last executing test programs: 14m11.642539931s ago: executing program 0 (id=46): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x13, r1, 0xacaef000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0xd0, 0x720d, 0x148, 0x0, 0x148, 0x188, 0x240, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {0xff}, {}, 0xff, 0x1, 0x30}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2, 0x3], 0x0, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4, 0x4], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0xff000000, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x3, 0x40}, 0x0, 0x70, 0x90, 0x100000}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) 14m11.216960141s ago: executing program 0 (id=48): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000fffff900000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 14m10.964100671s ago: executing program 0 (id=49): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket(0x1e, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0x83, &(0x7f0000000340)=""/131}]}) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 14m5.859290053s ago: executing program 0 (id=63): setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x6, 0x0, 0xa, 0xfffff800, 0x40, "198d83a7ca7c9fd58c5795973fe7e7751b9df4f992209bd0033397030e71e0336b873a3b6f2ac62f876cb5dd175aa03eeba313f37f6d8a532f528534e8b85515"}, 0x49, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000080)='./file0/file0\x00') pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty}}}], 0xf}}], 0x1, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x400000) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000007c0)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x8, 0x5, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x7, {0x7, 0xd, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 14m4.344830839s ago: executing program 0 (id=70): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08cf100355af750102030109022d000208"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='timers\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x99) sendmsg$L2TP_CMD_SESSION_GET(r2, 0x0, 0x10) pread64(r2, &(0x7f0000000040)=""/44, 0x2c, 0x40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getrusage(0x1, &(0x7f0000000680)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x0, 0x308, 0x308, 0x110, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast2, 0xff, 0xffffff00, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x0, 0xffffffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_dev$media(&(0x7f00000006c0), 0xb, 0xc0382) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c80, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={'sha512-arm\x00'}}) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x1000002c, 0xb, 0x8, 0x3, 0x3, 0x3, 0x9, 0x6}, 0x0) 14m4.028690001s ago: executing program 0 (id=73): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x32) close_range(r6, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r9, &(0x7f0000000040), 0x2) close(r9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000180)) 14m3.409516834s ago: executing program 32 (id=73): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0x32) close_range(r6, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r9, &(0x7f0000000040), 0x2) close(r9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000180)) 3m56.965063121s ago: executing program 2 (id=2748): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="201205000000050100f40080635f1db9c0f20b5d124f8593a0f5e6bbf968e6a266cb40220e42d766de99d130c4f29aa15d8aedeb59ddd45da05cfc39e512413afdafa4c5cf63c3a392596d31990965af90ca8c2e6dc7e53bc664d61aa3d985cbdc860ddd2da3a124fd60ed76fded"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m55.080784328s ago: executing program 2 (id=2762): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071102200000000009c000000004000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m54.86872149s ago: executing program 2 (id=2765): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_clone(0xa1022000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpgid(r0) openat$cgroup_int(r1, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001180), 0x200000, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x8, 0x0, &(0x7f00000002c0)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) socketpair$unix(0x1, 0x9a9bd92af857a7e1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r3, 0x0, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240), &(0x7f0000001280)=0xc) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1f, 0x4, @tid=r0}, &(0x7f0000001100)=0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r5}, {r5}], 0x2, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) syz_io_uring_setup(0x257f, &(0x7f0000000100)={0x0, 0xd653, 0x8000, 0x0, 0x3dd, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) timer_settime(r4, 0x0, &(0x7f00000011c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000001140)) 3m54.600315891s ago: executing program 2 (id=2767): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c00000004000000040000000c00000004000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000d7a8548bd7e594fa6000000000000000002000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000001b7080000000001007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000023000100000000000000db"]) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) io_uring_setup(0x751e, &(0x7f00000000c0)={0x0, 0x87c4, 0x1, 0x2, 0x158}) socket(0x200000000000011, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) signalfd4(r2, &(0x7f0000000140)={[0x3]}, 0x8, 0x80000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r4, &(0x7f00000021c0)={0x18, 0x0, r6, {0x7}}, 0x18) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r4, &(0x7f0000002140)={0x20, 0x0, r7, {0x101, 0x0, 0x3}}, 0x20) syz_fuse_handle_req(r4, &(0x7f0000002300)="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", 0x2000, &(0x7f0000008bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)={0x30, 0x0, 0xfff, [{0x7, 0x7, 0x1, 0x2, '/'}]}, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x300) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000000b49, 0x8, 0x1000000000008, 0x0, 0x80000003}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x11, r8, 0x2, 0x40d) 3m53.572953586s ago: executing program 2 (id=2772): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f050009040200000102000009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000206b1d01014000010203010902930003010900040904000000010100000a240101000e0201020d2407050100014c8d3ca75ddc0c240704010006f01fc273da0c2402050302010807000206090401000001020000090402000101020000090501094000070805072501007f050009040200000102000009040201"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x4) dup(r0) (async) dup(r0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x4) syz_open_dev$sg(&(0x7f0000004740), 0x0, 0x200) (async) r1 = syz_open_dev$sg(&(0x7f0000004740), 0x0, 0x200) ioctl$SG_IO(r1, 0x2285, &(0x7f0000004880)={0x53, 0x2, 0x6, 0xf, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="434a97b012d3", 0x0, 0x8, 0x10000, 0x2, 0x0}) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf25050000000800020000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) syz_usbip_server_init(0x0) syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r4, 0x0) (async) syz_io_uring_submit(0x0, r4, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_open_dev$vcsa(&(0x7f0000000040), 0x81, 0x40000) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x81, 0x40000) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mkdir(&(0x7f00000002c0)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x80045300, &(0x7f0000002000)) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) chroot(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000500)='./file0\x00', 0x1) (async) umount2(&(0x7f0000000500)='./file0\x00', 0x1) 3m52.860818333s ago: executing program 2 (id=2777): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0}) write$ppp(0xffffffffffffffff, &(0x7f0000000400)="0aa19f155779bcb1dd67", 0xa) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 3m51.992304586s ago: executing program 33 (id=2777): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0}) write$ppp(0xffffffffffffffff, &(0x7f0000000400)="0aa19f155779bcb1dd67", 0xa) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 16.068993455s ago: executing program 5 (id=3651): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x6db4fcdfa7549c0d, 0x22, 0x41, {0x41, 0x0, "0079b027da3b8a96f04129286ad0632db105a4385c49bc4d7e8aec7e2977b22a213446db028845d550d79daa69639cad40b540fe726ce20af014362e3e4845"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) unshare(0x2c020400) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x44, r3, 0x1, 0x70bd2a, 0xfffffffe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "499d"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) 15.195782437s ago: executing program 5 (id=3655): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0x4}], 0x2, 0x10022, 0x0) 10.52520689s ago: executing program 5 (id=3666): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d00010103f80f05"], 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) sendmmsg$inet(r6, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r7, 0x0, 0x0, 0xbbf9) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x103c, 0xd) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001670fdfadbdf251a3e91d933364cd40f", @ANYRES32, @ANYBLOB="080009000300000014000600080000000c0000000180ffffda070000"], 0x34}}, 0x0) 10.090445225s ago: executing program 4 (id=3670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x172a, 0x20}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x6, 0x5000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x24000874, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_setup(0x6734, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r6, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r6, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[], 0xff2e) 9.862412904s ago: executing program 6 (id=3673): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) readv(r0, &(0x7f0000002940)=[{&(0x7f0000000200)=""/23, 0x18}], 0x1) 9.643773242s ago: executing program 6 (id=3676): syz_open_dev$evdev(0x0, 0x0, 0x862b01) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0x4}], 0x2, 0x10022, 0x0) 7.679760514s ago: executing program 1 (id=3679): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x328}}, 0x84) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0x94, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902820003010000000904000000010100000a24010000000201020c24020000000000000000000904010000010200000904010101010200000724010000000009050109000000000007250101000000090402000001020000090402010101ff"], 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 6.900359478s ago: executing program 4 (id=3681): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616000000d2"], 0x0, 0x0}) read(r0, &(0x7f0000000540)=""/5, 0x5) 5.559175798s ago: executing program 5 (id=3682): r0 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x1, @win={{0x1, 0x0, 0x47524247}, 0x7, 0x8, 0x0, 0x0, 0x0}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x66, 0x16, 0x81, 0x20, 0x7a6, 0x8511, 0x9f28, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x28, 0x87, 0x0, 0x1a, 0x68, 0x42}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) tee(r2, r2, 0x7f, 0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x800002, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x18, 0x3, "279808"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="9707000000000000631177000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 4.520745323s ago: executing program 1 (id=3683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x48, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 4.441058873s ago: executing program 4 (id=3684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.440430485s ago: executing program 6 (id=3685): r0 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20001, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r3, 0x5, 0x70bd25, 0x25dfdc00, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1dc, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff3, 0x70}}}}, [@NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f9df4aee3536dc93b5696b5d3efb8410"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2fe574836734e644f0a67ffe0f57350898ed1ac2b264ed8c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0f5ec8d6ab957309"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7d527fe4858bd211"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b60484ba656e1c97b04a88fb02bcddcb"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="40c9ef40e940792725c737c0808460f1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f65dd42e3aa605ce1816c75fac1d4fd4f815b2664f867426"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7b162c72fe17f0f829d3f98f86d31cc05fafd964118da16b381306f1898da915"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52abcf263c9703bf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efe5d2dfbf2a5947"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="aab06d4012697b15923d2649c11bc91a5a5b4076cc3786df"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="79edfc00c839eb47c4551129f533fbcd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a9ae1ba141e676b0486b524ce71badab"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="00b65d12daf73d8ca2a36ec2f3985a26"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0a9893df2be1cfa1c736bbd02392b6abca83519fa4b90093"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="cc2c2aa438b6f5daae3bb82753be92054f812ff9c3ab294957b82754e36341b9"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9089d47788db4ff665b6ac832ac465e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4028080}, 0x810) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000080)={0x6}, 0x0) 4.350062858s ago: executing program 1 (id=3686): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030020, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {0x0, 0xb1}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4.318743636s ago: executing program 4 (id=3687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x48, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (fail_nth: 4) 4.251434843s ago: executing program 6 (id=3688): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="154601000000000054ef12800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100009800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x4040040) 4.092759663s ago: executing program 1 (id=3689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0xe9, 0x7}, {0x2000000, 0x1}]}, 0x14, 0x1) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x3, 0xf}, {0xffe0, 0xf}}}, 0x24}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x0, 0x0, 0x6}}) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$dri(0x0, 0x1, 0x101001) 3.719664197s ago: executing program 4 (id=3690): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000004c0)={{}, "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"}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000ffffbeda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.541186005s ago: executing program 6 (id=3691): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1d0, 0xc8, 0x8, 0x0, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'vlan0\x00', {}, {}, 0x33}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2, {0x2}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xf, 0x2, "a1f223ccf08101fbc4759f2ae15f10fadf5f0a869512cab6c7b363071794"}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'ipvlan1\x00', 'wg0\x00', {}, {}, 0x2f, 0xfc, 0x0, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0xe, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x9, 0x0, 0x3, 0x4, 0x4, 0xfbff}, 0x20) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000}, 0x0) socket$alg(0x26, 0x5, 0x0) rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000000)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce41d3ca6566f00fc02c101c65d2150e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ftruncate(r0, 0x5) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) mincore(&(0x7f0000063000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/101) unlink(&(0x7f0000000080)='./file0\x00') 3.044209469s ago: executing program 4 (id=3692): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0x4}], 0x2, 0x10022, 0x0) 3.040916878s ago: executing program 3 (id=3693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={r4, 0x401}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r4, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000240)=0x10) r5 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="00de90000000b930001554328af36189126d5280337b22edbebade72eb52"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs$userns(r6, &(0x7f0000000200)) listen(r5, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r8, 0x80084522, &(0x7f0000001f40)=""/230) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001200)={r7, 0x3, 0x51, 0x401}, &(0x7f0000001240)=0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000c40)={0x2000000b}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000380)={r4, 0xee5, 0x4, 0x1, 0x10001, 0x9}, 0x14) connect$unix(r9, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 2.737098301s ago: executing program 5 (id=3694): r0 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x100}], 0x1, 0x6) read(0xffffffffffffffff, &(0x7f0000000540)=""/5, 0x5) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x800) listen(r1, 0xe) 2.636037144s ago: executing program 5 (id=3695): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="201549000000719c9bff0000002920602a773c08d7e33fe8bbcd5e902e57453e303293777a3d6836af78c2fbb763b8be8070b3c14aaa9cdfaa46975c86c72d20e6189a295afb3156"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0xa, 0x1d, {0x1d, 0x9, "536c47b906803e488b51f4f4f2e2e963d77604a7f67e5bfa74181d"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f0000000100)={0x0, 0x22, 0x17, {[@global=@item_4={0x3, 0x1, 0x4, "a7ac939c"}, @global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0x0, "7d929776"}, @global=@item_4={0x3, 0x1, 0xa, "0e8a4902"}, @global=@item_012={0x0, 0x1, 0xb}, @global=@item_012={0x1, 0x1, 0x4, "0e"}, @global=@item_012={0x1, 0x1, 0x2, '/'}, @main=@item_012={0x1, 0x0, 0xb, '-'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x10, 0x1, {0x22, 0x137}}}}, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x12, 0x8e, "cefbeff23459c837ec04fcf803866857a6ed298fa4cced54cc758d6f7e4a27fcb5b0d3c63e28a23c40c237d7bf82c91a64d55ea7517a4929d0bf6379c91b8b600abdac861382d9ef11ac0a39d495b0fd5d4fbe21f129094bfd1f79cc4b31accaeb8a7ee93e03369449f88467c84c8d0562c19cbd76ef68bc8e5d37ce05827405567681fee6be9d4e6a9bd3f17995"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000440)={0x20, 0x1, 0xbc, "0ab6f588e2437f2c7a922daa64af2dd1e413aee69d72acd0fedd6f2703442b1349069b3e16bc9a907586d437dfa2109e4bcc72b3904e218497bb2f502eb1416c684b64eb86f7074b71c3536cbd8c785f4a9a492868cf5cec5a49ddc2fb5bbf111ac279a37a47f97555ce8c34586daf583ed94855ad042292714a80d497d61474193d13997ce14bf044da8836fb3a369f1a79bf4da8ed7049964c93507a4ec680b3bfa0a6d582e4ceaf084479ec39eb9162d1377d5ee0cb8b5534c49a"}, &(0x7f0000000300)={0x20, 0x3, 0x1}}) 2.056461115s ago: executing program 3 (id=3696): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="dd6542a82c7e62667ab8", 0xfdd5}) close(r8) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x48, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.209213051s ago: executing program 3 (id=3697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.11202213s ago: executing program 6 (id=3698): r0 = semget(0x2, 0x2, 0x36d) semctl$GETVAL(r0, 0x1, 0xc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x10, 0x82, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x7f, 0x7, 0xfff8, 0x101, "1a817fd57a48d1eedc1e99602e704d37b0445ddce76421f5bb2a25cf46bf4dd1"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c4060000", @ANYRES16=r6, @ANYBLOB="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"], 0x6c4}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x3f3a, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x5, 0x3abc50, 0x2c8240}) close_range(r7, 0xffffffffffffffff, 0x10000000000000) 1.005964379s ago: executing program 1 (id=3699): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030020, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {0x0, 0xb1}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1000000}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 951.578674ms ago: executing program 3 (id=3700): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x80000005, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0xfffffffffffffffd, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) io_setup(0x8, &(0x7f0000004200)=0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f5f876b2ff"}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, &(0x7f0000000200)=""/56, 0x38, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000400)=0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x4}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000580)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=@newqdisc={0x138, 0x24, 0xf0b, 0x70bd29, 0x25dbdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x8800) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)={0x0, 0xfffffaef, 0x0, 0x0, 0x0, "1eebb05412e0acba6e32e41a75222702bd994e"}) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000380)='\n', 0x160a}], 0x1) umount2(&(0x7f0000000240)='./file0\x00', 0x9) getsockopt$inet_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000340)=""/109, &(0x7f00000001c0)=0x6d) 838.291782ms ago: executing program 1 (id=3701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES8], 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10100, 0x1a724}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x60054814}, 0x4000044) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xb316a000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000100)="6a0ef17f5d90a1656e76882ca00e5bf4", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x2004c801) recvmmsg(r10, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x140, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES64=r2, @ANYRESDEC=r7], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000002e40)=""/4092, 0x41100, 0x0, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) 241.176997ms ago: executing program 3 (id=3702): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0x3) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) fallocate(r3, 0x10, 0xef28, 0x2) read(r0, 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0)=0xf2e, 0xb8, 0x1) 0s ago: executing program 3 (id=3703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "a567e283ace9907fbca03fbf44f7cb8dd092e4be8203da86ff9bc095d1b02b49d78ef79de9c113244a08018f3f624d0769d5eb5030ef5aa01ef7c412f92bfd82", 0x1f}, 0x48, r2) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd5, 0x70, 0x4, 0x20, 0xbfd, 0x114, 0x4be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0x26, 0xa9, 0x5d, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3c, 0x8, 0xaa}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xbf, 0x3, 0x1}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): e="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 862.110784][T11037] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 862.123044][ T30] audit: type=1326 audit(1747376117.111:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17362 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 862.180797][T11037] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.231040][T17369] netlink: 'syz.5.3289': attribute type 33 has an invalid length. [ 862.239965][T17369] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3289'. [ 862.456418][T11037] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 862.499615][T11037] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 862.519789][T11037] usb 5-1: Product: syz [ 862.526633][T11037] usb 5-1: Manufacturer: syz [ 862.647829][T11037] usb 5-1: SerialNumber: syz [ 862.705332][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3294'. [ 862.783513][T11037] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input41 [ 862.823629][T17375] netlink: 'syz.6.3294': attribute type 9 has an invalid length. [ 863.007538][T11037] usb 5-1: USB disconnect, device number 15 [ 863.013624][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 863.096225][T11037] appletouch 5-1:1.0: input: appletouch disconnected [ 863.231183][T17382] loop2: detected capacity change from 0 to 7 [ 863.251304][ T7991] Dev loop2: unable to read RDB block 7 [ 863.256924][ T7991] loop2: AHDI p2 p3 [ 863.263514][ T7991] loop2: partition table partially beyond EOD, truncated [ 863.271404][ T7991] loop2: p2 size 150995456 extends beyond EOD, truncated [ 863.285047][T17382] Dev loop2: unable to read RDB block 7 [ 863.293866][T17382] loop2: AHDI p2 p3 [ 863.298000][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 863.337468][T17382] loop2: partition table partially beyond EOD, truncated [ 863.346934][T17382] loop2: p2 size 150995456 extends beyond EOD, truncated [ 863.467946][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 863.475163][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.486030][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.526755][ T7991] udevd[7991]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 863.557793][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 863.596955][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 863.647782][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 863.696862][ T7991] udevd[7991]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 863.729961][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 863.782852][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 863.791344][ T5923] usb 4-1: Manufacturer: syz [ 863.805524][ T5923] usb 4-1: config 0 descriptor?? [ 863.819358][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 863.842872][T17388] netlink: 176 bytes leftover after parsing attributes in process `syz.6.3297'. [ 864.127959][ T5923] rc_core: IR keymap rc-hauppauge not found [ 864.137754][ T5923] Registered IR keymap rc-empty [ 864.142747][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.178349][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.221933][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 864.221988][T17377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.245661][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input42 [ 864.248619][T11037] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 864.264918][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.288064][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.314588][T17377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.334842][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.441825][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.453088][T11037] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 864.468239][T11037] usb 5-1: config 0 has no interface number 0 [ 864.474511][T11037] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 864.492814][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.513043][T11037] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 864.537974][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.588152][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.668106][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.760400][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.869337][T11037] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 864.909176][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 864.928089][T11037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.936464][T11037] usb 5-1: Product: syz [ 864.942008][T11037] usb 5-1: Manufacturer: syz [ 864.951574][T11037] usb 5-1: SerialNumber: syz [ 865.030060][ T5923] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 865.051311][T11037] usb 5-1: config 0 descriptor?? [ 865.056986][T17393] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 865.066861][ T5923] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 865.093241][T11037] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 865.098079][ T5923] usb 4-1: USB disconnect, device number 14 [ 865.177480][T11037] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 865.268420][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 865.511089][T11037] usb 5-1: USB disconnect, device number 16 [ 865.648913][T17422] xt_bpf: check failed: parse error [ 865.656765][T11037] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 865.702456][T11037] cyberjack 5-1:0.69: device disconnected [ 866.137003][T17438] fuse: Bad value for 'fd' [ 866.157956][T11007] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 866.355258][T11007] usb 4-1: Using ep0 maxpacket: 8 [ 866.373389][T11007] usb 4-1: unable to get BOS descriptor or descriptor too short [ 866.394310][T11007] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 866.446467][T11007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 866.509095][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3316'. [ 866.550683][T11007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 866.575933][T11007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 866.596268][T11007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 866.600193][T11012] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 866.610309][T11007] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 866.629683][T11007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 866.755102][T11007] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 866.758004][ T5923] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 866.777841][T11012] usb 7-1: device descriptor read/64, error -71 [ 866.868896][T11007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 64576, setting to 64 [ 866.930720][T11007] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 866.958454][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 866.965159][ T5923] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.980211][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 866.987147][T17458] xt_bpf: check failed: parse error [ 866.992601][T11007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.992630][T11007] usb 4-1: Product: syz [ 867.004881][ T5923] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 867.018627][T11012] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 867.034217][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.077464][T11007] usb 4-1: Manufacturer: syz [ 867.087640][T11007] usb 4-1: SerialNumber: syz [ 867.093657][ T5923] usb 2-1: config 0 descriptor?? [ 867.148059][T11012] usb 7-1: device descriptor read/64, error -71 [ 867.174211][T11007] usb 4-1: config 0 descriptor?? [ 867.200462][T11007] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 867.259436][T11012] usb usb7-port1: attempt power cycle [ 867.419404][T11005] usb 4-1: USB disconnect, device number 15 [ 867.488826][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.618344][T11012] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 867.694117][T11012] usb 7-1: device descriptor read/8, error -71 [ 867.947876][T11012] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 867.978695][T11012] usb 7-1: device descriptor read/8, error -71 [ 868.109095][T11012] usb usb7-port1: unable to enumerate USB device [ 868.492410][ T5923] cypress 0003:04B4:BCA1.0026: item fetching failed at offset 0/3 [ 868.526500][ T5923] cypress 0003:04B4:BCA1.0026: parse failed [ 868.566788][ T5923] cypress 0003:04B4:BCA1.0026: probe with driver cypress failed with error -22 [ 868.587225][T17482] loop6: detected capacity change from 0 to 7 [ 868.666117][T17482] Dev loop6: unable to read RDB block 7 [ 868.673932][T17482] loop6: unable to read partition table [ 868.695090][T17482] loop6: partition table beyond EOD, truncated [ 868.715028][T11005] usb 2-1: USB disconnect, device number 30 [ 868.734043][T17482] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 868.894502][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3330'. [ 869.186944][T17496] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3333'. [ 869.485594][T17503] loop6: detected capacity change from 0 to 7 [ 869.564511][ T5200] Dev loop6: unable to read RDB block 7 [ 869.577831][T11005] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 869.586551][ T5200] loop6: unable to read partition table [ 869.597279][T17494] syzkaller0: entered promiscuous mode [ 869.602992][T17494] syzkaller0: entered allmulticast mode [ 869.612285][ T5200] loop6: partition table beyond EOD, truncated [ 869.708538][T17503] Dev loop6: unable to read RDB block 7 [ 869.744269][T17503] loop6: unable to read partition table [ 869.783869][T11005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.801514][T17503] loop6: partition table beyond EOD, truncated [ 869.811202][T11005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.821479][T11005] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 869.832653][T11005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.844165][T11005] usb 4-1: config 0 descriptor?? [ 869.867903][T17503] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 869.982020][ T5200] Dev loop6: unable to read RDB block 7 [ 870.103824][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.111038][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.138174][ T5200] loop6: unable to read partition table [ 870.144232][ T5200] loop6: partition table beyond EOD, truncated [ 870.337026][T11005] hid-steam 0003:28DE:1142.0027: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 870.382516][T17518] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 870.433194][T11005] hid-steam 0003:28DE:1142.0027: Steam wireless receiver connected [ 870.525376][T11005] hid-steam 0003:28DE:1142.0028: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 870.904115][T17498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.919647][T17498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.978729][T11005] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 871.155644][T11005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 871.172667][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3346'. [ 871.222768][T17540] netlink: 'syz.5.3346': attribute type 9 has an invalid length. [ 871.239344][T11005] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 871.268200][ T30] audit: type=1326 audit(1747376126.391:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.287964][T11005] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 871.342965][ T30] audit: type=1326 audit(1747376126.391:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.376645][ T30] audit: type=1326 audit(1747376126.401:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.417811][T11005] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 871.558286][T11005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.586872][ T30] audit: type=1326 audit(1747376126.401:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.676284][T11005] usb 5-1: config 0 descriptor?? [ 871.709480][T11005] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 871.720905][ T30] audit: type=1326 audit(1747376126.401:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.797905][ T5923] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 871.814540][ T30] audit: type=1326 audit(1747376126.401:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.867400][ T30] audit: type=1326 audit(1747376126.401:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.894448][ T30] audit: type=1326 audit(1747376126.401:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 871.966277][T17529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.981191][T17529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.989209][ T30] audit: type=1326 audit(1747376126.401:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17541 comm="syz.6.3347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 872.048686][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 872.064121][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 872.134366][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 872.155188][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 872.170413][ T5923] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 872.183236][T12523] Bluetooth: hci2: command 0x0406 tx timeout [ 872.189411][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.204565][ T5923] usb 6-1: config 0 descriptor?? [ 872.337409][T11037] usb 4-1: USB disconnect, device number 16 [ 872.381061][T11037] hid-steam 0003:28DE:1142.0027: Steam wireless receiver disconnected [ 872.417236][T17547] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3348'. [ 872.428257][T11005] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 872.586283][T11005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 872.622570][T11005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.645112][T11005] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 872.658826][T11037] usb 5-1: USB disconnect, device number 17 [ 872.678990][ T5923] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 872.694196][T11005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.749136][T11005] usb 2-1: config 0 descriptor?? [ 872.810647][ T5923] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 873.226172][T11005] elan 0003:04F3:0755.002A: failed to start in urb: -90 [ 873.252563][T11005] elan 0003:04F3:0755.002A: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 873.383349][T11005] usb 2-1: USB disconnect, device number 31 [ 873.446870][T17560] fido_id[17560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 873.514960][T17562] binder: 17561:17562 ioctl c0306201 2000000003c0 returned -14 [ 873.858991][ T5923] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 874.018081][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 874.035841][ T5923] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 874.045455][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.054460][ T5923] usb 7-1: Product: syz [ 874.059285][ T5923] usb 7-1: Manufacturer: syz [ 874.064019][ T5923] usb 7-1: SerialNumber: syz [ 874.075471][ T5923] usb 7-1: config 0 descriptor?? [ 874.186216][T17566] loop2: detected capacity change from 0 to 7 [ 874.206745][ T5888] Dev loop2: unable to read RDB block 7 [ 874.214278][ T5888] loop2: AHDI p2 p3 [ 874.218721][ T5888] loop2: partition table partially beyond EOD, truncated [ 874.226854][ T5888] loop2: p2 size 150995456 extends beyond EOD, truncated [ 874.254152][T17566] Dev loop2: unable to read RDB block 7 [ 874.260922][T17566] loop2: AHDI p2 p3 [ 874.266147][T17566] loop2: partition table partially beyond EOD, truncated [ 874.275505][T17566] loop2: p2 size 150995456 extends beyond EOD, truncated [ 874.347379][ T5923] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 874.398882][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 874.463215][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 874.552107][T17567] delete_channel: no stack [ 874.838064][T11016] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 875.017961][T11016] usb 2-1: Using ep0 maxpacket: 16 [ 875.036032][T11016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.056810][T11016] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.067408][T11016] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 875.082850][T11016] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 875.092351][T11016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.113922][T11016] usb 2-1: config 0 descriptor?? [ 875.672353][T11003] usb 6-1: USB disconnect, device number 29 [ 875.681898][ T5923] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 875.735640][ T5923] usb 7-1: USB disconnect, device number 24 [ 875.782441][T17575] FAULT_INJECTION: forcing a failure. [ 875.782441][T17575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.831494][T17575] CPU: 0 UID: 0 PID: 17575 Comm: syz.3.3356 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 875.831519][T17575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 875.831531][T17575] Call Trace: [ 875.831539][T17575] [ 875.831549][T17575] dump_stack_lvl+0x189/0x250 [ 875.831581][T17575] ? __lock_acquire+0xaac/0xd20 [ 875.831610][T17575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.831638][T17575] ? __pfx__printk+0x10/0x10 [ 875.831657][T17575] ? __might_fault+0xb0/0x130 [ 875.831691][T17575] should_fail_ex+0x414/0x560 [ 875.831713][T17575] _copy_from_user+0x2d/0xb0 [ 875.831742][T17575] ipv6_flowlabel_opt+0x116/0x2390 [ 875.831776][T17575] ? __lock_acquire+0xaac/0xd20 [ 875.831802][T17575] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 875.831827][T17575] ? look_up_lock_class+0x74/0x170 [ 875.831852][T17575] ? register_lock_class+0x51/0x320 [ 875.831884][T17575] ? __lock_acquire+0xaac/0xd20 [ 875.831922][T17575] ? __local_bh_enable_ip+0x12d/0x1c0 [ 875.831940][T17575] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.831966][T17575] ? __local_bh_enable_ip+0x12d/0x1c0 [ 875.831998][T17575] do_ipv6_setsockopt+0xe8c/0x2fb0 [ 875.832030][T17575] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 875.832054][T17575] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 875.832090][T17575] ? __pfx___might_resched+0x10/0x10 [ 875.832112][T17575] ? rcu_read_lock_any_held+0xb3/0x120 [ 875.832130][T17575] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 875.832157][T17575] ? aa_sk_perm+0x81e/0x950 [ 875.832182][T17575] ? __pfx_aa_sk_perm+0x10/0x10 [ 875.832213][T17575] ipv6_setsockopt+0x59/0x170 [ 875.832238][T17575] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 875.832262][T17575] do_sock_setsockopt+0x25a/0x3e0 [ 875.832291][T17575] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 875.832315][T17575] ? __fget_files+0x2a/0x420 [ 875.832350][T17575] ? __fget_files+0x3a0/0x420 [ 875.832377][T17575] ? __fget_files+0x2a/0x420 [ 875.832413][T17575] __x64_sys_setsockopt+0x18b/0x220 [ 875.832448][T17575] do_syscall_64+0xf6/0x210 [ 875.832490][T17575] ? clear_bhb_loop+0x60/0xb0 [ 875.832517][T17575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.832537][T17575] RIP: 0033:0x7f767f58e969 [ 875.832573][T17575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.832592][T17575] RSP: 002b:00007f76804c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 875.832614][T17575] RAX: ffffffffffffffda RBX: 00007f767f7b5fa0 RCX: 00007f767f58e969 [ 875.832629][T17575] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 875.832643][T17575] RBP: 00007f76804c1090 R08: 0000000000000020 R09: 0000000000000000 [ 875.832657][T17575] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.832670][T17575] R13: 0000000000000000 R14: 00007f767f7b5fa0 R15: 00007f767f8dfa28 [ 875.832702][T17575] [ 876.196185][T11016] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002B/input/input44 [ 876.281187][T11016] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 876.416979][T11016] usb 2-1: USB disconnect, device number 32 [ 876.523228][T17587] usb usb8: usbfs: process 17587 (syz.3.3359) did not claim interface 0 before use [ 876.546780][T17586] fido_id[17586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 876.597853][ T5892] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 876.771595][ T5892] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 876.782595][ T5892] usb 6-1: config 0 has no interface number 0 [ 876.822987][ T5892] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.023678][ T5892] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.054439][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 877.058324][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3362'. [ 877.088634][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.108771][ T5892] usb 6-1: config 0 descriptor?? [ 877.462576][T17598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.471650][T17598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.605772][T17598] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3360'. [ 878.385723][T11005] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 878.635854][T11005] usb 2-1: Using ep0 maxpacket: 16 [ 879.426133][T17593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.501579][T17593] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 879.665408][T17593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 879.676955][T17593] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 879.694412][T17593] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 879.714514][T17593] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 879.743654][T17593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 879.784550][T17593] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 879.865652][T17608] netlink: 'syz.3.3366': attribute type 4 has an invalid length. [ 880.113335][T17593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 880.119398][T17593] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 880.344832][ T120] kworker/0:2 (120) used greatest stack depth: 18216 bytes left [ 880.963037][T17622] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3369'. [ 880.977242][T17624] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3365'. [ 881.180258][ T5892] usbhid 6-1:0.32: can't add hid device: -71 [ 881.217205][ T5892] usbhid 6-1:0.32: probe with driver usbhid failed with error -71 [ 881.310682][ T5892] usb 6-1: USB disconnect, device number 30 [ 881.618219][T11005] usb 2-1: unable to get BOS descriptor or descriptor too short [ 881.657505][T11005] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 881.685566][T11005] usb 2-1: can't read configurations, error -71 [ 881.877210][T17635] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3372'. [ 881.904016][T17635] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 881.968065][T11037] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 882.130666][T11037] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 882.148097][T11037] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.184892][T11037] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 882.227948][T11037] usb 6-1: config 1 has no interface number 1 [ 882.253633][T11037] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 882.313247][T11037] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 882.358485][T11037] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 882.377081][T11037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.409711][T11037] usb 6-1: Product: syz [ 882.413947][T11037] usb 6-1: Manufacturer: syz [ 882.422759][T11037] usb 6-1: SerialNumber: syz [ 882.658725][T17628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.676959][T17628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.696639][T11037] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 882.704717][T11037] usb 6-1: MIDIStreaming interface descriptor not found [ 882.728062][T11016] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 882.754858][T11037] usb 6-1: USB disconnect, device number 31 [ 882.832233][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.901409][T11016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.929882][T11016] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 882.975327][T11016] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 882.991234][T11016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.003584][T11016] usb 5-1: Product: syz [ 883.015031][T11016] usb 5-1: Manufacturer: syz [ 883.023299][T11016] usb 5-1: SerialNumber: syz [ 883.242824][T17638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.269737][T17638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.386494][T11016] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 883.427937][T11037] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 883.441632][T11016] usb 5-1: USB disconnect, device number 18 [ 883.499863][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3377'. [ 883.618166][T11037] usb 2-1: Using ep0 maxpacket: 16 [ 883.918089][T11016] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 884.098131][T11021] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 884.134584][T11016] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.179291][T11016] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 884.314944][T11016] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 884.327307][T11016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.343243][T11021] usb 6-1: config 0 has no interfaces? [ 884.415595][T11016] usb 5-1: Product: syz [ 884.457250][T11016] usb 5-1: Manufacturer: syz [ 884.536518][T11016] usb 5-1: SerialNumber: syz [ 884.547104][T11021] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 884.654232][T11021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.895685][T11021] usb 6-1: Product: syz [ 884.915936][T11021] usb 6-1: Manufacturer: syz [ 884.925502][T11021] usb 6-1: SerialNumber: syz [ 884.940881][T11021] usb 6-1: config 0 descriptor?? [ 885.021030][ T30] audit: type=1326 audit(1747376140.121:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 885.065090][T11016] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 885.109354][T11016] usb 5-1: USB disconnect, device number 19 [ 885.148050][ T5923] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 885.315841][ T30] audit: type=1326 audit(1747376140.121:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 885.328152][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 885.497889][T17663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.522692][T17663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.637787][ T30] audit: type=1326 audit(1747376140.121:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 885.779549][ T30] audit: type=1326 audit(1747376140.121:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 885.975275][ T30] audit: type=1326 audit(1747376140.121:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 886.205670][ T30] audit: type=1326 audit(1747376140.121:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 886.887820][T11016] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 887.047912][T11016] usb 7-1: device descriptor read/64, error -71 [ 887.056823][ T30] audit: type=1326 audit(1747376140.131:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 887.155242][T17674] loop2: detected capacity change from 0 to 7 [ 887.214807][ T30] audit: type=1326 audit(1747376140.131:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 887.231327][ T7991] Dev loop2: unable to read RDB block 7 [ 887.270447][ T7991] loop2: unable to read partition table [ 887.287923][T11016] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 887.368059][ T7991] loop2: partition table beyond EOD, truncated [ 887.427998][T11016] usb 7-1: device descriptor read/64, error -71 [ 887.448400][T17674] Dev loop2: unable to read RDB block 7 [ 887.454650][T17674] loop2: unable to read partition table [ 887.460776][ T30] audit: type=1326 audit(1747376140.131:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 887.466531][T17674] loop2: partition table beyond EOD, truncated [ 887.490827][T17674] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 887.538272][T11016] usb usb7-port1: attempt power cycle [ 887.581806][T17678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3386'. [ 887.918162][T11016] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 887.947830][ T30] audit: type=1326 audit(1747376140.131:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.4.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 887.992413][T11016] usb 7-1: device descriptor read/8, error -71 [ 888.077609][T17680] binder: BINDER_SET_CONTEXT_MGR already set [ 888.117868][T17680] binder: 17679:17680 ioctl 4018620d 200000000040 returned -16 [ 888.287943][T11016] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 888.339534][T11016] usb 7-1: device descriptor read/8, error -71 [ 888.349048][T11037] usb 2-1: unable to get BOS descriptor or descriptor too short [ 888.380630][T11037] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 888.401740][T11037] usb 2-1: can't read configurations, error -71 [ 888.478679][T11016] usb usb7-port1: unable to enumerate USB device [ 888.647559][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 888.670639][ T5923] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 888.684237][ T5923] usb 4-1: can't read configurations, error -71 [ 888.805456][T11016] usb 6-1: USB disconnect, device number 32 [ 888.837931][T11037] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 889.005013][T11037] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 889.048340][T11037] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 889.108477][T11037] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 889.151816][T11037] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.164658][T11037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.195930][T11037] usb 2-1: Product: syz [ 889.213820][T11037] usb 2-1: Manufacturer: syz [ 889.224146][T11037] usb 2-1: SerialNumber: syz [ 889.251540][T11037] usb 2-1: selecting invalid altsetting 1 [ 889.367170][T11012] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 889.528007][T11012] usb 5-1: Using ep0 maxpacket: 16 [ 889.535236][T11012] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 889.551324][T11012] usb 5-1: config 0 has no interface number 0 [ 889.560628][T11012] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 889.581008][T11012] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 889.602126][T11012] usb 5-1: config 0 interface 41 has no altsetting 0 [ 889.620988][T11012] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 889.649071][T11012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.676788][T11012] usb 5-1: Product: syz [ 889.698766][T11012] usb 5-1: Manufacturer: syz [ 889.708203][T11012] usb 5-1: SerialNumber: syz [ 889.724787][T11012] usb 5-1: config 0 descriptor?? [ 889.736073][T17697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 889.752506][T17697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 889.897772][T11037] usb 2-1: selecting invalid altsetting 1 [ 889.904909][T11037] cdc_ncm 2-1:1.0: bind() failure [ 889.983952][T17697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 890.007028][T17697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 890.081470][ T5923] usb 2-1: USB disconnect, device number 36 [ 890.399421][T17732] gretap0: entered promiscuous mode [ 890.405882][T17732] gretap0: left promiscuous mode [ 890.656463][ T5923] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 890.678472][T11012] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 890.810307][ T5923] usb 6-1: device descriptor read/64, error -71 [ 890.836657][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'. [ 890.847376][T17738] netlink: 'syz.1.3411': attribute type 9 has an invalid length. [ 891.047910][ T5923] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 891.237137][ T5923] usb 6-1: device descriptor read/64, error -71 [ 891.380444][ T5923] usb usb6-port1: attempt power cycle [ 891.762231][ T5923] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 891.788837][ T5923] usb 6-1: device descriptor read/8, error -71 [ 891.877887][T11037] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 891.944400][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3423'. [ 891.954549][T17765] netlink: 'syz.1.3423': attribute type 9 has an invalid length. [ 892.023400][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 892.033851][T17697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.041654][T11037] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 892.063294][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.063432][ T5923] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 892.081305][T17697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.087972][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.115765][T11012] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 892.127120][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.141265][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.160062][ T5923] usb 6-1: device descriptor read/8, error -71 [ 892.179075][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.186781][T11012] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 892.203250][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.218343][T11012] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 892.225125][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.247103][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.247184][T11012] usb 5-1: USB disconnect, device number 20 [ 892.272151][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.276889][T17773] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 892.288681][ T5923] usb usb6-port1: unable to enumerate USB device [ 892.296988][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.323208][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.335011][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.342964][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.352102][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.365833][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.373824][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.383073][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.396036][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.406531][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.417201][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.433378][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.441534][T11037] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 892.450922][T11037] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 892.462165][T11037] usb 7-1: config 0 interface 0 has no altsetting 0 [ 892.473564][T11037] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 892.483282][T11037] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 892.491939][T11037] usb 7-1: Product: syz [ 892.496333][T11037] usb 7-1: Manufacturer: syz [ 892.504702][T11037] usb 7-1: SerialNumber: syz [ 892.545803][T11037] usb 7-1: config 0 descriptor?? [ 892.557816][T11005] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 892.591110][T11037] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 892.743838][T11005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 892.788046][T11016] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 892.806747][T11005] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 892.832845][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 892.833293][ T5923] usb 7-1: USB disconnect, device number 29 [ 892.854963][ T5923] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 892.882646][T11005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.917265][T11005] usb 2-1: Product: syz [ 892.935252][T11005] usb 2-1: Manufacturer: syz [ 892.945292][T11005] usb 2-1: SerialNumber: syz [ 892.962505][T11016] usb 4-1: config 0 has no interfaces? [ 892.970305][T11005] usb 2-1: config 0 descriptor?? [ 893.011105][T11016] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 893.021346][T11016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.035643][T11016] usb 4-1: Product: syz [ 893.040119][T11016] usb 4-1: Manufacturer: syz [ 893.045082][T11016] usb 4-1: SerialNumber: syz [ 893.077095][T11016] usb 4-1: config 0 descriptor?? [ 893.258044][T11005] usb 2-1: USB disconnect, device number 37 [ 893.368565][T11007] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 893.528534][T11007] usb 5-1: Using ep0 maxpacket: 32 [ 893.538378][T11007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.562459][T11007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.579188][T11007] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 893.626622][T11007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.660520][T11007] usb 5-1: config 0 descriptor?? [ 893.847976][T11016] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 894.007843][T11016] usb 6-1: Using ep0 maxpacket: 16 [ 894.017627][T11016] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 894.038243][T11016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.047461][T11016] usb 6-1: Product: syz [ 894.064734][T11016] usb 6-1: Manufacturer: syz [ 894.076073][T11016] usb 6-1: SerialNumber: syz [ 894.101906][T11007] ft260 0003:0403:6030.002C: unknown main item tag 0x0 [ 894.112216][T11016] usb 6-1: config 0 descriptor?? [ 894.122590][T11016] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 894.198507][ T5923] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 894.227920][T17798] loop6: detected capacity change from 0 to 7 [ 894.238143][ T5888] Dev loop6: unable to read RDB block 7 [ 894.244076][ T5888] loop6: unable to read partition table [ 894.250584][ T5888] loop6: partition table beyond EOD, truncated [ 894.269375][T17798] Dev loop6: unable to read RDB block 7 [ 894.275331][T17798] loop6: unable to read partition table [ 894.291778][T11007] ft260 0003:0403:6030.002C: chip code: 0000 0000 [ 894.296016][T17798] loop6: partition table beyond EOD, truncated [ 894.308458][T17798] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 894.338586][ T5923] usb 7-1: device descriptor read/64, error -71 [ 894.483634][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 894.494783][T17800] netlink: 'syz.1.3435': attribute type 9 has an invalid length. [ 894.494857][T11007] ft260 0003:0403:6030.002C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 894.578094][ T5923] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 894.697346][T11007] ft260 0003:0403:6030.002C: failed to retrieve status: -71, no wakeup [ 894.728048][T11007] ft260 0003:0403:6030.002C: failed to retrieve status: -71 [ 894.728078][ T5923] usb 7-1: device descriptor read/64, error -71 [ 894.755372][T11007] ft260 0003:0403:6030.002C: failed to reset I2C controller: -71 [ 894.826827][T11007] usb 5-1: USB disconnect, device number 21 [ 894.861675][ T5923] usb usb7-port1: attempt power cycle [ 895.228429][ T5923] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 895.264795][ T5923] usb 7-1: device descriptor read/8, error -71 [ 895.362747][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3442'. [ 895.457995][T11007] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 895.458235][T11016] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 895.527849][ T5923] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 895.558548][ T5923] usb 7-1: device descriptor read/8, error -71 [ 895.620671][T11007] usb 2-1: No LPM exit latency info found, disabling LPM. [ 895.632567][T11007] usb 2-1: string descriptor 0 read error: -22 [ 895.640654][T11007] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 895.650070][T11007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.664833][T11007] usb 2-1: config 0 descriptor?? [ 895.680791][ T5923] usb usb7-port1: unable to enumerate USB device [ 895.831058][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3447'. [ 895.843389][T17829] netlink: 'syz.4.3447': attribute type 9 has an invalid length. [ 896.321544][T11005] usb 6-1: USB disconnect, device number 37 [ 896.365643][T11016] usb 4-1: USB disconnect, device number 19 [ 896.726137][T11007] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 896.786918][T11007] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 896.805183][T11007] dib0700: firmware download failed at 7 with -22 [ 896.845561][T11007] usb 2-1: USB disconnect, device number 38 [ 896.903414][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3458'. [ 896.917895][T17858] netlink: 'syz.6.3458': attribute type 9 has an invalid length. [ 896.997841][T11005] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 897.184543][T11005] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 897.207774][T11005] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 897.241920][T11005] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 897.259240][T11005] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 897.272064][T11005] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 897.286578][T11005] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 897.327254][T17877] loop2: detected capacity change from 0 to 7 [ 897.327860][T11005] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 897.339051][T17877] Dev loop2: unable to read RDB block 7 [ 897.370117][T11005] usb 6-1: Product: syz [ 897.370130][T17877] loop2: AHDI p2 p3 [ 897.370160][T17877] loop2: partition table partially beyond EOD, [ 897.374307][T11005] usb 6-1: Manufacturer: syz [ 897.403057][T17877] truncated [ 897.407459][T17877] loop2: p2 size 150995456 extends beyond EOD, truncated [ 897.421417][T11005] cdc_wdm 6-1:1.0: skipping garbage [ 897.426664][T11005] cdc_wdm 6-1:1.0: skipping garbage [ 897.444681][T11005] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 897.451428][T11005] cdc_wdm 6-1:1.0: Unknown control protocol [ 897.503089][ T7991] udevd[7991]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 897.531726][T11016] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 897.626704][ C1] wdm_int_callback: 1 callbacks suppressed [ 897.626729][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 897.627210][T11005] usb 6-1: USB disconnect, device number 38 [ 897.632574][ C1] wdm_int_callback: 1 callbacks suppressed [ 897.632594][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 897.632615][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 897.681601][T11007] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 897.698743][T11016] usb 4-1: Using ep0 maxpacket: 32 [ 897.715617][T11016] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 897.725976][T11016] usb 4-1: config 0 has no interface number 0 [ 897.741898][T11016] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 897.762428][T11016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.774751][T11016] usb 4-1: Product: syz [ 897.782320][T11016] usb 4-1: Manufacturer: syz [ 897.787073][T11016] usb 4-1: SerialNumber: syz [ 897.810821][T11016] usb 4-1: config 0 descriptor?? [ 897.907850][T11007] usb 5-1: Using ep0 maxpacket: 16 [ 897.914421][T11007] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 897.925369][T11007] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.945407][T11007] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.954602][T11007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.039579][T11016] usb 4-1: USB disconnect, device number 20 [ 898.116102][T11007] usb 5-1: Product: syz [ 898.132313][T11007] usb 5-1: Manufacturer: syz [ 898.137930][T11007] usb 5-1: SerialNumber: syz [ 898.485973][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3470'. [ 898.629936][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3470'. [ 898.794810][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3472'. [ 898.818284][T17904] netlink: 'syz.3.3472': attribute type 9 has an invalid length. [ 900.238276][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3478'. [ 901.348109][T11007] usb 5-1: USB disconnect, device number 22 [ 901.398919][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 901.476018][ T7991] udevd[7991]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.522817][T17947] netlink: 'syz.4.3486': attribute type 9 has an invalid length. [ 902.096062][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3490'. [ 902.877809][ T5923] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 903.297811][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 903.323873][ T5923] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 903.333164][T11016] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 903.388651][ T5923] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.418251][ T5923] usb 6-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 903.428542][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.446838][ T5923] usb 6-1: Product: syz [ 903.529201][ T5923] usb 6-1: Manufacturer: syz [ 903.544774][ T5923] usb 6-1: SerialNumber: syz [ 903.552165][T11016] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 903.567009][T11016] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 903.576209][T11016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.584561][T11016] usb 7-1: Product: syz [ 903.634230][T11016] usb 7-1: Manufacturer: syz [ 903.817380][T17951] block device autoloading is deprecated and will be removed. [ 903.837145][T17951] syz.1.3485: attempt to access beyond end of device [ 903.837145][T17951] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 903.851516][ T5923] usb 6-1: config 0 descriptor?? [ 903.856575][T11016] usb 7-1: SerialNumber: syz [ 903.880434][T11016] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 903.989508][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 903.989525][ T30] audit: type=1326 audit(1747376159.131:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17948 comm="syz.1.3485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x0 [ 904.078328][T17967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.270670][T17967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.332543][T11007] usb 6-1: USB disconnect, device number 39 [ 904.607888][T11016] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 905.559722][T11007] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 905.741090][T11007] usb 6-1: Using ep0 maxpacket: 8 [ 905.765869][T11007] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 905.821288][T11007] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.850904][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 905.866241][T11007] usb 6-1: config 0 has no interface number 0 [ 905.887618][T11007] usb 6-1: config 0 interface 52 has no altsetting 0 [ 905.902645][T11007] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 905.904641][T17988] netlink: 'syz.4.3498': attribute type 9 has an invalid length. [ 905.920156][T11007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.954051][T11007] usb 6-1: config 0 descriptor?? [ 906.154752][T17994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3495'. [ 906.288541][T11016] usb 7-1: USB disconnect, device number 34 [ 906.323408][T18001] loop6: detected capacity change from 0 to 7 [ 906.330900][T18001] Dev loop6: unable to read RDB block 7 [ 906.336758][T18001] loop6: unable to read partition table [ 906.357144][T18001] loop6: partition table beyond EOD, truncated [ 906.367949][T18001] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 906.410923][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.454091][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.498357][T11007] usb 6-1: USB disconnect, device number 40 [ 906.724066][T18010] xt_bpf: check failed: parse error [ 907.501827][T18022] SET target dimension over the limit! [ 907.860076][ T5892] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 908.020884][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 908.028292][ T5892] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 908.046678][ T5892] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 908.077553][ T5892] usb 7-1: config 0 has no interface number 0 [ 908.096713][ T5892] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 908.153040][ T5892] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 908.196863][ T5892] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 908.232592][ T5892] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.267840][ T5892] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 908.297890][ T5892] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 908.326897][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.379015][ T5892] usb 7-1: config 0 descriptor?? [ 908.406017][T18022] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 908.432579][ T5892] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 909.881672][ T30] audit: type=1326 audit(1747376165.021:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 909.953461][ T30] audit: type=1326 audit(1747376165.021:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 910.281924][ T30] audit: type=1326 audit(1747376165.021:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 910.336884][ T30] audit: type=1326 audit(1747376165.021:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 910.506704][T11012] usb 7-1: USB disconnect, device number 35 [ 910.592700][ T30] audit: type=1326 audit(1747376165.021:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 910.773193][ T30] audit: type=1326 audit(1747376165.021:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.4.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 911.313872][T18078] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3530'. [ 911.730558][T18084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3532'. [ 911.817795][ T30] audit: type=1326 audit(1747376166.921:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18082 comm="syz.6.3533" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x0 [ 911.892892][T18085] binder: BINDER_SET_CONTEXT_MGR already set [ 911.900780][T18085] binder: 18082:18085 ioctl 4018620d 200000000040 returned -16 [ 911.939849][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3533'. [ 911.993222][T18087] loop6: detected capacity change from 0 to 7 [ 912.010328][T18087] Dev loop6: unable to read RDB block 7 [ 912.026262][T18087] loop6: unable to read partition table [ 912.043645][T18087] loop6: partition table beyond EOD, truncated [ 912.066118][T18087] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 912.386563][T18091] delete_channel: no stack [ 912.540246][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3539'. [ 912.628279][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3539'. [ 912.833787][T18112] loop6: detected capacity change from 0 to 7 [ 912.877153][T18112] Dev loop6: unable to read RDB block 7 [ 912.903851][T18116] FAULT_INJECTION: forcing a failure. [ 912.903851][T18116] name failslab, interval 1, probability 0, space 0, times 0 [ 912.916538][T18118] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3544'. [ 912.936180][T18112] loop6: unable to read partition table [ 912.936407][T18112] loop6: partition table beyond EOD, truncated [ 913.017955][T18116] CPU: 0 UID: 0 PID: 18116 Comm: syz.3.3545 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 913.017978][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 913.017989][T18116] Call Trace: [ 913.017995][T18116] [ 913.018003][T18116] dump_stack_lvl+0x189/0x250 [ 913.018031][T18116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 913.018054][T18116] ? __pfx__printk+0x10/0x10 [ 913.018073][T18116] ? __pfx___might_resched+0x10/0x10 [ 913.018087][T18116] ? fs_reclaim_acquire+0x7d/0x100 [ 913.018114][T18116] should_fail_ex+0x414/0x560 [ 913.018134][T18116] should_failslab+0xa8/0x100 [ 913.018156][T18116] __kmalloc_noprof+0xcb/0x4f0 [ 913.018174][T18116] ? kfree+0x4d/0x440 [ 913.018190][T18116] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 913.018215][T18116] tomoyo_realpath_from_path+0xe3/0x5d0 [ 913.018236][T18116] ? tomoyo_domain+0xda/0x130 [ 913.018260][T18116] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 913.018275][T18116] tomoyo_path_number_perm+0x1e8/0x5a0 [ 913.018293][T18116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 913.018321][T18116] ? __lock_acquire+0xaac/0xd20 [ 913.018367][T18116] ? __fget_files+0x2a/0x420 [ 913.018391][T18116] ? __fget_files+0x3a0/0x420 [ 913.018410][T18116] ? __fget_files+0x2a/0x420 [ 913.018433][T18116] security_file_ioctl+0xcb/0x2d0 [ 913.018449][T18116] __se_sys_ioctl+0x47/0x170 [ 913.018467][T18116] do_syscall_64+0xf6/0x210 [ 913.018488][T18116] ? clear_bhb_loop+0x60/0xb0 [ 913.018506][T18116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.018520][T18116] RIP: 0033:0x7f767f58e969 [ 913.018533][T18116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.018546][T18116] RSP: 002b:00007f76804c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.018562][T18116] RAX: ffffffffffffffda RBX: 00007f767f7b5fa0 RCX: 00007f767f58e969 [ 913.018573][T18116] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 913.018582][T18116] RBP: 00007f76804c1090 R08: 0000000000000000 R09: 0000000000000000 [ 913.018592][T18116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.018600][T18116] R13: 0000000000000000 R14: 00007f767f7b5fa0 R15: 00007f767f8dfa28 [ 913.018622][T18116] [ 913.018644][T18116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 913.018847][T18112] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 913.223851][T18120] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3537'. [ 913.491472][T18125] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3547'. [ 913.588907][ T30] audit: type=1326 audit(1747376168.711:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 913.588967][ T30] audit: type=1326 audit(1747376168.711:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 913.589019][ T30] audit: type=1326 audit(1747376168.711:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18127 comm="syz.6.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 914.105170][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3549'. [ 914.107483][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3549'. [ 915.788072][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.038322][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.253352][T11005] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 916.408093][T11005] usb 6-1: Using ep0 maxpacket: 16 [ 916.410230][T11005] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 916.410261][T11005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.412492][T11005] usb 6-1: config 0 descriptor?? [ 916.420321][T11005] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 916.729788][T11005] gspca_sonixj: reg_r err -71 [ 916.729874][T11005] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 916.732020][T11005] usb 6-1: USB disconnect, device number 41 [ 917.208468][T11005] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 917.412016][T11012] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 917.471452][T11005] usb 6-1: not running at top speed; connect to a high speed hub [ 917.481474][T11005] usb 6-1: config 1 interface 0 has no altsetting 0 [ 917.493735][T11005] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 917.502891][T11005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.606141][T11005] usb 6-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 917.641709][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.692370][T11012] usb 7-1: Using ep0 maxpacket: 32 [ 917.782999][T11012] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 917.794523][T11012] usb 7-1: config 0 has no interface number 0 [ 917.797801][T11005] usb 6-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 917.831737][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.865749][T11012] usb 7-1: config 0 interface 89 has no altsetting 0 [ 917.906811][T11012] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 917.916090][T11012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.955481][T11012] usb 7-1: Product: syz [ 917.981293][T11012] usb 7-1: Manufacturer: syz [ 917.999791][T11012] usb 7-1: SerialNumber: syz [ 918.014145][T11005] usb 6-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 918.084512][T11012] usb 7-1: config 0 descriptor?? [ 918.122416][T11012] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 918.159306][T11012] em28xx 7-1:0.89: Video interface 89 found: bulk [ 918.197872][ T5892] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 918.310092][T11005] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 918.376517][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 918.450894][T11005] usb 6-1: USB disconnect, device number 42 [ 918.465564][ T5892] usb 5-1: config 0 has no interfaces? [ 918.518566][T11005] usblp0: removed [ 918.534130][ T5892] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 918.569226][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.683494][ T5892] usb 5-1: config 0 descriptor?? [ 919.307027][T11012] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 919.316444][T18182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.332628][T18182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.430856][T11012] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 919.507817][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3559'. [ 919.524333][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3559'. [ 919.654742][T11012] em28xx 7-1:0.89: board has no eeprom [ 919.666043][T18187] FAULT_INJECTION: forcing a failure. [ 919.666043][T18187] name failslab, interval 1, probability 0, space 0, times 0 [ 919.686838][T18187] CPU: 0 UID: 0 PID: 18187 Comm: syz.5.3560 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 919.686861][T18187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.686871][T18187] Call Trace: [ 919.686878][T18187] [ 919.686885][T18187] dump_stack_lvl+0x189/0x250 [ 919.686914][T18187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 919.686942][T18187] ? __pfx__printk+0x10/0x10 [ 919.686960][T18187] ? __pfx___might_resched+0x10/0x10 [ 919.686975][T18187] ? fs_reclaim_acquire+0x7d/0x100 [ 919.687003][T18187] should_fail_ex+0x414/0x560 [ 919.687024][T18187] should_failslab+0xa8/0x100 [ 919.687047][T18187] __kmalloc_noprof+0xcb/0x4f0 [ 919.687067][T18187] ? tomoyo_encode+0x28b/0x550 [ 919.687090][T18187] tomoyo_encode+0x28b/0x550 [ 919.687114][T18187] tomoyo_realpath_from_path+0x58d/0x5d0 [ 919.687137][T18187] ? tomoyo_domain+0xda/0x130 [ 919.687161][T18187] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 919.687178][T18187] tomoyo_path_number_perm+0x1e8/0x5a0 [ 919.687196][T18187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 919.687225][T18187] ? __lock_acquire+0xaac/0xd20 [ 919.687261][T18187] ? __fget_files+0x2a/0x420 [ 919.687286][T18187] ? __fget_files+0x3a0/0x420 [ 919.687305][T18187] ? __fget_files+0x2a/0x420 [ 919.687329][T18187] security_file_ioctl+0xcb/0x2d0 [ 919.687346][T18187] __se_sys_ioctl+0x47/0x170 [ 919.687364][T18187] do_syscall_64+0xf6/0x210 [ 919.687399][T18187] ? clear_bhb_loop+0x60/0xb0 [ 919.687418][T18187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.687432][T18187] RIP: 0033:0x7f60c578e969 [ 919.687446][T18187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.687459][T18187] RSP: 002b:00007f60c66d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.687475][T18187] RAX: ffffffffffffffda RBX: 00007f60c59b5fa0 RCX: 00007f60c578e969 [ 919.687487][T18187] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 919.687497][T18187] RBP: 00007f60c66d9090 R08: 0000000000000000 R09: 0000000000000000 [ 919.687506][T18187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.687515][T18187] R13: 0000000000000000 R14: 00007f60c59b5fa0 R15: 00007f60c5adfa28 [ 919.687537][T18187] [ 919.909992][ C0] vkms_vblank_simulate: vblank timer overrun [ 919.963704][T18187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.987825][T11012] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 919.995923][T11012] em28xx 7-1:0.89: analog set to bulk mode. [ 920.188328][T11016] em28xx 7-1:0.89: Registering V4L2 extension [ 920.388830][T11016] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 920.440553][T11016] em28xx 7-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 920.487811][T11016] em28xx 7-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 920.549680][T11016] em28xx 7-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 920.607582][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 920.607595][ T30] audit: type=1326 audit(1747376175.741:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 920.640934][T11016] em28xx 7-1:0.89: Config register raw data: 0xfffffffb [ 920.683571][ T30] audit: type=1326 audit(1747376175.781:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 920.708559][ T30] audit: type=1326 audit(1747376175.781:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 920.730902][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.737186][ T30] audit: type=1326 audit(1747376175.781:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 920.759453][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.789543][ T30] audit: type=1326 audit(1747376175.781:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 920.811877][ C0] vkms_vblank_simulate: vblank timer overrun [ 920.841266][T11016] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 920.871296][T11016] em28xx 7-1:0.89: No AC97 audio processor [ 920.978028][ T30] audit: type=1326 audit(1747376175.781:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18194 comm="syz.1.3563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 921.024480][T11016] usb 7-1: Decoder not found [ 921.038726][T11016] em28xx 7-1:0.89: failed to create media graph [ 921.101163][T11016] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 921.136832][T11016] em28xx 7-1:0.89: Registering snapshot button... [ 921.277346][T11005] usb 7-1: USB disconnect, device number 36 [ 921.300907][T11016] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input45 [ 921.337908][T11007] usb 5-1: USB disconnect, device number 24 [ 921.355133][T11005] em28xx 7-1:0.89: Disconnecting em28xx [ 921.363480][T11016] em28xx 7-1:0.89: Remote control support is not available for this card. [ 921.428837][T11005] em28xx 7-1:0.89: Closing input extension [ 921.456588][T11005] em28xx 7-1:0.89: Deregistering snapshot button [ 921.486991][T18207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3565'. [ 921.624585][T11005] em28xx 7-1:0.89: Freeing device [ 922.110512][T18219] input: syz0 as /devices/virtual/input/input46 [ 922.323117][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 922.444689][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3572'. [ 922.503371][T18226] loop2: detected capacity change from 0 to 7 [ 922.515946][T18226] loop2: [ 922.519494][T18226] loop2: partition table partially beyond EOD, truncated [ 922.641134][T18228] loop2: detected capacity change from 0 to 7 [ 922.697139][T18228] Dev loop2: unable to read RDB block 7 [ 922.703873][T18228] loop2: unable to read partition table [ 922.721090][T18228] loop2: partition table beyond EOD, truncated [ 922.737520][T18228] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 923.434656][T18238] xt_bpf: check failed: parse error [ 923.442813][T18240] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3577'. [ 923.527902][ T5923] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 923.822953][ T5923] usb 4-1: config 0 has an invalid interface number: 46 but max is 8 [ 923.839088][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 923.873585][ T5923] usb 4-1: config 0 has no interface number 0 [ 923.892072][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3580'. [ 923.905882][ T5923] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 923.930183][ T5923] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 923.985489][ T5923] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 923.997022][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.034484][ T5923] usb 4-1: Product: syz [ 924.051572][ T5923] usb 4-1: Manufacturer: syz [ 924.067403][ T5923] usb 4-1: SerialNumber: syz [ 924.120934][ T5923] usb 4-1: config 0 descriptor?? [ 924.142723][T18234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 924.156766][ T5923] ums-karma 4-1:0.46: USB Mass Storage device detected [ 924.271452][ T5923] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 924.356613][ T5923] usb 4-1: USB disconnect, device number 21 [ 924.558042][T11005] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 924.583207][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 924.698022][T11005] usb 7-1: device descriptor read/64, error -71 [ 924.947819][T11005] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 925.117886][T11005] usb 7-1: device descriptor read/64, error -71 [ 925.187971][ T30] audit: type=1326 audit(1747376180.321:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.4.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 925.244113][T18274] ptrace attach of "./syz-executor exec"[16522] was attempted by "./syz-executor exec"[18274] [ 925.254887][T11005] usb usb7-port1: attempt power cycle [ 925.273448][ T30] audit: type=1326 audit(1747376180.321:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.4.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 925.417876][ T30] audit: type=1326 audit(1747376180.351:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.4.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 925.511248][ T30] audit: type=1326 audit(1747376180.351:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18269 comm="syz.4.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5feeb8e969 code=0x7ffc0000 [ 925.707799][T11005] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 925.738762][T11005] usb 7-1: device descriptor read/8, error -71 [ 926.058461][T11005] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 926.091492][T11005] usb 7-1: device descriptor read/8, error -71 [ 926.182772][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 926.216259][T11005] usb usb7-port1: unable to enumerate USB device [ 926.227268][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3592'. [ 927.872425][T18308] loop6: detected capacity change from 0 to 7 [ 927.888119][T18308] Dev loop6: unable to read RDB block 7 [ 927.968988][T18308] loop6: unable to read partition table [ 928.136191][T18308] loop6: partition table beyond EOD, truncated [ 928.158000][T18308] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 928.897376][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3604'. [ 928.937951][T11012] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 929.077815][T11012] usb 5-1: device descriptor read/64, error -71 [ 929.142821][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 929.142841][ T30] audit: type=1326 audit(1747376184.281:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 929.327468][ T5923] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 929.338866][T11012] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 929.528709][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 929.573861][ T5923] usb 4-1: config 5 has an invalid interface number: 52 but max is 1 [ 929.588978][T11012] usb 5-1: device descriptor read/64, error -71 [ 929.610965][ T30] audit: type=1326 audit(1747376184.281:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 929.640241][ T5923] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 929.712962][ T30] audit: type=1326 audit(1747376184.281:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 929.721832][ T5923] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 929.774200][ T30] audit: type=1326 audit(1747376184.281:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 929.797626][T11012] usb usb5-port1: attempt power cycle [ 929.855532][ T5923] usb 4-1: config 5 has no interface number 0 [ 929.875919][ T5923] usb 4-1: config 5 has no interface number 1 [ 929.887105][ T30] audit: type=1326 audit(1747376184.281:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 929.916888][ T5923] usb 4-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.954595][ T5923] usb 4-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.979157][ T5923] usb 4-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 930.017048][ T30] audit: type=1326 audit(1747376184.281:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 930.072552][T18332] loop2: detected capacity change from 0 to 7 [ 930.097838][ T5923] usb 4-1: config 5 interface 52 has no altsetting 0 [ 930.101478][T18332] Dev loop2: unable to read RDB block 7 [ 930.125738][ T5923] usb 4-1: config 5 interface 4 has no altsetting 0 [ 930.125771][T18332] loop2: AHDI p2 p3 [ 930.167473][ T30] audit: type=1326 audit(1747376184.281:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 930.195930][T18332] loop2: partition table partially beyond EOD, truncated [ 930.197858][T11012] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 930.206977][ T30] audit: type=1326 audit(1747376184.281:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 930.237326][ T5923] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 930.243639][T18332] loop2: p2 size 150995456 extends beyond EOD, truncated [ 930.309924][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.341941][ T5923] usb 4-1: Product: syz [ 930.356861][ T30] audit: type=1326 audit(1747376184.281:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18322 comm="syz.6.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd3a998e969 code=0x7ffc0000 [ 930.356977][T11012] usb 5-1: device descriptor read/8, error -71 [ 930.390242][ T5923] usb 4-1: Manufacturer: syz [ 930.413339][ T5923] usb 4-1: SerialNumber: syz [ 930.477467][ T7991] udevd[7991]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 930.664624][ T5923] cytherm 4-1:5.52: Cypress thermometer device now attached [ 930.678091][ T5923] cytherm 4-1:5.4: Cypress thermometer device now attached [ 930.705829][ T5923] usb 4-1: USB disconnect, device number 22 [ 930.727958][T11012] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 930.746631][ T5923] cytherm 4-1:5.52: Cypress thermometer now disconnected [ 930.757967][T11007] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 930.789361][ T5923] cytherm 4-1:5.4: Cypress thermometer now disconnected [ 930.806934][T11012] usb 5-1: device descriptor read/8, error -71 [ 930.918189][T11012] usb usb5-port1: unable to enumerate USB device [ 930.932582][T11007] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.943843][T11007] usb 6-1: config 0 has no interfaces? [ 930.959920][T11007] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 930.977390][T11007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.003355][T11007] usb 6-1: config 0 descriptor?? [ 931.195077][T18337] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3611'. [ 931.328112][ T5923] usb 6-1: USB disconnect, device number 43 [ 931.371362][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 931.543345][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.561298][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.659032][T18343] loop6: detected capacity change from 0 to 7 [ 931.695145][ T5200] Dev loop6: unable to read RDB block 7 [ 931.701011][ T5200] loop6: unable to read partition table [ 931.716979][ T5200] loop6: partition table beyond EOD, truncated [ 931.735144][T18343] Dev loop6: unable to read RDB block 7 [ 931.764050][T18343] loop6: unable to read partition table [ 931.801291][T18343] loop6: partition table beyond EOD, truncated [ 931.817642][T18343] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 932.207344][ T5923] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 932.324661][ T30] audit: type=1326 audit(1747376187.461:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18363 comm="syz.1.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 932.357925][ T5923] usb 7-1: device descriptor read/64, error -71 [ 932.527869][T11012] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 932.597819][ T5923] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 932.687793][T11012] usb 6-1: Using ep0 maxpacket: 32 [ 932.702259][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 932.720276][T11012] usb 6-1: unable to get BOS descriptor or descriptor too short [ 932.731154][T11012] usb 6-1: config 8 has an invalid interface number: 143 but max is 3 [ 932.738150][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 932.753741][T11012] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 932.764473][ T5923] usb 7-1: device descriptor read/64, error -71 [ 932.778725][T11012] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 932.795897][T11012] usb 6-1: config 8 has no interface number 0 [ 932.806238][T11012] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 932.818539][T11012] usb 6-1: config 8 interface 143 altsetting 193 endpoint 0x9 has invalid wMaxPacketSize 0 [ 932.912921][ T5923] usb usb7-port1: attempt power cycle [ 932.920125][T11012] usb 6-1: config 8 interface 143 altsetting 193 bulk endpoint 0x9 has invalid maxpacket 0 [ 933.000674][T11012] usb 6-1: config 8 interface 143 altsetting 193 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 933.034177][T11012] usb 6-1: config 8 interface 143 has no altsetting 0 [ 933.047416][T11012] usb 6-1: New USB device found, idVendor=1608, idProduct=021d, bcdDevice= 8.a4 [ 933.063545][T11012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.097117][T11012] usb 6-1: Product: syz [ 933.106372][T11012] usb 6-1: Manufacturer: syz [ 933.114985][T11012] usb 6-1: SerialNumber: syz [ 933.285011][ T5923] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 933.329255][ T5923] usb 7-1: device descriptor read/8, error -71 [ 933.539491][T18380] loop6: detected capacity change from 0 to 7 [ 933.546633][T18380] Dev loop6: unable to read RDB block 7 [ 933.557030][T18380] loop6: unable to read partition table [ 933.567901][T11037] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 933.586224][T18380] loop6: partition table beyond EOD, truncated [ 933.597830][ T5923] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 933.604591][T18380] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 933.688570][T11012] io_ti 6-1:8.143: required endpoints missing [ 933.701552][ T5923] usb 7-1: device descriptor read/8, error -71 [ 933.737891][T11037] usb 5-1: Using ep0 maxpacket: 16 [ 933.759964][T11012] usb 6-1: USB disconnect, device number 44 [ 933.875784][ T5923] usb usb7-port1: unable to enumerate USB device [ 936.197057][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3637'. [ 936.530219][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3637'. [ 936.983816][T11037] usb 5-1: unable to get BOS descriptor or descriptor too short [ 937.028823][T11037] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 937.078112][T11037] usb 5-1: can't read configurations, error -71 [ 937.146410][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 937.154719][ T30] audit: type=1326 audit(1747376192.281:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 937.264471][ T30] audit: type=1326 audit(1747376192.281:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 937.513332][ T30] audit: type=1326 audit(1747376192.281:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 937.636813][ T30] audit: type=1326 audit(1747376192.281:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 937.736657][ T30] audit: type=1326 audit(1747376192.281:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 937.768028][T11037] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 938.034712][ T30] audit: type=1326 audit(1747376192.281:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 938.067874][ T30] audit: type=1326 audit(1747376192.281:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 938.100438][T11037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.100546][ T30] audit: type=1326 audit(1747376192.281:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 938.141842][ T30] audit: type=1326 audit(1747376192.281:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18429 comm="syz.1.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f96ab98e969 code=0x7ffc0000 [ 938.171148][T11037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.291566][T11037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 938.338628][T11037] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 938.386314][T11037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.496072][T11037] usb 5-1: config 0 descriptor?? [ 938.658323][T11012] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 938.788199][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3643'. [ 938.877923][T11012] usb 7-1: Using ep0 maxpacket: 8 [ 938.951240][T11012] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 938.958980][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 938.990603][T11012] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.067752][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.132125][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 939.188232][T11012] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 939.197640][T18443] loop2: detected capacity change from 0 to 7 [ 939.203933][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 939.257531][T11012] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.269743][T18443] Dev loop2: unable to read RDB block 7 [ 939.275364][T18443] loop2: unable to read partition table [ 939.304542][T18443] loop2: partition table beyond EOD, truncated [ 939.313130][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.324763][T18443] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 939.448092][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 939.501676][T11012] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 939.545990][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 939.595592][T11012] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 939.616360][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 939.634124][T11037] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 939.649773][T11012] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 939.706866][T11037] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 939.715821][T11012] usb 7-1: string descriptor 0 read error: -22 [ 939.729389][T18450] FAULT_INJECTION: forcing a failure. [ 939.729389][T18450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.736288][T11012] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 939.767535][T18450] CPU: 0 UID: 0 PID: 18450 Comm: syz.1.3647 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 939.767564][T18450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.767578][T18450] Call Trace: [ 939.767587][T18450] [ 939.767596][T18450] dump_stack_lvl+0x189/0x250 [ 939.767645][T18450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.767681][T18450] ? __pfx__printk+0x10/0x10 [ 939.767715][T18450] should_fail_ex+0x414/0x560 [ 939.767744][T18450] _copy_to_user+0x31/0xb0 [ 939.767776][T18450] simple_read_from_buffer+0xe1/0x170 [ 939.767809][T18450] proc_fail_nth_read+0x1df/0x250 [ 939.767843][T18450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 939.767878][T18450] ? rw_verify_area+0x258/0x650 [ 939.767902][T18450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 939.767935][T18450] vfs_read+0x1fd/0x980 [ 939.767965][T18450] ? __pfx___mutex_lock+0x10/0x10 [ 939.767995][T18450] ? __pfx_vfs_read+0x10/0x10 [ 939.768021][T18450] ? __fget_files+0x2a/0x420 [ 939.768053][T18450] ? __fget_files+0x3a0/0x420 [ 939.768081][T18450] ? __fget_files+0x2a/0x420 [ 939.768119][T18450] ksys_read+0x145/0x250 [ 939.768142][T18450] ? __fget_files+0x2a/0x420 [ 939.768172][T18450] ? __pfx_ksys_read+0x10/0x10 [ 939.768201][T18450] ? do_syscall_64+0xba/0x210 [ 939.768235][T18450] do_syscall_64+0xf6/0x210 [ 939.768264][T18450] ? clear_bhb_loop+0x60/0xb0 [ 939.768291][T18450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.768311][T18450] RIP: 0033:0x7f96ab98d37c [ 939.768329][T18450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 939.768348][T18450] RSP: 002b:00007f96ac7bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 939.768370][T18450] RAX: ffffffffffffffda RBX: 00007f96abbb5fa0 RCX: 00007f96ab98d37c [ 939.768386][T18450] RDX: 000000000000000f RSI: 00007f96ac7bc0a0 RDI: 0000000000000004 [ 939.768399][T18450] RBP: 00007f96ac7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 939.768412][T18450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.768425][T18450] R13: 0000000000000000 R14: 00007f96abbb5fa0 R15: 00007f96abcdfa28 [ 939.768456][T18450] [ 939.982917][ C0] vkms_vblank_simulate: vblank timer overrun [ 940.007790][T11012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.094334][T11003] usb 5-1: USB disconnect, device number 30 [ 940.102605][T11012] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 940.171204][T18452] tipc: Started in network mode [ 940.187222][T18452] tipc: Node identity 06166ce4f09, cluster identity 4711 [ 940.197609][T18452] tipc: Enabled bearer , priority 0 [ 940.230385][T18452] syzkaller0: entered promiscuous mode [ 940.235923][T18452] syzkaller0: entered allmulticast mode [ 940.257829][T18452] tipc: Resetting bearer [ 940.497285][T18451] tipc: Resetting bearer [ 940.521588][T18451] tipc: Disabling bearer [ 940.647927][T11016] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 940.808115][T11016] usb 2-1: Using ep0 maxpacket: 16 [ 940.886696][T11005] usb 7-1: USB disconnect, device number 45 [ 941.950529][T11005] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 942.310597][T11005] usb 4-1: device descriptor read/64, error -71 [ 942.597821][T11012] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 942.637875][T11005] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 942.878108][T11012] usb 6-1: Using ep0 maxpacket: 32 [ 942.890609][T11012] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 942.899653][T11012] usb 6-1: config 0 has no interface number 0 [ 942.905800][T11012] usb 6-1: config 0 interface 89 has no altsetting 0 [ 942.927196][T11005] usb 4-1: device descriptor read/64, error -71 [ 942.940668][T11012] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 942.953075][T11012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.974522][T11012] usb 6-1: Product: syz [ 942.985488][T11012] usb 6-1: Manufacturer: syz [ 943.015860][T11012] usb 6-1: SerialNumber: syz [ 943.064948][T11012] usb 6-1: config 0 descriptor?? [ 943.112628][T11012] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 943.118265][T11005] usb usb4-port1: attempt power cycle [ 943.123581][T11012] em28xx 6-1:0.89: Video interface 89 found: bulk [ 943.576919][T11016] usb 2-1: unable to get BOS descriptor or descriptor too short [ 943.595544][T11016] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 943.606184][T11016] usb 2-1: can't read configurations, error -71 [ 943.737875][T11005] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 943.788758][T11005] usb 4-1: device descriptor read/8, error -71 [ 944.084415][T11005] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 944.228976][T11005] usb 4-1: device descriptor read/8, error -71 [ 944.241021][T11012] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 944.338345][T11005] usb usb4-port1: unable to enumerate USB device [ 944.409806][T11012] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 944.441932][T11012] em28xx 6-1:0.89: board has no eeprom [ 944.527833][T11012] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 944.672543][T18492] binder: BINDER_SET_CONTEXT_MGR already set [ 944.684632][T11012] em28xx 6-1:0.89: analog set to bulk mode. [ 944.685427][T18492] binder: 18491:18492 ioctl 4018620d 2000000000c0 returned -16 [ 944.775245][T11003] em28xx 6-1:0.89: Registering V4L2 extension [ 944.775648][T18492] binder: BINDER_SET_CONTEXT_MGR already set [ 944.789847][T18492] binder: 18491:18492 ioctl 4018620d 200000000040 returned -16 [ 944.803388][T18492] FAULT_INJECTION: forcing a failure. [ 944.803388][T18492] name failslab, interval 1, probability 0, space 0, times 0 [ 944.937849][T18492] CPU: 0 UID: 0 PID: 18492 Comm: syz.3.3658 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 944.937877][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.937889][T18492] Call Trace: [ 944.937898][T18492] [ 944.937907][T18492] dump_stack_lvl+0x189/0x250 [ 944.937943][T18492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 944.937973][T18492] ? __pfx__printk+0x10/0x10 [ 944.937997][T18492] ? __pfx___might_resched+0x10/0x10 [ 944.938017][T18492] ? fs_reclaim_acquire+0x7d/0x100 [ 944.938051][T18492] should_fail_ex+0x414/0x560 [ 944.938086][T18492] should_failslab+0xa8/0x100 [ 944.938115][T18492] __kmalloc_noprof+0xcb/0x4f0 [ 944.938139][T18492] ? tomoyo_encode+0x28b/0x550 [ 944.938169][T18492] tomoyo_encode+0x28b/0x550 [ 944.938200][T18492] tomoyo_realpath_from_path+0x58d/0x5d0 [ 944.938237][T18492] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 944.938276][T18492] tomoyo_path_number_perm+0x1e8/0x5a0 [ 944.938301][T18492] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 944.938342][T18492] ? __lock_acquire+0xaac/0xd20 [ 944.938392][T18492] ? __fget_files+0x2a/0x420 [ 944.938425][T18492] ? __fget_files+0x3a0/0x420 [ 944.938452][T18492] ? __fget_files+0x2a/0x420 [ 944.938484][T18492] security_file_ioctl+0xcb/0x2d0 [ 944.938508][T18492] __se_sys_ioctl+0x47/0x170 [ 944.938533][T18492] do_syscall_64+0xf6/0x210 [ 944.938564][T18492] ? clear_bhb_loop+0x60/0xb0 [ 944.938590][T18492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.938611][T18492] RIP: 0033:0x7f767f58e969 [ 944.938629][T18492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.938646][T18492] RSP: 002b:00007f76804c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.938668][T18492] RAX: ffffffffffffffda RBX: 00007f767f7b5fa0 RCX: 00007f767f58e969 [ 944.938687][T18492] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 944.938701][T18492] RBP: 00007f76804c1090 R08: 0000000000000000 R09: 0000000000000000 [ 944.938714][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.938726][T18492] R13: 0000000000000000 R14: 00007f767f7b5fa0 R15: 00007f767f8dfa28 [ 944.938758][T18492] [ 944.938804][T18492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 945.147866][T11003] em28xx 6-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 945.370017][T11003] em28xx 6-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 945.454543][T11003] em28xx 6-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 945.513706][T11003] em28xx 6-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 945.602933][T11003] em28xx 6-1:0.89: Config register raw data: 0xfffffffb [ 945.631111][T18502] loop2: detected capacity change from 0 to 7 [ 945.645123][T11003] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 945.679444][T18502] Dev loop2: unable to read RDB block 7 [ 945.714518][T11003] em28xx 6-1:0.89: No AC97 audio processor [ 945.737452][T18502] loop2: unable to read partition table [ 945.809588][T18502] loop2: partition table beyond EOD, truncated [ 945.825150][T18507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3663'. [ 945.868464][T11003] usb 6-1: Decoder not found [ 945.882127][T11003] em28xx 6-1:0.89: failed to create media graph [ 945.895375][T18502] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 945.931404][T11003] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 946.011741][T11003] em28xx 6-1:0.89: Registering snapshot button... [ 946.079799][T11003] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input47 [ 946.145446][T11003] em28xx 6-1:0.89: Remote control support is not available for this card. [ 946.166536][T11005] usb 6-1: USB disconnect, device number 45 [ 946.262545][T11005] em28xx 6-1:0.89: Disconnecting em28xx [ 946.285352][T11005] em28xx 6-1:0.89: Closing input extension [ 946.317805][T11005] em28xx 6-1:0.89: Deregistering snapshot button [ 946.455159][T11005] em28xx 6-1:0.89: Freeing device [ 946.683443][T18520] xt_bpf: check failed: parse error [ 946.887863][T11005] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 946.986409][T18536] binder: BINDER_SET_CONTEXT_MGR already set [ 947.038114][T18536] binder: 18534:18536 ioctl 4018620d 200000000040 returned -16 [ 947.058186][T11005] usb 6-1: Using ep0 maxpacket: 16 [ 947.084517][T18536] FAULT_INJECTION: forcing a failure. [ 947.084517][T18536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.201606][T18536] CPU: 0 UID: 0 PID: 18536 Comm: syz.1.3674 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 947.201637][T18536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.201651][T18536] Call Trace: [ 947.201660][T18536] [ 947.201670][T18536] dump_stack_lvl+0x189/0x250 [ 947.201709][T18536] ? __lock_acquire+0xaac/0xd20 [ 947.201743][T18536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 947.201774][T18536] ? __pfx__printk+0x10/0x10 [ 947.201797][T18536] ? __might_fault+0xb0/0x130 [ 947.201836][T18536] should_fail_ex+0x414/0x560 [ 947.201865][T18536] _copy_from_user+0x2d/0xb0 [ 947.201916][T18536] binder_ioctl_write_read+0x124/0xa090 [ 947.201956][T18536] ? is_bpf_text_address+0x26/0x2b0 [ 947.201992][T18536] ? is_bpf_text_address+0x292/0x2b0 [ 947.202021][T18536] ? is_bpf_text_address+0x26/0x2b0 [ 947.202053][T18536] ? kernel_text_address+0xa5/0xe0 [ 947.202083][T18536] ? __kernel_text_address+0xd/0x40 [ 947.202110][T18536] ? unwind_get_return_address+0x4d/0x90 [ 947.202136][T18536] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 947.202160][T18536] ? arch_stack_walk+0xfc/0x150 [ 947.202196][T18536] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 947.202227][T18536] ? stack_trace_save+0x9c/0xe0 [ 947.202253][T18536] ? stack_depot_save_flags+0x40/0x910 [ 947.202284][T18536] ? kasan_save_track+0x4f/0x80 [ 947.202306][T18536] ? kasan_save_track+0x3e/0x80 [ 947.202330][T18536] ? do_vfs_ioctl+0xf36/0x1eb0 [ 947.202350][T18536] ? __se_sys_ioctl+0x47/0x170 [ 947.202369][T18536] ? do_syscall_64+0xf6/0x210 [ 947.202399][T18536] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 947.202425][T18536] ? binder_debug+0x13f/0x1b0 [ 947.202458][T18536] ? __pfx_binder_debug+0x10/0x10 [ 947.202485][T18536] ? do_raw_spin_lock+0x121/0x290 [ 947.202524][T18536] ? _raw_spin_unlock+0x28/0x50 [ 947.202546][T18536] ? binder_get_thread+0x178/0x6d0 [ 947.202580][T18536] binder_ioctl+0x3e0/0x19c0 [ 947.202612][T18536] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 947.202636][T18536] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 947.202659][T18536] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 947.202680][T18536] ? __pfx_binder_ioctl+0x10/0x10 [ 947.202709][T18536] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 947.202748][T18536] ? __lock_acquire+0xaac/0xd20 [ 947.202795][T18536] ? __fget_files+0x2a/0x420 [ 947.202827][T18536] ? __fget_files+0x3a0/0x420 [ 947.202853][T18536] ? __fget_files+0x2a/0x420 [ 947.202884][T18536] ? bpf_lsm_file_ioctl+0x9/0x20 [ 947.202918][T18536] ? __pfx_binder_ioctl+0x10/0x10 [ 947.202947][T18536] __se_sys_ioctl+0xf9/0x170 [ 947.202971][T18536] do_syscall_64+0xf6/0x210 [ 947.203000][T18536] ? clear_bhb_loop+0x60/0xb0 [ 947.203025][T18536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.203045][T18536] RIP: 0033:0x7f96ab98e969 [ 947.203063][T18536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.203081][T18536] RSP: 002b:00007f96ac7bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.203103][T18536] RAX: ffffffffffffffda RBX: 00007f96abbb5fa0 RCX: 00007f96ab98e969 [ 947.203118][T18536] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 947.203132][T18536] RBP: 00007f96ac7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 947.203144][T18536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.203158][T18536] R13: 0000000000000000 R14: 00007f96abbb5fa0 R15: 00007f96abcdfa28 [ 947.203189][T18536] [ 947.543236][ C0] vkms_vblank_simulate: vblank timer overrun [ 947.555302][T18536] binder: 18534:18536 ioctl c0306201 2000000001c0 returned -14 [ 948.449540][T18550] loop6: detected capacity change from 0 to 7 [ 948.486860][ T7991] Dev loop6: unable to read RDB block 7 [ 948.541298][ T7991] loop6: unable to read partition table [ 948.647109][ T7991] loop6: partition table beyond EOD, truncated [ 948.733520][T18550] Dev loop6: unable to read RDB block 7 [ 948.739879][T18550] loop6: unable to read partition table [ 948.768225][ T5923] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 948.776170][T18550] loop6: partition table beyond EOD, truncated [ 948.782865][T18550] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 948.795339][T18553] loop2: detected capacity change from 0 to 7 [ 948.913061][T18553] Dev loop2: unable to read RDB block 7 [ 948.919059][T18553] loop2: unable to read partition table [ 948.938382][T18553] loop2: partition table beyond EOD, truncated [ 948.944718][T18553] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 948.954040][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 948.974850][ T5923] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 949.020482][ T5923] usb 7-1: config 0 has no interface number 0 [ 949.052235][ T5923] usb 7-1: config 0 interface 89 has no altsetting 0 [ 949.077958][ T5923] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 949.088563][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.096656][ T5923] usb 7-1: Product: syz [ 949.156329][ T5923] usb 7-1: Manufacturer: syz [ 949.176991][ T5923] usb 7-1: SerialNumber: syz [ 949.244838][ T5923] usb 7-1: config 0 descriptor?? [ 949.333507][ T5923] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 949.433287][ T5923] em28xx 7-1:0.89: Video interface 89 found: bulk [ 950.537771][T11037] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 950.735969][ T5923] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 950.747938][T11037] usb 5-1: Using ep0 maxpacket: 8 [ 950.762256][T11037] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 950.776978][T11037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.798248][T11037] usb 5-1: config 0 descriptor?? [ 950.953015][ T5923] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 951.003066][ T5923] em28xx 7-1:0.89: board has no eeprom [ 951.018624][T11037] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 951.117959][ T5923] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 951.130495][T11005] usb 6-1: unable to get BOS descriptor or descriptor too short [ 951.162252][ T5923] em28xx 7-1:0.89: analog set to bulk mode. [ 951.194339][T11012] em28xx 7-1:0.89: Registering V4L2 extension [ 951.198209][T11005] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 951.247754][T11005] usb 6-1: can't read configurations, error -71 [ 951.456468][T11012] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 951.476499][T11012] em28xx 7-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 951.511449][T11012] em28xx 7-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 951.532953][T11012] em28xx 7-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 951.554940][T11012] em28xx 7-1:0.89: Config register raw data: 0xfffffffb [ 951.571466][T11012] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 951.586119][T11012] em28xx 7-1:0.89: No AC97 audio processor [ 951.621919][T11012] usb 7-1: Decoder not found [ 951.634331][T11037] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 951.661832][T11012] em28xx 7-1:0.89: failed to create media graph [ 951.667216][T11037] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 951.688390][T11012] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 951.696462][T11005] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 951.720784][T11012] em28xx 7-1:0.89: Registering snapshot button... [ 951.760576][T11037] asix 5-1:0.0: probe with driver asix failed with error -71 [ 951.783466][T11012] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input48 [ 951.804649][T11037] usb 5-1: USB disconnect, device number 31 [ 951.864149][T11012] em28xx 7-1:0.89: Remote control support is not available for this card. [ 951.897810][T11005] usb 6-1: Using ep0 maxpacket: 32 [ 951.953321][T11005] usb 6-1: config 0 has an invalid interface number: 40 but max is 0 [ 952.007554][T11005] usb 6-1: config 0 has no interface number 0 [ 952.033483][T11005] usb 6-1: config 0 interface 40 has no altsetting 0 [ 952.116865][T11005] usb 6-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=9f.28 [ 952.144998][T11005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.182578][T11005] usb 6-1: Product: syz [ 952.195862][T11005] usb 6-1: Manufacturer: syz [ 952.216143][T11005] usb 6-1: SerialNumber: syz [ 952.224162][T11037] usb 7-1: USB disconnect, device number 46 [ 952.251707][T11037] em28xx 7-1:0.89: Disconnecting em28xx [ 952.257328][T11037] em28xx 7-1:0.89: Closing input extension [ 952.269196][T11005] usb 6-1: config 0 descriptor?? [ 952.302771][T11037] em28xx 7-1:0.89: Deregistering snapshot button [ 952.396534][T11037] em28xx 7-1:0.89: Freeing device [ 952.493170][T18579] FAULT_INJECTION: forcing a failure. [ 952.493170][T18579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.509266][T18580] xt_bpf: check failed: parse error [ 952.525167][T18579] CPU: 1 UID: 0 PID: 18579 Comm: syz.4.3687 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 952.525198][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.525212][T18579] Call Trace: [ 952.525221][T18579] [ 952.525231][T18579] dump_stack_lvl+0x189/0x250 [ 952.525268][T18579] ? __lock_acquire+0xaac/0xd20 [ 952.525302][T18579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 952.525334][T18579] ? __pfx__printk+0x10/0x10 [ 952.525356][T18579] ? __might_fault+0xb0/0x130 [ 952.525398][T18579] should_fail_ex+0x414/0x560 [ 952.525427][T18579] _copy_from_user+0x2d/0xb0 [ 952.525460][T18579] binder_ioctl_write_read+0x124/0xa090 [ 952.525501][T18579] ? is_bpf_text_address+0x26/0x2b0 [ 952.525540][T18579] ? is_bpf_text_address+0x292/0x2b0 [ 952.525570][T18579] ? is_bpf_text_address+0x26/0x2b0 [ 952.525615][T18579] ? kernel_text_address+0xa5/0xe0 [ 952.525647][T18579] ? __kernel_text_address+0xd/0x40 [ 952.525677][T18579] ? unwind_get_return_address+0x4d/0x90 [ 952.525704][T18579] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 952.525729][T18579] ? arch_stack_walk+0xfc/0x150 [ 952.525766][T18579] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 952.525800][T18579] ? stack_trace_save+0x9c/0xe0 [ 952.525828][T18579] ? stack_depot_save_flags+0x40/0x910 [ 952.525861][T18579] ? kasan_save_track+0x4f/0x80 [ 952.525885][T18579] ? kasan_save_track+0x3e/0x80 [ 952.525910][T18579] ? do_vfs_ioctl+0xf36/0x1eb0 [ 952.525932][T18579] ? __se_sys_ioctl+0x47/0x170 [ 952.525953][T18579] ? do_syscall_64+0xf6/0x210 [ 952.525984][T18579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 952.526012][T18579] ? binder_debug+0x13f/0x1b0 [ 952.526048][T18579] ? __pfx_binder_debug+0x10/0x10 [ 952.526076][T18579] ? do_raw_spin_lock+0x121/0x290 [ 952.526120][T18579] ? _raw_spin_unlock+0x28/0x50 [ 952.526142][T18579] ? binder_get_thread+0x178/0x6d0 [ 952.526177][T18579] binder_ioctl+0x3e0/0x19c0 [ 952.526212][T18579] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 952.526238][T18579] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 952.526262][T18579] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 952.526284][T18579] ? __pfx_binder_ioctl+0x10/0x10 [ 952.526314][T18579] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 952.526355][T18579] ? __lock_acquire+0xaac/0xd20 [ 952.526406][T18579] ? __fget_files+0x2a/0x420 [ 952.526452][T18579] ? __fget_files+0x3a0/0x420 [ 952.526478][T18579] ? __fget_files+0x2a/0x420 [ 952.526510][T18579] ? bpf_lsm_file_ioctl+0x9/0x20 [ 952.526539][T18579] ? __pfx_binder_ioctl+0x10/0x10 [ 952.526568][T18579] __se_sys_ioctl+0xf9/0x170 [ 952.526598][T18579] do_syscall_64+0xf6/0x210 [ 952.526628][T18579] ? clear_bhb_loop+0x60/0xb0 [ 952.526654][T18579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.526675][T18579] RIP: 0033:0x7f5feeb8e969 [ 952.526694][T18579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.526711][T18579] RSP: 002b:00007f5fefa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 952.526734][T18579] RAX: ffffffffffffffda RBX: 00007f5feedb5fa0 RCX: 00007f5feeb8e969 [ 952.526750][T18579] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 952.526764][T18579] RBP: 00007f5fefa98090 R08: 0000000000000000 R09: 0000000000000000 [ 952.526777][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.526790][T18579] R13: 0000000000000000 R14: 00007f5feedb5fa0 R15: 00007f5feeedfa28 [ 952.526822][T18579] [ 952.526832][T18579] binder: 18578:18579 ioctl c0306201 2000000001c0 returned -14 [ 952.672760][T18586] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3688'. [ 953.268798][T18593] loop6: detected capacity change from 0 to 7 [ 953.275972][T18593] Dev loop6: unable to read RDB block 7 [ 953.282092][T18593] loop6: unable to read partition table [ 953.288537][T18593] loop6: partition table beyond EOD, truncated [ 953.295542][T18593] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 953.307763][T11005] pegasus 6-1:0.40: probe with driver pegasus failed with error -32 [ 953.329526][T11005] usb 6-1: USB disconnect, device number 47 [ 954.248072][T11005] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 954.409284][T11005] usb 5-1: Using ep0 maxpacket: 32 [ 954.423879][T11005] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 954.437773][T11005] usb 5-1: config 0 has no interface number 0 [ 954.457632][T11005] usb 5-1: config 0 interface 89 has no altsetting 0 [ 954.477931][T11006] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 954.506121][T11005] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 954.526380][T11005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.575813][T11005] usb 5-1: Product: syz [ 954.592030][T18609] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 954.701550][T11005] usb 5-1: Manufacturer: syz [ 954.720823][T11006] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 954.741244][T11005] usb 5-1: SerialNumber: syz [ 954.759089][T11006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.774775][T11005] usb 5-1: config 0 descriptor?? [ 954.798510][T11006] usb 6-1: config 0 descriptor?? [ 954.810510][T11005] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 954.850476][T11006] cp210x 6-1:0.0: cp210x converter detected [ 954.858430][T18613] binder: BINDER_SET_CONTEXT_MGR already set [ 954.884840][T18613] binder: 18610:18613 ioctl 4018620d 2000000000c0 returned -16 [ 954.913143][T11005] em28xx 5-1:0.89: Video interface 89 found: bulk [ 955.254122][T11006] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 955.271263][T11006] usb 6-1: cp210x converter now attached to ttyUSB0 [ 955.804552][T18618] xt_bpf: check failed: parse error [ 955.956359][T18625] [U] [ 955.959272][T18625] [U] [ 955.962058][T18625] [U] [ 955.964845][T18625] [U] [ 956.000514][T18625] [U] [ 956.008546][T18625] [U] [ 956.019971][T18625] [U] D+W?ެ#ե]قIQ+1=Y{8LQAI~Z9MQ !D$6@BOJ FVڭݙ [ 956.047134][T18625] [U] N/~BVKSY[$WJH.P0ŨV^IQPXS1T/~E]U7CH[@[ѳ_83ҘժF;Z WȯSN݀S<M5?}ѯI$5; [ 956.078774][T11005] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 956.105693][T18625] [U] [ 956.108530][T18625] [U] [ 956.122051][T18625] [U] [ 956.124778][T18625] [U] [ 956.127476][T18625] [U] [ 956.149230][T11005] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 956.160626][T11005] em28xx 5-1:0.89: board has no eeprom [ 956.169407][T18621] [U] [ 956.217860][T11006] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 956.228846][T11005] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 956.236249][T11005] em28xx 5-1:0.89: analog set to bulk mode. [ 956.243322][T11037] em28xx 5-1:0.89: Registering V4L2 extension [ 956.361646][T11037] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 956.373747][T11006] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 956.392994][T11006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 956.404831][T11037] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 956.421099][T11006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 956.442007][T11037] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 956.466630][T11037] em28xx 5-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 956.484044][T11006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 956.506617][T11037] em28xx 5-1:0.89: Config register raw data: 0xfffffffb [ 956.536551][T11037] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 956.546441][T11006] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 956.557805][T11037] em28xx 5-1:0.89: No AC97 audio processor [ 956.563741][T11006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.580486][T11006] usb 2-1: Product: syz [ 956.598469][T11037] usb 5-1: Decoder not found [ 956.603841][T11006] usb 2-1: Manufacturer: syz [ 956.612242][T11037] em28xx 5-1:0.89: failed to create media graph [ 956.620928][T11006] usb 2-1: SerialNumber: syz [ 956.654617][T11037] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 956.752566][T11006] usb 2-1: config 0 descriptor?? [ 956.769541][T11037] em28xx 5-1:0.89: Registering snapshot button... [ 956.777100][T18632] ================================================================== [ 956.785540][T18632] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 956.792926][T18632] Read of size 8 at addr ffff888066f20738 by task v4l_id/18632 [ 956.800468][T18632] [ 956.802792][T18632] CPU: 1 UID: 0 PID: 18632 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 956.802811][T18632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.802822][T18632] Call Trace: [ 956.802828][T18632] [ 956.802835][T18632] dump_stack_lvl+0x189/0x250 [ 956.802859][T18632] ? __virt_addr_valid+0x18c/0x540 [ 956.802880][T18632] ? rcu_is_watching+0x15/0xb0 [ 956.802894][T18632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 956.802916][T18632] ? rcu_is_watching+0x15/0xb0 [ 956.802929][T18632] ? lock_release+0x4b/0x3e0 [ 956.802952][T18632] ? __virt_addr_valid+0x18c/0x540 [ 956.802971][T18632] ? __virt_addr_valid+0x469/0x540 [ 956.802992][T18632] print_report+0xb4/0x290 [ 956.803010][T18632] ? v4l2_fh_open+0xc7/0x430 [ 956.803029][T18632] kasan_report+0x118/0x150 [ 956.803050][T18632] ? v4l2_fh_open+0xc7/0x430 [ 956.803072][T18632] v4l2_fh_open+0xc7/0x430 [ 956.803090][T18632] ? __pfx___mutex_lock+0x10/0x10 [ 956.803113][T18632] em28xx_v4l2_open+0x157/0x9a0 [ 956.803136][T18632] v4l2_open+0x20f/0x360 [ 956.803158][T18632] chrdev_open+0x4cc/0x5e0 [ 956.803180][T18632] ? __pfx_chrdev_open+0x10/0x10 [ 956.803202][T18632] ? __pfx_chrdev_open+0x10/0x10 [ 956.803221][T18632] do_dentry_open+0xdf0/0x1970 [ 956.803249][T18632] vfs_open+0x3b/0x340 [ 956.803270][T18632] ? path_openat+0x2ecd/0x3830 [ 956.803286][T18632] path_openat+0x2ee5/0x3830 [ 956.803301][T18632] ? arch_stack_walk+0xfc/0x150 [ 956.803332][T18632] ? __pfx_path_openat+0x10/0x10 [ 956.803346][T18632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.803369][T18632] do_filp_open+0x1fa/0x410 [ 956.803384][T18632] ? __pfx_do_filp_open+0x10/0x10 [ 956.803408][T18632] ? _raw_spin_unlock+0x28/0x50 [ 956.803424][T18632] ? alloc_fd+0x64c/0x6c0 [ 956.803446][T18632] do_sys_openat2+0x121/0x1c0 [ 956.803461][T18632] ? __pfx_do_sys_openat2+0x10/0x10 [ 956.803475][T18632] ? exc_page_fault+0x68/0x110 [ 956.803495][T18632] ? do_user_addr_fault+0xc8a/0x1390 [ 956.803512][T18632] __x64_sys_openat+0x138/0x170 [ 956.803527][T18632] do_syscall_64+0xf6/0x210 [ 956.803548][T18632] ? clear_bhb_loop+0x60/0xb0 [ 956.803569][T18632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.803585][T18632] RIP: 0033:0x7fc0a2aa7407 [ 956.803598][T18632] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 956.803612][T18632] RSP: 002b:00007ffdf9dd1d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 956.803628][T18632] RAX: ffffffffffffffda RBX: 00007fc0a3181880 RCX: 00007fc0a2aa7407 [ 956.803640][T18632] RDX: 0000000000000000 RSI: 00007ffdf9dd3f1c RDI: ffffffffffffff9c [ 956.803651][T18632] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 956.803660][T18632] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 956.803670][T18632] R13: 00007ffdf9dd1f80 R14: 00007fc0a32e8000 R15: 000055db3ab254d8 [ 956.803687][T18632] [ 956.803693][T18632] [ 957.091942][T18632] Allocated by task 11037: [ 957.096350][T18632] kasan_save_track+0x3e/0x80 [ 957.101026][T18632] __kasan_kmalloc+0x93/0xb0 [ 957.105632][T18632] __kmalloc_cache_noprof+0x230/0x3d0 [ 957.111019][T18632] em28xx_v4l2_init+0x10b/0x2e70 [ 957.115957][T18632] em28xx_init_extension+0x11d/0x1c0 [ 957.121237][T18632] process_scheduled_works+0xade/0x17a0 [ 957.126774][T18632] worker_thread+0x8a0/0xda0 [ 957.131443][T18632] kthread+0x711/0x8a0 [ 957.135511][T18632] ret_from_fork+0x4b/0x80 [ 957.139938][T18632] ret_from_fork_asm+0x1a/0x30 [ 957.144712][T18632] [ 957.147027][T18632] Freed by task 11037: [ 957.151109][T18632] kasan_save_track+0x3e/0x80 [ 957.155780][T18632] kasan_save_free_info+0x46/0x50 [ 957.160796][T18632] __kasan_slab_free+0x62/0x70 [ 957.165558][T18632] kfree+0x193/0x440 [ 957.169450][T18632] em28xx_v4l2_init+0x1683/0x2e70 [ 957.174475][T18632] em28xx_init_extension+0x11d/0x1c0 [ 957.179781][T18632] process_scheduled_works+0xade/0x17a0 [ 957.185323][T18632] worker_thread+0x8a0/0xda0 [ 957.189908][T18632] kthread+0x711/0x8a0 [ 957.193987][T18632] ret_from_fork+0x4b/0x80 [ 957.198416][T18632] ret_from_fork_asm+0x1a/0x30 [ 957.203205][T18632] [ 957.205551][T18632] The buggy address belongs to the object at ffff888066f20000 [ 957.205551][T18632] which belongs to the cache kmalloc-8k of size 8192 [ 957.219611][T18632] The buggy address is located 1848 bytes inside of [ 957.219611][T18632] freed 8192-byte region [ffff888066f20000, ffff888066f22000) [ 957.233594][T18632] [ 957.235913][T18632] The buggy address belongs to the physical page: [ 957.242346][T18632] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66f20 [ 957.251098][T18632] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 957.259592][T18632] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 957.267522][T18632] page_type: f5(slab) [ 957.271501][T18632] raw: 00fff00000000040 ffff88801a042280 ffffea0000cc2200 dead000000000003 [ 957.280091][T18632] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 957.288673][T18632] head: 00fff00000000040 ffff88801a042280 ffffea0000cc2200 dead000000000003 [ 957.297336][T18632] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 957.305997][T18632] head: 00fff00000000003 ffffea00019bc801 00000000ffffffff 00000000ffffffff [ 957.314659][T18632] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 957.323313][T18632] page dumped because: kasan: bad access detected [ 957.329723][T18632] page_owner tracks the page as allocated [ 957.335514][T18632] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13, tgid 13 (kworker/u8:1), ts 809906473382, free_ts 806452925297 [ 957.354607][T18632] post_alloc_hook+0x1d8/0x230 [ 957.359375][T18632] get_page_from_freelist+0x21ce/0x22b0 [ 957.364913][T18632] __alloc_frozen_pages_noprof+0x181/0x370 [ 957.370714][T18632] alloc_pages_mpol+0x232/0x4a0 [ 957.375564][T18632] allocate_slab+0x8a/0x3b0 [ 957.380061][T18632] ___slab_alloc+0xbfc/0x1480 [ 957.384741][T18632] __kmalloc_noprof+0x305/0x4f0 [ 957.389590][T18632] n_hdlc_tty_receive+0x122/0x4f0 [ 957.394640][T18632] tty_ldisc_receive_buf+0x119/0x160 [ 957.399930][T18632] tty_port_default_receive_buf+0x6e/0xa0 [ 957.405652][T18632] flush_to_ldisc+0x2c2/0x810 [ 957.410336][T18632] process_scheduled_works+0xade/0x17a0 [ 957.415877][T18632] worker_thread+0x8a0/0xda0 [ 957.420462][T18632] kthread+0x711/0x8a0 [ 957.424531][T18632] ret_from_fork+0x4b/0x80 [ 957.428946][T18632] ret_from_fork_asm+0x1a/0x30 [ 957.433706][T18632] page last free pid 7991 tgid 7991 stack trace: [ 957.440028][T18632] __free_frozen_pages+0xb0e/0xcd0 [ 957.445229][T18632] __put_partials+0x161/0x1c0 [ 957.449912][T18632] put_cpu_partial+0x17c/0x250 [ 957.454672][T18632] __slab_free+0x2f7/0x400 [ 957.459095][T18632] qlist_free_all+0x9a/0x140 [ 957.463679][T18632] kasan_quarantine_reduce+0x148/0x160 [ 957.469136][T18632] __kasan_slab_alloc+0x22/0x80 [ 957.473982][T18632] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 957.479441][T18632] getname_flags+0xb8/0x540 [ 957.483946][T18632] vfs_fstatat+0x43/0x160 [ 957.488274][T18632] __x64_sys_newfstatat+0x11c/0x1a0 [ 957.493473][T18632] do_syscall_64+0xf6/0x210 [ 957.497976][T18632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.503862][T18632] [ 957.506178][T18632] Memory state around the buggy address: [ 957.511799][T18632] ffff888066f20600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.519944][T18632] ffff888066f20680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.528002][T18632] >ffff888066f20700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.536054][T18632] ^ [ 957.541938][T18632] ffff888066f20780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.549993][T18632] ffff888066f20800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.558044][T18632] ================================================================== [ 957.578418][T11006] iguanair 2-1:0.0: failed to get version [ 957.628193][T18632] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 957.635446][T18632] CPU: 1 UID: 0 PID: 18632 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 957.647188][T18632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 957.657270][T18632] Call Trace: [ 957.660563][T18632] [ 957.663512][T18632] dump_stack_lvl+0x99/0x250 [ 957.668120][T18632] ? __asan_memcpy+0x40/0x70 [ 957.672806][T18632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 957.678020][T18632] ? __pfx__printk+0x10/0x10 [ 957.682622][T18632] panic+0x2db/0x790 [ 957.686551][T18632] ? __pfx_panic+0x10/0x10 [ 957.690989][T18632] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 957.696891][T18632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 957.703243][T18632] ? print_memory_metadata+0x314/0x400 [ 957.708715][T18632] ? v4l2_fh_open+0xc7/0x430 [ 957.713317][T18632] check_panic_on_warn+0x89/0xb0 [ 957.718268][T18632] ? v4l2_fh_open+0xc7/0x430 [ 957.722868][T18632] end_report+0x78/0x160 [ 957.727120][T18632] kasan_report+0x129/0x150 [ 957.731636][T18632] ? v4l2_fh_open+0xc7/0x430 [ 957.736243][T18632] v4l2_fh_open+0xc7/0x430 [ 957.740668][T18632] ? __pfx___mutex_lock+0x10/0x10 [ 957.745703][T18632] em28xx_v4l2_open+0x157/0x9a0 [ 957.750573][T18632] v4l2_open+0x20f/0x360 [ 957.754835][T18632] chrdev_open+0x4cc/0x5e0 [ 957.759265][T18632] ? __pfx_chrdev_open+0x10/0x10 [ 957.764232][T18632] ? __pfx_chrdev_open+0x10/0x10 [ 957.769181][T18632] do_dentry_open+0xdf0/0x1970 [ 957.773975][T18632] vfs_open+0x3b/0x340 [ 957.778057][T18632] ? path_openat+0x2ecd/0x3830 [ 957.782826][T18632] path_openat+0x2ee5/0x3830 [ 957.787420][T18632] ? arch_stack_walk+0xfc/0x150 [ 957.792297][T18632] ? __pfx_path_openat+0x10/0x10 [ 957.797248][T18632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.803329][T18632] do_filp_open+0x1fa/0x410 [ 957.807840][T18632] ? __pfx_do_filp_open+0x10/0x10 [ 957.812878][T18632] ? _raw_spin_unlock+0x28/0x50 [ 957.817734][T18632] ? alloc_fd+0x64c/0x6c0 [ 957.822077][T18632] do_sys_openat2+0x121/0x1c0 [ 957.826757][T18632] ? __pfx_do_sys_openat2+0x10/0x10 [ 957.831966][T18632] ? exc_page_fault+0x68/0x110 [ 957.836742][T18632] ? do_user_addr_fault+0xc8a/0x1390 [ 957.842040][T18632] __x64_sys_openat+0x138/0x170 [ 957.846898][T18632] do_syscall_64+0xf6/0x210 [ 957.851416][T18632] ? clear_bhb_loop+0x60/0xb0 [ 957.856100][T18632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.861998][T18632] RIP: 0033:0x7fc0a2aa7407 [ 957.866505][T18632] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 957.886118][T18632] RSP: 002b:00007ffdf9dd1d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 957.894539][T18632] RAX: ffffffffffffffda RBX: 00007fc0a3181880 RCX: 00007fc0a2aa7407 [ 957.902514][T18632] RDX: 0000000000000000 RSI: 00007ffdf9dd3f1c RDI: ffffffffffffff9c [ 957.910487][T18632] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 957.918484][T18632] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 957.926456][T18632] R13: 00007ffdf9dd1f80 R14: 00007fc0a32e8000 R15: 000055db3ab254d8 [ 957.934447][T18632] [ 957.937794][T18632] Kernel Offset: disabled [ 957.942116][T18632] Rebooting in 86400 seconds..