x0, 0xfff, 0x9, 0x1, 0x2, 0x4fb00, 0x3, 0x5, 0x5, 0x3, 0x2, 0x4, 0xfffffffe, 0x0, 0x16b, 0x4, 0x3, 0x2, 0xfffffff9, 0x5, 0x9, 0x8, 0x6c8f, 0x3, 0x1, 0x0, 0x7, 0x5, 0x733, 0x3ff, 0x2, 0x1, 0x9, 0x0, 0x6, 0xff, 0x5, 0xab, 0x3ff, 0x3ff, 0x3000000, 0x640, 0x1, 0x40, 0x39, 0x2, 0x80, 0x9, 0x100, 0x7fff, 0x21, 0x141, 0x12f2, 0x1, 0x8001, 0xb, 0x9, 0xf8f, 0x5, 0x2, 0x1ff, 0x2, 0x5, 0x6, 0x8, 0x7, 0x5, 0xb7, 0x9, 0x0, 0xe7c705a, 0x8, 0x0, 0x7fffffff, 0x3, 0xb, 0x3, 0xc2, 0x100, 0x200, 0x30000000, 0x3, 0x5e, 0x5, 0x2, 0xd, 0x1faf, 0x1, 0x5, 0xb8f4, 0x22f, 0x3, 0x7, 0xffff, 0x80000001, 0x7, 0x6, 0x31, 0xa, 0x7f, 0x5, 0x6, 0x400, 0x400, 0x4, 0x80000001, 0x8000, 0x8001, 0xa2, 0xab23, 0x7, 0x9, 0x80000000, 0x4, 0x7, 0x60e1, 0x4, 0x8, 0x7fffffff, 0x8, 0x80, 0x5, 0x101, 0x8, 0x800, 0x0, 0x0, 0x3, 0x2, 0x5f8, 0x0, 0xffffffff, 0x2, 0xffff, 0x5, 0x9, 0x90, 0x4, 0x0, 0x1, 0x7fffffff, 0x0, 0x10001, 0x8, 0x80020000, 0x3, 0xed, 0x80000000, 0x50, 0x7fff, 0x0, 0x50000000, 0x81, 0x9, 0xfffffff8, 0x9, 0x2, 0x1, 0x0, 0x9, 0x0, 0x3, 0x49, 0x7f, 0x6, 0x0, 0x0, 0x2, 0x82, 0x9, 0x3, 0x0, 0x5, 0x1000, 0x7, 0x2, 0xf, 0x3ff, 0x1, 0x6, 0x0, 0xd, 0xb, 0x9, 0x9, 0x4, 0xb, 0x7, 0xfffffff1, 0x2, 0x9, 0xd72, 0x9, 0x6, 0x100, 0xa3, 0xff, 0x0, 0x2, 0x3, 0x9, 0x2, 0x7fffffff, 0xfffffffb, 0xdba, 0x6, 0x10, 0x400, 0x340, 0xd, 0x5044, 0xfce, 0x0, 0xc, 0x3, 0x6, 0xe4a, 0xed47, 0x0, 0x5, 0x9, 0xa83, 0x8, 0x2, 0x3800, 0xe8, 0xf, 0x10001, 0xb7d6, 0x5, 0x4, 0xf, 0x3b4, 0x5, 0x4, 0x2, 0x5, 0x4, 0x7fffffff, 0x8, 0xb, 0x0, 0x6, 0x9, 0x0, 0x6, 0x400, 0x1, 0xbd9d, 0x2, 0x4, 0x40, 0xbb7, 0x10001, 0x9, 0x10000, 0xffff8a10, 0x800, 0x54, 0x84e2, 0x1, 0x2, 0x8000, 0x57, 0x0, 0x0, 0xe, 0x6, 0x6, 0x4, 0xffffff07, 0x1, 0x7, 0x8, 0x9, 0x4, 0x9, 0x7, 0x1, 0x3, 0x8, 0x31bc8007, 0x3, 0x8, 0x3, 0x0, 0x7ff, 0xe8, 0x4, 0x7, 0x0, 0x9, 0x4, 0x80000001, 0x2, 0x0, 0x6, 0xffffffff, 0x9, 0xf44e, 0x3, 0x9, 0x0, 0x3, 0x5, 0x0, 0xfffffff9, 0x9, 0x31fe, 0x7, 0x100, 0x5, 0x2, 0x80, 0x0, 0x5, 0x942, 0x8, 0xfffffff8, 0x2, 0x3, 0x0, 0x10000, 0x0, 0x1, 0x7, 0x9, 0x6, 0x99d, 0xc2, 0x2, 0x7, 0x966, 0xffff, 0xa, 0x9b, 0x5, 0x1, 0x2c, 0xffffffff, 0x7, 0x8, 0x80, 0x4, 0x8, 0x9, 0x7, 0xffffffff, 0x3, 0x49e, 0x8, 0x0, 0xfffffffc, 0x53eb, 0x78, 0x3, 0x75ec36e2, 0x40000000, 0x7fff, 0x9, 0x1, 0x81, 0x9, 0x9, 0x1, 0x9, 0x8, 0x4, 0x0, 0x9, 0x10, 0x9, 0x4, 0x6, 0x80000001, 0xd, 0x8, 0x9, 0x4, 0x1, 0x5, 0x1, 0x5d9, 0x0, 0x68000, 0x20000000, 0x1, 0x599, 0x2d08000, 0xe45, 0x100, 0x2, 0x2, 0xffffffff, 0x92cf, 0x1234, 0x2, 0x7, 0x4, 0x6ae, 0x6, 0x1a, 0xe44, 0x1, 0x4, 0x40, 0x6, 0x40, 0x80000000, 0xe, 0x3, 0x8a4, 0x0, 0x46e3f9b, 0x3ff, 0xb, 0x1, 0x4e, 0x63, 0xfffffffc, 0x9, 0x1, 0x4, 0x9, 0x0, 0x0, 0x5, 0x5, 0x80000001, 0x6, 0x800, 0x0, 0x9945, 0x401, 0xa5f, 0x401, 0xecd, 0x5, 0x5, 0x506, 0x9, 0x4, 0x8, 0x9, 0x7fffffff, 0x2, 0x9, 0x6, 0x4, 0x5, 0x8, 0x7fffffff, 0x1, 0x9, 0x9, 0x10001, 0x9, 0x7, 0x400, 0x5, 0x7, 0x0, 0x7ff, 0xfffffffa, 0xfffffc00, 0x9, 0x360, 0x81, 0x6, 0x461, 0x2, 0x9, 0x8, 0x10001, 0x7fff, 0xc74, 0x3, 0x7e, 0x1000, 0x6, 0x8, 0x9, 0x6fa938e6, 0x90d0, 0x6, 0x8, 0xd47, 0xf, 0x7, 0x2, 0x1, 0x9, 0x1, 0x4, 0xf3, 0x7, 0xf012, 0x8, 0x5, 0x7, 0x7f, 0x3, 0x9, 0xff, 0x6, 0x101, 0xfffffff8, 0xff, 0x4, 0x3, 0x1, 0x8001, 0x2f8, 0x7, 0x80, 0x3, 0x8001, 0x4, 0x37ad, 0x6, 0x4, 0x0, 0x3, 0xfff, 0x80000000, 0x2, 0xe, 0x8, 0x0, 0x1, 0x18e7, 0x9, 0x401, 0x800, 0x3, 0x6, 0x5, 0xf49d, 0x6, 0x2, 0x4, 0x1, 0x8, 0x4, 0x40, 0x9, 0x7644, 0x5, 0x7, 0x5, 0x5, 0x6, 0x0, 0xf330, 0xfffffff7, 0xf, 0x64f0, 0x3, 0x90c7, 0x8, 0xd2cf, 0x7, 0x400, 0x30b1, 0xfffffff9, 0x7, 0x0, 0xd, 0x3, 0xb, 0x3, 0x7fff, 0x400, 0x6, 0x2, 0x5, 0x10, 0x53e8, 0x5, 0x4d95, 0x82c, 0x8, 0x5, 0x1, 0x5, 0x6d, 0x3ff, 0x0, 0x7f, 0x7, 0x9, 0x6, 0x8, 0x0, 0x4, 0xe, 0x8001, 0x0, 0xfffffccf, 0x10001, 0x3, 0xc, 0x9, 0x4, 0xcc, 0x4, 0x6425, 0xffffffff, 0x7fff, 0x8, 0xff, 0x6, 0x0, 0xb, 0x9c5, 0x0, 0x8a, 0x91b, 0xffff, 0x2, 0x6, 0x3598, 0x4, 0x6, 0x3874, 0x7, 0xd, 0x6, 0x4, 0x6, 0x0, 0xf48, 0x10001, 0x40, 0x1, 0x7, 0x7, 0x81, 0x7, 0xe, 0x1, 0x8, 0x4, 0x5, 0x5, 0x9, 0xfffffff7, 0xce6c, 0x2, 0x0, 0xff92, 0x7fffffff, 0x5, 0x9, 0x2, 0x2e, 0x1, 0x5, 0x3ff, 0x0, 0x4, 0x1, 0xee, 0x87, 0xd66, 0x200, 0x6, 0x100, 0x5, 0x8, 0xfffffff9, 0x3, 0xb23, 0x4, 0x4, 0x80000000, 0x2, 0xe, 0x6, 0xffffffff, 0x2, 0x6, 0x6b18, 0xa8c, 0x727, 0x9, 0x800, 0x8, 0x4b, 0x10, 0x0, 0xb1a, 0xf5cb, 0x8, 0x4, 0xc0000, 0xa0, 0x5, 0xa, 0x67, 0x9, 0x1, 0x2, 0x6, 0x8, 0x100, 0x8, 0x1, 0x2, 0x400, 0x2, 0x7fff, 0x2c78, 0x3, 0x81, 0x9, 0x89, 0xcc2, 0x788, 0xf3fd, 0xa5fe, 0x9d60, 0xe23f, 0x4, 0x5dfb4a0c, 0x9, 0x6, 0x3, 0x2, 0x4, 0xfffffffb, 0xfff, 0x8001, 0x5, 0x8001, 0x9, 0xe804, 0x8, 0x3, 0xb20, 0xe, 0xfffffffd, 0x3dc1, 0xd49, 0x5, 0x1, 0x7fffffff, 0x3, 0x6, 0x10001, 0x1, 0x9, 0xfffffff7, 0x2ffc, 0x8, 0x8, 0x6, 0xffff, 0x81, 0x5, 0x4, 0x6, 0x9, 0x9, 0x1, 0x0, 0x8, 0x401, 0x200, 0x7, 0xfffffff7, 0x0, 0x8, 0x0, 0x1, 0x34000000, 0x4, 0xfdf8, 0x3, 0x2, 0x2, 0x4, 0x6, 0xfff, 0x0, 0x8, 0x9, 0x5, 0x80000000, 0x8, 0x64, 0x0, 0x7ff, 0x6, 0xf0e8, 0x4, 0x7, 0x10, 0xe, 0x7f, 0x7, 0x5, 0x1, 0xfffffff9, 0x0, 0x6, 0x5, 0x3, 0x3, 0x7, 0x7, 0x1, 0x800, 0x10, 0x0, 0x7, 0x1, 0x0, 0xfffffffc, 0xfffffffa, 0x8, 0x37, 0x2, 0x101, 0x0, 0x6, 0x8001, 0x80000d, 0x0, 0xd, 0x9, 0x2, 0xa7, 0x3, 0x0, 0x1, 0x2, 0x6, 0x2, 0x6, 0xd, 0xdb90, 0x3, 0x8, 0x2fd59340, 0x9, 0x860, 0xfffffffd, 0xfff, 0x0, 0x5, 0x7fffffff, 0x7, 0x6, 0x3ff, 0x10, 0x10, 0x1, 0x2, 0x101, 0x0, 0x1, 0x6, 0x9, 0x5, 0x8, 0xffff, 0x3, 0x101, 0x6, 0x8, 0x0, 0x4, 0xbe6, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0xff, 0x1, 0xefb, 0x12000, 0x696, 0x95, 0xffffffff, 0x8, 0x800, 0xca, 0x0, 0x4, 0x1, 0x8, 0x8, 0x1, 0x81, 0x1, 0xd78, 0x5, 0x66, 0x7, 0x0, 0xc5b, 0xc, 0x9, 0x1, 0x9, 0xdb, 0x3, 0x55d, 0x7, 0x9, 0x5, 0x0, 0x2967, 0x6, 0xfb0a, 0x1, 0x5, 0xfffffffc, 0x2, 0x2, 0x1d7, 0x8, 0x7, 0x8, 0x2, 0x2, 0x7fff, 0x1, 0x8001, 0x9, 0x1ae, 0xffffffff, 0x7, 0x7, 0x9, 0x2, 0xfffffffb, 0x7, 0xa, 0x7357, 0x1, 0x80, 0x200, 0x7, 0x9, 0x7fffffff, 0xffffff5e, 0x0, 0x1ff, 0x9, 0x4f9c, 0xddf, 0xfffffffc, 0x3, 0x3, 0x9, 0x5, 0x7, 0x10000, 0xfffff55b, 0x3, 0xdd1, 0x0, 0xd25, 0xfffffffc, 0x0, 0xa0, 0x1, 0x6, 0x80, 0x0, 0x3, 0x3, 0xb, 0x8]}) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0xfe01, 0x2, 0x800000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 119.95054ms ago: executing program 2 (id=1460): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x3101, 0x4f7, 0x40}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="f40fdc0474488e84a47dcb44ebc04f0520894b7e6ea32d5f16d06af479f75a81034e93e437c7044ac53c090b", @ANYBLOB="41cc55e6194e64f6be317e76db629325bd7768c3bc5bdb7a65d8481dbf59afacae57846b7e097e8b7adb1fb9b0762679dcb6f085f88c94af3260e94c0a8f08ef50a90c054a82d7a89230cfd7bd7de4b95f3d6cebcc391f4906f11935122bc9c01c65ca13fb0dedb9e0e9191e858ba4e4a9bb64edc50a94b00ef1f5a5bc498d67d1f1a229e2cd5fe6c9befde6a97101a3c27cc0f2080cb4e5b8388f93bb9810712e48f9137a", @ANYRES16=r5, @ANYRES64=r1, @ANYRES8=r4, @ANYRESHEX=r2, @ANYRESDEC=r3], 0xfdef) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pwritev(r9, 0x0, 0x0, 0xce, 0x6) close_range(r8, r7, 0x2) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 95.536019ms ago: executing program 0 (id=1461): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) 0s ago: executing program 4 (id=1462): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): ng ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.733036][ C1] syz_tun: tun_net_xmit 118 [ 338.103213][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1080'. [ 338.782926][ C1] syz_tun: tun_net_xmit 118 [ 339.072050][ T9711] binder_alloc: 9704: binder_alloc_buf, no vma [ 339.134724][ T9712] program syz.1.1087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.192400][ T9712] FAULT_INJECTION: forcing a failure. [ 339.192400][ T9712] name failslab, interval 1, probability 0, space 0, times 0 [ 339.252958][ T9712] CPU: 1 UID: 0 PID: 9712 Comm: syz.1.1087 Not tainted syzkaller #0 PREEMPT(full) [ 339.253004][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.253026][ T9712] Call Trace: [ 339.253042][ T9712] [ 339.253057][ T9712] dump_stack_lvl+0x189/0x250 [ 339.253106][ T9712] ? __pfx____ratelimit+0x10/0x10 [ 339.253156][ T9712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.253178][ T9712] ? __pfx__printk+0x10/0x10 [ 339.253211][ T9712] ? __pfx___might_resched+0x10/0x10 [ 339.253229][ T9712] ? fs_reclaim_acquire+0x7d/0x100 [ 339.253263][ T9712] should_fail_ex+0x414/0x560 [ 339.253293][ T9712] should_failslab+0xa8/0x100 [ 339.253322][ T9712] __kmalloc_noprof+0xcb/0x4f0 [ 339.253347][ T9712] ? blk_rq_map_kern+0x2a7/0x650 [ 339.253379][ T9712] blk_rq_map_kern+0x2a7/0x650 [ 339.253410][ T9712] ? capable+0x82/0xe0 [ 339.253432][ T9712] scsi_ioctl+0x1992/0x1fb0 [ 339.253461][ T9712] ? __pfx_scsi_ioctl+0x10/0x10 [ 339.253515][ T9712] ? kasan_quarantine_put+0xdd/0x220 [ 339.253548][ T9712] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 339.253576][ T9712] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 339.253605][ T9712] ? do_vfs_ioctl+0xbe8/0x1430 [ 339.253631][ T9712] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 339.253668][ T9712] ? __lock_acquire+0xab9/0xd20 [ 339.253699][ T9712] sg_ioctl+0x158e/0x2230 [ 339.253727][ T9712] ? __pfx_sg_ioctl+0x10/0x10 [ 339.253745][ T9712] ? __fget_files+0x2a/0x420 [ 339.253776][ T9712] ? __fget_files+0x2a/0x420 [ 339.253802][ T9712] ? __fget_files+0x3a0/0x420 [ 339.253829][ T9712] ? __fget_files+0x2a/0x420 [ 339.253860][ T9712] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.253884][ T9712] ? __pfx_sg_ioctl+0x10/0x10 [ 339.253902][ T9712] __se_sys_ioctl+0xfc/0x170 [ 339.253927][ T9712] do_syscall_64+0xfa/0x3b0 [ 339.253954][ T9712] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.253984][ T9712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.254003][ T9712] ? clear_bhb_loop+0x60/0xb0 [ 339.254027][ T9712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.254045][ T9712] RIP: 0033:0x7fc27f98ebe9 [ 339.254062][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.254079][ T9712] RSP: 002b:00007fc28070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.254099][ T9712] RAX: ffffffffffffffda RBX: 00007fc27fbb5fa0 RCX: 00007fc27f98ebe9 [ 339.254115][ T9712] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 339.254127][ T9712] RBP: 00007fc28070f090 R08: 0000000000000000 R09: 0000000000000000 [ 339.254139][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.254157][ T9712] R13: 00007fc27fbb6038 R14: 00007fc27fbb5fa0 R15: 00007fc27fcdfa28 [ 339.254188][ T9712] [ 339.813001][ C1] syz_tun: tun_net_xmit 118 [ 339.917057][ T9734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1093'. [ 339.983875][ T9735] fuse: Bad value for 'group_id' [ 339.988916][ T9735] fuse: Bad value for 'group_id' [ 340.003144][ T2152] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 340.205256][ T2152] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 340.222796][ T2152] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 340.233133][ T2152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.242112][ T2152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 340.253941][ T2152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 340.274612][ T2152] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.293929][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.302316][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.311169][ T2152] usb 2-1: Product: syz [ 340.315564][ T43] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 340.329486][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.337682][ T2152] usb 2-1: Manufacturer: syz [ 340.388791][ T2152] cdc_wdm 2-1:1.0: skipping garbage [ 340.394254][ T2152] cdc_wdm 2-1:1.0: skipping garbage [ 340.402611][ T2152] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 340.418789][ T2152] cdc_wdm 2-1:1.0: Unknown control protocol [ 340.564459][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.574381][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.594053][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.606515][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 6 bytes [ 340.620054][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.810044][ T2152] usb 2-1: USB disconnect, device number 44 [ 340.862924][ C1] syz_tun: tun_net_xmit 118 [ 340.909106][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 340.919822][ T43] usbtmc 1-1:16.0: can't read capabilities [ 341.466210][ T43] usb 1-1: USB disconnect, device number 51 [ 341.893033][ C1] syz_tun: tun_net_xmit 118 [ 342.272848][ T5943] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 342.337258][ T9763] FAULT_INJECTION: forcing a failure. [ 342.337258][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.350594][ T9763] CPU: 1 UID: 0 PID: 9763 Comm: syz.2.1102 Not tainted syzkaller #0 PREEMPT(full) [ 342.350618][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.350630][ T9763] Call Trace: [ 342.350637][ T9763] [ 342.350645][ T9763] dump_stack_lvl+0x189/0x250 [ 342.350674][ T9763] ? __pfx____ratelimit+0x10/0x10 [ 342.350702][ T9763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.350725][ T9763] ? __pfx__printk+0x10/0x10 [ 342.350751][ T9763] ? __might_fault+0xb0/0x130 [ 342.350790][ T9763] should_fail_ex+0x414/0x560 [ 342.350820][ T9763] _copy_from_user+0x2d/0xb0 [ 342.350843][ T9763] ___sys_sendmsg+0x158/0x2a0 [ 342.350867][ T9763] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.350923][ T9763] ? __fget_files+0x2a/0x420 [ 342.350951][ T9763] ? __fget_files+0x3a0/0x420 [ 342.350989][ T9763] __sys_sendmmsg+0x227/0x430 [ 342.351015][ T9763] ? __pfx___sys_sendmmsg+0x10/0x10 [ 342.351034][ T9763] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 342.351089][ T9763] ? ksys_write+0x22a/0x250 [ 342.351117][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 342.351139][ T9763] ? rcu_is_watching+0x15/0xb0 [ 342.351163][ T9763] __x64_sys_sendmmsg+0xa0/0xc0 [ 342.351183][ T9763] do_syscall_64+0xfa/0x3b0 [ 342.351208][ T9763] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.351234][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.351253][ T9763] ? clear_bhb_loop+0x60/0xb0 [ 342.351277][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.351296][ T9763] RIP: 0033:0x7f8aa078ebe9 [ 342.351313][ T9763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.351330][ T9763] RSP: 002b:00007f8aa1519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 342.351350][ T9763] RAX: ffffffffffffffda RBX: 00007f8aa09b5fa0 RCX: 00007f8aa078ebe9 [ 342.351366][ T9763] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000009 [ 342.351378][ T9763] RBP: 00007f8aa1519090 R08: 0000000000000000 R09: 0000000000000000 [ 342.351391][ T9763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.351403][ T9763] R13: 00007f8aa09b6038 R14: 00007f8aa09b5fa0 R15: 00007f8aa0adfa28 [ 342.351434][ T9763] [ 342.422863][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 342.719577][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 342.933132][ C1] syz_tun: tun_net_xmit 118 [ 342.955020][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 343.023272][ T2152] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 343.059460][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.073104][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.084226][ T5943] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.112062][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.182873][ T2152] usb 1-1: Using ep0 maxpacket: 8 [ 343.187216][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 343.201964][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 343.218776][ T2152] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.227989][ T5943] usb 2-1: config 0 descriptor?? [ 343.235375][ T2152] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.248483][ T2152] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.256924][ T5943] hub 2-1:0.0: USB hub found [ 343.282093][ T2152] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.355077][ T2152] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.631527][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.647268][ T5943] hub 2-1:0.0: 1 port detected [ 343.973092][ C1] syz_tun: tun_net_xmit 118 [ 344.001359][ T2152] usb 1-1: GET_CAPABILITIES returned 0 [ 344.007047][ T2152] usbtmc 1-1:16.0: can't read capabilities [ 344.325017][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.694560][ T5943] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 344.707459][ T5943] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 344.809293][ T5943] usbhid 2-1:0.0: can't add hid device: -32 [ 344.831763][ T5943] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 344.894173][ T9787] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1106'. [ 344.907258][ T9787] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1106'. [ 345.013152][ C1] syz_tun: tun_net_xmit 118 [ 345.317637][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.328606][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.512877][ T2152] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 345.702990][ T2152] usb 4-1: Using ep0 maxpacket: 16 [ 345.711761][ T2152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.736615][ T2152] usb 4-1: config 0 has no interfaces? [ 345.753872][ T2152] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 345.766197][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.777361][ T43] usb 1-1: USB disconnect, device number 52 [ 345.811176][ T2152] usb 4-1: Product: syz [ 345.819584][ T2152] usb 4-1: Manufacturer: syz [ 345.831036][ T2152] usb 4-1: SerialNumber: syz [ 345.876664][ T2152] usb 4-1: config 0 descriptor?? [ 346.063176][ C1] syz_tun: tun_net_xmit 118 [ 346.078898][ T9803] binder: 9798:9803 unknown command 0 [ 346.084400][ T9803] binder: 9798:9803 ioctl c0306201 200000000080 returned -22 [ 346.153309][ T5943] usb 2-1: USB disconnect, device number 45 [ 346.192466][ T2152] usb 4-1: USB disconnect, device number 43 [ 346.302685][ T9809] FAULT_INJECTION: forcing a failure. [ 346.302685][ T9809] name failslab, interval 1, probability 0, space 0, times 0 [ 346.319067][ T9809] CPU: 0 UID: 0 PID: 9809 Comm: syz.0.1115 Not tainted syzkaller #0 PREEMPT(full) [ 346.319091][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.319103][ T9809] Call Trace: [ 346.319111][ T9809] [ 346.319118][ T9809] dump_stack_lvl+0x189/0x250 [ 346.319137][ T9809] ? __pfx____ratelimit+0x10/0x10 [ 346.319153][ T9809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.319166][ T9809] ? __pfx__printk+0x10/0x10 [ 346.319184][ T9809] ? __pfx___might_resched+0x10/0x10 [ 346.319194][ T9809] ? fs_reclaim_acquire+0x7d/0x100 [ 346.319212][ T9809] should_fail_ex+0x414/0x560 [ 346.319229][ T9809] should_failslab+0xa8/0x100 [ 346.319250][ T9809] __kmalloc_noprof+0xcb/0x4f0 [ 346.319273][ T9809] ? tomoyo_encode+0x28b/0x550 [ 346.319296][ T9809] tomoyo_encode+0x28b/0x550 [ 346.319317][ T9809] tomoyo_realpath_from_path+0x58d/0x5d0 [ 346.319333][ T9809] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 346.319347][ T9809] tomoyo_path_number_perm+0x1e8/0x5a0 [ 346.319362][ T9809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 346.319384][ T9809] ? __lock_acquire+0xab9/0xd20 [ 346.319409][ T9809] ? __fget_files+0x2a/0x420 [ 346.319434][ T9809] ? __fget_files+0x2a/0x420 [ 346.319447][ T9809] ? __fget_files+0x3a0/0x420 [ 346.319460][ T9809] ? __fget_files+0x2a/0x420 [ 346.319477][ T9809] security_file_ioctl+0xcb/0x2d0 [ 346.319491][ T9809] __se_sys_ioctl+0x47/0x170 [ 346.319505][ T9809] do_syscall_64+0xfa/0x3b0 [ 346.319520][ T9809] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.319533][ T9809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.319543][ T9809] ? clear_bhb_loop+0x60/0xb0 [ 346.319556][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.319565][ T9809] RIP: 0033:0x7fba41b8ebe9 [ 346.319575][ T9809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.319585][ T9809] RSP: 002b:00007fba42ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.319597][ T9809] RAX: ffffffffffffffda RBX: 00007fba41db5fa0 RCX: 00007fba41b8ebe9 [ 346.319605][ T9809] RDX: 0000200000000100 RSI: 00000000c0205649 RDI: 0000000000000003 [ 346.319611][ T9809] RBP: 00007fba42ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 346.319618][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.319624][ T9809] R13: 00007fba41db6038 R14: 00007fba41db5fa0 R15: 00007fba41edfa28 [ 346.319640][ T9809] [ 346.319653][ T9809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 346.739658][ T5943] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 346.914181][ T5943] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 347.103148][ C1] syz_tun: tun_net_xmit 118 [ 347.300082][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.322027][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.437295][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.763467][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.772345][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.793320][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.823359][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.832228][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.844267][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 347.854355][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.902949][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.022789][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.056997][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.093287][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.133015][ C1] syz_tun: tun_net_xmit 118 [ 348.178422][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.198452][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.210058][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.229535][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.237275][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.274107][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.288045][ T9824] FAULT_INJECTION: forcing a failure. [ 348.288045][ T9824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.333503][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.344104][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.0.1119 Not tainted syzkaller #0 PREEMPT(full) [ 348.344128][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.344140][ T9824] Call Trace: [ 348.344147][ T9824] [ 348.344155][ T9824] dump_stack_lvl+0x189/0x250 [ 348.344182][ T9824] ? __pfx____ratelimit+0x10/0x10 [ 348.344208][ T9824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.344230][ T9824] ? __pfx__printk+0x10/0x10 [ 348.344256][ T9824] ? __might_fault+0xb0/0x130 [ 348.344291][ T9824] should_fail_ex+0x414/0x560 [ 348.344329][ T9824] _copy_from_iter+0x1de/0x1790 [ 348.344355][ T9824] ? rcu_is_watching+0x15/0xb0 [ 348.344376][ T9824] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 348.344404][ T9824] ? __pfx__copy_from_iter+0x10/0x10 [ 348.344425][ T9824] ? __build_skb_around+0x257/0x3e0 [ 348.344458][ T9824] ? netlink_sendmsg+0x642/0xb30 [ 348.344484][ T9824] ? skb_put+0x11b/0x210 [ 348.344508][ T9824] netlink_sendmsg+0x6b2/0xb30 [ 348.344545][ T9824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.344577][ T9824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.344596][ T9824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.344615][ T9824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.344644][ T9824] __sock_sendmsg+0x21c/0x270 [ 348.344671][ T9824] ____sys_sendmsg+0x505/0x830 [ 348.344697][ T9824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.344726][ T9824] ? import_iovec+0x74/0xa0 [ 348.344750][ T9824] ___sys_sendmsg+0x21f/0x2a0 [ 348.344772][ T9824] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.344824][ T9824] ? __fget_files+0x2a/0x420 [ 348.344851][ T9824] ? __fget_files+0x3a0/0x420 [ 348.344889][ T9824] __x64_sys_sendmsg+0x19b/0x260 [ 348.344913][ T9824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.344944][ T9824] ? __pfx_ksys_write+0x10/0x10 [ 348.344966][ T9824] ? rcu_is_watching+0x15/0xb0 [ 348.344989][ T9824] ? do_syscall_64+0xbe/0x3b0 [ 348.345020][ T9824] do_syscall_64+0xfa/0x3b0 [ 348.345045][ T9824] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.345071][ T9824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.345090][ T9824] ? clear_bhb_loop+0x60/0xb0 [ 348.345114][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.345132][ T9824] RIP: 0033:0x7fba41b8ebe9 [ 348.345148][ T9824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.345165][ T9824] RSP: 002b:00007fba42ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.345185][ T9824] RAX: ffffffffffffffda RBX: 00007fba41db5fa0 RCX: 00007fba41b8ebe9 [ 348.345199][ T9824] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 348.345211][ T9824] RBP: 00007fba42ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 348.345221][ T9824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.345231][ T9824] R13: 00007fba41db6038 R14: 00007fba41db5fa0 R15: 00007fba41edfa28 [ 348.345252][ T9824] [ 348.754684][ T5943] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 348.764212][ T5943] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 348.775215][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.851528][ T5943] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 348.855411][ T9831] loop4: detected capacity change from 0 to 7 [ 348.863055][ T5943] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 348.875422][ T5943] usb 2-1: Product: syz [ 348.879582][ T5943] usb 2-1: Manufacturer: syz [ 348.884569][ T5943] usb 2-1: SerialNumber: syz [ 348.886349][ T5960] Dev loop4: unable to read RDB block 7 [ 348.899308][ T5960] loop4: unable to read partition table [ 348.900195][ T5943] usb 2-1: config 0 descriptor?? [ 348.910913][ T5960] loop4: partition table beyond EOD, truncated [ 348.922144][ T5943] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 348.930899][ T9831] Dev loop4: unable to read RDB block 7 [ 348.969563][ T9831] loop4: unable to read partition table [ 348.975633][ T2152] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 348.994364][ T9831] loop4: partition table beyond EOD, truncated [ 349.011953][ T9831] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 349.134367][ T2152] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.143207][ T2152] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 349.162727][ T2152] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.172893][ C1] syz_tun: tun_net_xmit 118 [ 349.187200][ T43] usb 2-1: USB disconnect, device number 46 [ 349.201976][ T43] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 349.212861][ T2152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 349.239129][ T2152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 349.273326][ T2152] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.282714][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.301858][ T2152] usb 1-1: Product: syz [ 349.307725][ T2152] usb 1-1: Manufacturer: syz [ 349.346422][ T2152] cdc_wdm 1-1:1.0: skipping garbage [ 349.361889][ T2152] cdc_wdm 1-1:1.0: skipping garbage [ 349.363827][ T2152] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 349.363848][ T2152] cdc_wdm 1-1:1.0: Unknown control protocol [ 349.371981][ T30] audit: type=1326 audit(1755987712.841:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9805 comm="syz.1.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc27f98ebe9 code=0x0 [ 349.550159][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 7 bytes [ 349.751856][ T5943] usb 1-1: USB disconnect, device number 53 [ 350.213009][ C1] syz_tun: tun_net_xmit 118 [ 350.298232][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.325270][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.252891][ C1] syz_tun: tun_net_xmit 118 [ 351.425652][ T9868] binder: 9864:9868 unknown command 0 [ 351.431147][ T9868] binder: 9864:9868 ioctl c0306201 200000000080 returned -22 [ 352.293044][ C1] syz_tun: tun_net_xmit 118 [ 353.332885][ C1] syz_tun: tun_net_xmit 118 [ 353.373412][ T5943] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 353.451571][ T9892] delete_channel: no stack [ 353.469051][ T9892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 353.527248][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1141'. [ 353.577170][ T5943] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.599525][ T9898] FAULT_INJECTION: forcing a failure. [ 353.599525][ T9898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.607367][ T5943] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.614392][ T9892] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1141'. [ 353.668485][ T9898] CPU: 1 UID: 0 PID: 9898 Comm: syz.4.1143 Not tainted syzkaller #0 PREEMPT(full) [ 353.668511][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.668522][ T9898] Call Trace: [ 353.668530][ T9898] [ 353.668539][ T9898] dump_stack_lvl+0x189/0x250 [ 353.668567][ T9898] ? __pfx____ratelimit+0x10/0x10 [ 353.668595][ T9898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.668617][ T9898] ? __pfx__printk+0x10/0x10 [ 353.668657][ T9898] should_fail_ex+0x414/0x560 [ 353.668700][ T9898] _copy_from_user+0x2d/0xb0 [ 353.668724][ T9898] __copy_msghdr+0x3c5/0x5b0 [ 353.668749][ T9898] ___sys_sendmsg+0x1a5/0x2a0 [ 353.668772][ T9898] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.668828][ T9898] ? __fget_files+0x2a/0x420 [ 353.668856][ T9898] ? __fget_files+0x3a0/0x420 [ 353.668895][ T9898] __sys_sendmmsg+0x227/0x430 [ 353.668921][ T9898] ? __pfx___sys_sendmmsg+0x10/0x10 [ 353.668940][ T9898] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 353.668994][ T9898] ? ksys_write+0x22a/0x250 [ 353.669022][ T9898] ? __pfx_ksys_write+0x10/0x10 [ 353.669044][ T9898] ? rcu_is_watching+0x15/0xb0 [ 353.669071][ T9898] __x64_sys_sendmmsg+0xa0/0xc0 [ 353.669094][ T9898] do_syscall_64+0xfa/0x3b0 [ 353.669121][ T9898] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.669148][ T9898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.669167][ T9898] ? clear_bhb_loop+0x60/0xb0 [ 353.669190][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.669209][ T9898] RIP: 0033:0x7fcf9f18ebe9 [ 353.669226][ T9898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.669242][ T9898] RSP: 002b:00007fcf9d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.669263][ T9898] RAX: ffffffffffffffda RBX: 00007fcf9f3b5fa0 RCX: 00007fcf9f18ebe9 [ 353.669277][ T9898] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000009 [ 353.669289][ T9898] RBP: 00007fcf9d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 353.669301][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.669312][ T9898] R13: 00007fcf9f3b6038 R14: 00007fcf9f3b5fa0 R15: 00007fcf9f4dfa28 [ 353.669342][ T9898] [ 353.679466][ T5943] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.880133][ T9902] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1146'. [ 353.994369][ T5943] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 354.017325][ T5943] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 354.058228][ T5943] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.071420][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.079811][ T5943] usb 4-1: Product: syz [ 354.088206][ T5943] usb 4-1: Manufacturer: syz [ 354.110364][ T5943] cdc_wdm 4-1:1.0: skipping garbage [ 354.122243][ T5943] cdc_wdm 4-1:1.0: skipping garbage [ 354.162658][ T5943] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 354.178379][ T5943] cdc_wdm 4-1:1.0: Unknown control protocol [ 354.336452][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 7 bytes [ 354.344431][ T9922] loop4: detected capacity change from 0 to 7 [ 354.351284][ T9922] buffer_io_error: 14 callbacks suppressed [ 354.351299][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.373771][ C1] syz_tun: tun_net_xmit 118 [ 354.383087][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.401339][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.429026][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.449670][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.467547][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.494681][ T9925] binder: 9917:9925 unknown command 0 [ 354.503046][ T9925] binder: 9917:9925 ioctl c0306201 200000000080 returned -22 [ 354.540709][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.541445][ T5950] usb 4-1: USB disconnect, device number 44 [ 354.681523][ T9922] ldm_validate_partition_table(): Disk read failed. [ 354.743258][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.847551][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.855556][ T9922] Buffer I/O error on dev loop4, logical block 0, async page read [ 354.867427][ T9922] Dev loop4: unable to read RDB block 0 [ 355.009925][ T9922] loop4: unable to read partition table [ 355.171125][ T9922] loop4: partition table beyond EOD, truncated [ 355.182510][ T9922] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.412993][ C1] syz_tun: tun_net_xmit 118 [ 355.853555][ T5955] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 356.023000][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 356.037229][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.050347][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.097092][ T5955] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.136741][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.197238][ T9946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1158'. [ 356.228657][ T5955] usb 2-1: config 0 descriptor?? [ 356.242007][ T5955] hub 2-1:0.0: USB hub found [ 356.251596][ T9946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1158'. [ 356.294251][ T9951] FAULT_INJECTION: forcing a failure. [ 356.294251][ T9951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.416575][ T9951] CPU: 1 UID: 0 PID: 9951 Comm: syz.3.1161 Not tainted syzkaller #0 PREEMPT(full) [ 356.416602][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.416613][ T9951] Call Trace: [ 356.416622][ T9951] [ 356.416630][ T9951] dump_stack_lvl+0x189/0x250 [ 356.416656][ T9951] ? __pfx____ratelimit+0x10/0x10 [ 356.416687][ T9951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.416708][ T9951] ? __pfx__printk+0x10/0x10 [ 356.416735][ T9951] ? __might_fault+0xb0/0x130 [ 356.416772][ T9951] should_fail_ex+0x414/0x560 [ 356.416801][ T9951] _copy_from_user+0x2d/0xb0 [ 356.416823][ T9951] video_usercopy+0x354/0x14f0 [ 356.416851][ T9951] ? __pfx___video_do_ioctl+0x10/0x10 [ 356.416869][ T9951] ? __pfx_video_usercopy+0x10/0x10 [ 356.416898][ T9951] ? __fget_files+0x2a/0x420 [ 356.416929][ T9951] ? __fget_files+0x2a/0x420 [ 356.416955][ T9951] ? __fget_files+0x3a0/0x420 [ 356.416984][ T9951] v4l2_ioctl+0x18a/0x1e0 [ 356.417003][ T9951] ? __pfx_v4l2_ioctl+0x10/0x10 [ 356.417019][ T9951] __se_sys_ioctl+0xfc/0x170 [ 356.417042][ T9951] do_syscall_64+0xfa/0x3b0 [ 356.417068][ T9951] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.417094][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.417112][ T9951] ? clear_bhb_loop+0x60/0xb0 [ 356.417133][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.417150][ T9951] RIP: 0033:0x7f8cad98ebe9 [ 356.417167][ T9951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.417184][ T9951] RSP: 002b:00007f8cae861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.417205][ T9951] RAX: ffffffffffffffda RBX: 00007f8cadbb5fa0 RCX: 00007f8cad98ebe9 [ 356.417219][ T9951] RDX: 0000200000000100 RSI: 00000000c0205649 RDI: 0000000000000003 [ 356.417231][ T9951] RBP: 00007f8cae861090 R08: 0000000000000000 R09: 0000000000000000 [ 356.417243][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.417253][ T9951] R13: 00007f8cadbb6038 R14: 00007f8cadbb5fa0 R15: 00007f8cadcdfa28 [ 356.417282][ T9951] [ 356.625812][ C1] syz_tun: tun_net_xmit 118 [ 356.743502][ T5955] hub 2-1:0.0: 1 port detected [ 357.103238][ T5943] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 357.333363][ T5943] usb 4-1: Invalid ep0 maxpacket: 64 [ 357.482827][ T5943] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 357.652887][ C1] syz_tun: tun_net_xmit 118 [ 357.702833][ T5943] usb 4-1: Invalid ep0 maxpacket: 64 [ 357.726757][ T5943] usb usb4-port1: attempt power cycle [ 357.817836][ T5955] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 357.824468][ T5955] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 357.879731][ T5955] usbhid 2-1:0.0: can't add hid device: -32 [ 357.947205][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 358.104035][ T5943] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 358.133720][ T5943] usb 4-1: Invalid ep0 maxpacket: 64 [ 358.271046][ T5943] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 358.342187][ T5943] usb 4-1: Invalid ep0 maxpacket: 64 [ 358.693039][ C1] syz_tun: tun_net_xmit 118 [ 358.880752][ T5943] usb usb4-port1: unable to enumerate USB device [ 358.933793][ T5950] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 359.393217][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 359.420804][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.441773][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.454746][ T5943] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 359.472896][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.487952][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.523021][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.572850][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.622983][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 359.642292][ T5950] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 359.661697][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.678213][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.686251][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.699896][ T5950] usb 5-1: Product: syz [ 359.707051][ T5943] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 359.715473][ T2152] usb 2-1: USB disconnect, device number 47 [ 359.716315][ T5950] usb 5-1: Manufacturer: syz [ 359.732894][ C1] syz_tun: tun_net_xmit 118 [ 359.737266][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.748991][ T5950] usb 5-1: SerialNumber: syz [ 359.834900][ T5950] usb 5-1: config 0 descriptor?? [ 359.848311][ T5943] usb 1-1: config 0 descriptor?? [ 359.935413][ T9988] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1170'. [ 359.959326][ T5943] hub 1-1:0.0: USB hub found [ 359.972114][ T5950] cdc_acm 5-1:0.0: Zero length descriptor references [ 360.001998][ T5950] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 360.164909][ T5943] hub 1-1:0.0: 1 port detected [ 360.282326][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 360.420621][ T9996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1172'. [ 360.462331][ T9996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1172'. [ 360.773021][ C1] syz_tun: tun_net_xmit 118 [ 361.189295][ T5943] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 361.226150][ T5943] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 361.267186][ T5943] usbhid 1-1:0.0: can't add hid device: -32 [ 361.312009][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 361.320416][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.321032][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.405912][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.406127][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.812870][ C1] syz_tun: tun_net_xmit 118 [ 361.917625][ T5943] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 362.094216][ T5943] usb 4-1: no configurations [ 362.098865][ T5943] usb 4-1: can't read configurations, error -22 [ 362.170153][ T5955] usb 5-1: USB disconnect, device number 46 [ 362.237116][T10023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1181'. [ 362.246679][ T5943] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 362.423665][ T5943] usb 4-1: no configurations [ 362.432450][ T5943] usb 4-1: can't read configurations, error -22 [ 362.470598][ T5943] usb usb4-port1: attempt power cycle [ 362.515490][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.539221][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.577744][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.607961][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.658103][T10023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1181'. [ 362.737324][T10033] loop4: detected capacity change from 0 to 7 [ 362.745462][T10033] Dev loop4: unable to read RDB block 7 [ 362.751157][T10033] loop4: unable to read partition table [ 362.757043][T10033] loop4: partition table beyond EOD, truncated [ 362.763674][T10033] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 362.784261][ T5950] usb 1-1: USB disconnect, device number 54 [ 362.845752][ T5943] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 362.853025][ C1] syz_tun: tun_net_xmit 118 [ 362.878454][ T5943] usb 4-1: no configurations [ 362.883361][ T5943] usb 4-1: can't read configurations, error -22 [ 363.023135][ T5943] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 363.133904][ T5943] usb 4-1: no configurations [ 363.138609][ T5943] usb 4-1: can't read configurations, error -22 [ 363.148503][ T5943] usb usb4-port1: unable to enumerate USB device [ 363.388657][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.398632][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.410650][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.419602][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.843016][ T2152] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 363.892871][ C1] syz_tun: tun_net_xmit 118 [ 364.014713][ T2152] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 364.036418][ T2152] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 364.068655][ T2152] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 364.091500][ T2152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 364.120992][ T2152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 364.140894][ T2152] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 364.153289][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 364.161764][T10054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1191'. [ 364.171929][ T2152] usb 2-1: Product: syz [ 364.176564][ T2152] usb 2-1: Manufacturer: syz [ 364.193476][ T2152] cdc_wdm 2-1:1.0: skipping garbage [ 364.199495][ T2152] cdc_wdm 2-1:1.0: skipping garbage [ 364.218947][ T2152] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 364.242267][ T2152] cdc_wdm 2-1:1.0: Unknown control protocol [ 364.597054][ T2152] usb 2-1: USB disconnect, device number 48 [ 364.766536][T10058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1192'. [ 364.807281][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 364.818998][T10064] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 364.826783][T10064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.933068][ C1] syz_tun: tun_net_xmit 118 [ 365.822829][ T5943] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 365.972905][ C1] syz_tun: tun_net_xmit 118 [ 365.985351][ T30] audit: type=1326 audit(1755987729.341:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.012983][ T30] audit: type=1326 audit(1755987729.341:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.042888][ T30] audit: type=1326 audit(1755987729.341:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.065127][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.086950][ T30] audit: type=1326 audit(1755987729.341:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.122534][ T30] audit: type=1326 audit(1755987729.341:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.151732][ T30] audit: type=1326 audit(1755987729.341:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.180254][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 366.193866][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.198782][ T30] audit: type=1326 audit(1755987729.341:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.211311][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.238604][ T30] audit: type=1326 audit(1755987729.341:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba41b8d550 code=0x7ffc0000 [ 366.321687][T10095] binder: 10092:10095 unknown command 0 [ 366.331635][T10095] binder: 10092:10095 ioctl c0306201 200000000080 returned -22 [ 366.401937][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 366.462591][ T30] audit: type=1326 audit(1755987729.341:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba41b8d550 code=0x7ffc0000 [ 366.500320][ T30] audit: type=1326 audit(1755987729.351:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.0.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba41b8ebe9 code=0x7ffc0000 [ 366.529813][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.616653][ T5943] usb 5-1: config 0 descriptor?? [ 366.708655][ T5943] hub 5-1:0.0: USB hub found [ 366.907993][ T5943] hub 5-1:0.0: 1 port detected [ 367.023049][ C1] syz_tun: tun_net_xmit 118 [ 367.101751][T10104] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.942348][T10127] FAULT_INJECTION: forcing a failure. [ 367.942348][T10127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.969394][T10127] CPU: 0 UID: 0 PID: 10127 Comm: syz.0.1215 Not tainted syzkaller #0 PREEMPT(full) [ 367.969419][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.969434][T10127] Call Trace: [ 367.969442][T10127] [ 367.969450][T10127] dump_stack_lvl+0x189/0x250 [ 367.969476][T10127] ? irqentry_exit+0x74/0x90 [ 367.969508][T10127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.969540][T10127] ? dump_stack+0x9/0x20 [ 367.969568][T10127] should_fail_ex+0x414/0x560 [ 367.969597][T10127] _copy_from_iter+0x1de/0x1790 [ 367.969626][T10127] ? rcu_is_watching+0x15/0xb0 [ 367.969647][T10127] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 367.969676][T10127] ? __pfx__copy_from_iter+0x10/0x10 [ 367.969696][T10127] ? __build_skb_around+0x257/0x3e0 [ 367.969729][T10127] ? netlink_sendmsg+0x642/0xb30 [ 367.969756][T10127] ? skb_put+0x11b/0x210 [ 367.969779][T10127] netlink_sendmsg+0x6b2/0xb30 [ 367.969817][T10127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.969850][T10127] ? aa_sock_msg_perm+0xf1/0x1d0 [ 367.969883][T10127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.969905][T10127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.969935][T10127] __sock_sendmsg+0x21c/0x270 [ 367.969963][T10127] ____sys_sendmsg+0x52d/0x830 [ 367.969990][T10127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.970020][T10127] ? import_iovec+0x74/0xa0 [ 367.970044][T10127] ___sys_sendmsg+0x21f/0x2a0 [ 367.970067][T10127] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.970125][T10127] ? __might_fault+0xb0/0x130 [ 367.970154][T10127] __sys_sendmmsg+0x227/0x430 [ 367.970179][T10127] ? __pfx___sys_sendmmsg+0x10/0x10 [ 367.970197][T10127] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 367.970256][T10127] ? ksys_write+0x22a/0x250 [ 367.970283][T10127] ? __pfx_ksys_write+0x10/0x10 [ 367.970304][T10127] ? rcu_is_watching+0x15/0xb0 [ 367.970329][T10127] __x64_sys_sendmmsg+0xa0/0xc0 [ 367.970349][T10127] do_syscall_64+0xfa/0x3b0 [ 367.970375][T10127] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.970399][T10127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.970418][T10127] ? clear_bhb_loop+0x60/0xb0 [ 367.970441][T10127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.970464][T10127] RIP: 0033:0x7fba41b8ebe9 [ 367.970481][T10127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.970498][T10127] RSP: 002b:00007fba42ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 367.970518][T10127] RAX: ffffffffffffffda RBX: 00007fba41db5fa0 RCX: 00007fba41b8ebe9 [ 367.970533][T10127] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 367.970548][T10127] RBP: 00007fba42ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 367.970560][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.970572][T10127] R13: 00007fba41db6038 R14: 00007fba41db5fa0 R15: 00007fba41edfa28 [ 367.970601][T10127] [ 368.073024][ C1] syz_tun: tun_net_xmit 118 [ 368.352406][ T5943] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 368.370044][ T5943] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 368.391364][ T5943] usbhid 5-1:0.0: can't add hid device: -32 [ 368.402932][ T5955] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 368.430821][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 368.470116][T10137] vlan2: entered promiscuous mode [ 368.478019][T10137] dummy0: entered promiscuous mode [ 368.575248][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 368.587642][ T5955] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.599955][ T5955] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.617793][ T5955] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.765596][ T5955] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.825114][ T5955] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.888256][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.033067][T10141] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1219'. [ 369.092873][ T5943] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 369.092895][ C1] syz_tun: tun_net_xmit 118 [ 369.170482][ T5955] usb 4-1: GET_CAPABILITIES returned 0 [ 369.195126][ T5955] usbtmc 4-1:16.0: can't read capabilities [ 369.233288][ T2152] usb 5-1: USB disconnect, device number 47 [ 369.274590][ T5943] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 369.298950][ T5943] usb 1-1: config 150 has no interface number 0 [ 369.320657][ T5943] usb 1-1: config 150 interface 204 has no altsetting 0 [ 369.361732][ T5943] usb 1-1: config 150 interface 1 has no altsetting 0 [ 369.373979][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 369.387575][ T2152] usb 4-1: USB disconnect, device number 53 [ 369.399263][ T5943] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 369.418771][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.504748][ T5943] usb 1-1: Product: syz [ 369.612266][ T5943] usb 1-1: Manufacturer: syz [ 369.636551][ T5943] usb 1-1: SerialNumber: syz [ 369.696913][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 369.834837][T10158] netlink: 'syz.4.1225': attribute type 5 has an invalid length. [ 369.851377][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 369.884218][ T10] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 369.896347][ T10] usb 2-1: config 9 has no interfaces? [ 369.907009][ T5943] xr_serial 1-1:150.204: xr_serial converter detected [ 369.920374][ T10] usb 2-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 369.938831][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.948814][ T10] usb 2-1: Product: syz [ 369.955522][ T10] usb 2-1: Manufacturer: syz [ 369.960470][ T10] usb 2-1: SerialNumber: syz [ 370.048349][T10162] vlan2: entered promiscuous mode [ 370.132972][ C1] syz_tun: tun_net_xmit 118 [ 370.198085][ T10] usb 2-1: USB disconnect, device number 49 [ 370.339459][ T5943] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 370.370354][ T5943] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 370.434699][ T5943] usb 1-1: USB disconnect, device number 55 [ 370.543808][ T5943] xr_serial 1-1:150.204: device disconnected [ 370.682969][ T5955] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 370.846471][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.900055][ T5955] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= c.00 [ 370.964320][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.022067][ T5955] usb 4-1: config 0 descriptor?? [ 371.182885][ C1] syz_tun: tun_net_xmit 118 [ 371.395274][ T2152] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 371.524597][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.541703][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.827243][ T2152] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.827297][ T2152] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 371.827321][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.847471][ T2152] usb 1-1: config 0 descriptor?? [ 371.852350][ T5955] nintendo 0003:057E:2019.000B: unknown main item tag 0x0 [ 371.852387][ T5955] nintendo 0003:057E:2019.000B: unknown main item tag 0x0 [ 371.852417][ T5955] nintendo 0003:057E:2019.000B: unknown main item tag 0x0 [ 371.852443][ T5955] nintendo 0003:057E:2019.000B: unknown main item tag 0x0 [ 371.852471][ T5955] nintendo 0003:057E:2019.000B: unknown main item tag 0x1 [ 371.852498][ T5955] nintendo 0003:057E:2019.000B: item fetching failed at offset 6/7 [ 371.857813][ T5955] nintendo 0003:057E:2019.000B: HID parse failed [ 371.859697][ T5955] nintendo 0003:057E:2019.000B: probe - fail = -22 [ 371.859804][ T5955] nintendo 0003:057E:2019.000B: probe with driver nintendo failed with error -22 [ 371.865605][ T2152] pwc: Askey VC010 type 2 USB webcam detected. [ 371.884091][T10182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1230'. [ 371.989395][T10184] program syz.2.1234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.037673][ T5954] usb 4-1: USB disconnect, device number 54 [ 372.212979][ C1] syz_tun: tun_net_xmit 118 [ 372.261847][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.273272][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.286523][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.295160][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.304826][ T2152] pwc: recv_control_msg error -32 req 02 val 2b00 [ 372.324896][ T2152] pwc: recv_control_msg error -32 req 02 val 2700 [ 372.344413][ T2152] pwc: recv_control_msg error -32 req 02 val 2c00 [ 372.357456][ T2152] pwc: recv_control_msg error -32 req 04 val 1000 [ 372.399974][ T2152] pwc: recv_control_msg error -32 req 04 val 1300 [ 372.463928][ T2152] pwc: recv_control_msg error -32 req 04 val 1400 [ 372.473476][ T2152] pwc: recv_control_msg error -32 req 02 val 2000 [ 372.505970][ T2152] pwc: recv_control_msg error -32 req 02 val 2100 [ 372.589917][ T2152] pwc: recv_control_msg error -32 req 04 val 1500 [ 372.607724][ T2152] pwc: recv_control_msg error -32 req 02 val 2500 [ 372.658941][ T2152] pwc: recv_control_msg error -32 req 02 val 2400 [ 372.681780][ T2152] pwc: recv_control_msg error -32 req 02 val 2600 [ 372.706842][ T2152] pwc: recv_control_msg error -32 req 02 val 2900 [ 372.738275][ T2152] pwc: recv_control_msg error -32 req 02 val 2800 [ 372.754713][ T2152] pwc: recv_control_msg error -32 req 04 val 1100 [ 372.767094][ T2152] pwc: recv_control_msg error -32 req 04 val 1200 [ 372.785606][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1239'. [ 372.800681][T10196] ip6erspan0: left promiscuous mode [ 372.811803][ T2152] pwc: Registered as video103. [ 372.843684][ T2152] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 372.882827][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 372.882842][ T30] audit: type=1326 audit(1755987736.341:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 372.911324][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.033432][ T30] audit: type=1326 audit(1755987736.341:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.109905][ T30] audit: type=1326 audit(1755987736.341:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.135863][ T30] audit: type=1326 audit(1755987736.341:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.158118][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.168200][ T30] audit: type=1326 audit(1755987736.341:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.190465][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.226541][ T30] audit: type=1326 audit(1755987736.341:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.253215][ C1] syz_tun: tun_net_xmit 118 [ 373.431770][ T30] audit: type=1326 audit(1755987736.341:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.497022][ T30] audit: type=1326 audit(1755987736.341:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.559425][ T2152] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 373.585213][ T30] audit: type=1326 audit(1755987736.351:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.636732][ T30] audit: type=1326 audit(1755987736.351:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.4.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9f18ebe9 code=0x7ffc0000 [ 373.782903][ T2152] usb 2-1: device descriptor read/64, error -71 [ 374.045755][T10221] tipc: Enabled bearer , priority 0 [ 374.053316][T10221] syzkaller0: entered promiscuous mode [ 374.059242][T10221] syzkaller0: entered allmulticast mode [ 374.123270][ T2152] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 374.158577][ T5955] usb 1-1: USB disconnect, device number 56 [ 374.197833][T10226] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.1246'. [ 374.211741][T10227] FAULT_INJECTION: forcing a failure. [ 374.211741][T10227] name failslab, interval 1, probability 0, space 0, times 0 [ 374.231283][T10227] CPU: 1 UID: 0 PID: 10227 Comm: syz.0.1247 Not tainted syzkaller #0 PREEMPT(full) [ 374.231299][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.231305][T10227] Call Trace: [ 374.231311][T10227] [ 374.231315][T10227] dump_stack_lvl+0x189/0x250 [ 374.231332][T10227] ? __pfx____ratelimit+0x10/0x10 [ 374.231347][T10227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.231366][T10227] ? __pfx__printk+0x10/0x10 [ 374.231383][T10227] ? __pfx___might_resched+0x10/0x10 [ 374.231392][T10227] ? fs_reclaim_acquire+0x7d/0x100 [ 374.231411][T10227] should_fail_ex+0x414/0x560 [ 374.231428][T10227] should_failslab+0xa8/0x100 [ 374.231443][T10227] kmem_cache_alloc_noprof+0x73/0x3c0 [ 374.231456][T10227] ? vm_area_dup+0x2b/0x680 [ 374.231470][T10227] ? kernel_text_address+0xa5/0xe0 [ 374.231487][T10227] vm_area_dup+0x2b/0x680 [ 374.231504][T10227] __split_vma+0x1a9/0xa00 [ 374.231516][T10227] ? mas_next_slot+0xc20/0xcf0 [ 374.231532][T10227] ? __pfx___split_vma+0x10/0x10 [ 374.231550][T10227] ? mas_find+0xb0e/0xd30 [ 374.231566][T10227] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 374.231577][T10227] ? do_syscall_64+0xfa/0x3b0 [ 374.231591][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.231613][T10227] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 374.231630][T10227] ? mas_find+0xa7d/0xd30 [ 374.231646][T10227] mmap_region+0x724/0x20c0 [ 374.231666][T10227] ? process_measurement+0x15b6/0x1a40 [ 374.231679][T10227] ? __pfx_mmap_region+0x10/0x10 [ 374.231691][T10227] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 374.231707][T10227] ? __pfx_ima_store_measurement+0x10/0x10 [ 374.231718][T10227] ? ima_d_path+0x1f1/0x250 [ 374.231736][T10227] ? rcu_is_watching+0x15/0xb0 [ 374.231746][T10227] ? process_measurement+0x15c3/0x1a40 [ 374.231783][T10227] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 374.231799][T10227] ? hugetlb_get_unmapped_area+0x1f7/0x290 [ 374.231813][T10227] ? cap_mmap_addr+0xb0/0x100 [ 374.231827][T10227] ? bpf_lsm_mmap_addr+0x9/0x20 [ 374.231838][T10227] ? security_mmap_addr+0x71/0x270 [ 374.231852][T10227] ? shmem_mapping+0xd/0x50 [ 374.231863][T10227] ? memfd_check_seals_mmap+0x157/0x200 [ 374.231876][T10227] do_mmap+0xc45/0x10d0 [ 374.231894][T10227] ? __pfx_do_mmap+0x10/0x10 [ 374.231905][T10227] ? down_write_killable+0x178/0x230 [ 374.231917][T10227] ? __pfx_down_write_killable+0x10/0x10 [ 374.231926][T10227] ? common_file_perm+0x1b5/0x230 [ 374.231945][T10227] vm_mmap_pgoff+0x2a6/0x4d0 [ 374.231961][T10227] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 374.231974][T10227] ? __fget_files+0x2a/0x420 [ 374.231991][T10227] ? __fget_files+0x3a0/0x420 [ 374.232005][T10227] ? __fget_files+0x2a/0x420 [ 374.232022][T10227] ksys_mmap_pgoff+0x51f/0x760 [ 374.232038][T10227] do_syscall_64+0xfa/0x3b0 [ 374.232052][T10227] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.232066][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.232075][T10227] ? clear_bhb_loop+0x60/0xb0 [ 374.232088][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.232097][T10227] RIP: 0033:0x7fba41b8ebe9 [ 374.232107][T10227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.232116][T10227] RSP: 002b:00007fba42ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 374.232128][T10227] RAX: ffffffffffffffda RBX: 00007fba41db5fa0 RCX: 00007fba41b8ebe9 [ 374.232135][T10227] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 374.232142][T10227] RBP: 00007fba42ad0090 R08: 0000000000000003 R09: 0000000000000000 [ 374.232148][T10227] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 374.232155][T10227] R13: 00007fba41db6038 R14: 00007fba41db5fa0 R15: 00007fba41edfa28 [ 374.232171][T10227] [ 374.591713][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.597946][ C1] syz_tun: tun_net_xmit 118 [ 374.604470][ T2152] usb 2-1: device descriptor read/64, error -71 [ 374.713068][ T2152] usb usb2-port1: attempt power cycle [ 374.752682][T10223] tipc: Resetting bearer [ 375.011771][T10220] tipc: Resetting bearer [ 375.052823][ T2152] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 375.101970][T10234] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 375.101970][T10234] program syz.0.1249 not setting count and/or reply_len properly [ 375.164795][T10220] tipc: Disabling bearer [ 375.227781][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 375.290464][ T2152] usb 2-1: device descriptor read/8, error -71 [ 375.394818][T10241] netlink: 'syz.3.1252': attribute type 23 has an invalid length. [ 375.462308][T10244] FAULT_INJECTION: forcing a failure. [ 375.462308][T10244] name failslab, interval 1, probability 0, space 0, times 0 [ 375.478177][T10239] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 375.511336][T10244] CPU: 0 UID: 0 PID: 10244 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT(full) [ 375.511361][T10244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.511371][T10244] Call Trace: [ 375.511380][T10244] [ 375.511387][T10244] dump_stack_lvl+0x189/0x250 [ 375.511414][T10244] ? __pfx____ratelimit+0x10/0x10 [ 375.511442][T10244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.511465][T10244] ? __pfx__printk+0x10/0x10 [ 375.511497][T10244] ? __pfx___might_resched+0x10/0x10 [ 375.511516][T10244] ? fs_reclaim_acquire+0x7d/0x100 [ 375.511548][T10244] should_fail_ex+0x414/0x560 [ 375.511578][T10244] should_failslab+0xa8/0x100 [ 375.511607][T10244] __kmalloc_noprof+0xcb/0x4f0 [ 375.511632][T10244] ? kfree+0x4d/0x440 [ 375.511652][T10244] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 375.511675][T10244] tomoyo_realpath_from_path+0xe3/0x5d0 [ 375.511697][T10244] ? tomoyo_domain+0xd9/0x130 [ 375.511722][T10244] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 375.511750][T10244] tomoyo_path_number_perm+0x1e8/0x5a0 [ 375.511778][T10244] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 375.511822][T10244] ? __lock_acquire+0xab9/0xd20 [ 375.511869][T10244] ? __fget_files+0x2a/0x420 [ 375.511899][T10244] ? __fget_files+0x2a/0x420 [ 375.511925][T10244] ? __fget_files+0x3a0/0x420 [ 375.511950][T10244] ? __fget_files+0x2a/0x420 [ 375.511979][T10244] security_file_ioctl+0xcb/0x2d0 [ 375.512006][T10244] __se_sys_ioctl+0x47/0x170 [ 375.512032][T10244] do_syscall_64+0xfa/0x3b0 [ 375.512058][T10244] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.512084][T10244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.512102][T10244] ? clear_bhb_loop+0x60/0xb0 [ 375.512125][T10244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.512142][T10244] RIP: 0033:0x7fba41b8ebe9 [ 375.512159][T10244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.512174][T10244] RSP: 002b:00007fba42ad0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.512192][T10244] RAX: ffffffffffffffda RBX: 00007fba41db5fa0 RCX: 00007fba41b8ebe9 [ 375.512205][T10244] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000003 [ 375.512216][T10244] RBP: 00007fba42ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 375.512227][T10244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.512246][T10244] R13: 00007fba41db6038 R14: 00007fba41db5fa0 R15: 00007fba41edfa28 [ 375.512276][T10244] [ 375.512284][T10244] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.567087][ T2152] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 375.657094][ C1] syz_tun: tun_net_xmit 118 [ 375.707573][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.800928][T10247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.818813][T10247] loop3: detected capacity change from 0 to 1 [ 375.827076][ T2152] usb 2-1: device descriptor read/8, error -71 [ 375.835703][ T5960] Dev loop3: unable to read RDB block 1 [ 375.841411][ T5960] loop3: unable to read partition table [ 375.877418][ T5960] loop3: partition table beyond EOD, truncated [ 375.898788][T10247] Dev loop3: unable to read RDB block 1 [ 375.912943][T10247] loop3: unable to read partition table [ 375.922847][ T5955] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 375.935361][T10247] loop3: partition table beyond EOD, truncated [ 375.943225][ T2152] usb usb2-port1: unable to enumerate USB device [ 375.961927][T10247] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 376.090991][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 376.243299][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.257905][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.349105][ T5955] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 376.362550][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.374191][ T5955] usb 5-1: config 0 descriptor?? [ 376.383339][ T5955] hub 5-1:0.0: USB hub found [ 376.588431][ T5955] hub 5-1:0.0: 1 port detected [ 376.646978][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1256'. [ 376.692909][ C1] syz_tun: tun_net_xmit 118 [ 377.067586][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 377.190697][T10273] loop4: detected capacity change from 0 to 7 [ 377.203489][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 377.214254][T10273] buffer_io_error: 14 callbacks suppressed [ 377.214269][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.257384][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.269662][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.286365][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.298979][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.310933][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.326338][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.401726][T10273] ldm_validate_partition_table(): Disk read failed. [ 377.418094][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.426794][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.436984][T10273] Buffer I/O error on dev loop4, logical block 0, async page read [ 377.447495][T10273] Dev loop4: unable to read RDB block 0 [ 377.453518][T10273] loop4: unable to read partition table [ 377.460583][T10273] loop4: partition table beyond EOD, truncated [ 377.481691][T10273] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 377.656426][ T5955] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 377.668560][ T5955] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 377.733124][ C1] syz_tun: tun_net_xmit 118 [ 377.747025][ T5955] usbhid 5-1:0.0: can't add hid device: -32 [ 377.789428][ T5955] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 378.349796][T10297] tipc: Enabling of bearer rejected, already enabled [ 378.456489][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.462920][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.538913][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 378.772881][ C1] syz_tun: tun_net_xmit 118 [ 378.801926][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.813734][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.007298][T10312] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1275'. [ 379.215933][T10316] loop2: detected capacity change from 0 to 7 [ 379.226668][ T5960] Dev loop2: unable to read RDB block 7 [ 379.232335][ T5960] loop2: AHDI p1 p2 p3 [ 379.240131][ T5960] loop2: partition table partially beyond EOD, truncated [ 379.250092][ T5960] loop2: p1 start 1601398130 is beyond EOD, truncated [ 379.279038][ T5960] loop2: p2 start 1702059890 is beyond EOD, truncated [ 379.302247][T10316] Dev loop2: unable to read RDB block 7 [ 379.309645][T10316] loop2: AHDI p1 p2 p3 [ 379.314645][T10316] loop2: partition table partially beyond EOD, truncated [ 379.325934][T10316] loop2: p1 start 1601398130 is beyond EOD, truncated [ 379.337130][T10316] loop2: p2 start 1702059890 is beyond EOD, truncated [ 379.451989][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1278'. [ 379.601429][T10322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1279'. [ 379.604046][ T10] usb 5-1: USB disconnect, device number 48 [ 379.623884][T10322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1279'. [ 379.812949][ C1] syz_tun: tun_net_xmit 118 [ 379.846832][ T2152] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 379.882922][ T5966] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 380.002950][ T2152] usb 4-1: Using ep0 maxpacket: 32 [ 380.029091][ T2152] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 380.055493][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 380.062157][ T2152] usb 4-1: config 0 has no interface number 0 [ 380.084373][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.103225][ T2152] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 380.119769][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.130097][ T5966] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 380.141384][T10337] FAULT_INJECTION: forcing a failure. [ 380.141384][T10337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.142812][ T2152] usb 4-1: Product: syz [ 380.165172][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.173787][ T2152] usb 4-1: Manufacturer: syz [ 380.178549][ T5966] usb 2-1: Product: syz [ 380.180732][T10337] CPU: 0 UID: 0 PID: 10337 Comm: syz.0.1285 Not tainted syzkaller #0 PREEMPT(full) [ 380.180756][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.180767][T10337] Call Trace: [ 380.180775][T10337] [ 380.180783][T10337] dump_stack_lvl+0x189/0x250 [ 380.180810][T10337] ? __pfx____ratelimit+0x10/0x10 [ 380.180837][T10337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.180859][T10337] ? __pfx__printk+0x10/0x10 [ 380.180885][T10337] ? __might_fault+0xb0/0x130 [ 380.180920][T10337] should_fail_ex+0x414/0x560 [ 380.180950][T10337] _copy_from_user+0x2d/0xb0 [ 380.180973][T10337] ___sys_recvmsg+0x12e/0x510 [ 380.180999][T10337] ? __pfx____sys_recvmsg+0x10/0x10 [ 380.181056][T10337] ? __might_fault+0xb0/0x130 [ 380.181085][T10337] do_recvmmsg+0x307/0x770 [ 380.181113][T10337] ? __pfx_do_recvmmsg+0x10/0x10 [ 380.181146][T10337] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 380.181191][T10337] __x64_sys_recvmmsg+0x190/0x240 [ 380.181214][T10337] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 380.181234][T10337] ? rcu_is_watching+0x15/0xb0 [ 380.181258][T10337] ? do_syscall_64+0xbe/0x3b0 [ 380.181289][T10337] do_syscall_64+0xfa/0x3b0 [ 380.181314][T10337] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.181340][T10337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.181358][T10337] ? clear_bhb_loop+0x60/0xb0 [ 380.181381][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.181399][T10337] RIP: 0033:0x7fba41b8ebe9 [ 380.181415][T10337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.181431][T10337] RSP: 002b:00007fba42ad0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 380.181452][T10337] RAX: ffffffffffffffda RBX: 00007fba41db5fa0 RCX: 00007fba41b8ebe9 [ 380.181466][T10337] RDX: 00000000000001ae RSI: 0000200000001640 RDI: 0000000000000004 [ 380.181479][T10337] RBP: 00007fba42ad0090 R08: 0000000000000000 R09: 0000000000000000 [ 380.181490][T10337] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000002 [ 380.181501][T10337] R13: 00007fba41db6038 R14: 00007fba41db5fa0 R15: 00007fba41edfa28 [ 380.181530][T10337] [ 380.395882][ T2152] usb 4-1: SerialNumber: syz [ 380.416441][ T2152] usb 4-1: config 0 descriptor?? [ 380.426622][ T5966] usb 2-1: Manufacturer: syz [ 380.433689][ T2152] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 380.440424][ T5966] usb 2-1: SerialNumber: syz [ 380.456819][ T5966] usb 2-1: config 0 descriptor?? [ 380.862876][ C1] syz_tun: tun_net_xmit 118 [ 380.881814][T10324] usb usb8: usbfs: process 10324 (syz.1.1281) did not claim interface 0 before use [ 380.892466][ T5966] gs_usb 2-1:0.0: Configuring for 3 interfaces [ 380.937439][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 380.948353][T10349] netlink: 'syz.4.1288': attribute type 30 has an invalid length. [ 381.506195][ T5966] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 381.743820][ T5966] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 381.795856][ T5966] usb 2-1: USB disconnect, device number 54 [ 381.893014][ C1] syz_tun: tun_net_xmit 118 [ 382.069593][ T2152] gspca_topro: reg_r err -71 [ 382.085060][ T2152] gspca_topro: Sensor soi763a [ 382.103064][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 382.115414][ T2152] usb 4-1: USB disconnect, device number 55 [ 382.123396][ T43] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 382.292864][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 382.292887][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 382.299937][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 382.322257][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 382.333814][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.337239][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.354404][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.359629][ T10] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.386115][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'. [ 382.402916][ T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 382.452518][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.478184][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.480562][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.502098][ T10] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 382.523876][ T10] usb 5-1: config 168 interface 0 has no altsetting 0 [ 382.566456][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 382.575584][ T43] usb 1-1: config 0 descriptor?? [ 382.577768][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 382.596623][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.775223][ T10] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.815413][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.850036][ T43] lua 0003:1E7D:2C2E.000C: item fetching failed at offset 0/5 [ 382.877231][ T43] lua 0003:1E7D:2C2E.000C: parse failed [ 382.899292][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.932871][ C1] syz_tun: tun_net_xmit 118 [ 382.980691][ T43] lua 0003:1E7D:2C2E.000C: probe with driver lua failed with error -22 [ 382.984101][ T10] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 383.009947][ T43] usb 1-1: USB disconnect, device number 57 [ 383.022356][T10370] vivid-007: ================= START STATUS ================= [ 383.030560][T10370] vivid-007: Enable Output Cropping: true [ 383.060730][ T10] usb 5-1: config 168 interface 0 has no altsetting 0 [ 383.080536][T10370] vivid-007: Enable Output Composing: true [ 383.088644][T10370] vivid-007: Enable Output Scaler: true [ 383.095178][T10370] vivid-007: Tx RGB Quantization Range: Automatic [ 383.102682][T10370] vivid-007: Transmit Mode: HDMI [ 383.108995][T10370] vivid-007: Hotplug Present: 0x00000000 [ 383.190538][T10370] vivid-007: RxSense Present: 0x00000000 [ 383.196957][T10370] vivid-007: EDID Present: 0x00000000 [ 383.211432][T10370] vivid-007: ================== END STATUS ================== [ 383.223415][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 383.242088][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 383.268418][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.322802][ T10] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.360806][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.396139][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.588029][ T10] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 383.619798][ T10] usb 5-1: config 168 interface 0 has no altsetting 0 [ 383.638545][ T10] usb 5-1: string descriptor 0 read error: -22 [ 383.646704][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.658260][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.680964][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 383.920589][ T2152] usb 5-1: USB disconnect, device number 49 [ 383.972945][ C1] syz_tun: tun_net_xmit 118 [ 384.080041][T10392] netlink: 'syz.3.1300': attribute type 1 has an invalid length. [ 384.143745][T10392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.201473][T10392] bond2: (slave dummy0): Releasing active interface [ 384.259507][T10392] bond3: (slave dummy0): making interface the new active one [ 384.270900][T10392] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 384.569522][T10411] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 384.606071][T10411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.782931][ T2152] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 384.837770][T10417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1307'. [ 384.857168][T10415] bond1: (slave dummy0): making interface the new active one [ 384.889214][T10415] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 385.012870][ C1] syz_tun: tun_net_xmit 118 [ 385.032847][ T2152] usb 4-1: Using ep0 maxpacket: 32 [ 385.040757][ T2152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.051913][ T2152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.073552][ T5955] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 385.116896][ T2152] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 385.129889][T10427] binder: 10422:10427 unknown command 0 [ 385.136389][T10427] binder: 10422:10427 ioctl c0306201 200000000080 returned -22 [ 385.159810][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.189062][ T2152] usb 4-1: config 0 descriptor?? [ 385.222131][ T2152] hub 4-1:0.0: USB hub found [ 385.281243][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.307817][ T5955] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 385.318959][ T5955] usb 1-1: config 1 interface 1 has no altsetting 0 [ 385.370127][ T5955] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.379233][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.392842][ T5955] usb 1-1: Product: syz [ 385.396999][ T5955] usb 1-1: Manufacturer: syz [ 385.411842][ T5955] usb 1-1: SerialNumber: syz [ 385.461916][ T2152] hub 4-1:0.0: 1 port detected [ 386.053048][ C1] syz_tun: tun_net_xmit 118 [ 386.534814][ T2152] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 386.548581][ T2152] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 386.660951][ T2152] usbhid 4-1:0.0: can't add hid device: -32 [ 386.702055][ T2152] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 387.049229][T10438] bond3: (slave dummy0): Releasing active interface [ 387.092945][ C1] syz_tun: tun_net_xmit 118 [ 387.946697][ T5955] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 388.058791][ T5955] usb 1-1: USB disconnect, device number 58 [ 388.133010][ C1] syz_tun: tun_net_xmit 118 [ 388.196940][T10448] netlink: 'syz.0.1313': attribute type 23 has an invalid length. [ 388.342300][T10444] binder: 10442:10444 ioctl c0306201 200000000480 returned -14 [ 388.463292][ T863] usb 4-1: USB disconnect, device number 56 [ 388.546039][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 388.928073][T10463] FAULT_INJECTION: forcing a failure. [ 388.928073][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 388.955208][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.1.1318 Not tainted syzkaller #0 PREEMPT(full) [ 388.955224][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.955231][T10463] Call Trace: [ 388.955236][T10463] [ 388.955240][T10463] dump_stack_lvl+0x189/0x250 [ 388.955258][T10463] ? __pfx____ratelimit+0x10/0x10 [ 388.955273][T10463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.955285][T10463] ? __pfx__printk+0x10/0x10 [ 388.955301][T10463] ? __pfx___might_resched+0x10/0x10 [ 388.955314][T10463] should_fail_ex+0x414/0x560 [ 388.955330][T10463] should_failslab+0xa8/0x100 [ 388.955346][T10463] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 388.955360][T10463] ? __alloc_skb+0x112/0x2d0 [ 388.955372][T10463] __alloc_skb+0x112/0x2d0 [ 388.955383][T10463] netlink_sendmsg+0x5c6/0xb30 [ 388.955404][T10463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.955420][T10463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.955431][T10463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.955442][T10463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.955458][T10463] __sock_sendmsg+0x21c/0x270 [ 388.955472][T10463] ____sys_sendmsg+0x52d/0x830 [ 388.955486][T10463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.955501][T10463] ? import_iovec+0x74/0xa0 [ 388.955515][T10463] ___sys_sendmsg+0x21f/0x2a0 [ 388.955527][T10463] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.955555][T10463] ? __fget_files+0x2a/0x420 [ 388.955569][T10463] ? __fget_files+0x3a0/0x420 [ 388.955589][T10463] __sys_sendmmsg+0x227/0x430 [ 388.955602][T10463] ? __pfx___sys_sendmmsg+0x10/0x10 [ 388.955611][T10463] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 388.955640][T10463] ? ksys_write+0x22a/0x250 [ 388.955654][T10463] ? __pfx_ksys_write+0x10/0x10 [ 388.955666][T10463] ? rcu_is_watching+0x15/0xb0 [ 388.955679][T10463] __x64_sys_sendmmsg+0xa0/0xc0 [ 388.955691][T10463] do_syscall_64+0xfa/0x3b0 [ 388.955705][T10463] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.955719][T10463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.955729][T10463] ? clear_bhb_loop+0x60/0xb0 [ 388.955741][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.955750][T10463] RIP: 0033:0x7fc27f98ebe9 [ 388.955760][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.955769][T10463] RSP: 002b:00007fc28070f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.955781][T10463] RAX: ffffffffffffffda RBX: 00007fc27fbb5fa0 RCX: 00007fc27f98ebe9 [ 388.955789][T10463] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 388.955796][T10463] RBP: 00007fc28070f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.955802][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.955808][T10463] R13: 00007fc27fbb6038 R14: 00007fc27fbb5fa0 R15: 00007fc27fcdfa28 [ 388.955824][T10463] [ 389.172895][ C1] syz_tun: tun_net_xmit 118 [ 389.458044][T10469] ptrace attach of "./syz-executor exec"[5877] was attempted by "./syz-executor exec"[10469] [ 389.506886][T10468] loop4: detected capacity change from 0 to 7 [ 389.513588][T10468] buffer_io_error: 14 callbacks suppressed [ 389.513603][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.593406][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.631924][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.653107][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.720681][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.740318][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.753239][T10476] vlan2: entered promiscuous mode [ 389.758276][T10476] bond0: entered promiscuous mode [ 389.762997][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 389.798393][T10468] ldm_validate_partition_table(): Disk read failed. [ 389.811206][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 390.010804][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 390.053151][T10468] Buffer I/O error on dev loop4, logical block 0, async page read [ 390.130578][T10468] Dev loop4: unable to read RDB block 0 [ 390.212891][ C1] syz_tun: tun_net_xmit 118 [ 390.223914][T10468] loop4: unable to read partition table [ 390.229967][T10468] loop4: partition table beyond EOD, truncated [ 390.236313][T10468] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 390.453034][ T43] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 390.559528][T10500] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.615609][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.626985][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.675574][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.749239][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.780784][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.821189][ T43] usb 1-1: config 0 descriptor?? [ 391.062870][ T2152] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 391.252953][ C1] syz_tun: tun_net_xmit 118 [ 391.274398][ T2152] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 391.323615][ T43] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 391.394562][ T2152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.427071][ T2152] usb 5-1: config 0 has no interface number 0 [ 391.442840][ T2152] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 391.478329][ T2152] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 391.502686][ T2152] usb 5-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 391.526364][ T43] usb 1-1: USB disconnect, device number 59 [ 391.553344][T10519] fido_id[10519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 391.629721][ T2152] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 391.683096][ T2152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.726545][ T2152] usb 5-1: config 0 descriptor?? [ 391.794569][ T2152] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 392.022341][ T863] usb 5-1: USB disconnect, device number 50 [ 392.302863][ C1] syz_tun: tun_net_xmit 118 [ 392.424697][T10529] netlink: 'syz.0.1339': attribute type 10 has an invalid length. [ 392.434677][T10529] bond0: (slave wlan1): Opening slave failed [ 392.758706][T10535] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 392.829363][T10535] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 392.923145][T10535] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 392.940674][T10535] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 392.948718][T10535] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 392.980764][T10535] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 393.172891][T10535] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 393.182407][T10535] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 393.215136][T10535] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 393.292931][ T43] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 393.332947][ C1] syz_tun: tun_net_xmit 118 [ 393.412853][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 393.449032][T10548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1338'. [ 393.476617][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 393.582891][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.613919][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 393.622373][ T10] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 393.631508][ T10] usb 2-1: config 0 has no interface number 0 [ 393.642852][ T863] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 393.663932][ T10] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 393.679432][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.691064][ T10] usb 2-1: Product: syz [ 393.695475][ T10] usb 2-1: Manufacturer: syz [ 393.700262][ T10] usb 2-1: SerialNumber: syz [ 393.740791][ T43] usb 5-1: config 0 has no interfaces? [ 393.777791][ T43] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 393.786995][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.803638][ T10] usb 2-1: config 0 descriptor?? [ 393.807630][ T43] usb 5-1: Product: syz [ 393.823197][ T863] usb 4-1: Using ep0 maxpacket: 32 [ 393.825227][ T43] usb 5-1: Manufacturer: syz [ 393.842767][ T43] usb 5-1: SerialNumber: syz [ 393.844185][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 393.860377][ T43] usb 5-1: config 0 descriptor?? [ 393.913778][ T863] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 393.945835][ T863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.992987][ T863] usb 4-1: Product: syz [ 394.001174][ T863] usb 4-1: Manufacturer: syz [ 394.016083][ T863] usb 4-1: SerialNumber: syz [ 394.036807][ T863] usb 4-1: config 0 descriptor?? [ 394.100487][T10545] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.1343'. [ 394.289440][ T5966] usb 5-1: USB disconnect, device number 51 [ 394.333462][ T43] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 394.372906][ C1] syz_tun: tun_net_xmit 118 [ 394.506464][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 394.615929][ T43] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 394.635506][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.651919][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.743620][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.755640][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.763759][ T43] usb 1-1: Product: syz [ 394.768041][ T43] usb 1-1: Manufacturer: syz [ 394.781452][ T43] usb 1-1: SerialNumber: syz [ 395.349650][ T10] gspca_topro: reg_w err -110 [ 395.382847][ T10] gspca_topro: Sensor soi763a [ 395.412879][ C1] syz_tun: tun_net_xmit 118 [ 395.508688][ T5943] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 395.731715][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.748341][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.779173][ T5943] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.798164][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.824150][ T5943] usb 5-1: config 0 descriptor?? [ 395.839955][ T5943] cp210x 5-1:0.0: cp210x converter detected [ 395.927162][T10559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.248981][ T5943] usb 5-1: cp210x converter now attached to ttyUSB0 [ 396.452870][ C1] syz_tun: tun_net_xmit 118 [ 396.526308][T10566] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 396.886930][ T5943] usb 5-1: USB disconnect, device number 52 [ 396.943828][ T5943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.008914][ T5943] cp210x 5-1:0.0: device disconnected [ 397.156567][T10581] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.1353'. [ 397.492878][ C1] syz_tun: tun_net_xmit 118 [ 397.687877][ T9] usb 2-1: USB disconnect, device number 55 [ 397.896300][T10586] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 398.365304][ T863] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 398.385684][ T863] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 398.532962][ C1] syz_tun: tun_net_xmit 118 [ 398.573638][ T863] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 398.624998][ T863] usb 4-1: USB disconnect, device number 57 [ 398.625303][ T43] usb 1-1: 0:2 : does not exist [ 398.733742][ T43] usb 1-1: USB disconnect, device number 60 [ 398.819693][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.072944][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 399.103381][ T43] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 399.153662][T10631] vlan2: entered promiscuous mode [ 399.233176][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 399.240179][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.251515][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.268014][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.277635][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.289040][ T9] usb 5-1: config 0 descriptor?? [ 399.293120][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 399.298077][ T9] hub 5-1:0.0: USB hub found [ 399.317719][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.333199][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.347581][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.357458][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.372639][ T43] usb 1-1: config 0 descriptor?? [ 399.381791][ T43] hub 1-1:0.0: USB hub found [ 399.501235][ T9] hub 5-1:0.0: 1 port detected [ 399.572960][ C1] syz_tun: tun_net_xmit 118 [ 399.594343][ T43] hub 1-1:0.0: 1 port detected [ 400.416084][T10649] loop4: detected capacity change from 0 to 7 [ 400.446645][T10649] buffer_io_error: 14 callbacks suppressed [ 400.446657][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.555156][ T9] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 400.568755][ T9] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 400.580797][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.605701][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.612893][ C1] syz_tun: tun_net_xmit 118 [ 400.625068][ T43] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 400.644254][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 400.655901][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.659871][ T43] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 400.665900][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 400.688856][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.702493][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.715905][ T43] usbhid 1-1:0.0: can't add hid device: -32 [ 400.721984][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 400.758672][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.769811][T10649] ldm_validate_partition_table(): Disk read failed. [ 400.778670][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.792018][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.802646][T10649] Buffer I/O error on dev loop4, logical block 0, async page read [ 400.817024][T10649] Dev loop4: unable to read RDB block 0 [ 400.825495][T10649] loop4: unable to read partition table [ 400.832161][T10649] loop4: partition table beyond EOD, truncated [ 400.849486][T10649] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 401.171720][T10653] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 401.272062][T10653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.294853][T10657] bond4: (slave dummy0): making interface the new active one [ 401.311778][T10657] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 401.652858][ C1] syz_tun: tun_net_xmit 118 [ 401.974156][T10666] FAULT_INJECTION: forcing a failure. [ 401.974156][T10666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.002177][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.3.1382 Not tainted syzkaller #0 PREEMPT(full) [ 402.002200][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.002211][T10666] Call Trace: [ 402.002219][T10666] [ 402.002227][T10666] dump_stack_lvl+0x189/0x250 [ 402.002257][T10666] ? __pfx____ratelimit+0x10/0x10 [ 402.002284][T10666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.002305][T10666] ? __pfx__printk+0x10/0x10 [ 402.002331][T10666] ? __might_fault+0xb0/0x130 [ 402.002369][T10666] should_fail_ex+0x414/0x560 [ 402.002396][T10666] _copy_from_user+0x2d/0xb0 [ 402.002417][T10666] ___sys_sendmsg+0x158/0x2a0 [ 402.002439][T10666] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.002492][T10666] ? __fget_files+0x2a/0x420 [ 402.002519][T10666] ? __fget_files+0x3a0/0x420 [ 402.002555][T10666] __sys_sendmmsg+0x227/0x430 [ 402.002579][T10666] ? __pfx___sys_sendmmsg+0x10/0x10 [ 402.002597][T10666] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 402.002651][T10666] ? ksys_write+0x22a/0x250 [ 402.002679][T10666] ? __pfx_ksys_write+0x10/0x10 [ 402.002702][T10666] ? rcu_is_watching+0x15/0xb0 [ 402.002730][T10666] __x64_sys_sendmmsg+0xa0/0xc0 [ 402.002752][T10666] do_syscall_64+0xfa/0x3b0 [ 402.002777][T10666] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.002802][T10666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.002828][T10666] ? clear_bhb_loop+0x60/0xb0 [ 402.002850][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.002868][T10666] RIP: 0033:0x7f8cad98ebe9 [ 402.002885][T10666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.002902][T10666] RSP: 002b:00007f8cae861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 402.002922][T10666] RAX: ffffffffffffffda RBX: 00007f8cadbb5fa0 RCX: 00007f8cad98ebe9 [ 402.002936][T10666] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 402.002950][T10666] RBP: 00007f8cae861090 R08: 0000000000000000 R09: 0000000000000000 [ 402.002963][T10666] R10: 0000000004001c12 R11: 0000000000000246 R12: 0000000000000001 [ 402.002976][T10666] R13: 00007f8cadbb6038 R14: 00007f8cadbb5fa0 R15: 00007f8cadcdfa28 [ 402.003006][T10666] [ 402.353070][ T863] usb 5-1: USB disconnect, device number 53 [ 402.473093][ T9] usb 1-1: USB disconnect, device number 61 [ 402.692903][ C1] syz_tun: tun_net_xmit 118 [ 403.009211][T10684] loop2: detected capacity change from 0 to 7 [ 403.164959][T10684] Dev loop2: unable to read RDB block 7 [ 403.220441][T10684] loop2: unable to read partition table [ 403.226501][T10684] loop2: partition table beyond EOD, truncated [ 403.234664][T10684] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 403.732940][ C1] syz_tun: tun_net_xmit 118 [ 404.237282][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.278103][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.293817][T10698] binder: 10691:10698 unknown command 0 [ 404.299436][T10698] binder: 10691:10698 ioctl c0306201 200000000080 returned -22 [ 404.772870][ C1] syz_tun: tun_net_xmit 118 [ 405.251719][T10706] gretap0: entered promiscuous mode [ 405.272316][T10706] gretap0: left promiscuous mode [ 405.413099][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 405.513533][T10709] FAULT_INJECTION: forcing a failure. [ 405.513533][T10709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.564076][T10709] CPU: 1 UID: 0 PID: 10709 Comm: syz.2.1395 Not tainted syzkaller #0 PREEMPT(full) [ 405.564103][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.564116][T10709] Call Trace: [ 405.564124][T10709] [ 405.564133][T10709] dump_stack_lvl+0x189/0x250 [ 405.564163][T10709] ? __pfx____ratelimit+0x10/0x10 [ 405.564191][T10709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.564215][T10709] ? __pfx__printk+0x10/0x10 [ 405.564243][T10709] ? __might_fault+0xb0/0x130 [ 405.564281][T10709] should_fail_ex+0x414/0x560 [ 405.564313][T10709] _copy_from_user+0x2d/0xb0 [ 405.564337][T10709] do_sock_getsockopt+0x17d/0x450 [ 405.564362][T10709] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 405.564382][T10709] ? write_ibpb+0x30/0x40 [ 405.564410][T10709] ? __fget_files+0x3a0/0x420 [ 405.564445][T10709] ? __fget_files+0x2a/0x420 [ 405.564481][T10709] __x64_sys_getsockopt+0x1a5/0x250 [ 405.564501][T10709] ? write_ibpb+0x30/0x40 [ 405.564531][T10709] ? write_ibpb+0x30/0x40 [ 405.564562][T10709] do_syscall_64+0xfa/0x3b0 [ 405.564589][T10709] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.564616][T10709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.564636][T10709] ? clear_bhb_loop+0x60/0xb0 [ 405.564660][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.564680][T10709] RIP: 0033:0x7f8aa078ebe9 [ 405.564698][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.564715][T10709] RSP: 002b:00007f8aa1519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 405.564736][T10709] RAX: ffffffffffffffda RBX: 00007f8aa09b5fa0 RCX: 00007f8aa078ebe9 [ 405.564751][T10709] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000003 [ 405.564764][T10709] RBP: 00007f8aa1519090 R08: 0000200000000180 R09: 0000000000000000 [ 405.564778][T10709] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 405.564791][T10709] R13: 00007f8aa09b6038 R14: 00007f8aa09b5fa0 R15: 00007f8aa0adfa28 [ 405.564822][T10709] [ 405.770646][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.802817][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 405.822856][ C1] syz_tun: tun_net_xmit 118 [ 405.878789][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.902820][ T43] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 405.935611][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.959427][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.990563][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.002353][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.061380][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.083643][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 406.090764][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.092793][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.104591][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.111894][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.156986][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 406.263794][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.489508][ T5955] syz_tun: tun_net_xmit 110 [ 406.509574][ T43] usb 4-1: config 0 descriptor?? [ 406.603270][ T43] hub 4-1:0.0: USB hub found [ 406.782376][ T43] hub 4-1:0.0: 1 port detected [ 406.853016][ C1] syz_tun: tun_net_xmit 118 [ 407.260984][ T5955] syz_tun: tun_net_xmit 110 [ 407.320434][T10728] bond4: (slave dummy0): Releasing active interface [ 407.739209][ T10] usb 1-1: usb_control_msg returned -71 [ 407.757441][ T10] usbtmc 1-1:16.0: can't read capabilities [ 407.816749][ T43] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 407.840206][ T10] usb 1-1: USB disconnect, device number 62 [ 407.849916][ T43] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 407.883418][ T43] usbhid 4-1:0.0: can't add hid device: -32 [ 407.889403][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 407.897291][ C1] syz_tun: tun_net_xmit 118 [ 408.189862][T10749] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.1405'. [ 408.468038][T10751] binder: 10746:10751 unknown command 0 [ 408.473768][T10751] binder: 10746:10751 ioctl c0306201 200000000080 returned -22 [ 408.942999][ C1] syz_tun: tun_net_xmit 118 [ 409.138203][T10754] netlink: 'syz.0.1406': attribute type 9 has an invalid length. [ 409.972876][ C1] syz_tun: tun_net_xmit 118 [ 410.143348][ T863] usb 4-1: USB disconnect, device number 58 [ 410.182307][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.198871][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.712067][T10772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1407'. [ 410.761203][ T2152] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 410.912880][ T2152] usb 4-1: device descriptor read/64, error -71 [ 411.012927][ C1] syz_tun: tun_net_xmit 118 [ 411.132780][ T43] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 411.173024][ T2152] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 411.282842][ T43] usb 1-1: device descriptor read/64, error -71 [ 411.303445][ T2152] usb 4-1: device descriptor read/64, error -71 [ 411.425763][ T2152] usb usb4-port1: attempt power cycle [ 411.572989][ T43] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 411.627104][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.675469][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.743772][ T43] usb 1-1: device descriptor read/64, error -71 [ 411.772921][ T2152] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 411.793321][ T2152] usb 4-1: device descriptor read/8, error -71 [ 411.863073][ T43] usb usb1-port1: attempt power cycle [ 411.920525][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 411.930626][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 411.983289][ T863] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 412.052879][ C1] syz_tun: tun_net_xmit 118 [ 412.058047][ T2152] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 412.083531][ T2152] usb 4-1: device descriptor read/8, error -71 [ 412.143016][ T863] usb 2-1: Using ep0 maxpacket: 32 [ 412.153785][ T863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.174052][ T863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.185808][T10804] binder: 10801:10804 unknown command 0 [ 412.191473][T10804] binder: 10801:10804 ioctl c0306201 200000000080 returned -22 [ 412.201679][ T863] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 412.210981][ T863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.230047][ T2152] usb usb4-port1: unable to enumerate USB device [ 412.230581][ T863] usb 2-1: config 0 descriptor?? [ 412.236855][ T43] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 412.317773][ T863] hub 2-1:0.0: USB hub found [ 412.333721][ T43] usb 1-1: device descriptor read/8, error -71 [ 412.526614][ T863] hub 2-1:0.0: 1 port detected [ 412.592761][ T5943] syz_tun: tun_net_xmit 110 [ 412.622984][ T43] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 412.653382][ T43] usb 1-1: device descriptor read/8, error -71 [ 412.712555][T10807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.773272][ T43] usb usb1-port1: unable to enumerate USB device [ 412.987630][T10814] bond1: (slave dummy0): Releasing active interface [ 413.092991][ C1] syz_tun: tun_net_xmit 118 [ 413.154294][T10817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.167758][T10817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.193212][ T5943] syz_tun: tun_net_xmit 110 [ 413.673646][ T5943] syz_tun: tun_net_xmit 110 [ 413.679459][ T863] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 413.719127][ T863] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 413.763116][ T2152] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 413.767180][ T863] usbhid 2-1:0.0: can't add hid device: -32 [ 413.798589][ T863] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 414.132940][ C1] syz_tun: tun_net_xmit 118 [ 414.146520][ T2152] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 414.187106][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.240436][ T2152] usb 4-1: Product: syz [ 414.255893][ T2152] usb 4-1: Manufacturer: syz [ 414.456321][ T2152] usb 4-1: SerialNumber: syz [ 414.613926][ T10] syz_tun: tun_net_xmit 110 [ 414.973573][ T2152] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 415.005138][ T2152] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 415.015746][ T2152] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 415.031149][ T2152] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 415.118014][ T2152] usb 4-1: USB disconnect, device number 63 [ 415.182868][ C1] syz_tun: tun_net_xmit 118 [ 415.717891][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.759519][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.954039][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 415.956072][ T10] usb 2-1: USB disconnect, device number 56 [ 416.010169][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1429'. [ 416.122874][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 416.131473][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 416.148997][ T43] usb 4-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 416.212860][ C1] syz_tun: tun_net_xmit 118 [ 416.256672][ T43] usb 4-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64 [ 416.300066][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 416.340145][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 416.363700][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.376480][ T43] usb 4-1: Product: syz [ 416.382988][ T43] usb 4-1: Manufacturer: syz [ 416.387598][ T43] usb 4-1: SerialNumber: syz [ 416.409970][T10844] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 416.430316][T10844] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 416.701514][ T43] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8 [ 416.791302][ T43] usb 4-1: USB disconnect, device number 64 [ 416.812960][ T43] usblp0: removed [ 416.977093][T10864] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1434'. [ 417.252944][ C1] syz_tun: tun_net_xmit 118 [ 418.124233][T10859] netlink: 'syz.2.1431': attribute type 2 has an invalid length. [ 418.292892][ C1] syz_tun: tun_net_xmit 118 [ 418.680532][T10872] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.1437'. [ 418.834945][T10874] ======================================================= [ 418.834945][T10874] WARNING: The mand mount option has been deprecated and [ 418.834945][T10874] and is ignored by this kernel. Remove the mand [ 418.834945][T10874] option from the mount to silence this warning. [ 418.834945][T10874] ======================================================= [ 418.910616][T10875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.927968][T10875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.940229][T10877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.950806][T10880] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 418.951005][T10877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.985620][T10880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 419.048225][T10880] bond4: (slave dummy0): making interface the new active one [ 419.079003][T10880] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 419.310060][T10861] cgroup: fork rejected by pids controller in /syz1 [ 419.332902][ C1] syz_tun: tun_net_xmit 118 [ 419.503097][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 419.675884][ T10] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 419.686553][ T10] usb 5-1: config 0 has no interface number 0 [ 419.692642][ T10] usb 5-1: config 0 interface 98 has no altsetting 0 [ 419.705362][ T10] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 419.715274][ T5943] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 419.723012][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.736506][ T10] usb 5-1: Product: syz [ 419.740687][ T10] usb 5-1: Manufacturer: syz [ 419.746484][ T10] usb 5-1: SerialNumber: syz [ 419.759638][ T10] usb 5-1: config 0 descriptor?? [ 419.788783][T10923] syzkaller1: entered promiscuous mode [ 419.796817][T10923] syzkaller1: entered allmulticast mode [ 419.895095][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.908840][ T5943] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 419.921449][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.935107][ T5943] usb 1-1: config 0 descriptor?? [ 419.989377][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.033523][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.140226][ T10] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 420.204072][T10933] FAULT_INJECTION: forcing a failure. [ 420.204072][T10933] name failslab, interval 1, probability 0, space 0, times 0 [ 420.273082][T10933] CPU: 1 UID: 0 PID: 10933 Comm: syz.2.1448 Not tainted syzkaller #0 PREEMPT(full) [ 420.273109][T10933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.273122][T10933] Call Trace: [ 420.273131][T10933] [ 420.273140][T10933] dump_stack_lvl+0x189/0x250 [ 420.273169][T10933] ? __pfx____ratelimit+0x10/0x10 [ 420.273197][T10933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.273222][T10933] ? __pfx__printk+0x10/0x10 [ 420.273252][T10933] ? __lock_acquire+0xab9/0xd20 [ 420.273292][T10933] should_fail_ex+0x414/0x560 [ 420.273324][T10933] should_failslab+0xa8/0x100 [ 420.273355][T10933] kmem_cache_alloc_noprof+0x73/0x3c0 [ 420.273381][T10933] ? skb_clone+0x212/0x3a0 [ 420.273409][T10933] skb_clone+0x212/0x3a0 [ 420.273434][T10933] __netlink_deliver_tap+0x404/0x850 [ 420.273477][T10933] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.273509][T10933] netlink_deliver_tap+0x19c/0x1b0 [ 420.273540][T10933] netlink_unicast+0x7fa/0x9e0 [ 420.273576][T10933] ? __pfx_netlink_unicast+0x10/0x10 [ 420.273604][T10933] ? netlink_sendmsg+0x642/0xb30 [ 420.273632][T10933] ? skb_put+0x11b/0x210 [ 420.273655][T10933] netlink_sendmsg+0x805/0xb30 [ 420.273695][T10933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.273736][T10933] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.273757][T10933] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.273779][T10933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.273810][T10933] __sock_sendmsg+0x21c/0x270 [ 420.273840][T10933] ____sys_sendmsg+0x52d/0x830 [ 420.273868][T10933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.273899][T10933] ? import_iovec+0x74/0xa0 [ 420.273921][T10933] ___sys_sendmsg+0x21f/0x2a0 [ 420.273946][T10933] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.274009][T10933] ? __fget_files+0x2a/0x420 [ 420.274036][T10933] ? __fget_files+0x3a0/0x420 [ 420.274077][T10933] __sys_sendmmsg+0x227/0x430 [ 420.274105][T10933] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.274125][T10933] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 420.274182][T10933] ? ksys_write+0x22a/0x250 [ 420.274212][T10933] ? __pfx_ksys_write+0x10/0x10 [ 420.274245][T10933] __x64_sys_sendmmsg+0xa0/0xc0 [ 420.274269][T10933] do_syscall_64+0xfa/0x3b0 [ 420.274296][T10933] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.274324][T10933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.274343][T10933] ? clear_bhb_loop+0x60/0xb0 [ 420.274368][T10933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.274388][T10933] RIP: 0033:0x7f8aa078ebe9 [ 420.274405][T10933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.274423][T10933] RSP: 002b:00007f8aa1519038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.274445][T10933] RAX: ffffffffffffffda RBX: 00007f8aa09b5fa0 RCX: 00007f8aa078ebe9 [ 420.274460][T10933] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 420.274474][T10933] RBP: 00007f8aa1519090 R08: 0000000000000000 R09: 0000000000000000 [ 420.274487][T10933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.274499][T10933] R13: 00007f8aa09b6038 R14: 00007f8aa09b5fa0 R15: 00007f8aa0adfa28 [ 420.274532][T10933] [ 420.276406][T10933] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 420.376190][ C1] syz_tun: tun_net_xmit 118 [ 421.190790][ T10] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 421.239008][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.412867][ C1] syz_tun: tun_net_xmit 118 [ 421.597802][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.736319][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1450'. [ 421.752670][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1450'. [ 421.761860][ T10] usb 5-1: device descriptor read/64, error -71 [ 421.777311][T10949] netlink: 'syz.1.1450': attribute type 2 has an invalid length. [ 422.173468][ T10] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 422.309754][T10956] dummy0: entered promiscuous mode [ 422.320781][T10956] vlan2: entered promiscuous mode [ 422.452875][ C1] syz_tun: tun_net_xmit 118 [ 422.598772][ T2152] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 422.623260][T10960] loop4: detected capacity change from 0 to 7 [ 422.652185][T10619] Dev loop4: unable to read RDB block 7 [ 422.659882][T10619] loop4: unable to read partition table [ 422.674362][T10619] loop4: partition table beyond EOD, truncated [ 422.701299][T10960] Dev loop4: unable to read RDB block 7 [ 422.738238][T10960] loop4: unable to read partition table [ 422.759258][ T2152] usb 4-1: Using ep0 maxpacket: 8 [ 422.785527][T10960] loop4: partition table beyond EOD, truncated [ 422.793257][ T2152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.822541][T10960] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 422.850587][ T2152] usb 4-1: config 0 has no interfaces? [ 422.868043][ T2152] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 422.885862][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.897183][ T2152] usb 4-1: Product: syz [ 422.901357][ T2152] usb 4-1: Manufacturer: syz [ 422.914909][ T2152] usb 4-1: SerialNumber: syz [ 422.967036][T10963] loop6: detected capacity change from 0 to 7 [ 423.013645][ T2152] usb 4-1: config 0 descriptor?? [ 423.018520][ T10] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 423.033797][ T5943] usbhid 1-1:0.0: can't add hid device: -71 [ 423.047387][T10963] Dev loop6: unable to read RDB block 7 [ 423.064078][T10963] loop6: unable to read partition table [ 423.075618][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 423.084528][ T10] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 423.113038][T10963] loop6: partition table beyond EOD, truncated [ 423.120080][ T863] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 423.138628][ T5943] usb 1-1: USB disconnect, device number 67 [ 423.142013][T10963] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.153848][ T10] usb 5-1: USB disconnect, device number 54 [ 423.160287][ T863] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 423.197522][T10970] loop4: detected capacity change from 0 to 7 [ 423.238829][ T863] ------------[ cut here ]------------ [ 423.244568][ T863] WARNING: CPU: 0 PID: 863 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 423.253064][ T863] Modules linked in: [ 423.257124][ T863] CPU: 0 UID: 0 PID: 863 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 423.266686][ T863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.277369][ T863] Workqueue: events request_firmware_work_func [ 423.283842][ T863] RIP: 0010:kernfs_get+0x72/0x90 [ 423.288798][ T863] Code: e8 53 5e 62 ff 48 89 df be 04 00 00 00 e8 46 cd c5 ff f0 ff 03 eb 05 e8 3c 5e 62 ff 5b 5d e9 d5 3d 1f 09 cc e8 2f 5e 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 45 [ 423.308990][ T863] RSP: 0018:ffffc90003507620 EFLAGS: 00010293 [ 423.315531][ T863] RAX: ffffffff825d4d51 RBX: ffff888056469780 RCX: ffff888024da1e00 [ 423.323860][ T863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.331839][ T863] RBP: 0000000000000000 R08: ffff888056469783 R09: 1ffff1100ac8d2f0 [ 423.340143][ T863] R10: dffffc0000000000 R11: ffffed100ac8d2f1 R12: ffff8880559cf030 [ 423.341922][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.348443][ T863] R13: 1ffff1100ab39e07 R14: ffff8880559cf038 R15: 1ffff1100ab39e06 [ 423.365354][ T863] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 423.366688][T10970] Dev loop4: unable to read RDB block 7 [ 423.374870][ T863] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.386829][ T863] CR2: 000000110c284e87 CR3: 0000000076d0c000 CR4: 00000000003526f0 [ 423.394850][ T863] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 423.402882][ T863] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 423.410863][ T863] Call Trace: [ 423.414237][ T863] [ 423.417196][ T863] kobject_add_internal+0x632/0xb40 [ 423.422424][ T863] kobject_add+0x155/0x220 [ 423.426911][ T863] ? __pfx_kobject_add+0x10/0x10 [ 423.431878][ T863] ? __pfx_kobject_add+0x10/0x10 [ 423.436931][ T863] ? kobject_put+0x43f/0x480 [ 423.441548][ T863] ? get_device_parent+0x366/0x3a0 [ 423.446713][ T863] device_add+0x408/0xb50 [ 423.450745][T10970] loop4: unable to read partition table [ 423.451072][ T863] firmware_fallback_sysfs+0x2e4/0x9b0 [ 423.462150][ T863] _request_firmware+0xf83/0x15b0 [ 423.467158][T10970] loop4: partition table beyond EOD, truncated [ 423.467264][ T863] ? __pfx__request_firmware+0x10/0x10 [ 423.478798][ T863] ? process_scheduled_works+0x9ef/0x17b0 [ 423.484596][ T863] request_firmware_work_func+0xaf/0x1c0 [ 423.490255][ T863] ? process_scheduled_works+0x9ef/0x17b0 [ 423.492876][ C1] syz_tun: tun_net_xmit 118 [ 423.496038][ T863] process_scheduled_works+0xae1/0x17b0 [ 423.506153][ T863] ? __pfx_process_scheduled_works+0x10/0x10 [ 423.512168][ T863] worker_thread+0x8a0/0xda0 [ 423.516848][ T863] kthread+0x70e/0x8a0 [ 423.517322][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.520930][ T863] ? __pfx_worker_thread+0x10/0x10 [ 423.533813][ T863] ? __pfx_kthread+0x10/0x10 [ 423.538416][ T863] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.543645][ T863] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.548853][ T863] ? __pfx_kthread+0x10/0x10 [ 423.553451][ T863] ret_from_fork+0x3f9/0x770 [ 423.558031][ T863] ? __pfx_ret_from_fork+0x10/0x10 [ 423.563171][ T863] ? __switch_to_asm+0x39/0x70 [ 423.568384][ T863] ? __switch_to_asm+0x33/0x70 [ 423.573362][ T863] ? __pfx_kthread+0x10/0x10 [ 423.577978][ T863] ret_from_fork_asm+0x1a/0x30 [ 423.582797][ T863] [ 423.585825][ T863] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 423.593105][ T863] CPU: 0 UID: 0 PID: 863 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 423.602393][ T863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.612439][ T863] Workqueue: events request_firmware_work_func [ 423.618597][ T863] Call Trace: [ 423.621861][ T863] [ 423.624782][ T863] dump_stack_lvl+0x99/0x250 [ 423.629365][ T863] ? __asan_memcpy+0x40/0x70 [ 423.633952][ T863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.639142][ T863] ? __pfx__printk+0x10/0x10 [ 423.643740][ T863] vpanic+0x281/0x750 [ 423.647714][ T863] ? __pfx__printk+0x10/0x10 [ 423.652297][ T863] ? __pfx_vpanic+0x10/0x10 [ 423.656789][ T863] ? is_bpf_text_address+0x26/0x2b0 [ 423.661990][ T863] panic+0xb9/0xc0 [ 423.665705][ T863] ? __pfx_panic+0x10/0x10 [ 423.670126][ T863] __warn+0x31b/0x4b0 [ 423.674095][ T863] ? kernfs_get+0x72/0x90 [ 423.678414][ T863] ? kernfs_get+0x72/0x90 [ 423.682734][ T863] report_bug+0x2be/0x4f0 [ 423.687062][ T863] ? kernfs_get+0x72/0x90 [ 423.691386][ T863] ? kernfs_get+0x72/0x90 [ 423.695703][ T863] ? kernfs_get+0x74/0x90 [ 423.700021][ T863] handle_bug+0x84/0x160 [ 423.704257][ T863] exc_invalid_op+0x1a/0x50 [ 423.708847][ T863] asm_exc_invalid_op+0x1a/0x20 [ 423.713682][ T863] RIP: 0010:kernfs_get+0x72/0x90 [ 423.718607][ T863] Code: e8 53 5e 62 ff 48 89 df be 04 00 00 00 e8 46 cd c5 ff f0 ff 03 eb 05 e8 3c 5e 62 ff 5b 5d e9 d5 3d 1f 09 cc e8 2f 5e 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 45 [ 423.738204][ T863] RSP: 0018:ffffc90003507620 EFLAGS: 00010293 [ 423.744268][ T863] RAX: ffffffff825d4d51 RBX: ffff888056469780 RCX: ffff888024da1e00 [ 423.752230][ T863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 423.760186][ T863] RBP: 0000000000000000 R08: ffff888056469783 R09: 1ffff1100ac8d2f0 [ 423.768148][ T863] R10: dffffc0000000000 R11: ffffed100ac8d2f1 R12: ffff8880559cf030 [ 423.776107][ T863] R13: 1ffff1100ab39e07 R14: ffff8880559cf038 R15: 1ffff1100ab39e06 [ 423.784073][ T863] ? kernfs_get+0x71/0x90 [ 423.788401][ T863] kobject_add_internal+0x632/0xb40 [ 423.793594][ T863] kobject_add+0x155/0x220 [ 423.798010][ T863] ? __pfx_kobject_add+0x10/0x10 [ 423.802945][ T863] ? __pfx_kobject_add+0x10/0x10 [ 423.807875][ T863] ? kobject_put+0x43f/0x480 [ 423.812464][ T863] ? get_device_parent+0x366/0x3a0 [ 423.817567][ T863] device_add+0x408/0xb50 [ 423.821887][ T863] firmware_fallback_sysfs+0x2e4/0x9b0 [ 423.827350][ T863] _request_firmware+0xf83/0x15b0 [ 423.832395][ T863] ? __pfx__request_firmware+0x10/0x10 [ 423.837854][ T863] ? process_scheduled_works+0x9ef/0x17b0 [ 423.843564][ T863] request_firmware_work_func+0xaf/0x1c0 [ 423.849193][ T863] ? process_scheduled_works+0x9ef/0x17b0 [ 423.854900][ T863] process_scheduled_works+0xae1/0x17b0 [ 423.860455][ T863] ? __pfx_process_scheduled_works+0x10/0x10 [ 423.866438][ T863] worker_thread+0x8a0/0xda0 [ 423.871037][ T863] kthread+0x70e/0x8a0 [ 423.875101][ T863] ? __pfx_worker_thread+0x10/0x10 [ 423.880200][ T863] ? __pfx_kthread+0x10/0x10 [ 423.884783][ T863] ? _raw_spin_unlock_irq+0x23/0x50 [ 423.889973][ T863] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.895163][ T863] ? __pfx_kthread+0x10/0x10 [ 423.899747][ T863] ret_from_fork+0x3f9/0x770 [ 423.904328][ T863] ? __pfx_ret_from_fork+0x10/0x10 [ 423.909435][ T863] ? __switch_to_asm+0x39/0x70 [ 423.914192][ T863] ? __switch_to_asm+0x33/0x70 [ 423.918948][ T863] ? __pfx_kthread+0x10/0x10 [ 423.923529][ T863] ret_from_fork_asm+0x1a/0x30 [ 423.928297][ T863] [ 423.931543][ T863] Kernel Offset: disabled [ 423.935849][ T863] Rebooting in 86400 seconds..