last executing test programs: 2m53.995402991s ago: executing program 4 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) 2m53.768548966s ago: executing program 4 (id=971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x700, 0xe, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac00086dd", 0x0, 0x4000}, 0x28) 2m53.542961151s ago: executing program 4 (id=973): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000d00)={'#! ', './file1/../file0', [{0x20, 'cg\xd7~\x14\xec\xb3\xbe\xc0qt\x00'}, {0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d}jEY\x86\x97\x01\xa3\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x8e\xd2\xeb\x12\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13\x00\x00\x00\x00\x00\x00\x00\x00\x16\x90\vT\f\x16Z'}, {0x20, '\xbfz]\'t\x11->\t\xe9+!!\\\x12z\xdb\a\xbf\xf0\x04KR\xd8S{^\xcf\xa5\xc9\x8ax\xd2f\xc4\xa5\xf4\xe8\xc3\xe0RB\x1c\x9e\x19\x7f\xfc\xfb\x93\xef\xf3_\x1c\xcc\xbf}r\xdb-\xeb5\x1b\xb4D\x00\xda\xe41\xa7O\xc7U2\xe4\xe4\x13o\xdd\x190p\fq\x1b\x82\x89gYk\x15\xeb\xd5d\xe5\x86\xaa\xbd\xd7\xd7V\xb5\xc40\x1e\xc9\xa2l\xf24\xd1\xff\a\xf1C\x82\x13_\x05Q\xac.\xe7\xceq\xda\x8b\xf5\x18\xc2\x91\xfa\xb6:G\xcd,\xe7m\xbdW\xec\a\x00\xe0\xeb\x00'/156}, {0x20, '/\x03\x00v/l\xac\x00\x00\x00\x00\x00\x00\x00\xb8\xc9\x19K\x00\x00\xf5\xf8\xe5\xce\x8f\x81\x11\xa6\x06\xff\xeb\x17\xe8\xfe|\xcf2\x90d\v\x13\xd43\x86\xb7w\xe4\v0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000280)=0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@host, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r8, 0x7b0, &(0x7f0000000180)={@hyper, 0x8}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001580)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000003e80)=[{&(0x7f00000012c0)={0x100, 0x3e, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0xef, 0xf3, 0x0, 0x1, [@nested={0x4, 0x54}, @typed={0x8, 0x138, 0x0, 0x0, @fd=r1}, @typed={0x6b, 0x7, 0x0, 0x0, @binary="050c51e6115c27021d304477d1b00eebebd97749707681cbb59824c4a0c2407280771d877384410282cfa136dae35182a2e8953aa1b528ad4b0a5daf1b23ade659d0be2786a87123b598d95a64faf02e198aaa75b7b8ef7c9fc544a15337d6c4f4d292ddd0c2bf"}, @generic="d6fa2aed9a6e0e46b94e397e76f69536dbaf1786d67e7f81777014c02c24e623e47431e1592e6a1c28a411dcd2c864995443b9efe40152c8eb61a17a2879ad514e3acb8ca3b40972ba7aa2f7372b57c952a01e65671ed53f235337343df57772e488bfb70a06ed", @typed={0xc, 0x110, 0x0, 0x0, @u64=0x7}]}]}, 0x100}, {&(0x7f0000002600)={0x11e0, 0x40, 0x0, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x34, 0x116, 0x0, 0x0, @binary="dfc716b97e79535e705cfc2700c15aca28abec6bc7c4c2d2d05ded2987cf4bcf453e822d81ce9752b38f9f2220c030e4"}, @generic="9f93c3e5096bc2ef228761643f3a87a06db4fb2abf095dfae7d4906fae73d6146b5ddc1c3d527b1547daa0079a0680601cc393810cf98fc20b236c722606a800f3bdd4417dfc621a1c0cf92bae180a4b234ce1c89b5bd96cf68861b95299cda3d348101e96bc0b3e3284efbca1e09c47dc8b246086bcba84b72b6d89c37444cb59aaef82c46853bc1624f74c7e4bd6946623a90a592bcefcdb1a65c115116a7fb51e0fad05a33cf6afcf7ab3ffdffa1b9fe5638663a6", @nested={0xc, 0xda, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid=r5}]}, @typed={0x8, 0xca, 0x0, 0x0, @uid=r6}, @nested={0xb1, 0x103, 0x0, 0x1, [@nested={0x4, 0x67}, @nested={0x4, 0x35}, @nested={0x4, 0xae}, @typed={0x4, 0xf7}, @generic="b780eafe7a6263f4c62f9d76647eea6d68b65e547c921b35112cecda18a904b9230869043d32d1ed5be8966f318ba59496ce21aa4e988fe80009fd6b48cbf9ca88f5eb3f746928b51573df01f8d70a0e20ec731a5090e4492dbc089f8bc1c1c1dc34cb29b7d16798ee568b9ade598cb633757f4ce3f820b4a9e63b08cf9b056a6567912afd09adbecead8cf87347099194a028fb4f", @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="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", @generic="b94a8cabfdc40a70d7dc7efcf49ddb17ce1bfddca17f97c52c3b0d5f55f5"]}, 0x11e0}, {&(0x7f0000001400)={0x144, 0x3e, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x80}, @generic="744876ebfbec2a92c7db0a663c5db9de950e419efebad088c92423cc23d86d94d8eb72a88fac5a04f42606f25ec060c6621349970e8c11304e9dca06ac09cec1129570c26027ec5607a134121799cf5e6d899d260b577244887fb3029da66f88df7bb8c9f00b758439abaf91ad19ae18670a7a5a476330611607cf2dee5589299b2f373348b5fff667b168b531ce82fd288e7dd025473a84be1dd7bea8e926e200162f0f8a269f9b5e665b8054", @generic="7b6189fd9f4611b8bb06f3aa0706460ecc7e10e227c352ac2f98c8db2ed32b38e021a92bf3ff51f81aec4ea7c6ffe98583a151c355c2b08050a0e015ced1eb29c8ce43a3dd5a47c49e94fce50089b07b446ac87a74ad7ed29aee3ebc6dcf2044311dd6659136f64bf8", @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x144}, {&(0x7f0000003800)={0xf0, 0x14, 0x820, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x17, 0x0, 0x0, @fd}, @typed={0x4, 0x19}, @generic, @nested={0xd2, 0xe4, 0x0, 0x1, [@generic="5683e558d563b46f7b2ace36e364528a0d18e11cc161c7bfe78122e68a232c1a353473a57b3ca3797064ccee611ab6b3eb0d3dbccc7c321cd1b1113fe77bf6d6770d972cd7fce86a83aaa28e1870db4d38d4db12058f1072fbd9c73c41d527a058fbf7f177759fb45b89a056448d7802025d294daee4aac731ce3a006774543413bd5115968c1bc5cfcb76d2a7faf56ccf31b1b14b955611e15a4e5bfda96c931cd970ec8df93e0bb3e8977b04ce0a376cda66310f7918d28f51d791b3f3197211aec3bd7e5d", @typed={0x4, 0xe0}, @nested={0x4, 0x138}]}]}, 0xf0}, {&(0x7f00000001c0)={0x10, 0x23, 0x400, 0x70bd29, 0x25dfdbff}, 0x10}, {&(0x7f0000003a00)={0x16c, 0x16, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x77, 0xae, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @fd}, @generic="c22bd4c8fce228c45fd9056df6195b67fbf2", @generic="57c609f5a02363986277d30c544edcf5e9db12e70d647ba9161c24d9e212d790ec1ba3a262310c9a509a7d33d50840291cc25a74076f74003e2a6d2b45ee89acd0baad0bcf47ca25f4d81c779ef06b097c2c52003d450d80e9"]}, @nested={0x4, 0xe9}, @generic="1fa55c0d6bc47346b18f0ff3c7cc6b62bc23f94e8b0a7cf35773e9d95c65259f829e0accbc645d320789b3f7ea5aed4aa13a61c32182ec4548e677d3e3f804c7fc9f5774cb05c3bd54cce1f01c4517613f6910f1efef99509b0cbe36dc23d5043d2481afa73aa0abbbdd7c644a33f3028eb706d4793d00a4786cee360df89660e45df332bb292a0b838b3a424b76194ee38812eda3548355adad5a5de3e39963ccee569e8c54e430f09552ced8bb88706e76016810f0268049049054ffd5d8e6b0b4b808f034f5879b", @nested={0x14, 0xcb, 0x0, 0x1, [@nested={0x4, 0x137}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r7}, @generic, @nested={0x4, 0x53}]}]}, 0x16c}], 0x6, 0x0, 0x0, 0x20008800}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0xf0, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000180)={0x18, 0x0, {0x1, @local, 'veth1_to_batadv\x00'}}, 0x1e) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000001600)={{}, "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"}) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 2m53.129504087s ago: executing program 4 (id=976): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x14040050}, 0x0) 2m52.859206333s ago: executing program 4 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000000100)={0x1f}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xffffff7d, @private1, 0x400}}}, &(0x7f0000000080)=0x84) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "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"}, 0x158) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r9, r7, 0x0, 0x100000002) r11 = socket(0x1e, 0x1, 0x0) getpeername$packet(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 2m37.743181617s ago: executing program 32 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000000100)={0x1f}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000100)=r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x48, 0xfffffffe, 0xc11, 0x7, 0x20000, 0x0, 0xf}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xffffff7d, @private1, 0x400}}}, &(0x7f0000000080)=0x84) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "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"}, 0x158) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r9, r7, 0x0, 0x100000002) r11 = socket(0x1e, 0x1, 0x0) getpeername$packet(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 1m15.265451843s ago: executing program 2 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) r7 = socket$alg(0x26, 0x5, 0x0) accept4(r7, 0x0, 0x0, 0x0) fcntl$addseals(r6, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) 1m14.152028697s ago: executing program 3 (id=1633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000ffff1801000020206925000000cf362020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x7ffd}}}, 0x118) 1m13.689413258s ago: executing program 3 (id=1634): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.50259593s ago: executing program 0 (id=1636): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_ACCEPT_LIST={{0x1}, 0x2}}}, 0x7) 1m13.207589767s ago: executing program 3 (id=1637): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x3f20}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.101996052s ago: executing program 0 (id=1638): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0x21, 0x80000, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20181, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r5, 0x80045104, &(0x7f0000000040)) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x3000, 0x8, 0xffffffffffffffff, 0xe}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getcwd(&(0x7f0000000900)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000002010102000000ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x8814) 1m12.860921356s ago: executing program 1 (id=1639): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x6, 0xd, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x5, 0x12, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e21, 0x4, @loopback, 0x7}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0x80000004, "000000ecffffff00", "20e48560999fd132b6a5426180a8c27af10600000000d36debccd20352346f8f"}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) times(0xfffffffffffffffe) get_mempolicy(0x0, 0x0, 0x5, &(0x7f00006db000/0x4000)=nil, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 1m11.814618568s ago: executing program 1 (id=1640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) 1m11.215033161s ago: executing program 1 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r3, 0x0, 0x0, 0x81, 0x7) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$dri(0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) epoll_create(0x3) 1m10.005716801s ago: executing program 2 (id=1643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x3a2}], 0x1}}], 0x1, 0x11) close(r0) 1m9.228549702s ago: executing program 5 (id=1646): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7982b8f57fb20a3adc9", 0x1b, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x90) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m8.705195147s ago: executing program 2 (id=1647): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1, 0x0, 0x0) 1m8.180512977s ago: executing program 2 (id=1648): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_create(0x0, 0x80000) 1m7.694094496s ago: executing program 2 (id=1649): mmap(&(0x7f00000a3000/0x2000)=nil, 0x2000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60", @ANYBLOB="0000000000008000"], 0x50}}, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x117) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1m7.538075386s ago: executing program 0 (id=1650): mmap(&(0x7f00000a3000/0x2000)=nil, 0x2000, 0x1, 0x10010, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60", @ANYBLOB="0000000000008000"], 0x50}}, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x117) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001140)=@req={0x6f, 0x10001, 0x5, 0x8}, 0x10) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1m6.414974267s ago: executing program 5 (id=1651): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) syz_usb_connect$uac1(0x1, 0x8a, 0x0, 0x0) 1m5.547933719s ago: executing program 3 (id=1652): openat$audio(0xffffff9c, 0x0, 0x402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) prctl$PR_MCE_KILL_GET(0x22) socket(0x10, 0x80002, 0x0) unshare(0x20040600) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x509543, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xef, &(0x7f00000059c0)="40bda32247968c6139126ec0900855252430ae872defa11473d63346447419885614679af1b21c19f78f62a564a68869c5a8b86f15c9c8165cf8f5cd6c0f5e96258cca71b0defac3b59a3d541d2b4e7a5a8dd8d41264c7d031820d68c2d913a53f12e4ff4c3dd42f29dc12237e3323c0574a81733302ea0708d315785b02dd492ccc5234efbc206c58ed6d57f63304584af4515b49ee44dfb7336259377e65bbe957133e4e6f3289c86bf33b14df8385477c66e9676052bcf06536fb29d93248223bc9e60d9503b1a553159e32f2e677346f77c2f64115b4d97581eff5eb223ed74fbd9e0e52862287180aabd1c81f"}], 0x1}) 1m4.861960527s ago: executing program 1 (id=1653): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x80900) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) 1m4.061321548s ago: executing program 1 (id=1654): syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x40}, {0x0, 0xc8, 0x9, 0xa}}}}, 0xf) 1m3.782405702s ago: executing program 2 (id=1655): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) fanotify_init(0x20, 0x800) inotify_init1(0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r6, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}, {0x5, 0xf, 0xfd, 0xfe, @time={0x9, 0x9}, {0x3}, {0xfe, 0x1}, @quote={{0xf, 0x25}, 0x4}}], 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) socket$alg(0x26, 0x5, 0x0) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) 1m3.173304306s ago: executing program 3 (id=1656): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x6, 0xd, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x5, 0x12, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e21, 0x4, @loopback, 0x7}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0x80000004, "000000ecffffff00", "20e48560999fd132b6a5426180a8c27af10600000000d36debccd20352346f8f"}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m3.173087804s ago: executing program 0 (id=1657): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1c4099287", 0x18}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="102000"], 0x10}}], 0x2, 0x0) 1m3.172862461s ago: executing program 1 (id=1658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x2000, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200, 0x3f20}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}]}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000000)="8eee", 0x2}, 0x68) 1m3.114306878s ago: executing program 5 (id=1659): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1m2.610507762s ago: executing program 5 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m2.610274959s ago: executing program 0 (id=1661): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc-serpent-sse2\x00'}}}]}, 0x138}}, 0x0) 1m2.471953331s ago: executing program 3 (id=1662): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x0, 0x9, 0xe49, 0x2, 0x3, 0x3865, 0x4, 0xc, 0x1, 0x100, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)="d93db731205681d52d10713337237ab8f409e9d0286ac4f933a70765062bd617b586b1232882b4bd1d68", 0xf000}, {0x0, 0xffffffc0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1m2.35069594s ago: executing program 5 (id=1663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m2.105726453s ago: executing program 0 (id=1664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x233a, 0x0, 0x0, 0x41) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4000002, 0x258bd4, 0x2e7883}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000008c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x334e8b}) close_range(r1, 0xffffffffffffffff, 0x0) 1m1.960695965s ago: executing program 5 (id=1665): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020400) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xcc, &(0x7f0000000c80)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f00000000c0)="1a80", 0x0}, 0x20) sched_setscheduler(r3, 0x2, &(0x7f0000000400)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(r0, 0x84, 0x11, 0x0, 0x0) 0s ago: executing program 33 (id=1664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x233a, 0x0, 0x0, 0x41) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x4000002, 0x258bd4, 0x2e7883}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000008c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x0, 0x334e8b}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): y_hcd [ 240.241214][ T8635] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 240.327540][ T5895] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 240.337667][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 240.346473][ T5893] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 240.360365][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.382012][ T5893] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 240.397252][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 240.426066][ T5893] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 240.443790][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.461540][ T5893] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 240.473475][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 240.489452][ T5893] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 240.503141][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 240.507576][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 240.523374][ T5895] usb 5-1: config 3 has an invalid interface number: 171 but max is 29 [ 240.532773][ T5895] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 30 [ 240.544046][ T5895] usb 5-1: config 3 has no interface number 0 [ 240.553014][ T5895] usb 5-1: config 3 interface 171 altsetting 108 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.555468][ T5893] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 240.563701][ T5895] usb 5-1: config 3 interface 171 has no altsetting 0 [ 240.680405][ T5895] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 240.689679][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 240.697928][ T5893] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 240.698837][ T5895] usb 5-1: Product: syz [ 240.715715][ T5895] usb 5-1: Manufacturer: syz [ 240.720879][ T5895] usb 5-1: SerialNumber: syz [ 240.742889][ T5893] usb 2-1: string descriptor 0 read error: -22 [ 240.749565][ T5893] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.758943][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.784506][ T5893] adutux 2-1:168.0: interrupt endpoints not found [ 241.063404][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.091681][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.230180][ T5893] usb 2-1: USB disconnect, device number 29 [ 241.460846][ T5893] usb 4-1: USB disconnect, device number 35 [ 241.496694][ T5893] usblp0: removed [ 243.366051][ T5895] as10x_usb: device has been detected [ 243.401137][ T5895] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 243.595168][ T5895] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 243.758792][ T5895] as10x_usb: error during firmware upload part1 [ 243.781660][ T5895] Registered device Sky IT Digital Key (green led) [ 243.796345][ T5895] usb 5-1: USB disconnect, device number 22 [ 243.981592][ T5895] Unregistered device Sky IT Digital Key (green led) [ 243.984854][ T5895] as10x_usb: device has been disconnected [ 244.407699][ T5895] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 244.605544][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.648370][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.664776][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 244.676233][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.686833][ T5895] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 244.696502][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.704926][ T5941] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 244.737559][ T5895] usb 5-1: config 0 descriptor?? [ 244.879068][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 244.907810][ T8709] fuse: Bad value for 'fd' [ 244.921895][ T5941] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 244.948036][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.010465][ T5941] usb 4-1: Product: syz [ 245.014749][ T5941] usb 4-1: Manufacturer: syz [ 245.037650][ T5941] usb 4-1: SerialNumber: syz [ 245.049439][ T5941] usb 4-1: config 0 descriptor?? [ 245.193888][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 245.311287][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 245.353856][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 245.381833][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 245.461833][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: unknown main item tag 0x0 [ 245.513282][ T5941] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 245.603592][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 245.618072][ T5941] usb 4-1: USB disconnect, device number 36 [ 245.693970][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: U2F Zero LED initialised [ 245.741398][ T5895] hid-u2fzero 0003:10C4:8ACF.0008: U2F Zero RNG initialised [ 245.816283][ T5895] usb 5-1: USB disconnect, device number 23 [ 245.893036][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'. [ 246.070731][ T8722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.199075][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 246.213026][ T8722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.961'. [ 246.428171][ T8734] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 246.626224][ T8722] team0 (unregistering): Port device team_slave_0 removed [ 246.666463][ T8722] team0 (unregistering): Port device team_slave_1 removed [ 246.740534][ T8734] team0: Device hsr_slave_0 failed to register rx_handler [ 246.826595][ T5941] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 246.930046][ T8740] fuse: Bad value for 'fd' [ 246.991356][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.034058][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.095728][ T8742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 247.121257][ T5941] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 247.148900][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.196028][ T5941] usb 2-1: config 0 descriptor?? [ 248.088616][ T5839] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 248.277644][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 248.306827][ T5839] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 248.336863][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.358456][ T5839] usb 4-1: Product: syz [ 248.374526][ T5839] usb 4-1: Manufacturer: syz [ 248.385383][ T5839] usb 4-1: SerialNumber: syz [ 248.403183][ T5839] usb 4-1: config 0 descriptor?? [ 248.812859][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.824599][ T5839] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 248.839370][ T5839] usb 4-1: USB disconnect, device number 37 [ 248.874307][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.293508][ T8775] FAULT_INJECTION: forcing a failure. [ 249.293508][ T8775] name failslab, interval 1, probability 0, space 0, times 0 [ 249.306613][ T8775] CPU: 0 UID: 0 PID: 8775 Comm: syz.0.984 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 249.306643][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.306671][ T8775] Call Trace: [ 249.306681][ T8775] [ 249.306690][ T8775] dump_stack_lvl+0x189/0x250 [ 249.306730][ T8775] ? __pfx____ratelimit+0x10/0x10 [ 249.306761][ T8775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.306795][ T8775] ? __pfx__printk+0x10/0x10 [ 249.306824][ T8775] ? __pfx___might_resched+0x10/0x10 [ 249.306851][ T8775] should_fail_ex+0x414/0x560 [ 249.306889][ T8775] should_failslab+0xa8/0x100 [ 249.306915][ T8775] __kmalloc_noprof+0xcb/0x4f0 [ 249.306935][ T8775] ? __kasan_kmalloc+0x93/0xb0 [ 249.306954][ T8775] ? nla_strdup+0x9d/0x140 [ 249.306981][ T8775] nla_strdup+0x9d/0x140 [ 249.307006][ T8775] nf_tables_newtable+0x491/0x1890 [ 249.307032][ T8775] ? nfnetlink_subsys_unregister+0x181/0x1b0 [ 249.307085][ T8775] nfnetlink_rcv+0x112f/0x2520 [ 249.307152][ T8775] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 249.307203][ T8775] ? ref_tracker_free+0x63a/0x7d0 [ 249.307264][ T8775] ? __netlink_deliver_tap+0x807/0x850 [ 249.307299][ T8775] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.307323][ T8775] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.307354][ T8775] netlink_unicast+0x75b/0x8d0 [ 249.307388][ T8775] netlink_sendmsg+0x805/0xb30 [ 249.307424][ T8775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.307452][ T8775] ? aa_sock_msg_perm+0x94/0x160 [ 249.307484][ T8775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.307511][ T8775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.307554][ T8775] __sock_sendmsg+0x219/0x270 [ 249.307591][ T8775] ____sys_sendmsg+0x505/0x830 [ 249.307623][ T8775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.307660][ T8775] ? import_iovec+0x74/0xa0 [ 249.307690][ T8775] ___sys_sendmsg+0x21f/0x2a0 [ 249.307719][ T8775] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.307788][ T8775] ? __fget_files+0x2a/0x420 [ 249.307813][ T8775] ? __fget_files+0x3a0/0x420 [ 249.307851][ T8775] __x64_sys_sendmsg+0x19b/0x260 [ 249.307882][ T8775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.307920][ T8775] ? __pfx_ksys_write+0x10/0x10 [ 249.307938][ T8775] ? rcu_is_watching+0x15/0xb0 [ 249.307963][ T8775] ? do_syscall_64+0xbe/0x3b0 [ 249.308000][ T8775] do_syscall_64+0xfa/0x3b0 [ 249.308031][ T8775] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.308063][ T8775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.308086][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 249.308114][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.308136][ T8775] RIP: 0033:0x7f29ec18e969 [ 249.308157][ T8775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.308176][ T8775] RSP: 002b:00007f29ed0d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.308201][ T8775] RAX: ffffffffffffffda RBX: 00007f29ec3b5fa0 RCX: 00007f29ec18e969 [ 249.308217][ T8775] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 249.308238][ T8775] RBP: 00007f29ed0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 249.308253][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.308266][ T8775] R13: 0000000000000000 R14: 00007f29ec3b5fa0 R15: 00007f29ec4dfa28 [ 249.308300][ T8775] [ 250.135344][ T8787] binder: BINDER_SET_CONTEXT_MGR already set [ 250.141589][ T8787] binder: 8783:8787 ioctl 4018620d 200000000040 returned -16 [ 250.709896][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 250.767747][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 251.355873][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.992'. [ 251.656139][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 251.675862][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 251.716409][ T5941] usb 2-1: USB disconnect, device number 30 [ 251.976774][ T8803] loop8: detected capacity change from 0 to 7 [ 252.002198][ T8803] Dev loop8: unable to read RDB block 7 [ 252.016472][ T8803] loop8: unable to read partition table [ 252.023214][ T8803] loop8: partition table beyond EOD, truncated [ 252.040890][ T8803] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 252.040890][ T8803] ) failed (rc=-5) [ 252.270140][ T5941] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 252.447610][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 252.468008][ T5941] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 252.492975][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.502763][ T5941] usb 2-1: Product: syz [ 252.506997][ T5941] usb 2-1: Manufacturer: syz [ 252.512107][ T5941] usb 2-1: SerialNumber: syz [ 252.528544][ T5941] usb 2-1: config 0 descriptor?? [ 252.615687][ T8829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 252.697685][ T5895] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 252.847574][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 252.864915][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.881666][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.892365][ T5895] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 252.901773][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.913907][ T5895] usb 4-1: config 0 descriptor?? [ 252.944879][ T5941] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 252.974769][ T5941] usb 2-1: USB disconnect, device number 31 [ 253.333853][ T5895] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 253.586453][ T5895] corsair 0003:1B1C:1B02.0009: Failed to get K90 initial state (error -71). [ 253.598651][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'. [ 253.612305][ T5895] usb 4-1: USB disconnect, device number 38 [ 253.649911][ T8845] input: syz1 as /devices/virtual/input/input9 [ 253.679660][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 253.956627][ T8853] veth0_to_batadv: entered promiscuous mode [ 253.966534][ T8853] veth0_to_batadv: left promiscuous mode [ 254.152727][ T8856] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 254.617660][ T5890] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 254.767523][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 254.793929][ T5890] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 254.805252][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.815628][ T5890] usb 2-1: Product: syz [ 254.820167][ T5890] usb 2-1: Manufacturer: syz [ 254.824806][ T5890] usb 2-1: SerialNumber: syz [ 254.832986][ T5890] usb 2-1: config 0 descriptor?? [ 255.242567][ T5890] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 255.258421][ T5890] usb 2-1: USB disconnect, device number 32 [ 255.431252][ T8882] syzkaller1: entered promiscuous mode [ 255.436773][ T8882] syzkaller1: entered allmulticast mode [ 255.444437][ T8882] raw_sendmsg: syz.0.1026 forgot to set AF_INET. Fix it! [ 255.772354][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778808][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.080208][ T8904] FAULT_INJECTION: forcing a failure. [ 256.080208][ T8904] name failslab, interval 1, probability 0, space 0, times 0 [ 256.093980][ T8904] CPU: 1 UID: 0 PID: 8904 Comm: syz.0.1035 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 256.094008][ T8904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.094022][ T8904] Call Trace: [ 256.094029][ T8904] [ 256.094038][ T8904] dump_stack_lvl+0x189/0x250 [ 256.094076][ T8904] ? __pfx____ratelimit+0x10/0x10 [ 256.094107][ T8904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.094140][ T8904] ? __pfx__printk+0x10/0x10 [ 256.094167][ T8904] ? __pfx___might_resched+0x10/0x10 [ 256.094188][ T8904] ? fs_reclaim_acquire+0x7d/0x100 [ 256.094219][ T8904] should_fail_ex+0x414/0x560 [ 256.094258][ T8904] should_failslab+0xa8/0x100 [ 256.094282][ T8904] __kmalloc_cache_noprof+0x70/0x3d0 [ 256.094304][ T8904] ? nft_trans_table_add+0x56/0x430 [ 256.094339][ T8904] nft_trans_table_add+0x56/0x430 [ 256.094376][ T8904] nf_tables_newtable+0xce3/0x1890 [ 256.094426][ T8904] nfnetlink_rcv+0x112f/0x2520 [ 256.094493][ T8904] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 256.094543][ T8904] ? ref_tracker_free+0x63a/0x7d0 [ 256.094597][ T8904] ? __netlink_deliver_tap+0x807/0x850 [ 256.094633][ T8904] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.094657][ T8904] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.094688][ T8904] netlink_unicast+0x75b/0x8d0 [ 256.094728][ T8904] netlink_sendmsg+0x805/0xb30 [ 256.094765][ T8904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.094798][ T8904] ? aa_sock_msg_perm+0x94/0x160 [ 256.094831][ T8904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.094868][ T8904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.094895][ T8904] __sock_sendmsg+0x219/0x270 [ 256.094931][ T8904] ____sys_sendmsg+0x505/0x830 [ 256.094964][ T8904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.095001][ T8904] ? import_iovec+0x74/0xa0 [ 256.095032][ T8904] ___sys_sendmsg+0x21f/0x2a0 [ 256.095061][ T8904] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.095129][ T8904] ? __fget_files+0x2a/0x420 [ 256.095153][ T8904] ? __fget_files+0x3a0/0x420 [ 256.095191][ T8904] __x64_sys_sendmsg+0x19b/0x260 [ 256.095220][ T8904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.095257][ T8904] ? __pfx_ksys_write+0x10/0x10 [ 256.095275][ T8904] ? rcu_is_watching+0x15/0xb0 [ 256.095301][ T8904] ? do_syscall_64+0xbe/0x3b0 [ 256.095338][ T8904] do_syscall_64+0xfa/0x3b0 [ 256.095368][ T8904] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.095398][ T8904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.095419][ T8904] ? clear_bhb_loop+0x60/0xb0 [ 256.095445][ T8904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.095466][ T8904] RIP: 0033:0x7f29ec18e969 [ 256.095485][ T8904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.095505][ T8904] RSP: 002b:00007f29ed0d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.095528][ T8904] RAX: ffffffffffffffda RBX: 00007f29ec3b5fa0 RCX: 00007f29ec18e969 [ 256.095543][ T8904] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 256.095557][ T8904] RBP: 00007f29ed0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 256.095569][ T8904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.095582][ T8904] R13: 0000000000000000 R14: 00007f29ec3b5fa0 R15: 00007f29ec4dfa28 [ 256.095615][ T8904] [ 256.607516][ T5890] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 256.777549][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 256.795283][ T5890] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 256.809853][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.856175][ T5890] usb 2-1: Product: syz [ 256.872619][ T5890] usb 2-1: Manufacturer: syz [ 256.882757][ T5890] usb 2-1: SerialNumber: syz [ 256.903427][ T5890] usb 2-1: config 0 descriptor?? [ 256.913016][ T8925] veth0_to_batadv: entered promiscuous mode [ 256.939458][ T8925] veth0_to_batadv: left promiscuous mode [ 257.122386][ T5890] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 257.487543][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 257.637548][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 257.644369][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 257.656525][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 257.665773][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 257.673994][ T10] usb 4-1: Product: syz [ 257.678332][ T10] usb 4-1: Manufacturer: syz [ 257.682961][ T10] usb 4-1: SerialNumber: syz [ 257.910969][ T10] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 257.947122][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 257.956968][ T10] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 257.965126][ T10] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 258.107170][ T10] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 258.127297][ T10] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 258.142950][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 258.162437][ T10] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 258.182544][ T10] usb 4-1: USB disconnect, device number 39 [ 258.201062][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 258.243350][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 258.267203][ T10] visor 4-1:1.0: device disconnected [ 258.382215][ T8948] 8021q: VLANs not supported on caif0 [ 259.115385][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 259.125334][ T8961] bridge_slave_1: left allmulticast mode [ 259.131662][ T8961] bridge_slave_1: left promiscuous mode [ 259.138191][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.150514][ T8961] bridge_slave_0: left allmulticast mode [ 259.165461][ T8961] bridge_slave_0: left promiscuous mode [ 259.185866][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.371287][ T5890] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 259.505075][ T8964] capability: warning: `:' uses 32-bit capabilities (legacy support in use) [ 259.712495][ T10] usb 2-1: USB disconnect, device number 33 [ 260.247675][ T5890] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 260.406884][ T8982] loop8: detected capacity change from 0 to 7 [ 260.423228][ T5890] usb 4-1: config 0 has no interfaces? [ 260.447900][ T5969] Dev loop8: unable to read RDB block 7 [ 260.453656][ T5969] loop8: unable to read partition table [ 260.461242][ T5969] loop8: partition table beyond EOD, truncated [ 260.476343][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 260.489873][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.498508][ T8982] Dev loop8: unable to read RDB block 7 [ 260.512748][ T5890] usb 4-1: Product: syz [ 260.516997][ T5890] usb 4-1: Manufacturer: syz [ 260.517698][ T8982] loop8: unable to read partition table [ 260.532962][ T8982] loop8: partition table beyond EOD, truncated [ 260.539531][ T5890] usb 4-1: SerialNumber: syz [ 260.540074][ T8982] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 260.540074][ T8982] ) failed (rc=-5) [ 260.572657][ T5890] usb 4-1: config 0 descriptor?? [ 261.024415][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'. [ 261.950672][ T9009] 8021q: VLANs not supported on caif0 [ 262.210409][ T9020] netlink: 'syz.0.1079': attribute type 10 has an invalid length. [ 262.222838][ T9020] team0: Device hsr_slave_0 failed to register rx_handler [ 262.548244][ T9029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.965305][ T5891] usb 4-1: USB disconnect, device number 40 [ 263.201137][ T9049] loop8: detected capacity change from 0 to 7 [ 263.227283][ T9049] Dev loop8: unable to read RDB block 7 [ 263.237210][ T9049] loop8: unable to read partition table [ 263.253996][ T9049] loop8: partition table beyond EOD, truncated [ 263.282729][ T9049] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 263.282729][ T9049] ) failed (rc=-5) [ 263.654422][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 263.665017][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 263.915274][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.924810][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.936558][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.946690][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.955909][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.998517][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1100'. [ 264.388247][ T9088] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1103'. [ 264.455081][ T9098] FAULT_INJECTION: forcing a failure. [ 264.455081][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 264.471051][ T9098] CPU: 1 UID: 0 PID: 9098 Comm: syz.1.1107 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 264.471081][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.471095][ T9098] Call Trace: [ 264.471103][ T9098] [ 264.471112][ T9098] dump_stack_lvl+0x189/0x250 [ 264.471148][ T9098] ? __pfx____ratelimit+0x10/0x10 [ 264.471179][ T9098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.471212][ T9098] ? __pfx__printk+0x10/0x10 [ 264.471237][ T9098] ? __pfx___might_resched+0x10/0x10 [ 264.471257][ T9098] ? fs_reclaim_acquire+0x7d/0x100 [ 264.471288][ T9098] should_fail_ex+0x414/0x560 [ 264.471325][ T9098] should_failslab+0xa8/0x100 [ 264.471368][ T9098] __kmalloc_node_noprof+0xd1/0x4e0 [ 264.471403][ T9098] ? alloc_slab_obj_exts+0x39/0xa0 [ 264.471427][ T9098] alloc_slab_obj_exts+0x39/0xa0 [ 264.471446][ T9098] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 264.471492][ T9098] ? kasan_unpoison+0x48/0x70 [ 264.471527][ T9098] __kmalloc_cache_noprof+0x2d2/0x3d0 [ 264.471547][ T9098] ? nf_tables_newchain+0xef1/0x2900 [ 264.471579][ T9098] nf_tables_newchain+0xef1/0x2900 [ 264.471623][ T9098] ? __pfx_nf_tables_newchain+0x10/0x10 [ 264.471682][ T9098] ? nfnl_pernet+0x23/0x240 [ 264.471719][ T9098] ? __nla_parse+0x40/0x60 [ 264.471745][ T9098] nfnetlink_rcv+0x112f/0x2520 [ 264.471817][ T9098] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 264.471885][ T9098] ? ref_tracker_free+0x63a/0x7d0 [ 264.471939][ T9098] ? __netlink_deliver_tap+0x807/0x850 [ 264.471974][ T9098] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.471998][ T9098] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.472034][ T9098] netlink_unicast+0x75b/0x8d0 [ 264.472069][ T9098] netlink_sendmsg+0x805/0xb30 [ 264.472104][ T9098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.472134][ T9098] ? aa_sock_msg_perm+0x94/0x160 [ 264.472168][ T9098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.472196][ T9098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.472222][ T9098] __sock_sendmsg+0x219/0x270 [ 264.472259][ T9098] ____sys_sendmsg+0x505/0x830 [ 264.472292][ T9098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.472329][ T9098] ? import_iovec+0x74/0xa0 [ 264.472360][ T9098] ___sys_sendmsg+0x21f/0x2a0 [ 264.472390][ T9098] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.472458][ T9098] ? __fget_files+0x2a/0x420 [ 264.472483][ T9098] ? __fget_files+0x3a0/0x420 [ 264.472520][ T9098] __x64_sys_sendmsg+0x19b/0x260 [ 264.472550][ T9098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.472588][ T9098] ? __pfx_ksys_write+0x10/0x10 [ 264.472607][ T9098] ? rcu_is_watching+0x15/0xb0 [ 264.472633][ T9098] ? do_syscall_64+0xbe/0x3b0 [ 264.472670][ T9098] do_syscall_64+0xfa/0x3b0 [ 264.472701][ T9098] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.472731][ T9098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.472753][ T9098] ? clear_bhb_loop+0x60/0xb0 [ 264.472779][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.472830][ T9098] RIP: 0033:0x7fd8da18e969 [ 264.472850][ T9098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.472869][ T9098] RSP: 002b:00007fd8db0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.472893][ T9098] RAX: ffffffffffffffda RBX: 00007fd8da3b5fa0 RCX: 00007fd8da18e969 [ 264.472909][ T9098] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 264.472923][ T9098] RBP: 00007fd8db0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 264.472936][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.472949][ T9098] R13: 0000000000000000 R14: 00007fd8da3b5fa0 R15: 00007fd8da4dfa28 [ 264.472982][ T9098] [ 264.826924][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.933368][ T9079] chnl_net:caif_netlink_parms(): no params data found [ 265.031616][ T9103] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1108'. [ 265.129637][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.136935][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.144356][ T9079] bridge_slave_0: entered allmulticast mode [ 265.152936][ T9079] bridge_slave_0: entered promiscuous mode [ 265.162790][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.170103][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.177442][ T9079] bridge_slave_1: entered allmulticast mode [ 265.185416][ T9079] bridge_slave_1: entered promiscuous mode [ 265.299125][ T5893] usb 4-1: new low-speed USB device number 41 using dummy_hcd [ 265.357790][ T9079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.410431][ T9079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.476900][ T5893] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 265.491430][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.522909][ T5893] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.553179][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.595124][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.624618][ T5893] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 265.636912][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.663726][ T5893] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.684477][ T9079] team0: Port device team_slave_0 added [ 265.694849][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 265.696976][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.711991][ T9079] team0: Port device team_slave_1 added [ 265.749057][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.762996][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 265.773818][ T5893] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 265.784182][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.807454][ T5893] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.833553][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 265.861672][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.875816][ T5893] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.894866][ T5893] usb 4-1: string descriptor 0 read error: -22 [ 265.905129][ T5893] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.905778][ T9079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.919387][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.957058][ T9079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.997064][ T9079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.018314][ T5893] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 266.021225][ T5847] Bluetooth: hci5: command tx timeout [ 266.111043][ T9079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.123500][ T9079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.181000][ T9079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.213897][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.241350][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.264411][ T5893] usb 4-1: USB disconnect, device number 41 [ 266.352737][ T9079] hsr_slave_0: entered promiscuous mode [ 266.361433][ T9079] hsr_slave_1: entered promiscuous mode [ 266.368308][ T9079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.376967][ T9079] Cannot create hsr debugfs directory [ 266.676420][ T9079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.697339][ T9079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 266.710441][ T9079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 266.725669][ T9079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 266.894607][ T9079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.939194][ T9079] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.952723][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.961058][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.042272][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.049559][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.180763][ T9079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.256049][ T9079] veth0_vlan: entered promiscuous mode [ 267.285111][ T9079] veth1_vlan: entered promiscuous mode [ 267.335126][ T9079] veth0_macvtap: entered promiscuous mode [ 267.346399][ T9079] veth1_macvtap: entered promiscuous mode [ 267.367239][ T9079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.386384][ T9079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.402745][ T9150] bridge0: entered promiscuous mode [ 267.423260][ T9079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.435828][ T9079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.445721][ T9079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.456356][ T9079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.586346][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.604131][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.646961][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.656061][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.097864][ T5847] Bluetooth: hci5: command tx timeout [ 268.135511][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 268.708282][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1127'. [ 268.717374][ T9172] bridge_slave_1: left allmulticast mode [ 268.765129][ T9172] bridge_slave_1: left promiscuous mode [ 268.782263][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.794289][ T9172] bridge_slave_0: left allmulticast mode [ 268.803105][ T9172] bridge_slave_0: left promiscuous mode [ 268.809200][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.957520][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 269.227582][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 269.236277][ T9] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 269.246870][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.278239][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.287359][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.302026][ T9] usb 4-1: Product: ᠁ [ 269.306581][ T9] usb 4-1: Manufacturer: 澃揇薎즘ɼꌬ쇨젗駺届떐᥼怗޳਒蓕䄳䖱띌䴝弽熴嚆䪐码픏䒬묭໺藝␋⢰鯤䁸骃쥁쾶਍⏅ͱ籎㈉⠟籅쮳ဩ튛쒄稲骎虸⚠䰓₼୵䭪ʬ衁ꥨ㒯⯠⪔ÉQˆ盎컮㨯쒧∋ぱⱹ㮻孜๿⠰聛 [ 269.364186][ T9] usb 4-1: SerialNumber: < [ 269.404797][ T5891] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 269.584813][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 269.596100][ T5891] usb 2-1: can't read configurations, error -61 [ 269.756614][ T5891] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 269.983055][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 269.997736][ T5891] usb 2-1: can't read configurations, error -61 [ 270.004606][ T5891] usb usb2-port1: attempt power cycle [ 270.177858][ T5847] Bluetooth: hci5: command tx timeout [ 270.221056][ T9] usb 4-1: 0:2 : does not exist [ 270.341882][ T9] usb 4-1: USB disconnect, device number 42 [ 270.359301][ T5891] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 270.372843][ T9195] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1137'. [ 270.396803][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.442253][ T9192] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 270.442253][ T9192] program syz.0.1137 not setting count and/or reply_len properly [ 270.475206][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 270.501720][ T5891] usb 2-1: can't read configurations, error -61 [ 270.687600][ T5891] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 270.779759][ T5891] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 270.787736][ T5891] usb 2-1: can't read configurations, error -61 [ 270.794941][ T5891] usb usb2-port1: unable to enumerate USB device [ 270.832834][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 270.899637][ T9203] FAULT_INJECTION: forcing a failure. [ 270.899637][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 270.912690][ T9203] CPU: 1 UID: 0 PID: 9203 Comm: syz.2.1140 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 270.912718][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.912732][ T9203] Call Trace: [ 270.912740][ T9203] [ 270.912749][ T9203] dump_stack_lvl+0x189/0x250 [ 270.912789][ T9203] ? __pfx____ratelimit+0x10/0x10 [ 270.912822][ T9203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.912854][ T9203] ? __pfx__printk+0x10/0x10 [ 270.912884][ T9203] ? __pfx___might_resched+0x10/0x10 [ 270.912908][ T9203] should_fail_ex+0x414/0x560 [ 270.912945][ T9203] ? nf_tables_newchain+0x1b7e/0x2900 [ 270.912971][ T9203] should_failslab+0xa8/0x100 [ 270.912996][ T9203] __kvmalloc_node_noprof+0x168/0x600 [ 270.913020][ T9203] ? nf_tables_newchain+0x1b7e/0x2900 [ 270.913052][ T9203] nf_tables_newchain+0x1b7e/0x2900 [ 270.913096][ T9203] ? __pfx_nf_tables_newchain+0x10/0x10 [ 270.913161][ T9203] ? nfnl_pernet+0x23/0x240 [ 270.913203][ T9203] ? __nla_parse+0x40/0x60 [ 270.913231][ T9203] nfnetlink_rcv+0x112f/0x2520 [ 270.913310][ T9203] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 270.913404][ T9203] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.913438][ T9203] netlink_unicast+0x75b/0x8d0 [ 270.913471][ T9203] netlink_sendmsg+0x805/0xb30 [ 270.913506][ T9203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.913535][ T9203] ? aa_sock_msg_perm+0x94/0x160 [ 270.913573][ T9203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.913600][ T9203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.913626][ T9203] __sock_sendmsg+0x219/0x270 [ 270.913660][ T9203] ____sys_sendmsg+0x505/0x830 [ 270.913692][ T9203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.913727][ T9203] ? import_iovec+0x74/0xa0 [ 270.913758][ T9203] ___sys_sendmsg+0x21f/0x2a0 [ 270.913788][ T9203] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.913849][ T9203] ? __fget_files+0x2a/0x420 [ 270.913872][ T9203] ? __fget_files+0x3a0/0x420 [ 270.913907][ T9203] __x64_sys_sendmsg+0x19b/0x260 [ 270.913936][ T9203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.913972][ T9203] ? __pfx_ksys_write+0x10/0x10 [ 270.913990][ T9203] ? rcu_is_watching+0x15/0xb0 [ 270.914015][ T9203] ? do_syscall_64+0xbe/0x3b0 [ 270.914052][ T9203] do_syscall_64+0xfa/0x3b0 [ 270.914081][ T9203] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.914110][ T9203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.914131][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 270.914157][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.914178][ T9203] RIP: 0033:0x7fd79498e969 [ 270.914197][ T9203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.914216][ T9203] RSP: 002b:00007fd79571d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.914238][ T9203] RAX: ffffffffffffffda RBX: 00007fd794bb5fa0 RCX: 00007fd79498e969 [ 270.914263][ T9203] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 270.914276][ T9203] RBP: 00007fd79571d090 R08: 0000000000000000 R09: 0000000000000000 [ 270.914289][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.914302][ T9203] R13: 0000000000000000 R14: 00007fd794bb5fa0 R15: 00007fd794cdfa28 [ 270.914334][ T9203] [ 271.237989][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 271.278458][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 271.294003][ T24] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 271.319603][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.334421][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.577834][ T24] usb 3-1: USB disconnect, device number 13 [ 271.589167][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 271.642839][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.787329][ T10] usb 4-1: config 0 descriptor?? [ 271.919851][ T9209] SET target dimension over the limit! [ 272.020937][ T9211] loop8: detected capacity change from 0 to 7 [ 272.036439][ T5969] Dev loop8: unable to read RDB block 7 [ 272.052594][ T5969] loop8: unable to read partition table [ 272.084266][ T5969] loop8: partition table beyond EOD, truncated [ 272.212493][ T9211] Dev loop8: unable to read RDB block 7 [ 272.218910][ T9211] loop8: unable to read partition table [ 272.235501][ T9211] loop8: partition table beyond EOD, truncated [ 272.240595][ T10] kye 0003:0458:501B.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 272.258845][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 272.277568][ T5847] Bluetooth: hci5: command tx timeout [ 272.287999][ T9211] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 272.287999][ T9211] ) failed (rc=-5) [ 272.388044][ T10] kye 0003:0458:501B.000A: hidraw0: USB HID v3.ff Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 272.473502][ T10] kye 0003:0458:501B.000A: tablet-enabling feature report not found [ 272.494218][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 272.525325][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 272.555898][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.589419][ T10] kye 0003:0458:501B.000A: tablet enabling failed [ 272.602456][ T24] usb 3-1: config 0 descriptor?? [ 272.641090][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 272.661371][ T10] usb 4-1: USB disconnect, device number 43 [ 272.888224][ T5839] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 273.043125][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'. [ 273.071648][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1142'. [ 273.081856][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 273.093809][ T24] gspca_sonixj: reg_r err -71 [ 273.103938][ T5839] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 273.115405][ T5839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.125692][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.139744][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.150612][ T5839] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.157811][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 273.165232][ T5839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.227172][ T24] usb 3-1: USB disconnect, device number 14 [ 273.230513][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.257309][ T3552] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.457029][ T3552] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.515841][ T5839] usb 2-1: usb_control_msg returned -71 [ 273.524958][ T5839] usbtmc 2-1:16.0: can't read capabilities [ 273.556242][ T5839] usb 2-1: USB disconnect, device number 38 [ 273.593537][ T3552] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.604774][ T5891] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 273.736122][ T3552] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.787601][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 273.804668][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.829234][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.843305][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 273.867549][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.884565][ T5891] usb 4-1: Product: syz [ 273.889389][ T5891] usb 4-1: Manufacturer: syz [ 273.905270][ T5891] usb 4-1: SerialNumber: syz [ 274.132792][ T3552] bridge_slave_1: left allmulticast mode [ 274.152190][ T3552] bridge_slave_1: left promiscuous mode [ 274.168353][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.226922][ T3552] bridge_slave_0: left allmulticast mode [ 274.292026][ T3552] bridge_slave_0: left promiscuous mode [ 274.299354][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.317645][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 274.440342][ T9220] hfs: unable to load iocharset "io#harset" [ 274.458409][ T5891] usb 4-1: 0:2 : does not exist [ 274.549810][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 274.576635][ T5891] usb 4-1: USB disconnect, device number 44 [ 274.613302][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 274.687360][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.728079][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 274.767521][ T24] usb 6-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 274.807207][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.877259][ T24] usb 6-1: config 0 descriptor?? [ 275.173327][ T9271] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.311588][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.330420][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.377606][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.417158][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.459615][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.503460][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.692544][ T24] a4tech 0003:09DA:001A.000B: unknown main item tag 0x0 [ 275.750957][ T24] a4tech 0003:09DA:001A.000B: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.5-1/input0 [ 275.958242][ T5839] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 276.141638][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 276.149037][ T5839] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 276.161399][ T5839] usb 2-1: config 0 has no interface number 0 [ 276.176499][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.198448][ T5839] usb 2-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 276.213799][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.234035][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.248258][ T5839] usb 2-1: Product: syz [ 276.264050][ T5839] usb 2-1: Manufacturer: syz [ 276.278462][ T3552] bond0 (unregistering): Released all slaves [ 276.292240][ T5839] usb 2-1: SerialNumber: syz [ 276.321889][ T5839] usb 2-1: config 0 descriptor?? [ 276.342001][ T5839] io_ti 2-1:0.215: required endpoints missing [ 276.525765][ T5941] usb 6-1: USB disconnect, device number 2 [ 276.684151][ T5839] usb 2-1: USB disconnect, device number 39 [ 277.098207][ T9293] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 277.129247][ T9293] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.199056][ T9293] bond0: (slave team0): Enslaving as an active interface with an up link [ 277.278901][ T5839] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 277.342035][ T3552] hsr_slave_0: left promiscuous mode [ 277.354722][ T3552] hsr_slave_1: left promiscuous mode [ 277.394692][ T9304] loop6: detected capacity change from 0 to 7 [ 277.419836][ T9304] Dev loop6: unable to read RDB block 7 [ 277.425767][ T9304] loop6: unable to read partition table [ 277.447724][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 277.454614][ T3552] veth1_macvtap: left promiscuous mode [ 277.461733][ T9304] loop6: partition table beyond EOD, truncated [ 277.478846][ T5839] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 277.488781][ T3552] veth0_macvtap: left promiscuous mode [ 277.494499][ T9304] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 277.521658][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.540016][ T3552] veth1_vlan: left promiscuous mode [ 277.568098][ T5839] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.608364][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.677327][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.735444][ T5839] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 277.753665][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 277.798457][ T5839] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.858339][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.906158][ T9318] random: crng reseeded on system resumption [ 277.923992][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 277.968241][ T5839] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 277.976342][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 278.040014][ T5839] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.080814][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.108700][ T5839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.165454][ T5839] usb 4-1: string descriptor 0 read error: -22 [ 278.185565][ T5839] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 278.217706][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.273585][ T5839] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 278.974892][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 279.717700][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1179'. [ 279.732905][ T3552] team_slave_1 (unregistering): left promiscuous mode [ 279.750197][ T3552] team0 (unregistering): Port device team_slave_1 removed [ 279.832530][ T3552] team_slave_0 (unregistering): left promiscuous mode [ 279.851176][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 280.668042][ T5890] usb 4-1: USB disconnect, device number 45 [ 281.013022][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 282.474634][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1190'. [ 282.647995][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 282.840725][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 282.864612][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.882668][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.895927][ T9401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'. [ 282.920252][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 282.933604][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.962180][ T24] usb 2-1: Product: syz [ 283.000679][ T24] usb 2-1: Manufacturer: syz [ 283.021762][ T24] usb 2-1: SerialNumber: syz [ 283.490165][ T9393] hfs: unable to load iocharset "io#harset" [ 283.504070][ T24] usb 2-1: 0:2 : does not exist [ 283.556256][ T9413] netlink: 'syz.5.1195': attribute type 10 has an invalid length. [ 283.607316][ T24] usb 2-1: USB disconnect, device number 40 [ 283.640373][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.688254][ T9413] bond0: (slave team0): Enslaving as an active interface with an up link [ 283.707303][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.279683][ T9422] random: crng reseeded on system resumption [ 284.743924][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 284.774796][ T9441] xt_hashlimit: max too large, truncated to 1048576 [ 284.810091][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 284.843128][ T9441] binder: 9440:9441 ioctl c0306201 2000000003c0 returned -14 [ 285.554230][ T9469] macsec2: entered promiscuous mode [ 285.579459][ T9469] dummy0: entered promiscuous mode [ 285.584863][ T9469] macsec2: entered allmulticast mode [ 285.641330][ T9469] dummy0: entered allmulticast mode [ 285.676429][ T9469] dummy0: left allmulticast mode [ 285.714465][ T9469] dummy0: left promiscuous mode [ 285.869265][ T9481] AppArmor: change_hat: Invalid input '0x' [ 285.903976][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 286.121843][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 286.297807][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 286.357599][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 286.570240][ T9502] FAULT_INJECTION: forcing a failure. [ 286.570240][ T9502] name failslab, interval 1, probability 0, space 0, times 0 [ 286.629531][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.5.1223 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 286.629576][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.629590][ T9502] Call Trace: [ 286.629598][ T9502] [ 286.629607][ T9502] dump_stack_lvl+0x189/0x250 [ 286.629644][ T9502] ? __pfx____ratelimit+0x10/0x10 [ 286.629675][ T9502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.629708][ T9502] ? __pfx__printk+0x10/0x10 [ 286.629736][ T9502] ? __pfx___might_resched+0x10/0x10 [ 286.629774][ T9502] ? fs_reclaim_acquire+0x7d/0x100 [ 286.629806][ T9502] should_fail_ex+0x414/0x560 [ 286.629843][ T9502] should_failslab+0xa8/0x100 [ 286.629877][ T9502] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 286.629899][ T9502] ? __pfx_nf_tables_abort+0x10/0x10 [ 286.629924][ T9502] ? __alloc_skb+0x112/0x2d0 [ 286.629953][ T9502] __alloc_skb+0x112/0x2d0 [ 286.629981][ T9502] netlink_ack+0x146/0xa50 [ 286.630010][ T9502] ? __kasan_kmalloc+0x93/0xb0 [ 286.630042][ T9502] nfnetlink_rcv+0x2290/0x2520 [ 286.630108][ T9502] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 286.630158][ T9502] ? ref_tracker_free+0x63a/0x7d0 [ 286.630211][ T9502] ? __netlink_deliver_tap+0x807/0x850 [ 286.630245][ T9502] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.630269][ T9502] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.630299][ T9502] netlink_unicast+0x75b/0x8d0 [ 286.630333][ T9502] netlink_sendmsg+0x805/0xb30 [ 286.630368][ T9502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.630409][ T9502] ? aa_sock_msg_perm+0x94/0x160 [ 286.630441][ T9502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.630475][ T9502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.630501][ T9502] __sock_sendmsg+0x219/0x270 [ 286.630536][ T9502] ____sys_sendmsg+0x505/0x830 [ 286.630567][ T9502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.630603][ T9502] ? import_iovec+0x74/0xa0 [ 286.630633][ T9502] ___sys_sendmsg+0x21f/0x2a0 [ 286.630660][ T9502] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.630724][ T9502] ? __fget_files+0x2a/0x420 [ 286.630747][ T9502] ? __fget_files+0x3a0/0x420 [ 286.630783][ T9502] __x64_sys_sendmsg+0x19b/0x260 [ 286.630812][ T9502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.630848][ T9502] ? __pfx_ksys_write+0x10/0x10 [ 286.630872][ T9502] ? rcu_is_watching+0x15/0xb0 [ 286.630897][ T9502] ? do_syscall_64+0xbe/0x3b0 [ 286.630933][ T9502] do_syscall_64+0xfa/0x3b0 [ 286.630963][ T9502] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.630992][ T9502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.631012][ T9502] ? clear_bhb_loop+0x60/0xb0 [ 286.631037][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.631055][ T9502] RIP: 0033:0x7f934198e969 [ 286.631075][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.631093][ T9502] RSP: 002b:00007f933f7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.631115][ T9502] RAX: ffffffffffffffda RBX: 00007f9341bb5fa0 RCX: 00007f934198e969 [ 286.631131][ T9502] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 286.631144][ T9502] RBP: 00007f933f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.631157][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.631169][ T9502] R13: 0000000000000000 R14: 00007f9341bb5fa0 R15: 00007f9341cdfa28 [ 286.631199][ T9502] [ 286.992769][ T9508] loop8: detected capacity change from 0 to 7 [ 287.015917][ T9508] Dev loop8: unable to read RDB block 7 [ 287.021753][ T9508] loop8: unable to read partition table [ 287.028385][ T9508] loop8: partition table beyond EOD, truncated [ 287.034594][ T9508] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 287.034594][ T9508] ) failed (rc=-5) [ 287.586111][ T9515] FAULT_INJECTION: forcing a failure. [ 287.586111][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 287.629776][ T9515] CPU: 0 UID: 0 PID: 9515 Comm: syz.3.1229 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 287.629813][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.629826][ T9515] Call Trace: [ 287.629835][ T9515] [ 287.629844][ T9515] dump_stack_lvl+0x189/0x250 [ 287.629884][ T9515] ? __pfx____ratelimit+0x10/0x10 [ 287.629916][ T9515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.629950][ T9515] ? __pfx__printk+0x10/0x10 [ 287.629981][ T9515] ? __pfx___might_resched+0x10/0x10 [ 287.630021][ T9515] should_fail_ex+0x414/0x560 [ 287.630060][ T9515] ? seq_read_iter+0x1fd/0xe10 [ 287.630091][ T9515] should_failslab+0xa8/0x100 [ 287.630117][ T9515] __kvmalloc_node_noprof+0x168/0x600 [ 287.630142][ T9515] ? seq_read_iter+0x1fd/0xe10 [ 287.630180][ T9515] seq_read_iter+0x1fd/0xe10 [ 287.630211][ T9515] ? aa_file_perm+0x11f/0xed0 [ 287.630235][ T9515] ? aa_file_perm+0x11f/0xed0 [ 287.630258][ T9515] ? __asan_memset+0x22/0x50 [ 287.630296][ T9515] seq_read+0x2e2/0x3d0 [ 287.630338][ T9515] ? __pfx_seq_read+0x10/0x10 [ 287.630370][ T9515] ? __debugfs_file_get+0x5dd/0x710 [ 287.630397][ T9515] ? __pfx___debugfs_file_get+0x10/0x10 [ 287.630434][ T9515] full_proxy_read+0x153/0x220 [ 287.630461][ T9515] ? __pfx_full_proxy_read+0x10/0x10 [ 287.630487][ T9515] vfs_read+0x1fd/0x980 [ 287.630514][ T9515] ? __pfx___mutex_lock+0x10/0x10 [ 287.630548][ T9515] ? __pfx_vfs_read+0x10/0x10 [ 287.630570][ T9515] ? __fget_files+0x2a/0x420 [ 287.630601][ T9515] ? __fget_files+0x3a0/0x420 [ 287.630624][ T9515] ? __fget_files+0x2a/0x420 [ 287.630659][ T9515] ksys_read+0x145/0x250 [ 287.630683][ T9515] ? __pfx_ksys_read+0x10/0x10 [ 287.630701][ T9515] ? rcu_is_watching+0x15/0xb0 [ 287.630727][ T9515] ? do_syscall_64+0xbe/0x3b0 [ 287.630765][ T9515] do_syscall_64+0xfa/0x3b0 [ 287.630800][ T9515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.630819][ T9515] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.630841][ T9515] ? clear_bhb_loop+0x60/0xb0 [ 287.630868][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.630889][ T9515] RIP: 0033:0x7ff21178e969 [ 287.630910][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.630928][ T9515] RSP: 002b:00007ff21264a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.630951][ T9515] RAX: ffffffffffffffda RBX: 00007ff2119b5fa0 RCX: 00007ff21178e969 [ 287.630967][ T9515] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000004 [ 287.630981][ T9515] RBP: 00007ff21264a090 R08: 0000000000000000 R09: 0000000000000000 [ 287.630994][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.631013][ T9515] R13: 0000000000000000 R14: 00007ff2119b5fa0 R15: 00007ff211adfa28 [ 287.631047][ T9515] [ 288.197876][ T9522] veth0_to_batadv: entered promiscuous mode [ 288.204046][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.212750][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 288.220542][ T5839] usb 3-1: can't read configurations, error -71 [ 288.256390][ T9522] veth0_to_batadv: left promiscuous mode [ 288.488065][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 288.547755][ T5941] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 288.658325][ T5890] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 288.665714][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 288.680649][ T9] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 288.688086][ T5941] usb 4-1: device descriptor read/64, error -71 [ 288.693048][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.715441][ T9] usb 6-1: Product: syz [ 288.727485][ T9] usb 6-1: Manufacturer: syz [ 288.732150][ T9] usb 6-1: SerialNumber: syz [ 288.758640][ T9] usb 6-1: config 0 descriptor?? [ 288.782692][ T9] as10x_usb: device has been detected [ 288.794981][ T9] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 288.830075][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 288.847645][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.868431][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 288.877720][ T5890] usb 2-1: config 0 has no interfaces? [ 288.887157][ T5890] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 288.907610][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.912624][ T9] as10x_usb: error during firmware upload part1 [ 288.927449][ T5890] usb 2-1: Product: syz [ 288.931824][ T5890] usb 2-1: Manufacturer: syz [ 288.936471][ T5890] usb 2-1: SerialNumber: syz [ 288.952159][ T9] Registered device Sky IT Digital Key (green led) [ 288.964660][ T5890] usb 2-1: config 0 descriptor?? [ 288.978506][ T5941] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 288.996577][ T9] usb 6-1: USB disconnect, device number 3 [ 289.119067][ T9] Unregistered device Sky IT Digital Key (green led) [ 289.125030][ T9] as10x_usb: device has been disconnected [ 289.127748][ T5941] usb 4-1: device descriptor read/64, error -71 [ 289.245146][ T9528] vlan2: entered promiscuous mode [ 289.258073][ T5941] usb usb4-port1: attempt power cycle [ 289.356965][ T5891] usb 2-1: USB disconnect, device number 41 [ 289.444492][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 289.608160][ T5941] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 289.638437][ T5941] usb 4-1: device descriptor read/8, error -71 [ 289.897493][ T5941] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 289.956557][ T5941] usb 4-1: device descriptor read/8, error -71 [ 289.963674][ T9565] bond0: Unable to set down delay as MII monitoring is disabled [ 290.017291][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.028355][ T5839] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.033231][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 290.055739][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.065796][ T9571] FAULT_INJECTION: forcing a failure. [ 290.065796][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 290.071969][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.088488][ T9565] fuse: Unknown parameter 'Group_id' [ 290.098717][ T5941] usb usb4-port1: unable to enumerate USB device [ 290.106437][ T9571] CPU: 0 UID: 0 PID: 9571 Comm: syz.1.1242 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 290.106467][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.106481][ T9571] Call Trace: [ 290.106490][ T9571] [ 290.106499][ T9571] dump_stack_lvl+0x189/0x250 [ 290.106552][ T9571] ? __pfx____ratelimit+0x10/0x10 [ 290.106584][ T9571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.106618][ T9571] ? __pfx__printk+0x10/0x10 [ 290.106647][ T9571] ? __pfx___might_resched+0x10/0x10 [ 290.106673][ T9571] should_fail_ex+0x414/0x560 [ 290.106711][ T9571] should_failslab+0xa8/0x100 [ 290.106738][ T9571] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 290.106761][ T9571] ? __alloc_skb+0x112/0x2d0 [ 290.106787][ T9571] __alloc_skb+0x112/0x2d0 [ 290.106815][ T9571] netlink_sendmsg+0x5c6/0xb30 [ 290.106851][ T9571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.106880][ T9571] ? aa_sock_msg_perm+0x94/0x160 [ 290.106915][ T9571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.106942][ T9571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.106966][ T9571] __sock_sendmsg+0x219/0x270 [ 290.107001][ T9571] ____sys_sendmsg+0x505/0x830 [ 290.107033][ T9571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.107067][ T9571] ? import_iovec+0x74/0xa0 [ 290.107096][ T9571] ___sys_sendmsg+0x21f/0x2a0 [ 290.107123][ T9571] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.107186][ T9571] ? __fget_files+0x2a/0x420 [ 290.107211][ T9571] ? __fget_files+0x3a0/0x420 [ 290.107246][ T9571] __x64_sys_sendmsg+0x19b/0x260 [ 290.107275][ T9571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.107312][ T9571] ? __pfx_ksys_write+0x10/0x10 [ 290.107330][ T9571] ? rcu_is_watching+0x15/0xb0 [ 290.107356][ T9571] ? do_syscall_64+0xbe/0x3b0 [ 290.107407][ T9571] do_syscall_64+0xfa/0x3b0 [ 290.107435][ T9571] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.107464][ T9571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.107485][ T9571] ? clear_bhb_loop+0x60/0xb0 [ 290.107509][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.107537][ T9571] RIP: 0033:0x7fd8da18e969 [ 290.107555][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.107573][ T9571] RSP: 002b:00007fd8db0a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.107595][ T9571] RAX: ffffffffffffffda RBX: 00007fd8da3b5fa0 RCX: 00007fd8da18e969 [ 290.107610][ T9571] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 290.107623][ T9571] RBP: 00007fd8db0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 290.107635][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.107648][ T9571] R13: 0000000000000000 R14: 00007fd8da3b5fa0 R15: 00007fd8da4dfa28 [ 290.107679][ T9571] [ 290.108328][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.442028][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.478237][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 290.494497][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.514716][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.529998][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.544452][ T5839] usb 3-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 290.550966][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 290.556559][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.587585][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.604888][ T5839] usb 3-1: Product: syz [ 290.619897][ T5839] usb 3-1: Manufacturer: syz [ 290.624569][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.641513][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.647530][ T5839] usb 3-1: SerialNumber: syz [ 290.661663][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.737641][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 290.765809][ T5891] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 290.783626][ T5891] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 290.801537][ T5891] usb 6-1: config 1 interface 0 has no altsetting 0 [ 290.821188][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.841376][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.850684][ T5891] usb 6-1: Product: ф [ 290.854828][ T5891] usb 6-1: Manufacturer: 죢窖鏡ኙ頓⃹佦䟿ެ络Ὸ픬쥇ଽ⬢Ǟ砚돔娦⨱睠༌Ԅ踝䛰೻贺뇦ঙ𜐙匙庲쑗雮컨現糈碲乚랝犏牅橹ᦺ揌ㅆ樼靶䎳텣럧⿵蛜겖损⳹㛾혱ᄓ퀡蕋巜傖嵄谩綃㬴鿽ﲴ砞ጌ柸量흪毠놇폹춆벿䮺읖鑨ᓅ퐘珒衙ꍘ梂鷃閸趪잗卞怓潖왅孱鳁酭륞 [ 290.931273][ T5891] usb 6-1: SerialNumber: ࠖ [ 290.976288][ T9569] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 291.003818][ T9569] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 291.032927][ T9588] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1245'. [ 291.045327][ T9559] hfs: unable to load iocharset "io#harset" [ 291.066863][ T5839] usb 3-1: 0:2 : does not exist [ 291.169619][ T5839] usb 3-1: USB disconnect, device number 17 [ 291.320245][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.398500][ T5891] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 291.473057][ T5891] usb 6-1: USB disconnect, device number 4 [ 292.230618][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 292.272410][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 292.384941][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 292.921881][ T9630] FAULT_INJECTION: forcing a failure. [ 292.921881][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 292.921940][ T9630] CPU: 1 UID: 0 PID: 9630 Comm: syz.5.1256 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 292.921965][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.921980][ T9630] Call Trace: [ 292.921988][ T9630] [ 292.921997][ T9630] dump_stack_lvl+0x189/0x250 [ 292.922035][ T9630] ? __pfx____ratelimit+0x10/0x10 [ 292.922067][ T9630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.922101][ T9630] ? __pfx__printk+0x10/0x10 [ 292.922124][ T9630] ? __might_fault+0xb0/0x130 [ 292.922159][ T9630] should_fail_ex+0x414/0x560 [ 292.922199][ T9630] _copy_to_iter+0x3f5/0x16f0 [ 292.922236][ T9630] ? __pfx__copy_to_iter+0x10/0x10 [ 292.922276][ T9630] ? stats_show+0x604/0x620 [ 292.922295][ T9630] ? seq_read_iter+0x1fd/0xe10 [ 292.922333][ T9630] seq_read_iter+0xbeb/0xe10 [ 292.922388][ T9630] seq_read+0x2e2/0x3d0 [ 292.922431][ T9630] ? __pfx_seq_read+0x10/0x10 [ 292.922464][ T9630] ? __debugfs_file_get+0x5dd/0x710 [ 292.922491][ T9630] ? __pfx___debugfs_file_get+0x10/0x10 [ 292.922529][ T9630] full_proxy_read+0x153/0x220 [ 292.922555][ T9630] ? __pfx_full_proxy_read+0x10/0x10 [ 292.922581][ T9630] vfs_read+0x1fd/0x980 [ 292.922608][ T9630] ? __pfx___mutex_lock+0x10/0x10 [ 292.922642][ T9630] ? __pfx_vfs_read+0x10/0x10 [ 292.922665][ T9630] ? __fget_files+0x2a/0x420 [ 292.922695][ T9630] ? __fget_files+0x3a0/0x420 [ 292.922719][ T9630] ? __fget_files+0x2a/0x420 [ 292.922754][ T9630] ksys_read+0x145/0x250 [ 292.922778][ T9630] ? __pfx_ksys_read+0x10/0x10 [ 292.922795][ T9630] ? rcu_is_watching+0x15/0xb0 [ 292.922822][ T9630] ? do_syscall_64+0xbe/0x3b0 [ 292.922859][ T9630] do_syscall_64+0xfa/0x3b0 [ 292.922891][ T9630] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.922921][ T9630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.922942][ T9630] ? clear_bhb_loop+0x60/0xb0 [ 292.922969][ T9630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.922990][ T9630] RIP: 0033:0x7f934198e969 [ 292.923009][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.923028][ T9630] RSP: 002b:00007f933f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.923051][ T9630] RAX: ffffffffffffffda RBX: 00007f9341bb5fa0 RCX: 00007f934198e969 [ 292.923067][ T9630] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000004 [ 292.923080][ T9630] RBP: 00007f933f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.923093][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.923105][ T9630] R13: 0000000000000000 R14: 00007f9341bb5fa0 R15: 00007f9341cdfa28 [ 292.923138][ T9630] [ 293.621619][ T9642] FAULT_INJECTION: forcing a failure. [ 293.621619][ T9642] name failslab, interval 1, probability 0, space 0, times 0 [ 293.621656][ T9642] CPU: 0 UID: 0 PID: 9642 Comm: syz.2.1259 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 293.621674][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.621683][ T9642] Call Trace: [ 293.621690][ T9642] [ 293.621696][ T9642] dump_stack_lvl+0x189/0x250 [ 293.621724][ T9642] ? __pfx____ratelimit+0x10/0x10 [ 293.621747][ T9642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.621771][ T9642] ? __pfx__printk+0x10/0x10 [ 293.621790][ T9642] ? __pfx___might_resched+0x10/0x10 [ 293.621804][ T9642] ? fs_reclaim_acquire+0x7d/0x100 [ 293.621826][ T9642] should_fail_ex+0x414/0x560 [ 293.621853][ T9642] should_failslab+0xa8/0x100 [ 293.621872][ T9642] __kmalloc_noprof+0xcb/0x4f0 [ 293.621887][ T9642] ? tomoyo_encode+0x28b/0x550 [ 293.621906][ T9642] tomoyo_encode+0x28b/0x550 [ 293.621924][ T9642] tomoyo_realpath_from_path+0x58d/0x5d0 [ 293.621950][ T9642] tomoyo_check_open_permission+0x1c1/0x3b0 [ 293.621970][ T9642] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 293.621985][ T9642] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 293.622006][ T9642] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 293.622025][ T9642] ? __x64_sys_open+0x11e/0x150 [ 293.622077][ T9642] ? tomoyo_file_open+0x165/0x220 [ 293.622098][ T9642] security_file_open+0xb1/0x270 [ 293.622119][ T9642] do_dentry_open+0x35e/0x1970 [ 293.622151][ T9642] vfs_open+0x3b/0x340 [ 293.622168][ T9642] ? path_openat+0x2ecd/0x3830 [ 293.622192][ T9642] path_openat+0x2ee5/0x3830 [ 293.622212][ T9642] ? arch_stack_walk+0xfc/0x150 [ 293.622258][ T9642] ? __pfx_path_openat+0x10/0x10 [ 293.622280][ T9642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.622310][ T9642] do_filp_open+0x1fa/0x410 [ 293.622331][ T9642] ? __lock_acquire+0xab9/0xd20 [ 293.622354][ T9642] ? __pfx_do_filp_open+0x10/0x10 [ 293.622400][ T9642] ? _raw_spin_unlock+0x28/0x50 [ 293.622419][ T9642] ? alloc_fd+0x64c/0x6c0 [ 293.622444][ T9642] do_sys_openat2+0x121/0x1c0 [ 293.622465][ T9642] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.622486][ T9642] ? ksys_write+0x22a/0x250 [ 293.622503][ T9642] ? __pfx_ksys_write+0x10/0x10 [ 293.622517][ T9642] ? rcu_is_watching+0x15/0xb0 [ 293.622534][ T9642] __x64_sys_open+0x11e/0x150 [ 293.622558][ T9642] do_syscall_64+0xfa/0x3b0 [ 293.622580][ T9642] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.622602][ T9642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.622617][ T9642] ? clear_bhb_loop+0x60/0xb0 [ 293.622636][ T9642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.622650][ T9642] RIP: 0033:0x7fd79498e969 [ 293.622664][ T9642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.622677][ T9642] RSP: 002b:00007fd79571d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 293.622693][ T9642] RAX: ffffffffffffffda RBX: 00007fd794bb5fa0 RCX: 00007fd79498e969 [ 293.622704][ T9642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 293.622714][ T9642] RBP: 00007fd79571d090 R08: 0000000000000000 R09: 0000000000000000 [ 293.622723][ T9642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.622732][ T9642] R13: 0000000000000000 R14: 00007fd794bb5fa0 R15: 00007fd794cdfa28 [ 293.622754][ T9642] [ 293.624917][ T9642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.895841][ T9661] random: crng reseeded on system resumption [ 296.180396][ T9667] geneve1: mtu less than device minimum [ 296.333820][ T9677] IPVS: Unknown mcast interface: rose0 [ 296.447156][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'. [ 296.501671][ T9684] FAULT_INJECTION: forcing a failure. [ 296.501671][ T9684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.519866][ T9684] CPU: 0 UID: 0 PID: 9684 Comm: syz.0.1270 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 296.519899][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.519914][ T9684] Call Trace: [ 296.519922][ T9684] [ 296.519932][ T9684] dump_stack_lvl+0x189/0x250 [ 296.519971][ T9684] ? __pfx____ratelimit+0x10/0x10 [ 296.520003][ T9684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.520037][ T9684] ? __pfx__printk+0x10/0x10 [ 296.520075][ T9684] should_fail_ex+0x414/0x560 [ 296.520114][ T9684] _copy_to_user+0x31/0xb0 [ 296.520144][ T9684] simple_read_from_buffer+0xe1/0x170 [ 296.520180][ T9684] proc_fail_nth_read+0x1df/0x250 [ 296.520211][ T9684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.520242][ T9684] ? rw_verify_area+0x258/0x650 [ 296.520275][ T9684] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.520304][ T9684] vfs_read+0x1fd/0x980 [ 296.520330][ T9684] ? __pfx___mutex_lock+0x10/0x10 [ 296.520363][ T9684] ? __pfx_vfs_read+0x10/0x10 [ 296.520385][ T9684] ? __fget_files+0x2a/0x420 [ 296.520416][ T9684] ? __fget_files+0x3a0/0x420 [ 296.520439][ T9684] ? __fget_files+0x2a/0x420 [ 296.520474][ T9684] ksys_read+0x145/0x250 [ 296.520503][ T9684] ? __pfx_ksys_read+0x10/0x10 [ 296.520525][ T9684] ? rcu_is_watching+0x15/0xb0 [ 296.520552][ T9684] ? do_syscall_64+0xbe/0x3b0 [ 296.520589][ T9684] do_syscall_64+0xfa/0x3b0 [ 296.520620][ T9684] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.520651][ T9684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.520672][ T9684] ? clear_bhb_loop+0x60/0xb0 [ 296.520700][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.520721][ T9684] RIP: 0033:0x7f29ec18d37c [ 296.520740][ T9684] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 296.520759][ T9684] RSP: 002b:00007f29ed0d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.520782][ T9684] RAX: ffffffffffffffda RBX: 00007f29ec3b5fa0 RCX: 00007f29ec18d37c [ 296.520798][ T9684] RDX: 000000000000000f RSI: 00007f29ed0d10a0 RDI: 0000000000000004 [ 296.520816][ T9684] RBP: 00007f29ed0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 296.520830][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.520842][ T9684] R13: 0000000000000000 R14: 00007f29ec3b5fa0 R15: 00007f29ec4dfa28 [ 296.520876][ T9684] [ 297.035222][ T9695] loop8: detected capacity change from 0 to 7 [ 297.088772][ T9695] Dev loop8: unable to read RDB block 7 [ 297.112371][ T9695] loop8: unable to read partition table [ 297.124496][ T9695] loop8: partition table beyond EOD, truncated [ 297.158212][ T5891] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 297.178607][ T9695] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 297.178607][ T9695] ) failed (rc=-5) [ 297.341702][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1277'. [ 297.381860][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 297.432243][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1277'. [ 297.466669][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1277'. [ 297.539853][ T5891] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 297.559551][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.588602][ T5891] usb 2-1: config 0 descriptor?? [ 297.595365][ T9689] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.667513][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 297.827618][ T9] usb 3-1: device descriptor read/64, error -71 [ 297.880679][ T9717] FAULT_INJECTION: forcing a failure. [ 297.880679][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 297.927517][ T9717] CPU: 0 UID: 0 PID: 9717 Comm: syz.5.1282 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 297.927549][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.927563][ T9717] Call Trace: [ 297.927572][ T9717] [ 297.927581][ T9717] dump_stack_lvl+0x189/0x250 [ 297.927623][ T9717] ? __pfx____ratelimit+0x10/0x10 [ 297.927647][ T9717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.927671][ T9717] ? __pfx__printk+0x10/0x10 [ 297.927703][ T9717] ? __pfx___might_resched+0x10/0x10 [ 297.927724][ T9717] ? fs_reclaim_acquire+0x7d/0x100 [ 297.927755][ T9717] should_fail_ex+0x414/0x560 [ 297.927789][ T9717] should_failslab+0xa8/0x100 [ 297.927815][ T9717] kmem_cache_alloc_noprof+0x73/0x3c0 [ 297.927830][ T9717] ? fanotify_handle_event+0x1975/0x3d00 [ 297.927868][ T9717] fanotify_handle_event+0x1975/0x3d00 [ 297.927908][ T9717] ? fanotify_handle_event+0xfa0/0x3d00 [ 297.927944][ T9717] ? __pfx_fanotify_handle_event+0x10/0x10 [ 297.927974][ T9717] ? fsnotify+0x735/0x1a80 [ 297.927998][ T9717] ? __pfx_fanotify_handle_event+0x10/0x10 [ 297.928032][ T9717] fsnotify+0x140f/0x1a80 [ 297.928071][ T9717] ? fsnotify+0x735/0x1a80 [ 297.928092][ T9717] ? __pfx_fsnotify+0x10/0x10 [ 297.928105][ T9717] ? do_dentry_open+0x12ab/0x1970 [ 297.928137][ T9717] vfs_open+0x2ab/0x340 [ 297.928169][ T9717] path_openat+0x2ee5/0x3830 [ 297.928200][ T9717] ? arch_stack_walk+0xfc/0x150 [ 297.928254][ T9717] ? __pfx_path_openat+0x10/0x10 [ 297.928275][ T9717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.928310][ T9717] do_filp_open+0x1fa/0x410 [ 297.928342][ T9717] ? __lock_acquire+0xab9/0xd20 [ 297.928374][ T9717] ? __pfx_do_filp_open+0x10/0x10 [ 297.928420][ T9717] ? _raw_spin_unlock+0x28/0x50 [ 297.928439][ T9717] ? alloc_fd+0x64c/0x6c0 [ 297.928471][ T9717] do_sys_openat2+0x121/0x1c0 [ 297.928505][ T9717] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.928534][ T9717] ? ksys_write+0x22a/0x250 [ 297.928556][ T9717] ? __pfx_ksys_write+0x10/0x10 [ 297.928569][ T9717] ? rcu_is_watching+0x15/0xb0 [ 297.928586][ T9717] __x64_sys_open+0x11e/0x150 [ 297.928614][ T9717] do_syscall_64+0xfa/0x3b0 [ 297.928647][ T9717] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.928676][ T9717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.928696][ T9717] ? clear_bhb_loop+0x60/0xb0 [ 297.928719][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.928734][ T9717] RIP: 0033:0x7f934198e969 [ 297.928747][ T9717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.928761][ T9717] RSP: 002b:00007f933f7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 297.928786][ T9717] RAX: ffffffffffffffda RBX: 00007f9341bb5fa0 RCX: 00007f934198e969 [ 297.928809][ T9717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 297.928822][ T9717] RBP: 00007f933f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.928835][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.928847][ T9717] R13: 0000000000000000 R14: 00007f9341bb5fa0 R15: 00007f9341cdfa28 [ 297.928875][ T9717] [ 298.425755][ T5891] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 298.497634][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 298.548692][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.557381][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.631249][ T9] usb 3-1: device descriptor read/64, error -71 [ 298.748992][ T9] usb usb3-port1: attempt power cycle [ 299.127646][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 299.160629][ T9] usb 3-1: device descriptor read/8, error -71 [ 299.420998][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 299.448997][ T9] usb 3-1: device descriptor read/8, error -71 [ 299.558407][ T5891] usb 2-1: reset full-speed USB device number 42 using dummy_hcd [ 299.569540][ T9] usb usb3-port1: unable to enumerate USB device [ 300.277526][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 300.308416][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 300.317719][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 300.327023][ T9749] netlink: 'syz.0.1294': attribute type 18 has an invalid length. [ 300.440327][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 300.457291][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.496639][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 300.534418][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 300.566536][ T5941] usb 2-1: USB disconnect, device number 42 [ 300.572254][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.587228][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.596166][ T9] usb 6-1: Product: syz [ 300.601864][ T9] usb 6-1: Manufacturer: syz [ 300.606646][ T9] usb 6-1: SerialNumber: syz [ 300.788279][ T5941] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 300.844762][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.880866][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.947766][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 300.979418][ T5941] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 301.004769][ T5941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.032402][ T5941] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.053821][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.073740][ T5941] usb 2-1: Product: ᠁ [ 301.086449][ T5941] usb 2-1: Manufacturer: 澃揇薎즘ɼꌬ쇨젗駺届떐᥼怗޳਒蓕䄳䖱띌䴝弽熴嚆䪐码픏䒬묭໺藝␋⢰鯤䁸骃쥁쾶਍⏅ͱ籎㈉⠟籅쮳ဩ튛쒄稲骎虸⚠䰓₼୵䭪ʬ衁ꥨ㒯⯠⪔ÉQˆ盎컮㨯쒧∋ぱⱹ㮻孜๿⠰聛 [ 301.151611][ T5941] usb 2-1: SerialNumber: < [ 302.573261][ T5839] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 302.757585][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 302.773694][ T5839] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 302.797683][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.892183][ T5839] usb 3-1: config 0 descriptor?? [ 302.975029][ T5839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 303.336322][ T5941] usb 2-1: 0:2 : does not exist [ 303.371825][ T9] usb-storage 6-1:1.2: USB Mass Storage device detected [ 303.405236][ T5941] usb 2-1: USB disconnect, device number 43 [ 303.718006][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1308'. [ 303.727174][ T9825] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1308'. [ 303.751654][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 303.798135][ T9825] netlink: 'syz.5.1308': attribute type 1 has an invalid length. [ 303.830005][ T9] usb 6-1: USB disconnect, device number 5 [ 304.136321][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.286141][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 304.587819][ T5839] gspca_nw80x: reg_w err -110 [ 304.592923][ T5839] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 304.839412][ T9846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.879985][ T9846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.892134][ T9846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.970435][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 305.158396][ T9854] veth0_to_batadv: entered promiscuous mode [ 305.170414][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 305.178207][ T9854] veth0_to_batadv: left promiscuous mode [ 305.184706][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 305.199708][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.227612][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.241503][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.266691][ T10] usb 4-1: Product: ᠁ [ 305.273231][ T10] usb 4-1: Manufacturer: 澃揇薎즘ɼꌬ쇨젗駺届떐᥼怗޳਒蓕䄳䖱띌䴝弽熴嚆䪐码픏䒬묭໺藝␋⢰鯤䁸骃쥁쾶਍⏅ͱ籎㈉⠟籅쮳ဩ튛쒄稲骎虸⚠䰓₼୵䭪ʬ衁ꥨ㒯⯠⪔ÉQˆ盎컮㨯쒧∋ぱⱹ㮻孜๿⠰聛 [ 305.306933][ T10] usb 4-1: SerialNumber: < [ 305.471968][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'. [ 305.645635][ T9864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'. [ 305.846768][ T9874] FAULT_INJECTION: forcing a failure. [ 305.846768][ T9874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.860592][ T9874] CPU: 1 UID: 0 PID: 9874 Comm: syz.5.1324 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 305.860623][ T9874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.860640][ T9874] Call Trace: [ 305.860649][ T9874] [ 305.860658][ T9874] dump_stack_lvl+0x189/0x250 [ 305.860696][ T9874] ? __pfx____ratelimit+0x10/0x10 [ 305.860727][ T9874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.860762][ T9874] ? __pfx__printk+0x10/0x10 [ 305.860799][ T9874] should_fail_ex+0x414/0x560 [ 305.860837][ T9874] _copy_to_user+0x31/0xb0 [ 305.860866][ T9874] simple_read_from_buffer+0xe1/0x170 [ 305.860895][ T9874] proc_fail_nth_read+0x1df/0x250 [ 305.860926][ T9874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.860956][ T9874] ? rw_verify_area+0x258/0x650 [ 305.860988][ T9874] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.861017][ T9874] vfs_read+0x1fd/0x980 [ 305.861044][ T9874] ? __pfx___mutex_lock+0x10/0x10 [ 305.861077][ T9874] ? __pfx_vfs_read+0x10/0x10 [ 305.861099][ T9874] ? __fget_files+0x2a/0x420 [ 305.861129][ T9874] ? __fget_files+0x3a0/0x420 [ 305.861159][ T9874] ? __fget_files+0x2a/0x420 [ 305.861195][ T9874] ksys_read+0x145/0x250 [ 305.861217][ T9874] ? __pfx_ksys_read+0x10/0x10 [ 305.861235][ T9874] ? rcu_is_watching+0x15/0xb0 [ 305.861261][ T9874] ? do_syscall_64+0xbe/0x3b0 [ 305.861297][ T9874] do_syscall_64+0xfa/0x3b0 [ 305.861329][ T9874] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.861358][ T9874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.861379][ T9874] ? clear_bhb_loop+0x60/0xb0 [ 305.861405][ T9874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.861430][ T9874] RIP: 0033:0x7f934198d37c [ 305.861451][ T9874] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 305.861471][ T9874] RSP: 002b:00007f933f7f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.861494][ T9874] RAX: ffffffffffffffda RBX: 00007f9341bb5fa0 RCX: 00007f934198d37c [ 305.861514][ T9874] RDX: 000000000000000f RSI: 00007f933f7f60a0 RDI: 0000000000000005 [ 305.861527][ T9874] RBP: 00007f933f7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.861540][ T9874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.861553][ T9874] R13: 0000000000000000 R14: 00007f9341bb5fa0 R15: 00007f9341cdfa28 [ 305.861586][ T9874] [ 306.402087][ T10] usb 4-1: 0:2 : does not exist [ 306.435331][ T10] usb 4-1: USB disconnect, device number 50 [ 306.495345][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.779806][ T9891] ucma_write: process 743 (syz.3.1326) changed security contexts after opening file descriptor, this is not allowed. [ 306.815188][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 306.824081][ T5888] usb 3-1: USB disconnect, device number 22 [ 306.871771][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 306.987673][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'. [ 307.261120][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 308.036915][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 308.137602][ T5839] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 308.181799][ T9932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.397628][ T5888] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 308.507533][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 308.548504][ T5839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.567484][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 308.582232][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.605359][ T5888] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 308.649209][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.670192][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.727635][ T5839] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.793827][ T5888] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.818590][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.827958][ T9939] dummy0: entered promiscuous mode [ 308.835803][ T5839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.847650][ T9939] macsec1: entered promiscuous mode [ 308.860927][ T5888] usb 4-1: Product: ᠁ [ 308.865166][ T5888] usb 4-1: Manufacturer: 澃揇薎즘ɼꌬ쇨젗駺届떐᥼怗޳਒蓕䄳䖱띌䴝弽熴嚆䪐码픏䒬묭໺藝␋⢰鯤䁸骃쥁쾶਍⏅ͱ籎㈉⠟籅쮳ဩ튛쒄稲骎虸⚠䰓₼୵䭪ʬ衁ꥨ㒯⯠⪔ÉQˆ盎컮㨯쒧∋ぱⱹ㮻孜๿⠰聛 [ 308.871610][ T9939] macsec1: entered allmulticast mode [ 308.892951][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.943266][ T5888] usb 4-1: SerialNumber: < [ 308.984921][ T9939] dummy0: entered allmulticast mode [ 309.050864][ T9939] dummy0: left allmulticast mode [ 309.056158][ T9939] dummy0: left promiscuous mode [ 309.197012][ T5839] usb 2-1: GET_CAPABILITIES returned 0 [ 309.243664][ T5839] usbtmc 2-1:16.0: can't read capabilities [ 309.401371][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.410618][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.419752][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.428840][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.444113][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.453285][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.462417][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.499336][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.508522][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.517654][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.526790][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.553495][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.562711][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.572015][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.581149][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.599105][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 309.621463][ T5839] usb 2-1: USB disconnect, device number 44 [ 309.893775][ T5888] usb 4-1: 0:2 : does not exist [ 309.986527][ T5888] usb 4-1: USB disconnect, device number 51 [ 310.082936][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.120399][ T9958] veth0_to_batadv: entered promiscuous mode [ 310.203431][ T9958] veth0_to_batadv: left promiscuous mode [ 310.622914][ T9979] loop8: detected capacity change from 0 to 7 [ 310.746642][ T9979] Dev loop8: unable to read RDB block 7 [ 310.787721][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 310.797595][ T9979] loop8: unable to read partition table [ 310.803509][ T9979] loop8: partition table beyond EOD, truncated [ 310.879399][ T9979] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 310.879399][ T9979] ) failed (rc=-5) [ 311.067896][ T5888] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 311.102653][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 311.121350][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 311.143794][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.182890][ T5839] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 311.206933][ T24] usb 6-1: config 0 descriptor?? [ 311.221404][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 311.318372][ T5888] usb 4-1: config 4 has an invalid interface number: 46 but max is 0 [ 311.346710][ T5888] usb 4-1: config 4 has an invalid interface number: 249 but max is 0 [ 311.375699][ T5888] usb 4-1: config 4 has an invalid interface number: 225 but max is 0 [ 311.404593][ T9998] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 311.420374][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 311.435236][ T5888] usb 4-1: config 4 has an invalid interface number: 252 but max is 0 [ 311.446577][ T9998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1355'. [ 311.458619][ T5888] usb 4-1: config 4 has an invalid descriptor of length 136, skipping remainder of the config [ 311.471440][ T5839] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.482545][ T5839] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.499974][ T5888] usb 4-1: config 4 has 4 interfaces, different from the descriptor's value: 1 [ 311.527999][ T5839] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.550162][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.562371][ T5888] usb 4-1: config 4 has no interface number 0 [ 311.588026][ T5888] usb 4-1: config 4 has no interface number 1 [ 311.607607][ T5839] usb 2-1: Product: ᠁ [ 311.611859][ T5839] usb 2-1: Manufacturer: 澃揇薎즘ɼꌬ쇨젗駺届떐᥼怗޳਒蓕䄳䖱띌䴝弽熴嚆䪐码픏䒬묭໺藝␋⢰鯤䁸骃쥁쾶਍⏅ͱ籎㈉⠟籅쮳ဩ튛쒄稲骎虸⚠䰓₼୵䭪ʬ衁ꥨ㒯⯠⪔ÉQˆ盎컮㨯쒧∋ぱⱹ㮻孜๿⠰聛 [ 311.647805][ T5888] usb 4-1: config 4 has no interface number 2 [ 311.673036][ T5888] usb 4-1: config 4 has no interface number 3 [ 311.697514][ T5888] usb 4-1: config 4 interface 46 altsetting 1 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 311.737529][ T5941] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 311.753084][ T5888] usb 4-1: config 4 interface 46 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 32 [ 311.777512][ T5839] usb 2-1: SerialNumber: < [ 311.830072][ T5888] usb 4-1: config 4 interface 46 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 311.870446][ T5888] usb 4-1: too many endpoints for config 4 interface 249 altsetting 148: 39, using maximum allowed: 30 [ 311.898338][ T5888] usb 4-1: config 4 interface 249 altsetting 148 has a duplicate endpoint with address 0x4, skipping [ 311.925857][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1356'. [ 311.936937][ T5888] usb 4-1: config 4 interface 249 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 311.966119][ T5888] usb 4-1: config 4 interface 249 altsetting 148 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 311.967604][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 312.016718][ T5888] usb 4-1: config 4 interface 249 altsetting 148 has an invalid descriptor for endpoint zero, skipping [ 312.048999][ T5941] usb 3-1: unable to get BOS descriptor or descriptor too short [ 312.073720][ T5888] usb 4-1: config 4 interface 249 altsetting 148 has 4 endpoint descriptors, different from the interface descriptor's value: 39 [ 312.098233][ T5941] usb 3-1: config 9 has an invalid interface number: 111 but max is 0 [ 312.106522][ T5941] usb 3-1: config 9 has no interface number 0 [ 312.116661][ T5888] usb 4-1: config 4 interface 225 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 312.127720][ T5941] usb 3-1: config 9 interface 111 altsetting 20 endpoint 0x9 has an invalid bInterval 44, changing to 9 [ 312.127758][ T5941] usb 3-1: config 9 interface 111 altsetting 20 endpoint 0x7 has invalid wMaxPacketSize 0 [ 312.127820][ T5941] usb 3-1: config 9 interface 111 altsetting 20 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 312.127847][ T5941] usb 3-1: config 9 interface 111 altsetting 20 has a duplicate endpoint with address 0x89, skipping [ 312.127872][ T5941] usb 3-1: config 9 interface 111 has no altsetting 0 [ 312.131278][ T5941] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=4f.a4 [ 312.195785][ T5888] usb 4-1: config 4 interface 225 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 312.227696][ T5888] usb 4-1: too many endpoints for config 4 interface 252 altsetting 21: 251, using maximum allowed: 30 [ 312.254568][ T5888] usb 4-1: config 4 interface 252 altsetting 21 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.407810][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.422712][ T5888] usb 4-1: config 4 interface 252 altsetting 21 has a duplicate endpoint with address 0x9, skipping [ 312.423556][ T5941] usb 3-1: Product: syz [ 312.464359][ T5941] usb 3-1: Manufacturer: syz [ 312.474500][ T5941] usb 3-1: SerialNumber: syz [ 312.519024][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'. [ 312.733864][ T5839] usb 2-1: 0:2 : does not exist [ 312.751122][ T5888] usb 4-1: config 4 interface 252 altsetting 21 has a duplicate endpoint with address 0x9, skipping [ 312.772516][ T5888] usb 4-1: config 4 interface 252 altsetting 21 has an endpoint descriptor with address 0x48, changing to 0x8 [ 312.822238][ T5839] usb 2-1: USB disconnect, device number 45 [ 312.855614][ T5888] usb 4-1: config 4 interface 252 altsetting 21 endpoint 0x8 has invalid maxpacket 17765, setting to 1024 [ 312.896871][ T24] gspca_nw80x: reg_w err -110 [ 312.901946][ T24] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 312.920885][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.920927][ T5888] usb 4-1: config 4 interface 252 altsetting 21 bulk endpoint 0x8 has invalid maxpacket 1024 [ 312.939796][ T5941] rtl8150 3-1:9.111: couldn't find required endpoints [ 312.967807][ T5941] rtl8150 3-1:9.111: probe with driver rtl8150 failed with error -5 [ 313.038156][ T5941] usb 3-1: USB disconnect, device number 23 [ 313.046510][ T5888] usb 4-1: config 4 interface 252 altsetting 21 has a duplicate endpoint with address 0xA, skipping [ 313.268361][ T5888] usb 4-1: config 4 interface 252 altsetting 21 has a duplicate endpoint with address 0x8, skipping [ 313.286084][ T5888] usb 4-1: config 4 interface 252 altsetting 21 has 7 endpoint descriptors, different from the interface descriptor's value: 251 [ 313.345678][ T5888] usb 4-1: config 4 interface 46 has no altsetting 0 [ 313.359796][ T5888] usb 4-1: config 4 interface 249 has no altsetting 0 [ 313.366805][ T5888] usb 4-1: config 4 interface 225 has no altsetting 0 [ 313.385947][ T5888] usb 4-1: config 4 interface 252 has no altsetting 0 [ 313.402249][ T5888] usb 4-1: New USB device found, idVendor=1b3d, idProduct=014a, bcdDevice=db.8a [ 313.412672][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.422692][ T5888] usb 4-1: Product: ꍷ㕮㧗秋䜪愋㖛䃦㺉扊ከ䟁䖧퓨ᾩ⫠䆜ི῞潺ᑨ朥缥掠岛正藲쓻裂㳫둦㘣ウා [ 313.457140][ T5888] usb 4-1: Manufacturer: 㸐ᦚ䭞黱饿쮕烉뫥༸ୖ姜⿳ꫲ坌뇁⨅瀓持垭ꇖ牚씔챘뀒ꛤ纘ㇽ隄늠啭煏䜬ẚ搥຾ﴜ固ﺐѝꢰ꘨ڏ⌾뮕쾩䓪﬍傝㋥⋦睺ᜌꤣ泮ꑑ䱫줅䎓ﮆ [ 313.492902][ T5888] usb 4-1: SerialNumber: syz [ 313.512206][ T9982] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 313.537719][ T5839] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 313.697742][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 313.726171][ T5839] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 313.741936][ T5888] ftdi_sio 4-1:4.46: FTDI USB Serial Device converter detected [ 313.775279][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.797170][ T5888] ftdi_sio ttyUSB0: unknown device type: 0xdb8a [ 313.845223][ T5839] usb 2-1: config 0 descriptor?? [ 313.870134][ T5888] ftdi_sio 4-1:4.249: FTDI USB Serial Device converter detected [ 313.895352][T10031] dvmrp5: entered allmulticast mode [ 313.903595][ T5839] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 313.924822][ T5888] ftdi_sio ttyUSB1: unknown device type: 0xdb8a [ 313.985344][ T5888] ftdi_sio 4-1:4.225: FTDI USB Serial Device converter detected [ 314.018686][ T5888] ftdi_sio ttyUSB2: unknown device type: 0xdb8a [ 314.033448][T10034] FAULT_INJECTION: forcing a failure. [ 314.033448][T10034] name failslab, interval 1, probability 0, space 0, times 0 [ 314.067804][ T5888] ftdi_sio 4-1:4.252: FTDI USB Serial Device converter detected [ 314.068430][T10034] CPU: 1 UID: 0 PID: 10034 Comm: syz.0.1364 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 314.068463][T10034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.068480][T10034] Call Trace: [ 314.068490][T10034] [ 314.068500][T10034] dump_stack_lvl+0x189/0x250 [ 314.068545][T10034] ? __pfx____ratelimit+0x10/0x10 [ 314.068581][T10034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.068619][T10034] ? __pfx__printk+0x10/0x10 [ 314.068654][T10034] ? __pfx___might_resched+0x10/0x10 [ 314.068683][T10034] should_fail_ex+0x414/0x560 [ 314.068726][T10034] should_failslab+0xa8/0x100 [ 314.068756][T10034] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 314.068782][T10034] ? __alloc_skb+0x112/0x2d0 [ 314.068814][T10034] __alloc_skb+0x112/0x2d0 [ 314.068847][T10034] netlink_sendmsg+0x5c6/0xb30 [ 314.068887][T10034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.068920][T10034] ? aa_sock_msg_perm+0x94/0x160 [ 314.068958][T10034] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.068991][T10034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.069020][T10034] __sock_sendmsg+0x219/0x270 [ 314.069061][T10034] ____sys_sendmsg+0x505/0x830 [ 314.069098][T10034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.069138][T10034] ? import_iovec+0x74/0xa0 [ 314.069172][T10034] ___sys_sendmsg+0x21f/0x2a0 [ 314.069205][T10034] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.069277][T10034] ? __fget_files+0x2a/0x420 [ 314.069305][T10034] ? __fget_files+0x3a0/0x420 [ 314.069346][T10034] __x64_sys_sendmsg+0x19b/0x260 [ 314.069389][T10034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.069431][T10034] ? __pfx_ksys_write+0x10/0x10 [ 314.069462][T10034] ? do_syscall_64+0xbe/0x3b0 [ 314.069502][T10034] do_syscall_64+0xfa/0x3b0 [ 314.069537][T10034] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.069572][T10034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.069597][T10034] ? clear_bhb_loop+0x60/0xb0 [ 314.069624][T10034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.069649][T10034] RIP: 0033:0x7f29ec18e969 [ 314.069670][T10034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.069692][T10034] RSP: 002b:00007f29ed0d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.069718][T10034] RAX: ffffffffffffffda RBX: 00007f29ec3b5fa0 RCX: 00007f29ec18e969 [ 314.069736][T10034] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000006 [ 314.069750][T10034] RBP: 00007f29ed0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 314.069766][T10034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.069781][T10034] R13: 0000000000000000 R14: 00007f29ec3b5fa0 R15: 00007f29ec4dfa28 [ 314.069817][T10034] [ 314.210117][T10019] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1360'. [ 314.448100][ T5839] gspca_nw80x: reg_w err -110 [ 314.463653][ T5839] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 314.483352][T10019] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1360'. [ 314.511392][ T5888] ftdi_sio ttyUSB3: unknown device type: 0xdb8a [ 314.554282][ T5888] usb 4-1: USB disconnect, device number 52 [ 314.564924][ T5888] ftdi_sio 4-1:4.46: device disconnected [ 314.601848][ T5888] ftdi_sio 4-1:4.249: device disconnected [ 314.626408][ T5888] ftdi_sio 4-1:4.225: device disconnected [ 314.646472][ T5888] ftdi_sio 4-1:4.252: device disconnected [ 315.001213][ T5888] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 315.177518][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 315.192992][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 315.223995][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.277229][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.300639][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.309302][ T5888] usb 4-1: Product: syz [ 315.312713][ T24] usb 6-1: USB disconnect, device number 6 [ 315.319554][ T5888] usb 4-1: Manufacturer: syz [ 315.319577][ T5888] usb 4-1: SerialNumber: syz [ 315.330897][ T10] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 315.368215][ T5888] usb 4-1: config 0 descriptor?? [ 315.404761][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 315.458508][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 315.512024][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 315.668785][ T10] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 315.783345][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 315.798865][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 315.823599][ T5888] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 315.831894][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 315.847962][ T10] usb usb3-port1: attempt power cycle [ 315.859988][ T5888] em28xx 4-1:0.0: No AC97 audio processor [ 315.891842][T10077] use of bytesused == 0 is deprecated and will be removed in the future, [ 315.921710][T10080] loop8: detected capacity change from 0 to 7 [ 315.939483][T10077] use the actual size instead. [ 315.962213][T10080] Dev loop8: unable to read RDB block 7 [ 315.998372][T10080] loop8: unable to read partition table [ 316.036435][T10080] loop8: partition table beyond EOD, truncated [ 316.062086][T10080] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 316.062086][T10080] ) failed (rc=-5) [ 316.188085][ T5839] usb 2-1: USB disconnect, device number 46 [ 316.211202][ T10] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 316.271734][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 316.395017][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 316.418210][ T10] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 316.438710][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1377'. [ 316.468406][ T10] usb 3-1: Invalid ep0 maxpacket: 16 [ 316.485644][ T10] usb usb3-port1: unable to enumerate USB device [ 316.503047][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 317.163799][ T24] usb 4-1: USB disconnect, device number 53 [ 317.175995][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 317.211426][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.222421][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.233424][ T24] em28xx 4-1:0.0: Freeing device [ 319.412565][T10076] syz.5.1374 (10076): drop_caches: 2 [ 319.509138][T10166] pim6reg1: entered promiscuous mode [ 319.514656][T10166] pim6reg1: entered allmulticast mode [ 319.808995][T10173] pim6reg1: entered promiscuous mode [ 319.826210][T10173] pim6reg1: entered allmulticast mode [ 323.541937][T10256] pim6reg1: entered promiscuous mode [ 323.633791][T10256] pim6reg1: entered allmulticast mode [ 323.873771][T10271] pim6reg1: entered promiscuous mode [ 323.879218][T10271] pim6reg1: entered allmulticast mode [ 324.721359][T10302] pim6reg1: entered promiscuous mode [ 324.767586][T10302] pim6reg1: entered allmulticast mode [ 325.132842][T10317] wg2: entered promiscuous mode [ 325.159593][T10317] wg2: entered allmulticast mode [ 326.007162][T10353] wg2: entered promiscuous mode [ 326.013431][T10353] wg2: entered allmulticast mode [ 326.365994][T10367] @0: renamed from bond_slave_0 [ 327.681036][T10416] pim6reg1: entered promiscuous mode [ 327.686419][T10416] pim6reg1: entered allmulticast mode [ 329.087936][T10467] @0: renamed from bond_slave_0 (while UP) [ 331.285417][T10538] syzkaller0: entered promiscuous mode [ 331.316180][T10538] syzkaller0: entered allmulticast mode [ 334.588275][ T10] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 334.623206][ T5839] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 334.789693][ T10] usb 6-1: config 0 has an invalid interface number: 123 but max is 0 [ 334.818718][ T10] usb 6-1: config 0 has no interface number 0 [ 334.827773][ T5839] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 334.853951][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.874176][ T10] usb 6-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 334.889214][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.900541][ T5839] usb 3-1: config 0 descriptor?? [ 334.924871][ T10] usb 6-1: Product: syz [ 334.950562][ T10] usb 6-1: Manufacturer: syz [ 334.967970][ T10] usb 6-1: SerialNumber: syz [ 334.989139][ T10] usb 6-1: config 0 descriptor?? [ 334.999358][ T10] cdc_acm 6-1:0.123: More than one union descriptor, skipping ... [ 335.213883][ T24] usb 6-1: USB disconnect, device number 7 [ 336.129069][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.154040][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.166556][ T5839] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 336.190555][ T5839] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 336.205290][T10606] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1590'. [ 336.221705][ T5839] asix 3-1:0.0: probe with driver asix failed with error -71 [ 336.267630][ T5839] usb 3-1: USB disconnect, device number 28 [ 336.595858][T10615] xt_CT: No such helper "snmp_trap" [ 337.587488][ T5839] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 337.807487][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 337.821285][ T5839] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 337.868079][ T5839] usb 4-1: config 179 has no interface number 0 [ 337.893237][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 337.904857][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 337.920932][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.936130][ T5839] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 337.959351][ T5839] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 337.977071][ T5839] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 338.013138][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.044406][T10630] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.577830][ T5941] usb 4-1: USB disconnect, device number 54 [ 338.577894][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 338.595212][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 338.707689][ T30] audit: type=1326 audit(1749030526.212:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79498e969 code=0x7ffc0000 [ 338.767559][ T30] audit: type=1326 audit(1749030526.212:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79498e969 code=0x7ffc0000 [ 338.834361][ T30] audit: type=1326 audit(1749030526.212:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd79498e969 code=0x7ffc0000 [ 338.900990][ T30] audit: type=1326 audit(1749030526.212:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79498e969 code=0x7ffc0000 [ 343.657503][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 343.877537][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.907623][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.950603][ T24] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 343.992387][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.041515][ T24] usb 6-1: Product: syz [ 344.045768][ T24] usb 6-1: Manufacturer: syz [ 344.104804][ T24] usb 6-1: SerialNumber: syz [ 344.288548][ T24] usb 6-1: config 0 descriptor?? [ 346.354179][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 346.578573][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 347.498510][ T5847] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 349.070589][ T24] usb 6-1: USB disconnect, device number 8 [ 349.248755][T10740] No buffer was provided with the request [ 350.058301][T10746] netlink: 'syz.3.1637': attribute type 1 has an invalid length. [ 354.253269][T10775] netlink: 'syz.2.1649': attribute type 1 has an invalid length. [ 354.573147][T10780] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 355.682899][T10780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.262929][T10782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.415998][T10782] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.459909][T10782] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 356.607253][T10775] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 357.521299][ T5847] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 358.767523][ T5941] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 359.055689][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.067116][ T5941] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 359.107753][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 359.127766][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.135973][ T5941] usb 4-1: Product: syz [ 359.157780][ T5941] usb 4-1: Manufacturer: syz [ 359.162533][ T5941] usb 4-1: SerialNumber: syz [ 359.383868][ T5941] cdc_mbim 4-1:1.0: skipping garbage [ 359.825651][T10813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.654611][ C1] sched: DL replenish lagged too much [ 372.360653][ T5941] cdc_mbim 4-1:1.0: bind() failure [ 379.253354][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.268238][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.107940][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 440.212819][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.639085][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.428748][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.498952][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 535.037312][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 535.044334][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10818/1:b..l [ 535.052869][ C0] rcu: (detected by 0, t=10503 jiffies, g=51013, q=1979 ncpus=2) [ 535.060736][ C0] task:syz.0.1664 state:R running task stack:25352 pid:10818 tgid:10816 ppid:5853 task_flags:0x400040 flags:0x00004004 [ 535.075416][ C0] Call Trace: [ 535.078767][ C0] [ 535.081745][ C0] __schedule+0x16f5/0x4d00 [ 535.086329][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 535.091670][ C0] ? __pfx___schedule+0x10/0x10 [ 535.096591][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 535.101930][ C0] preempt_schedule_irq+0xb5/0x150 [ 535.107092][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 535.112891][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 535.118770][ C0] irqentry_exit+0x6f/0x90 [ 535.123241][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.129257][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 535.134556][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 1b 0a fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 535.154183][ C0] RSP: 0000:ffffc9000cddf058 EFLAGS: 00000206 [ 535.160278][ C0] RAX: 800b2c3fd1e10300 RBX: 0000000000000000 RCX: 800b2c3fd1e10300 [ 535.168267][ C0] RDX: 0000000000000000 RSI: ffffffff8db66a62 RDI: ffffffff8be27240 [ 535.176242][ C0] RBP: ffffffff81729e15 R08: 0000000000000000 R09: ffffffff81729e15 [ 535.184219][ C0] R10: ffffc9000cddf228 R11: fffff520019bbe51 R12: 0000000000000002 [ 535.192197][ C0] R13: ffffffff8e13f060 R14: 0000000000000000 R15: 0000000000000246 [ 535.200173][ C0] ? unwind_next_frame+0xa5/0x2390 [ 535.205298][ C0] ? unwind_next_frame+0xa5/0x2390 [ 535.210432][ C0] ? __unwind_start+0xf8/0x760 [ 535.215225][ C0] ? unwind_next_frame+0xa5/0x2390 [ 535.220349][ C0] unwind_next_frame+0xc2/0x2390 [ 535.225299][ C0] ? unwind_next_frame+0xa5/0x2390 [ 535.230419][ C0] ? unwind_next_frame+0xa5/0x2390 [ 535.235549][ C0] ? unwind_next_frame+0xa5/0x2390 [ 535.240670][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 535.246149][ C0] __unwind_start+0x5b9/0x760 [ 535.250891][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 535.257055][ C0] arch_stack_walk+0xe4/0x150 [ 535.261743][ C0] ? __unwind_start+0xf8/0x760 [ 535.266529][ C0] stack_trace_save+0x9c/0xe0 [ 535.271218][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 535.276607][ C0] save_stack+0xf5/0x1f0 [ 535.280859][ C0] ? __pfx_save_stack+0x10/0x10 [ 535.285762][ C0] ? page_ext_put+0x97/0xc0 [ 535.290275][ C0] __reset_page_owner+0x71/0x1f0 [ 535.295241][ C0] __free_frozen_pages+0xc71/0xe70 [ 535.300370][ C0] __put_partials+0x161/0x1c0 [ 535.305056][ C0] put_cpu_partial+0x17c/0x250 [ 535.309832][ C0] ? put_cpu_partial+0x6d/0x250 [ 535.314695][ C0] __slab_free+0x2f7/0x400 [ 535.319132][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.325467][ C0] ? __phys_addr+0xd3/0x180 [ 535.329977][ C0] qlist_free_all+0x97/0x140 [ 535.334594][ C0] kasan_quarantine_reduce+0x148/0x160 [ 535.340074][ C0] __kasan_kmalloc_large+0x1c/0xa0 [ 535.345192][ C0] ___kmalloc_large_node+0x15a/0x210 [ 535.350486][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 535.356177][ C0] __kmalloc_noprof+0x36f/0x4f0 [ 535.361051][ C0] ? iopt_pages_unfill_xarray+0x443/0xaa0 [ 535.366792][ C0] iopt_pages_unfill_xarray+0x443/0xaa0 [ 535.372350][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 535.377565][ C0] ? __pfx_iopt_pages_unfill_xarray+0x10/0x10 [ 535.383642][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.388547][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.393317][ C0] ? trace_contention_end+0x39/0x120 [ 535.398605][ C0] ? __mutex_lock+0x330/0xe80 [ 535.403316][ C0] ? iommufd_access_unpin_pages+0x117/0x4b0 [ 535.409214][ C0] ? interval_tree_remove+0x992/0x9e0 [ 535.414597][ C0] iopt_area_remove_access+0x262/0x330 [ 535.420068][ C0] iommufd_access_unpin_pages+0x309/0x4b0 [ 535.425801][ C0] ? __pfx_iommufd_access_unpin_pages+0x10/0x10 [ 535.432053][ C0] ? iommufd_test_access_unmap+0x294/0x300 [ 535.437882][ C0] iommufd_test_access_unmap+0x28c/0x300 [ 535.443535][ C0] ? __pfx_iommufd_test_staccess_release+0x10/0x10 [ 535.450054][ C0] iommufd_test_staccess_release+0x6a/0xb0 [ 535.455869][ C0] __fput+0x449/0xa70 [ 535.459874][ C0] task_work_run+0x1d4/0x260 [ 535.464487][ C0] ? __pfx_task_work_run+0x10/0x10 [ 535.469632][ C0] ? __fget_files+0x2a/0x420 [ 535.474243][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 535.479721][ C0] exit_to_user_mode_loop+0xec/0x110 [ 535.485028][ C0] do_syscall_64+0x2bd/0x3b0 [ 535.489717][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.494923][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.500993][ C0] ? clear_bhb_loop+0x60/0xb0 [ 535.505682][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.511577][ C0] RIP: 0033:0x7f29ec18e969 [ 535.516048][ C0] RSP: 002b:00007f29ed0b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.524501][ C0] RAX: 0000000000000000 RBX: 00007f29ec3b6080 RCX: 00007f29ec18e969 [ 535.532483][ C0] RDX: 00002000000008c0 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 535.540463][ C0] RBP: 00007f29ec210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 535.548436][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.556425][ C0] R13: 0000000000000000 R14: 00007f29ec3b6080 R15: 00007f29ec4dfa28 [ 535.564429][ C0]