last executing test programs: 4.315744528s ago: executing program 0 (id=2335): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r0, &(0x7f00000006c0), 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 4.260816639s ago: executing program 0 (id=2337): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0/../file0/file0/file0\x00', 0xfc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000c80)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000640)="80", 0x1}, {&(0x7f00000021c0)="213e7af09f6c69ec9b80e743c9d95911c5ef6ec434454d827109477ef2e13a14b12202e358ccce8d2b784a89cea563ce14b7daaee15258fc45030a42d1b609aa817c34b997115fbc662f216e01f92c9ad58f1dff94a2070d026b086a0515881b0f203e700a4c6dea64b970ff3d715e5b51a085fdf41c87b62408457d9edcfbd886eb1362a91e293d24d2cc05da96f6d083f536557c7b0f43f733a2c4d10a40b466597dd92e468ad495c8233028272b780b2b4ead606dcad473cf31eb797fdc6baa0f6554", 0xc4}], 0x2}, 0x0) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}, 0x4000080) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001800)={@fallback, 0xffffffffffffffff, 0x24, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cc920419665bc92e42502000000000700"/27], 0x1c}}, 0x4008840) r5 = creat(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x81) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000001fc0)=[{0x1, 0x1, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/50, 0x32}], &(0x7f0000000180)=[0x7fffffffffffffff]}, {0x9, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000240)=""/110, 0x6e}, {0xffffffffffffffff}, {&(0x7f0000000300)=""/85, 0x55}, {&(0x7f00000005c0)=""/65, 0x41}, {&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000780)=""/171, 0xab}], &(0x7f0000000000)=[0x1, 0x1, 0x1bc7ecee, 0x3]}, {0x6, 0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000900)=""/53, 0x35}, {&(0x7f00000009c0)=""/177, 0xb1}, {&(0x7f0000000a80)=""/9, 0x9}, {&(0x7f0000000ac0)=""/137, 0x89}, {&(0x7f0000000b80)=""/149, 0x95}, {&(0x7f00000020c0)=""/234, 0xea}], &(0x7f0000000d80)}, {0x3, 0x1, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000dc0)=""/195, 0xc3}, {&(0x7f0000002040)=""/79, 0x4f}, {&(0x7f0000000f40)=""/4096, 0x1000}], &(0x7f0000001f80)=[0x9, 0x4, 0x1]}], 0x4) sendfile(r5, r5, &(0x7f00000008c0)=0xfffffe01, 0x101) 3.33125565s ago: executing program 4 (id=2347): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r0, &(0x7f00000006c0), 0x0) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 3.330910421s ago: executing program 3 (id=2348): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.269622839s ago: executing program 4 (id=2350): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xfd) 2.249792819s ago: executing program 2 (id=2354): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="220000000000000000000808000008000300a39af776b42efb6fba3d5075c061c476e0e1e6421e909fb2fb378f8fb1399efc4e5006966de2267e6cb39508", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) pipe(&(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0x3, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x1, 0x4, 0x40000000200d, 0x1c8, 0xe2, 0x4, 0x2}]}, 0x78) 2.144756488s ago: executing program 2 (id=2355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) 2.069852105s ago: executing program 1 (id=2356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xe0801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x800, 0x2d, 0x4000000000, 0xfffffffffffffffd, 0x8000000009109, 0x100000000, 0x4, 0xff, 0x0, 0x1000000004, 0x0, 0x3, 0x2, 0x0, 0x7], 0xf000, 0x2b2654}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001440)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x2f, 0xd, 0x8001, {0x8, @usr_ip6_spec={@private2, @private1, 0x3, 0x2, 0x4}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 0x1, 0x7fff, [0xffffffff, 0x800]}, @ether_spec={@remote, @empty, 0x7f}, {0x0, @multicast, 0xfffa, 0x3, [0x10001, 0x206]}, 0x38, 0x9}}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.895889732s ago: executing program 2 (id=2357): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xad356f19b320d40b) ioctl$TUNSETLINK(r0, 0x801054db, 0x0) 1.858890207s ago: executing program 1 (id=2358): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 5) 1.480679843s ago: executing program 2 (id=2359): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="6efec48aee3ad146d7296e54648ceb8b353b7c5f4d93200851dde6e2ad82e299f484da4804da5c70fe1a422de83c0195ac7ce5ed2c5c2dd1fffecb515365ee", 0x3f}, {&(0x7f0000000300)="42a53cd7a7c20911c718d77b6a0322223bcf598660d2756db0d0cd8888d32b8dc96c07f335609b60cdd31da3237dad8e28c878fd21674cccc29d09295bd1ae512bd3d3082963f064352cc8338f5d97b4d1eb003d491aef77d8e3669628b414853b3460abeeeaef3c6f48c702b3548a11f1843cc301d57822de300882c8ead3b1ac69e46a173d640b05c6e4f1f32a0d8859033ea65c49f54df7656cf1d3e2951f61275fec3cfa2833a97114", 0xab}, {&(0x7f00000003c0)="5e3b9d9f733750b92c84b2a49aab624c6949d0e2006dda1f877015fc909110e8391c1eafac8159d40068b7b1baeaf88d2ee9eaf0b60b578e02f3daf158baf7c49317edeec95bb501d3c8de2b4144cd172c64093ba92150181c8c8b6e567d4fd79df8b613b25f78553ab37e851f83680f09100cf2ad1de9ff2c60114580f60f0edc5dc76cf1899d7df918375d95cc9c10207b1147497cb1fef2183faf2471ee6109d2ecf4158c7402479a80ca40c8a2dc337eedf28027936e0cf063da2637eba6599a492329cbe364daad7f1083fb5d086607ffe71266d1a6991b0973e820c4b0515b3f93f368940744f89e", 0xeb}], 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="280000000100040001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0], 0x2c, 0x4000}}, {{&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000600)="a2e865c0e9", 0x5}, {&(0x7f0000000bc0)="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", 0xfd}, {&(0x7f0000000cc0)="f27d279709a939543fcbd43d6a1c1fe3b8e94e465c353551c6e07b8dd5d2afb396ca8770d099529c77e2e5e8abde6ff9659ea27c56aa7351f9c77a581c508857e3c287c9489c477e5f9bd0f486bf5d63a34717d947dd337779dca019e0fab08879cd8768a853e96117b6f4a58c63667c24c5565010c760db63d8cb998c257cd44a284a33d425fad0fa25b679e161b13c6cee76d4f5af16d44d6e273e6ce4abf2b2b19a365bce249410565bc39c8cc68bbe27cc483090577295", 0xb9}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="20ff88dada851d44c800800000854afeb2c6087f308e7f4018bafa9823e1b590d08a4fc91c1e204840a62e5f1ad0768432acd4ec5db3c3f29d4026ccc995a76fb775cb725cf09e29fd10c3682c736b498ed811a88d108868e3fa159a4ec4cc1f7b892873d433daf72f077db5dafd26b27753f6e106ba681e93e7c0e610cb5d7978afad3a3a92f9d5ab91ee4e11562e808ed0199d175d97a2e967c55cb9dfb4bc998a67e1b9bfa292cf71fdc95b1cd58caa342c3c69ee6b8e238030c2da72a916ebc1803a67297644146a160fbbdab0", 0xcf}], 0x5, &(0x7f0000000f40)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r0]}}], 0x28, 0x800}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80f565d44b3c455b) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x518, 0xffffffff, 0x31c, 0x0, 0x31c, 0xfeffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x7, 0x3f3], 0x48004, 0x9, 0x0, [@local, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @loopback, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, @private1, @dev={0xfe, 0x80, '\x00', 0x40}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}], 0xe}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'syzkaller1\x00', {0x4}}}}, {{@uncond, 0x0, 0x130, 0x164, 0x0, {}, [@common=@srh1={{0x8c}, {0x6774475f98909cb4, 0x0, 0x6, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], [0xff, 0xff000000, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000], 0xa9c, 0x1801}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = io_uring_setup(0x497f, &(0x7f00000001c0)={0x0, 0x2000, 0x0, 0x0, 0x159}) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e21, 0x83, @remote, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYBLOB="1942227f5190ad8045"], 0x40}}], 0x800000000000170, 0xc045) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000240)=0x1f) read$midi(r6, &(0x7f0000000240)=""/160, 0xa0) close_range(r5, 0xffffffffffffffff, 0x0) 1.361691116s ago: executing program 4 (id=2360): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 1.322881225s ago: executing program 1 (id=2361): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112b4000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000050000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffff"]}, 0x109) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) (fail_nth: 5) 1.26948886s ago: executing program 4 (id=2362): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) (async, rerun: 64) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa08, 0x3, 0x3, 0x1}, {0x1ef, 0x2, 0x80, 0x80000001}]}) (rerun: 64) rt_sigtimedwait(&(0x7f0000000080)={[0x6, 0xf]}, &(0x7f00000000c0), &(0x7f0000000140)={0x77359400}, 0x8) (async) syncfs(r1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix_mp={0x9, 0x401, 0x3032344d, 0x32315559, 0x7, [{0x9, 0xc365}, {0xe, 0xd}, {0x7, 0x200}, {0x8, 0x7fff}, {0xf, 0x4}, {0x5, 0x401}, {0x2, 0x9}, {0x2240, 0x80000001}], 0x6, 0x9, 0x1, 0x2, 0x5}}) 1.015230012s ago: executing program 4 (id=2363): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000200), &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 915.656012ms ago: executing program 1 (id=2364): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x8002, 0x5) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x919, 0x9e8f, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x780010a0, &(0x7f0000fff000/0x1000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5e26, &(0x7f0000ffd000/0x2000)=nil, 0x6) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newnexthop={0x20, 0x68, 0x200, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x20}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040050) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000240)=r1, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0xe1c477d4f2d112b, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$USBDEVFS_RESET(r0, 0x5514) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, '*('}, {0x20, '[.&@!'}], 0xa, "6142079fba124ba22f2cb22671916516f25b0454e5fbc58932875d33d22bc75d66661ec7a39ec86fac8d65785b8357b3efe2dc9e4182098728b8afa1126cc329a78f4d7a44cbd35eba02828e2f372ff473c619adfccd95058a277b66bd475266f54f8f3d6386ec54ec1fb191aab66fe032787fd601f07b3ca4fa35538a6c684b970ae98c84b41816adade97300d5b0b73dbcd6efc717b3e32f1178263069676e2b04340aac0ed9defc15bce0d8e0e923e13bd5922e334651d09a2912d9fbdfa3679c18292e0d02b6c90c3140405891e3f3a2c4bffd76"}, 0xeb) ioctl$TIOCCONS(r0, 0x541d) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000480)=@md0, r3, &(0x7f0000000580)='./file0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x1}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000600)=0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000640)={0x1, @capture={0x0, 0x1, {}, 0x2b, 0x2}}) rt_sigaction(0x1a, &(0x7f00000007c0)={&(0x7f0000000740)="660fe7130f9422df5ca208c4e3914135080000001afa0fd84100660f72e3a40f130ff30f1efbd8bd6b000000", 0x1, &(0x7f0000000780)="c4e2791d3df0330000f3da313e36f167f30fbd7d2bc4e2c9b6911cb920cac4e3d120fe00f00fb38f00800000c4c2a9b7d10f38cb2cb464d0c1", {[0x80000000, 0x5]}}, &(0x7f0000000880)={&(0x7f0000000800)="c4e17c5bf5ac65f30f1eeb8fe860a2f7d53ed84d590fe391bf0000000f8e00000000f30f1ae8d9e50f8903000000", 0x0, &(0x7f0000000840)="9f8fc960970a660f2ca9000000007dacc4c152c23799e8feefffffc4e2f91ddf2842fc8fc9e09621c4e2850b80d7f6b047"}, 0x8, &(0x7f00000008c0)) ioctl$FIOCLEX(r5, 0x5451) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'caif0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r0, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0], 0x0, 0x69, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="709aa55ba41e7e9c5e8394fd708e22d42715f4dae8da37e0ba918e7541c26a417464a118789861890bcc47b57bde2589fdbebdce111e84bc30c12d49d1823be3390522d47a80d16048b263fece8345b0d2d9458e00ba694a092ad4acd90f890288e25ca7fc97086ae95a0ab6f7683f35f00c6906e38081858fdcb3f689be0df318e238b0a38e1e235c2c8e30a12118b988742de34a72935604eab03a61fd2bee78855d8d117bdfae9b0e9bce70b641f3dee1", 0xb2}], 0x1, &(0x7f0000000a40)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @empty, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3c95c457}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2}, @remote, @multicast1, @empty, @multicast2]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0xd, "5d3ef3be35c8c1a20aa52e"}]}, @noop, @timestamp={0x44, 0x1c, 0x58, 0x0, 0x7, [0x3, 0x0, 0x7, 0x6, 0xfffffff8, 0xffffffc0]}, @end, @ssrr={0x89, 0x1b, 0xb3, [@local, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x1b, 0x7b, [@loopback, @broadcast, @rand_addr=0x64010102, @multicast1, @local, @empty]}]}}}], 0x124}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000bc0)="cf7d80246a76a32fab0726c0db9e40b965405ac627c27d24281cc4f2274193ad9b61ebd61ada469900c62245b47232ba4ecf9c1ef4647bea3f5b7d2ecdf1b8f30ad6c03622629346b30bb2406cbeb2c1265d3531bab2", 0x56}, {&(0x7f0000000c40)="4c25c3c118025668a8904e8a8ef7eb7679d9964bdbc098013e6288a8e03148059da4738001ecc93e4ce35e6f2439585ae25d7af502c0c5aa520998c5606a0d34051396b1d55e2399648e57c4e20fffff5f62ec95d1f7ec810fa35b81d40ffd7e8d1eb895b2103206c782225a9da991cab064966b8795fa8fae65c9be292f005721a3dbbe574b1f5765166cf050e58094", 0x90}, {&(0x7f0000000d00)="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", 0x1000}], 0x3, &(0x7f0000001d40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x4}}], 0x10}}, {{&(0x7f0000001d80)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001dc0)="72af518c8f9baa4e88e47fd41b53a6264dd2f70c3d220679c8727fda9f15b0e3c03f3af977e74f98f5229a8e21d16d41c52a9508dfe899ea2f27eb6e7962694ac97684113b6b732da94f9899e9b769a8bd80114925b9fa398298083c6ff438d22846fc7df9b45ce614298d0174296279268c51dc9e22c00e07ec5f0b36e71f07c1b655bb09219bf126be17b53620ef8fcaece25048981e2149a2491118f720fe6e9a085de194a200", 0xa8}], 0x1, &(0x7f00000021c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @rand_addr=0x64010101, @rand_addr=0x64010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6654}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x84}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x41, [@dev={0xac, 0x14, 0x14, 0x35}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @end, @generic={0x44, 0x3, "14"}]}}}, @ip_tos_int={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @empty, @multicast2}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}], 0xc4}}, {{&(0x7f00000022c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002300)="263f5ea13eb8f660cc7d2764349929d0860de92c28669ecd5bc42296d6822315037c4488f0b8df80f3e3929aa8d9ad826a67cf804a71a9784f7df00611b642641ac8b9b3afd5320acf7aaf36fa4af35a60f66948f1c8c9d0f368becc395db07ad8338b773e9f35fa0a9af170d5a56bf98b94256ff079c788d7908461b2af1e6513693341b3ac591668e0f0845889a6140184d38612d02086f6510d7292f73445ea7c6329183664eb3c3484c1fe85b3b94476b27d13c6cd933bf5d5be9aa4aedbc73b520fedc50ec3df973c12570e0b9af56554288bd01bae150dd4b31eac258fea95301b853493cf5769b7f2feea2bc6241c2d56b0ccaf7ffb1d", 0xfa}, {&(0x7f0000002400)="e701b23af22ed98adfa6e8fe3a8769b7a9da6f", 0x13}], 0x2, &(0x7f0000002480)=[@ip_ttl={{0x10, 0x0, 0x2, 0xb2c1}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xc721}}], 0x20}}, {{&(0x7f00000024c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003780)=[{&(0x7f0000002500)='V', 0x1}, {&(0x7f0000002540)="0d29437b2b8460425640eb7818a5046be2fbe7852d7606ee158c60c436ad6331191ef907b0aa24ad6c80ec", 0x2b}, {&(0x7f0000002580)="89d8d8e0c8ca03207cb73c8e8847805f3a2720", 0x13}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="b9f4db6ee2d6462670d5eadae554c6a0e73ffed638133fbf1e3673bcd6f08a7089ecbdb7f68fb19ec0d3515bcf9ddf2b6dc6c6931de7160cb98379f382583d0d56b4cc7e25cdc883260541e9b365e2990930b5604bb7adce528cf03cc0983906be3788ab76", 0x65}, {&(0x7f0000003640)="6899924de7215e1d23df", 0xa}, {&(0x7f0000003680)="072f966c04b9425fd00132853461d0f2a90d39daba393ac12b0b03be32e8176832e20e1e097b90eb3af3a6e3fd3b966177e71f8e022fd26995d7d8f3541f548bcf23b68094051cde0d4b6d2de46932d8426436a4133ab345c4d9e4e10f06be6648124da1b6fb97adbe59fc58398c7cd9fe42ce0fcb3768627e040402498a9766cd844ddbfefdb0e5ee7d342166f76f7c1ddd9f4a5e6f9def78c553ab968b2af91ad949fbe4d9eca24e8adf12fb7509e9433103de690ffe609fff35230f73ee29f1751b63cf47315d508677ac3afe5f608e3b27245ed607f6055158aeafd87992b9003e6291fedd90", 0xe8}], 0x7, &(0x7f00000037c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xf2bc}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffff3ad6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfffffff9}}, @ip_tos_u8={{0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf7}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003880)="c468e763c79823fcdaebc3365e4c5b3712a37d34ad05989697a1092ccb036f20b6587f75ab4b762e72d2f2d7bdb8441130915051e72b70baa30a7dd006e59071540732a9c1be7127fc3cb12846b700", 0x4f}, {&(0x7f0000003900)="53b64c13b2aa7aefaf8484b1ad43cd6d97bac28cad38ee299fcd51566b2bd2011b6ffdc688c9b4e53a015ca613949de19ee93231fb0ddf3bbaa8e265999625a2c83a46168a23113000bfbf332494ea676b0b4d8a1dbb50d9df71144d6be33157d8e1dc2846cfac9d7a5b94ee0b8be62ec4d4f7", 0x73}, {&(0x7f0000003980)="95c02bdb2842cc9705460eaf98dda20269f21e9fa82a7eabb85b11c78e4097a513706de237323ff51fc01b4f5d9399723589db68e91ebff0e5812ab9ea4ac28cbcef7ef613717c167023860a42a82f0c030a822f3b178eba0813d602690fd68a40a4dbe4e7043e304cc25b3ea89463de6155e110e038482f4b2338344f23c2d2328a2a0cd236b7f9062bdf26fee112fcf620f231bc4bd3df34b7e1819bb5468becdf265398bf64f308a75178cac84b1381007740844ded18ea2cfd73a8894362c7f7b44acd940e7512a1e6a132bcc961da638895a7df167e85", 0xd9}, {&(0x7f0000003a80)="a03e850641eed04a1d2fd1140db0bb16a2d9b417d62922db56ed390d31bc36eadd52323013dda058c4a4ed6b2ae563e8e46ba9ebca0adc8fab6f7329e78bbebbe9973d0290a51942fd7f3174b109b3c07766b92a5e13aecf733610d02d185d46bff42cf72d72e756b89d146444308c27c3ce50d11ad8446e67dbd9e3f9b2f59d1a282a0b1de92f33b96477abbd79ed4a1ce9557e74fcd6cc3a28be1cb191ef3a77cf113fea77b20f941086915346d7f94a648b4945c005093a01857c61ed8ea6be21ddede8b957517e1783e582b1ec8e87334cdd2df60cf25707e01b4b881dfcc440", 0xe2}, {&(0x7f0000003b80)="a93b7de59f1943e66d44c7bb2f5d05637c444ba760a4e4c59d8b8ccf4c", 0x1d}, {0x0}], 0x6, &(0x7f0000003cc0)=[@ip_retopts={{0x48, 0x0, 0x7, {[@end, @generic={0x88, 0x3, "06"}, @rr={0x7, 0x2b, 0xff, [@private=0xa010101, @rand_addr=0x64010100, @remote, @multicast1, @multicast2, @multicast1, @multicast1, @loopback, @broadcast, @multicast1]}, @timestamp={0x44, 0xc, 0x4f, 0x0, 0x9, [0xaadf, 0x9]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@noop, @generic={0x94, 0xe, "271e5813c785b86d42f9a941"}, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @multicast1, @loopback, @remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}, @end, @lsrr={0x83, 0xb, 0xda, [@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100]}, @timestamp_addr={0x44, 0x34, 0x24, 0x1, 0xf, [{@private=0xa010101, 0x8}, {@rand_addr=0x64010101, 0x200}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x40}, {@multicast1, 0x783}, {@local, 0x7fffffff}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x1, 0xf, "e244deed7d9eb152430e494bf6"}, {0x5, 0xd, "b9b11c983942b8449c9fa5"}, {0x5, 0xe, "539a11a8948512fa79f94bcb"}, {0x6, 0x11, "05e6a3cf3ff3dc328958d4141cb4b2"}, {0x7, 0xe, "6709d0c5d619c8f3d34df019"}]}]}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0xd}}], 0x150}}, {{&(0x7f0000003e40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003e80), 0x0, &(0x7f0000003ec0)=[@ip_ttl={{0x10}}], 0x10}}], 0x7, 0x40800) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000004000)) r8 = openat$hwrng(0xffffff9c, &(0x7f0000004040), 0x101000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004440)={r0, 0x20, &(0x7f0000004400)={&(0x7f0000004280)=""/163, 0xa3, 0x0, &(0x7f0000004340)=""/166, 0xa6}}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004480)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004580)={0x8, 0x1e, &(0x7f0000004080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x0, 0x4, 0xb, 0x0, 0x8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000004180)='GPL\x00', 0x0, 0xa, &(0x7f00000041c0)=""/10, 0x41100, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000004200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000004240)={0x3, 0x9, 0xc5ed, 0x1}, 0x10, r9, r0, 0x4, &(0x7f0000004500)=[r10], &(0x7f0000004540)=[{0x4, 0x3, 0x6, 0xc}, {0x5, 0x1, 0xc, 0xb}, {0x0, 0x5, 0x2}, {0x1, 0x3, 0x1, 0xb}], 0x10, 0x7, @void, @value}, 0x94) 914.903778ms ago: executing program 4 (id=2365): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x9, 0xff, 0xfff7, 0xafe0, 0x12, "5fee9820714e83f1"}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f00000000c0)={0x1}, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) 813.850654ms ago: executing program 1 (id=2366): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="220000000000000000000808000008000300a39af776b42efb6fba3d5075c061c476e0e1e6421e909fb2fb378f8fb1399efc4e5006966de2267e6cb39508", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) pipe(&(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0x3, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x1, 0x4, 0x40000000200d, 0x1c8, 0xe2, 0x4, 0x2}]}, 0x78) 759.906861ms ago: executing program 3 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) 740.905574ms ago: executing program 0 (id=2368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x2000000}, 0x0, 0x0, 0x0, 0x400, 0x0, 0x44201a6, r1}) 607.955425ms ago: executing program 2 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xad356f19b320d40b) ioctl$TUNSETLINK(r0, 0x801054db, 0x0) 607.125647ms ago: executing program 3 (id=2370): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x0, 0x0, 0x0, 0x400, 0x0, 0x44201a6, r1}) (fail_nth: 5) 507.972423ms ago: executing program 1 (id=2371): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) ioprio_set$uid(0x3, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0x42031, 0xffffffffffffffff, 0x80000000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 471.758653ms ago: executing program 0 (id=2372): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 470.756544ms ago: executing program 2 (id=2373): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x3}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000040)={[{0xc, 0x3, 0x4, 0xc, 0xb, 0x2, 0x0, 0x3, 0xfe, 0x5, 0x5, 0x80, 0x7f}, {0x6, 0x9, 0x3, 0xd, 0xb5, 0x3f, 0x2, 0xc, 0xfe, 0x41, 0x6, 0x18, 0xa}, {0x9, 0x8, 0x3, 0xc, 0x2, 0x78, 0x3, 0x9, 0x2, 0x13, 0x7, 0x54, 0x18bf}], 0xd9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) futex_waitv(&(0x7f0000000dc0)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000100), 0x2}, {0x487, &(0x7f0000000180)=0x8, 0x82}, {0x2, &(0x7f00000001c0)=0x8, 0x82}, {0xca, &(0x7f0000000200)=0xed, 0x2}, {0x3, &(0x7f00000002c0)=0x9, 0x82}, {0x10000, &(0x7f0000000300)=0x4, 0x2}, {0x6, &(0x7f0000000340)=0x100000000, 0x82}, {0x4, &(0x7f0000000380)=0x4c3, 0x2}, {0xb, &(0x7f0000000440), 0x82}, {0x0, &(0x7f0000000480)=0x8, 0x2}, {0x8000000000000000, &(0x7f0000000580)=0x1, 0x2}, {0xfffffffffffffffe, &(0x7f00000005c0)=0x4, 0x2}, {0x28649526, &(0x7f0000000600)=0x9, 0x82}, {0x7, &(0x7f0000000640)=0x80000000, 0x82}, {0x5, &(0x7f0000000680)=0xe, 0x2}, {0x3, &(0x7f00000006c0)=0x59067042, 0x2}, {0x3, 0x0, 0x82}, {0x4, &(0x7f0000000700)=0x38, 0x2}, {0x0, &(0x7f0000000740)=0x5, 0x2}, {0x6, &(0x7f0000000780)=0x5, 0x82}, {0x3, &(0x7f00000007c0)=0x9}, {0x1, &(0x7f0000000800)=0x3b85, 0x2}, {0x4, &(0x7f0000000840)=0x369, 0x2}, {0x2, &(0x7f0000000880)=0x7, 0x80}, {0x3, &(0x7f00000008c0)=0x46c, 0x80}, {0x800000000000, &(0x7f0000000900)=0x80, 0x82}, {0xa7c3, &(0x7f0000000940)=0x358, 0x2}, {0x7, &(0x7f0000000980)=0x2, 0x2}, {0x40, &(0x7f00000009c0)=0x4, 0x2}, {0x0, &(0x7f0000000a00)=0x8, 0x82}, {0x9, &(0x7f0000000a40)=0x5, 0x2}, {0x8001, &(0x7f0000000a80)=0x80000000, 0x82}, {0x8c, &(0x7f0000000ac0)=0x800000000, 0x82}, {0xd3d5, &(0x7f0000000b00)=0x2, 0x9c314d2683af8db7}, {0x7, &(0x7f0000000b40), 0xe130501fc2dd4353}, {0x3, &(0x7f0000000b80)=0x7f, 0x82}, {0x6, &(0x7f0000000bc0), 0x2}, {0x3, &(0x7f0000000c00)=0xa09, 0x82}, {0x227, &(0x7f0000000c40), 0x2}, {0x1, &(0x7f0000000c80)=0x100000000, 0x82}, {0x100000000, &(0x7f0000000cc0)=0x5, 0x82}, {0xffff, &(0x7f0000000d00)=0x5, 0x2}, {0x3, &(0x7f0000000d40)=0x7fffffffffffffff, 0x2}, {0x5a3, &(0x7f0000000d80)=0x3ff, 0x2}], 0x2d, 0x0, &(0x7f0000001200)={0x0, 0x3938700}, 0x1) 322.50901ms ago: executing program 3 (id=2374): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)=';', 0x1}], 0x1}}], 0x1, 0x4007ff0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 136.046556ms ago: executing program 0 (id=2375): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x480, 0x0) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000200), &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 123.835564ms ago: executing program 3 (id=2376): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x8002, 0x5) copy_file_range(r0, 0x0, r0, &(0x7f0000000040)=0x919, 0x9e8f, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x1000, 0x780010a0, &(0x7f0000fff000/0x1000)=nil) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5e26, &(0x7f0000ffd000/0x2000)=nil, 0x6) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newnexthop={0x20, 0x68, 0x200, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x20}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040050) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000240)=r1, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0xe1c477d4f2d112b, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) ioctl$USBDEVFS_RESET(r0, 0x5514) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, '*('}, {0x20, '[.&@!'}], 0xa, "6142079fba124ba22f2cb22671916516f25b0454e5fbc58932875d33d22bc75d66661ec7a39ec86fac8d65785b8357b3efe2dc9e4182098728b8afa1126cc329a78f4d7a44cbd35eba02828e2f372ff473c619adfccd95058a277b66bd475266f54f8f3d6386ec54ec1fb191aab66fe032787fd601f07b3ca4fa35538a6c684b970ae98c84b41816adade97300d5b0b73dbcd6efc717b3e32f1178263069676e2b04340aac0ed9defc15bce0d8e0e923e13bd5922e334651d09a2912d9fbdfa3679c18292e0d02b6c90c3140405891e3f3a2c4bffd76"}, 0xeb) ioctl$TIOCCONS(r0, 0x541d) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000480)=@md0, r3, &(0x7f0000000580)='./file0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x1}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000600)=0x1) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000640)={0x1, @capture={0x0, 0x1, {}, 0x2b, 0x2}}) rt_sigaction(0x1a, &(0x7f00000007c0)={&(0x7f0000000740)="660fe7130f9422df5ca208c4e3914135080000001afa0fd84100660f72e3a40f130ff30f1efbd8bd6b000000", 0x1, &(0x7f0000000780)="c4e2791d3df0330000f3da313e36f167f30fbd7d2bc4e2c9b6911cb920cac4e3d120fe00f00fb38f00800000c4c2a9b7d10f38cb2cb464d0c1", {[0x80000000, 0x5]}}, &(0x7f0000000880)={&(0x7f0000000800)="c4e17c5bf5ac65f30f1eeb8fe860a2f7d53ed84d590fe391bf0000000f8e00000000f30f1ae8d9e50f8903000000", 0x0, &(0x7f0000000840)="9f8fc960970a660f2ca9000000007dacc4c152c23799e8feefffffc4e2f91ddf2842fc8fc9e09621c4e2850b80d7f6b047"}, 0x8, &(0x7f00000008c0)) ioctl$FIOCLEX(r5, 0x5451) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'caif0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={r0, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001f00)=[0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0], 0x0, 0x69, &(0x7f0000001f80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) sendmmsg$inet(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="709aa55ba41e7e9c5e8394fd708e22d42715f4dae8da37e0ba918e7541c26a417464a118789861890bcc47b57bde2589fdbebdce111e84bc30c12d49d1823be3390522d47a80d16048b263fece8345b0d2d9458e00ba694a092ad4acd90f890288e25ca7fc97086ae95a0ab6f7683f35f00c6906e38081858fdcb3f689be0df318e238b0a38e1e235c2c8e30a12118b988742de34a72935604eab03a61fd2bee78855d8d117bdfae9b0e9bce70b641f3dee1", 0xb2}], 0x1, &(0x7f0000000a40)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @empty, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3c95c457}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x53, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2}, @remote, @multicast1, @empty, @multicast2]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0xd, "5d3ef3be35c8c1a20aa52e"}]}, @noop, @timestamp={0x44, 0x1c, 0x58, 0x0, 0x7, [0x3, 0x0, 0x7, 0x6, 0xfffffff8, 0xffffffc0]}, @end, @ssrr={0x89, 0x1b, 0xb3, [@local, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x1b, 0x7b, [@loopback, @broadcast, @rand_addr=0x64010102, @multicast1, @local, @empty]}]}}}], 0x124}}, {{&(0x7f0000000b80)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000bc0)="cf7d80246a76a32fab0726c0db9e40b965405ac627c27d24281cc4f2274193ad9b61ebd61ada469900c62245b47232ba4ecf9c1ef4647bea3f5b7d2ecdf1b8f30ad6c03622629346b30bb2406cbeb2c1265d3531bab2", 0x56}, {&(0x7f0000000c40)="4c25c3c118025668a8904e8a8ef7eb7679d9964bdbc098013e6288a8e03148059da4738001ecc93e4ce35e6f2439585ae25d7af502c0c5aa520998c5606a0d34051396b1d55e2399648e57c4e20fffff5f62ec95d1f7ec810fa35b81d40ffd7e8d1eb895b2103206c782225a9da991cab064966b8795fa8fae65c9be292f005721a3dbbe574b1f5765166cf050e58094", 0x90}, {&(0x7f0000000d00)="bacfc9236220a93d044a9ce48e42ba3f4c3cdff672e465a39707fa7d68db6ba5a04187202f140b81dfd3c1ad5980b4ffcf65a0c89cc1e7575e2f2c667e32d2bb5b677783ba0567cf569c5fd576b3bcac04c1664b9c867f40ad1388d817cd8b1f50e5ab406737b90aa8b5b997306446143d97ac2b4684ea46ac99606c0f2c1a9579030be0376501abcb4e4f20319b8cea87c4a42f2ea408e6947f34b883bd2f24b32ab6a40d4ca43c728705cfe2fd5e1e904941bbbe9bbae59ff8e8a2eabd726d315ab92d5293458877a325eb77c2ff6a3988b73aa7170e1e134767ce36f7db96453aa666a908aafa72e44773c453658b66bf92f1234dcfc207b1e764c919c3ae81eca3eafbe9131f6a79a64d2b1a0f6d079f38bd98d0618fd62fc0e89bb39b7c9d0ea8011def2184b0c94e17e48eb8d06773bc42aa10f8fcd0259954dbf37ca1087a5764c69019d7b3d3f7dd4f8b0e7cfb810bd95fe6eb2db00a697446e47ebea7c12e28dcc59cb5dae3c90044eeeb88f69d3c7bbde85c24814ce4659f562422b37d51116ba14b120929be8989d41e42d70cb1a742233b1c8612e850e653e1405dba7ff2fecbc3fc4b106a731300ebfd156b1dc07bcd82c69e05cdb9da943dcadc430a6719f3cc749771f979ee0f80338633b022d5e3e1cf166f8e9b6551584a46f920b8790aa0b6fe448f6d6bdb6b5c983203e4b28d661a1fac3da25522cd5b8d26843d432ce6952372bf1c69dcb07483df103c4f8a40d7027978a6ac8e07a53efe8cb9cd3c2ce364e52c3e75ba6c312ead40afc99f127c22595a19c749252357fd6d4cf10fdab625ff26f1757ecf3bf8539aaecaddfc092798538cd4ee12c94cc5a46efa0923ef774deff7b70124cafa87b7a00d416833bdd56032dbb0948cca7ebd6b90c9693bf743f93de65356f4875345edd353f8a94136903cbc5b9079a94e906bacaaf392b9e6e85e04a200e502c3051b787e0b710fd4e882419e1f3ce3c0ac85f835d82a7c589dfd1d20a97b61896e51ec0439790ef7dd09a508a5f9379114e887d78ead1d668fc037f13ce00fea294e5d81f1343633fd122a9bff1e864fd6103157c9d8a1257b1f9fb4405ea5cee242d9fd12868d0b14a9d9db4ae1cf3d0c63cf9412b87a2765f068acf8402df53934d1db5b3f2bcbb463355150b16bd414eab77499846169cd1f6c2dd48ce3eaee909ac0d2e2680d63ef0b392c51289c3e9697ddfc6683cee57fa6e45b1a6984823d3f5b99fa1f37358aaa527dc1d8a389d4902ec518fd0cec45c09480fbff86c0687c88c63a619197d43162f45f6fdeb80c7ded2aac7c3913e0c7cbd88bfab528ef5197d7a39d225a2e438261a7a630ece1e11533e654d9d42d702d2616da1f3b6a6d5459597760bd3c5441435df8b39bdaf3371643a2cc8066ddc44a7c05e839560cc3f415c005b675141831999a8edc271a207e3d45a1a710131699148aa40f52deb31e68de6fde56b4dd7e1da1af36fb36a572a9f7868502b85a0fd0157f5fe246b163282709c3ca41c1f63f3a4daeb33e71925984ba381f3ea0ade9e36fb9c6771d8eb8319e0c22413a8962b2672731bd8055f5542729cdccbbadb03039d88d20d8b4ffe0fb74920dae899919f53d4f796b3ffddf4b76aa441683ac6f19525273a2abe8725725b48ee6b7d8f86dd2b178563fec3988830c53019eedb2098d82e97af75244d0c5e8cfda9425519f2322f975874ff18c1a112f674c5b2f5ed1f9234a48f1bbb40bb0de04b9f094988bcb33d790509d709ea38faa36cab03ea06e2dece1587933093dc26d3df3cb9653e501ff55aefba864ba1814fd335ca0aa55a625918e112e23e8ae32527dd537290887b7de9ac07b6cfc775e58e0a710012300701e80a1d58f2a0a5d5346622968e7bad45f818eb6c9fabb7da10629639c0b3430a5c88d81cd63bb3ebf3438ba80ea1d41f630ddacbdacd682982e3195aa002fd007e30169d102a9179d7ced3d9ca82132902f2645ecdc3e06eeb68f53290e2bd4ab6ac893afabfb95c8ef8183030ac60d270c523f7692e163729ac2e6fe6c724a38a7f99d778e457f52c789f1a0245fe6e07a212a4f6ccc2af5fda9d3dc637e926fa6872617c564ad2825ffb8336128e86346fda7f9cc445e00b97655000754f911f1e23445d006840aa5a8694a1e5b58985e918c14d0089bf938a8f485a57dd8a3f3d055d7a73d79bba46448818c6ad90be567e55b9416d5492c9c11a1965ce01155fb7eb8c13ebabb519342ebf55a16b3c14c223c6dee54da592e9c8075abaee91f87452cdd13ed173b94068bb72cb36deb6a3492e079555349d8480c5e9e3ba9d49fbc027289559f3ade6891e1a6a179ff69866b895cb8e8b2fc4d20e259845bb739ea102e9e354529043e066880bd2e302501b3ed4ba97eab5e3b497b2855c658aa5e62b8cd6bc52502ea18bcedc8408ccf226b4449f32f8300617ec0fc14e5c17696bd5c1a56c40ef2e72356cfbe8f4ff2fdd15cdbe85a983e510ba603d3d1d69d225b88b3fb36f9264907795e94e54b79654198d1a571bdaf35eb349852abdd2e5774e3ab9cc14ad7cc177e1b04289480eb67070e89d5eb033542a5d6b3cac79a73963998cfc5ddc528dcd56eec31aec69a22476c74846c9034b018e13c6e2cf4555fffda2c48a5ef82828175005ce5c7ebff44f1102174db3f5c31ddbe417f198d1d4013ccd22881015093157cd66a500cb879d0e236474be08b9151c4221ad5f9b176e7b0fe4bdc6534dab7b806e96e02e4ccab3f3c6f8ca14a3b982585bbb2f2646f2b0addb766de2667bd1e86a404680a393a6699f7baadea488cf4ab42f5a025145be7701dc19c0a9ff38d440b076273fc62090d54611cf64e2a7a2957e3a1a8cdf2a4d7dc1b425cd2b42be0231514b53deb2596f9df25b679c3963bdfe9f1f38717246cfbae4f5a4b1a79cccc087dc3410da09a6a1eb42f95108aabafbb98b0ccb437afd4a436976a8e39f9c86f9440da9899893c33c53031ce80de13e30b6a29cc76192dd5db530c717a9a00b80826679bd465f1997527ff5a18f42d3b9e923cbeadb585bc5dcbc60be9a3a864752133155cf86f392298ac7427d2d1e808cef7348b33ca8936d5e6a704866e3c1266a0cbc10a2de75ddadf89a1d78d2e9ae0f7b9c37bd176175876ee0511f0ef44d2ddc47e54b6ff723dc4a266f3256007da948fdaa178604b8e91ea05f414c9612a82cd43996d6be17f63244e447df617901132a73212926884760b59ab4e58978ef4767050361765be84287a838a8178cd82a9b14b99e3f8e1a34104230b0255353d7b47a76d5d2c0f575fff3b4362c6d9dd98d2af8d52410afe54a0d99dad8cf48cb40fcfee26b0dd9b3e5f0f97eacb1cf3d6cf92af853a3e8ec5b4cb587824a33cce3e33c863c10feb5e1c57c8572decd2035c1f3dbdb0f4420483ad7418a2a5a1c69399b8bbff02a17ad6b03e1cfbaeba03db3abe9716f70799a6d5986b0b503a6bb8f7c4ff394fb72216307bc49c1141cd1367faaf69df4fe0e5869f782eded208da375710d24935342f842a7d0c85e6a997a7d5b84f06534179d143321981aa76c521ec58ebdddf550c20c90e7bd71233cc8e76d3a0bc361c2a38b280dae33c506e17beb4dca31c9c91155d40bc06baff5427b6143dcd7ba2ae1e88f38bb207e942a90646cd406d98ec4719ab276a9024ec65680967cc03e4a30b42a5d5c23ce7a52611a9499035797df7bc3e5659e6308cebeb30828291c61e8225aca00807196dc872d53cb302240194b54a6cacba603b39e117be0c29652be860451b6ef9739dc73df1ed4605cdaf32690cc86f5ad876673dee526990db739e1fd25cd547538c176d84c747c68778b9b8a3d6341cb185e6cd9f5246c031bc17e984eb03ad163204006fd7683a68d513c13d0b6b9d80be60f4b4dc99541fd8d8e99f9f409b42a206e1f850fc7b7a134aba4b0010b536aa8faa232dd184e4dc7b5ddb751ba3d33df975d4ad8045d7f3b7674c60d29dffcc3f8dd60c539122ad8104a2139acb39540a2729520270e296d47f90ce1f41e18abb0952d45e2a738c01107ad6aa37d4be59d04a89caf0512920015935e7f5e419b8b9792ebf9c8f25cc5053cd4ad05780c20251ef07ab0b49a9049e7923b1b96406ab6ab6dff507470c960a7faa280208a8960e27156b29a06e4b261ff906cc222b1a7ffceb9aa5a74ce0f501542369a8648deecbeda8f0eb0a89eaef50ac16e63c9da7c2560d7b53d132dd4612025ae44d4a8eae3ea4dd89846e1670bd070a356fc2b0641a6dbd16492c64e3ac323019771bf3b77d132acf16f5e44e5a43767d609df7f05896214fabb5c59c3b7c6e2e6e8ee472e4f39b145740f9edb6e8b73b38a9dfb3fd612b5e9230962b33db783623505f1f4287c1a7d8ff1127f94362e12ac27630a543e9b3d9079811789606027713f42fb4b4379456108b52e8dd0362352c7107bfe61b8adba1dc3d713863fbd86c961c4b5c2da4830d0d5a884a247f37d7401e6aa9592ad29d8f50800cf4626b4c79ab2478e24e60b8bd7410ce146871b2fdda2bfa0f34e21321e95ce0acf233d4630f3265189d638b364fe885b054939510705db3c67211b629f3f66919de5811da5bc57a0e0f081b9f8a01733e94c665089ad8a3d0c5e9ca8a856a31a5d17361aff769e71cf08056f4d33d84a89857656d5d485987c8efe951ba95aecf8eebe4653fb6df0fda084e8cf9b8ec0154fb0de12a3316afb2fedb2bfd9acd1bbb3ba78048ed66363e20d03b01c9b39ad82ad82cf87462609991779f51c23ce668c2221373ab1f57336e2507a9c7af4096ad9a41c5b39890b2f23285a7f5bc1bfdd809daf14c97dad2f12802afdb7104a388af79e9ae6e0aafa92520a826c29e2ea66029438e4d3f2ea9626baf916296b06bbd21d8d69805e45edb8e68ace48d6e38bc3bc8ca7d2330353c4908de40fa64acad0223acc18ae4eeb759811f3f057357e584171c68fd7076af304da5afce1f8ac3c7b951cdc21ba5139b49b2047ce62ad48d1e0601443f1110ea838c3653d0ebf35e9b920f8e69d0755749f7a72d0c2545315b0538459251d9d8a266ac940b2c93a7bb4c3232e00de5959efc13d14e9e89bb1fcf109f3421154be904a4028b7eec0b9bb5ab7d806a84b3e734f9cc11f41d8faa0c9f31778e76c6f99539b94606ba136b09cc6f02e933c1422535ddaf25910d26b94fade8f2eb1f3c90acf753a6b8bcd85277f66d038754358a53a727f3e7cfbc716f15e2afbb4d1aeb88a3c8f01d90cf87770119354173e34698640dc45fecd68d0d2c5bf4ea2e7745b047c29aaac3fbafe507ffd1117abb40413bd2d142c94e80da650df1fc12e2cb43bf3c4b9803efc17692cf0d06ffb0599a11396c036fec31331b23d46388ab18c76ced9928afb8191535275333f94664392987a54f039001aaacf2f507c53fcea8fbc1a236b68e0fccab56497bcdcf0b808bed1c06ee6d365b413bfcac6f96123aa798b4a72393c3a0d689ffab9ab51aa97676ec2ee47582d29bfdd65f58f16cdc912477627bd80493672060e0315ca764c8a52a6cf9c94a19a77751752d7a2f268ad9bd06bc403d6901abc31ee8ba09ab6832fb2600aa3e89b6163e3e891de8252cd1ff20e0431ed109a75a4f0d1057d1f166eb03903beedeaa6f3e3dea3a93872e12a80525a06e1dbf1e8d7991243361ad1fcb759b0f9389b8f928d3c0552c45e5c3824a2c78bc8a890f3312a438a46a72659d75db913c01a43b3278b69112f04a7df78e", 0x1000}], 0x3, &(0x7f0000001d40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x4}}], 0x10}}, {{&(0x7f0000001d80)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001dc0)="72af518c8f9baa4e88e47fd41b53a6264dd2f70c3d220679c8727fda9f15b0e3c03f3af977e74f98f5229a8e21d16d41c52a9508dfe899ea2f27eb6e7962694ac97684113b6b732da94f9899e9b769a8bd80114925b9fa398298083c6ff438d22846fc7df9b45ce614298d0174296279268c51dc9e22c00e07ec5f0b36e71f07c1b655bb09219bf126be17b53620ef8fcaece25048981e2149a2491118f720fe6e9a085de194a200", 0xa8}], 0x1, &(0x7f00000021c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @rand_addr=0x64010101, @rand_addr=0x64010101}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfd}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6654}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x84}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x41, [@dev={0xac, 0x14, 0x14, 0x35}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @end, @generic={0x44, 0x3, "14"}]}}}, @ip_tos_int={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r7, @empty, @multicast2}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}], 0xc4}}, {{&(0x7f00000022c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002300)="263f5ea13eb8f660cc7d2764349929d0860de92c28669ecd5bc42296d6822315037c4488f0b8df80f3e3929aa8d9ad826a67cf804a71a9784f7df00611b642641ac8b9b3afd5320acf7aaf36fa4af35a60f66948f1c8c9d0f368becc395db07ad8338b773e9f35fa0a9af170d5a56bf98b94256ff079c788d7908461b2af1e6513693341b3ac591668e0f0845889a6140184d38612d02086f6510d7292f73445ea7c6329183664eb3c3484c1fe85b3b94476b27d13c6cd933bf5d5be9aa4aedbc73b520fedc50ec3df973c12570e0b9af56554288bd01bae150dd4b31eac258fea95301b853493cf5769b7f2feea2bc6241c2d56b0ccaf7ffb1d", 0xfa}, {&(0x7f0000002400)="e701b23af22ed98adfa6e8fe3a8769b7a9da6f", 0x13}], 0x2, &(0x7f0000002480)=[@ip_ttl={{0x10, 0x0, 0x2, 0xb2c1}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xc721}}], 0x20}}, {{&(0x7f00000024c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000003780)=[{&(0x7f0000002500)='V', 0x1}, {&(0x7f0000002540)="0d29437b2b8460425640eb7818a5046be2fbe7852d7606ee158c60c436ad6331191ef907b0aa24ad6c80ec", 0x2b}, {&(0x7f0000002580)="89d8d8e0c8ca03207cb73c8e8847805f3a2720", 0x13}, {&(0x7f00000025c0)="a7f695fac4777775b78897e8d179da9679aacf1dd4ae729123484f5996785161baab2d5b41e074ef8cc5dace3b18223827e5cfbc92d904ec20d4b6e1f487de582ed73004c1e15e84ea4c914dc1cbb71ef1fd27dc202a448f2ac743b420dcc1b31165eaeffe5eb805bb9735498926f2ac1ceefb925f89f56d589db07227d38279236d022abc17a5e5f031646cb04f462a5e7ad2aac7493bb8b6d508ac112046187dc4c2fa3faddacf74646fe0d264d81f313f00226575f06c203e2b92b990e2c5872eea5849a99a325af5cf6479a23b0f86104d628d0d3935b8143a33ea8a00195601011554eb0202efa3c4fe96455d3c49d4f4337969186fac84e1e49dfa769f4d263680338017790060df2e0ab3635a805478006293f7c2e66101e766c27feb4cbc0eeae58d61216655521fd346ae4cabae068e52aa2865b75696cd37fae55b95d760a7ef1d50428c56cfc17ce5f8b3fe99d1bb99e6514efdb2d568de462d69cd0f623b46536bf83c83ddab951060193db77aec74d2e4cbd5db1d2c9a969885a35033e60fc2b30ea3bc88eda7ac9581ffd72747a16f94b8abbec59f62860de0ce0d5699e61a58287ec599e8444d339d26885eb76094d665a08f1285eea718f6cb57ceeab8959075a1b40e82fb7182e0b0b3f50e7476004aff0974ca8265ef4ff687c28855bce6c4155efc386d72f3b8c23071bc7cce421b28f7321becaffbe3424f3f8be41b5b247fab0cde674d8c86d7399415f934d7dbd62c6d097186dfe8bbc3abb9ecdaac9dc65243fdcfebeff5f23bd19b4aaac30e85986f7018dbf65970581b867a99f10f79412f6eaeffc5e87c128e9c367865d1a1c77df08a2e8c9fa993949633115c09d7959ba7e1b9dca6149c2c37e9b8e48e408cdd7423e6711bc56a13bbcde8c27191b0aa5944bccfbf6b730cc5bf14aed3e2599e7c758505c3592fdce829fff37e053c0b866b19a4fedef5ea76c32baa82efc27ab9c40501440311785d15189991fcd6d99babe05335e5c6ea2d74ad02e813512735567eeba64eb3ddb1261a5bf17c63762519c88f4dc9c9328ad190759d9a1d0b0e59b48a707c852bb169569eb67f97d80480c5ce2d224372a400d4887c63ab3dc66f4a1313b4c292debf946732d0a591e7abac9565f9082639c6251064b200862e87cf0546f7f35026864dadb3b24a9606b67617402d658c95f093099d935a25cc69249e120fb292c21d4ef2653281f588a3ed890df42294f6292bd3436ad87d016a61a42963238612c44bda4ae493abb1bad2321dc9cbf96566f64e7ac8277ee15329186496cb1bfce310563b2ab21b1b626d39035d2aeb76ce7a4ef130dba5eacc9883710e413030ca2f23e606cd6e0fc9251e3efc7dfeec2ffae46f6d190273324465f78518acfaf027bba5a59b3fcfe2eb00eb7d75fa7e20bad307af4103d8ab27a95e5a1f6319a529b8f46233054f5c8d51b1f9da3d8b453fbb3e46921cc6ab99bb9985f12d2a3a914a2931712d3938f12bc4c7a9d10754c0df663c4570134d9afb8cedbc907bf5adea25c3af39f3a07b87c77769afccf4c868d5aae46683b5b2595a8f6cf070b04bb88949a0398d1af5aa764ca4c78cf7f429c891a08b670e82d644d09fdc80d1d6c99a96add64cec5a57976435bed1bc885a60e25404c48cb12ba376e55273ff5705c7bbf7952ce1191295762567517449e2f802a8a2a54aef0de397f2c11e872b832587cc8387a3a83f970d3b781ae9aebe6472e34292f63b40e3a91038cbd5f16c7520177247300103d16a92de6c0e9ffb9eff4418b455e7af591a5a5d247e1439d844bbc76ef14f268753449626444faca8b7dcedca545dd255c3723753a3dfd1b7151f2ec8a6ffcea060701fa2d73c7a5d7b59a683b824987977a45bf721b0b15bc9b26a8adcdde8c5552046610b6b4a8443cfbd93a72beb034da21a1822927fe76d83e9e64883df7c9d0211f14438c81b348766a8d82d095f39de8286205e26f96e22873613a4e8cf4df6d8a2a6e23a7b9b1cdb5d1cf2a14f8ab55b441e6a3b0caa795aba3ba3f15808027a420709f49821e1c4ff517f2c214708e785a067ae1479f8304593d4fc02062be8eb495a6eedfe04cdede848d1a3ba944d3d65c3f9a3f71e94fd6429580aaea3769ec1236c349d9ef8c67148669a9c858ec27c65da26511b607b228eea0d8405d02c9ecc056ab3e9a6930674c034c8847560566735b37525ebb7f0739ccfd2c15e674d884f3ed11893600c0cf653b90d6a0fca93e21ff8ba28896fb80f16ef72237cb2f4b8619dcd8a15b1853b42e5b839ec8bc45facb8491e1a20f9dce5de8a2d6058ddd0c6798949947f031d656eca2c4b828e62f98c61c09f9a03f1d0090ae5d74600c5623fdf36d4d10f30d58bdd72ce4f9008fe2bd40f7cd8a3b918b839814f0d863fe6f110fc106d95fd81c5f8722b8ebf933e385b6edef4fcf678c60f95de79c92f40b4055f3fc76918cda1e2acbac112f5049bd451ba4840df36d878660ac5bf23dcf7fbe321ae8fcccfef011675f6c7ea272c32cbd9e083deddbf04d7030b5f5dddcef3c0aa6a2f7282ff4524575722f28c363671493c460cce70419e5e0f14cca897b7b7e2f3315646df0b8d3459bafe6f56435fc36210dd60e6977979aec631e164116e7e701f1229704c96a190ebcdfc1d643b7c64d80d8e877bdf7d3b386c1688a6147377f34ea05815ded13f2995e6e6a751f0944ea47dd58d6d0387fcebdd5233e579c3327d697564010688f85c8f15a96912b2b9d586f6d23f7e3999154bcde868b7a7c4a707bad352a4e18d6eac69daf744934d119a83d6eab76356dbc7c59f03460cfe5b2f564896b53ca0c39e633c3c73e3af3966c47a85529cfb8e902177326eace98f69eb33bd847401ccce5552b61ec5a0e8d4d16a441e7fea5f0c08f0311d590ca525e5a689776aba74d7d5ff39547e673278ade8306db2c60ff091032459920de9c662bd7e032209b7c4c72cb41b0b4c3b05e955aa4f57c5ef9b0e4f0ad00cc9aa7ae6755af6de89ec83fcc48c900c5b2c972f4079346d965580e6c3f841f1240cd512fcdc35e571ebe23c745d04e614c22162b77d2c598f6866fe79085efd8aa25d8a409c3797691ce4977abc5432d2486cdb98e1b3fb405af95ca0be1b98edfcba3e2fbeca429946ce94ec0388b184aa8592e833aa82b253e836b26f7748b1b27f65af216c46c6506829863e9d4afece64393b20ddb60203027d99110d821385c5433649d5e3a4fab96531f30b11660248a36d83ca0bb3e8bddf526224b3c322adcd4495d2de1228986776cf261950846b347b8502419afa29dc343e01be9735d45b59a3f180a7cbabc5e3bd6d9a7144c13fc8c844c246e6afc0aa4d63abd71b2b0600cba01642ec1cceda28ea54eaa66a7ebe7865553c66ba76bd6ff7c07fdd2cdc5398d1575f238cb7570d3488fdf27c17b15bec4ab2198299f35650353d5ba12defebd6e658ffbeaa5e3d6b6edbeb88f503ba4bfdc84b80f605f92d7344fbb9b97239729fc83c775d971c23f3a57c84361eadf902afb0cf74a9607b7c0024029b70b973d417993a8f88a303c5ec2e880dd3b3a96932a3a29b0eff01cfc86743c93b42a8d5129118abe7acc3c7589a7b9783b4826ff9f0c8a2cde89acfb96dbd1bf51165587a605198d696f671c55ea584b7fbf929b9daee386bbddb24757fdbb3cb30c1a304385d6518a721b1f7fdf94ee0ac40ed0f37ec22f851695629db2ff5fc4d3c458f153c0176c8120393abec954a1f4a8b764ef50c00f782f7f9108c110736e31fca143bb9af12ee5ff3f88b150dc04a976650b58fdcb19f4271c4553a95b47ef60276e1ae4e0e629d714345f6d73f429cd6f30d0db42f4a341955d2fd4ffa98d4e94c484582960588a0db2af932a7a708f549233a56d90d47007b8f801354936aee91ec43d2ad468f3e2286ba189c13033c7d97b498e6a08e684ab9c8a90a4a1385173a1d586332d3183443dbabef3de82f0bedb86a0244b0c412d9ab554ef71cb5c785b4a6569a1e7a3effa54fa09418ab629604074ddea72344c355a62442bf79210374770808daf2d9b917d4a8e7c3a607b6f777262a3536bc413097b590e5e8c99c1d150363cf58717e9d79c759f02d4cf48e639a7cd5254079302b1dfd5db30fb66cdc2610d27c644507960a777e1af3f06ff7b0d08694c753e5b8ff41f1621216984d494b118632041e03d977c4dcb1368bfbb1b939b89d4945c177558589f2c2e8369f8335db83d39076b550d53aa4c205b57a578566ccb87e9103fe062b81007b488a610b3a7d9240dbff9e4584702bdf9a23e284ebdf4f76a5ef836c02fa27f6f103547b79f040bc82f508135f060d401685d776cfd1eeb5151d8e0525a76985d58df6e92d4848f7594f51a7cc843c2e1421d29b437dda705fc274abb1e6f21ea70b13cbd6ab5196094f8d74621cbd127478d8d04236a3f5597c7df955bfb29da43aee82cfb254c5e51a2589d5b06c6a05b0d31c3d158c74afde1fd3517fe4ca255a0b4133cbc4302c2447b737a2472129b84a85525718103858ad7cb7775909171961c8838e163491f8ed51294e340eeab7a075ecb528006b3f1f06d919b3ad540eb44de4a43394650c02ccd47effc2dfb9967c456795dbc75ad51ae9765e7217a3d94b7df1e1c63fdb9b6457e011dd2ce7ccd2cf8fb827f55af5a1bc651e79eefcc054c730d626b5e88c59601008dc253c386ed04bee8fb71bc9f25fa74c8fd71c0e7752facb215cbc25844e48e2bf5ee3d5f665bcc95c4bedba3f38b8c80fdb5bb010bdc937f30d73c6b029499a8a0447997b158f74fba15363138b9c391576a64cf10586124ee49664ad0542781da0e8ebb295a85eaa13dc36da515a6512c0a0ce4d5b3dbbdc1443f7cb36e784ec1803012f86f7206b546ee3c0d93b16be2a32923d5f0c6eecb81f1c54836d6fd02f414f9885c5bfaeea21ddd51ac66b4a124d87f9e66b52a1c8c5304d53cea71648d0e3da8e5ed55eb26269b6dc8aeadbe8f08c13e08a6e2be53ed9ef0edae65623e8296e12d1d69ac680cdfd776e795f2777f85205d4aebb016c1ed253f2f11a2aa83679f11175989d0b6d154b22f83e7ba87113f2a4dc654507f1049622ad010a2ea174440b785c255ac351054fc32a49c0ee0f74f7fca55bea323faf63986332bee09bf00c40dce390dfc8ab513f8c8e59c3136c554cf6f0a967c21a98dc509b4d1c1cc2f33c276c739c8a556ec84daa96d218fbdda0b8f96583035f8d897a33933b11ca36ae1a9f88eea9b228062bf82bcfd7dbd88e29bae2e245dc974e8a370202d5730301c86836187114360b130b1dc41f4bd98ba4c80fabb386873071fae56ac50e73df0180e89881cc3898cc70541117a5528e0282f91aa05823ac14933376de6bf89ba68493bb906667e3fd6f85b0adfd28056893b3d2f74cac7c6316c7ece5082ed519fa2073f8eb069f4528dff51a1d24a6dba4a0d841944ae4d7f71224b67a8780a3c01a21da7af494c5a4e3791f6526d2b838c0bf1a32172df0111693be9f2c1ff2ff518cefa5cedc8660f312a7ccc632f5c46fe93fd8b32d64c8c7c7945e5be50312ba9bc66a6628b36ca9c56f178e1598e391f7ebd3372e26307f8d37d5c439eca5b4a4bcbb279c65d6e4a3f8db0229bb8e653918f24cb30b7391a7e4674fd32f7d1ef56ee116adc43084f3085b8652e65fcde41db48c53abfcf7d059c8a9849f81ffe9fc0eeb99f112c933c602ca4ff44577b4ce695025b1d07283970fc6be", 0x1000}, {&(0x7f00000035c0)="b9f4db6ee2d6462670d5eadae554c6a0e73ffed638133fbf1e3673bcd6f08a7089ecbdb7f68fb19ec0d3515bcf9ddf2b6dc6c6931de7160cb98379f382583d0d56b4cc7e25cdc883260541e9b365e2990930b5604bb7adce528cf03cc0983906be3788ab76", 0x65}, {&(0x7f0000003640)="6899924de7215e1d23df", 0xa}, {&(0x7f0000003680)="072f966c04b9425fd00132853461d0f2a90d39daba393ac12b0b03be32e8176832e20e1e097b90eb3af3a6e3fd3b966177e71f8e022fd26995d7d8f3541f548bcf23b68094051cde0d4b6d2de46932d8426436a4133ab345c4d9e4e10f06be6648124da1b6fb97adbe59fc58398c7cd9fe42ce0fcb3768627e040402498a9766cd844ddbfefdb0e5ee7d342166f76f7c1ddd9f4a5e6f9def78c553ab968b2af91ad949fbe4d9eca24e8adf12fb7509e9433103de690ffe609fff35230f73ee29f1751b63cf47315d508677ac3afe5f608e3b27245ed607f6055158aeafd87992b9003e6291fedd90", 0xe8}], 0x7, &(0x7f00000037c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xf2bc}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffff3ad6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xfffffff9}}, @ip_tos_u8={{0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xf7}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x5}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003880)="c468e763c79823fcdaebc3365e4c5b3712a37d34ad05989697a1092ccb036f20b6587f75ab4b762e72d2f2d7bdb8441130915051e72b70baa30a7dd006e59071540732a9c1be7127fc3cb12846b700", 0x4f}, {&(0x7f0000003900)="53b64c13b2aa7aefaf8484b1ad43cd6d97bac28cad38ee299fcd51566b2bd2011b6ffdc688c9b4e53a015ca613949de19ee93231fb0ddf3bbaa8e265999625a2c83a46168a23113000bfbf332494ea676b0b4d8a1dbb50d9df71144d6be33157d8e1dc2846cfac9d7a5b94ee0b8be62ec4d4f7", 0x73}, {&(0x7f0000003980)="95c02bdb2842cc9705460eaf98dda20269f21e9fa82a7eabb85b11c78e4097a513706de237323ff51fc01b4f5d9399723589db68e91ebff0e5812ab9ea4ac28cbcef7ef613717c167023860a42a82f0c030a822f3b178eba0813d602690fd68a40a4dbe4e7043e304cc25b3ea89463de6155e110e038482f4b2338344f23c2d2328a2a0cd236b7f9062bdf26fee112fcf620f231bc4bd3df34b7e1819bb5468becdf265398bf64f308a75178cac84b1381007740844ded18ea2cfd73a8894362c7f7b44acd940e7512a1e6a132bcc961da638895a7df167e85", 0xd9}, {&(0x7f0000003a80)="a03e850641eed04a1d2fd1140db0bb16a2d9b417d62922db56ed390d31bc36eadd52323013dda058c4a4ed6b2ae563e8e46ba9ebca0adc8fab6f7329e78bbebbe9973d0290a51942fd7f3174b109b3c07766b92a5e13aecf733610d02d185d46bff42cf72d72e756b89d146444308c27c3ce50d11ad8446e67dbd9e3f9b2f59d1a282a0b1de92f33b96477abbd79ed4a1ce9557e74fcd6cc3a28be1cb191ef3a77cf113fea77b20f941086915346d7f94a648b4945c005093a01857c61ed8ea6be21ddede8b957517e1783e582b1ec8e87334cdd2df60cf25707e01b4b881dfcc440", 0xe2}, {&(0x7f0000003b80)="a93b7de59f1943e66d44c7bb2f5d05637c444ba760a4e4c59d8b8ccf4c", 0x1d}, {0x0}], 0x6, &(0x7f0000003cc0)=[@ip_retopts={{0x48, 0x0, 0x7, {[@end, @generic={0x88, 0x3, "06"}, @rr={0x7, 0x2b, 0xff, [@private=0xa010101, @rand_addr=0x64010100, @remote, @multicast1, @multicast2, @multicast1, @multicast1, @loopback, @broadcast, @multicast1]}, @timestamp={0x44, 0xc, 0x4f, 0x0, 0x9, [0xaadf, 0x9]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@noop, @generic={0x94, 0xe, "271e5813c785b86d42f9a941"}, @lsrr={0x83, 0x2b, 0x5d, [@multicast2, @multicast1, @loopback, @remote, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @private=0xa010100]}, @end, @lsrr={0x83, 0xb, 0xda, [@dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100]}, @timestamp_addr={0x44, 0x34, 0x24, 0x1, 0xf, [{@private=0xa010101, 0x8}, {@rand_addr=0x64010101, 0x200}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x40}, {@multicast1, 0x783}, {@local, 0x7fffffff}]}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x1, 0xf, "e244deed7d9eb152430e494bf6"}, {0x5, 0xd, "b9b11c983942b8449c9fa5"}, {0x5, 0xe, "539a11a8948512fa79f94bcb"}, {0x6, 0x11, "05e6a3cf3ff3dc328958d4141cb4b2"}, {0x7, 0xe, "6709d0c5d619c8f3d34df019"}]}]}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0xd}}], 0x150}}, {{&(0x7f0000003e40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000003e80), 0x0, &(0x7f0000003ec0)=[@ip_ttl={{0x10}}], 0x10}}], 0x7, 0x40800) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000004000)) r8 = openat$hwrng(0xffffff9c, &(0x7f0000004040), 0x101000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004440)={r0, 0x20, &(0x7f0000004400)={&(0x7f0000004280)=""/163, 0xa3, 0x0, &(0x7f0000004340)=""/166, 0xa6}}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004480)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004580)={0x8, 0x1e, &(0x7f0000004080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x0, 0x4, 0xb, 0x0, 0x8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000004180)='GPL\x00', 0x0, 0xa, &(0x7f00000041c0)=""/10, 0x41100, 0x40, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000004200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000004240)={0x3, 0x9, 0xc5ed, 0x1}, 0x10, r9, r0, 0x4, &(0x7f0000004500)=[r10], &(0x7f0000004540)=[{0x4, 0x3, 0x6, 0xc}, {0x5, 0x1, 0xc, 0xb}, {0x0, 0x5, 0x2}, {0x1, 0x3, 0x1, 0xb}], 0x10, 0x7, @void, @value}, 0x94) 14.311222ms ago: executing program 0 (id=2377): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 3 (id=2378): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000280)={@my=0x1}) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12010000000000406d0486c0000200000001090224000100000004090400000103000000092100000001220300090581030800000000"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x83c0550b, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000040)={0x18, &(0x7f0000000080)={0x20, 0x2a, 0xd4, {0xd4, 0x24, "547d5be627b5f34ec56087ee27d201cb28f98da087a334617c2019f9c2debc36015f89827549ea2d8574a0000000000000008b0f6f9dd2c381783d56422756998669f2cc14ba7d32be43fae34118b36952cc4c8301862fdc57e6c8abb921c82072bc044425bb4f3b728c4620b7ddab5959925b53f93a75b8c8d0c3c7ed62a56928343f359593bf426bf3e5ea05d722b60f7661eddff6bd03178fbb4e986af5d26e732593c1f08b04f99489d87897357e7ae546503c65be1a926b9772c52b0b37c9d1861b8d6355f198c6d9b2a8df02cdbaf6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): register 2 [ 614.583175][ T978] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 614.590073][ T978] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 614.597230][ T978] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 614.604571][ T978] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 614.643071][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 614.764126][T13120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2057'. [ 614.781297][ T24] usb 2-1: USB disconnect, device number 87 [ 614.884011][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 614.884560][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 614.891011][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 615.492944][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 615.667811][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.719161][ T24] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 615.785664][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.892941][ T978] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 615.934201][ T24] usb 2-1: config 0 descriptor?? [ 616.052550][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 616.060310][ T978] usb 1-1: config 8 has an invalid interface number: 198 but max is 0 [ 616.071841][ T978] usb 1-1: config 8 has an invalid interface number: 5 but max is 0 [ 616.081816][ T978] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 616.103263][ T978] usb 1-1: config 8 has no interface number 0 [ 616.109372][ T978] usb 1-1: config 8 has no interface number 1 [ 616.122727][ T978] usb 1-1: config 8 interface 198 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.137205][ T978] usb 1-1: config 8 interface 5 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 616.153957][ T978] usb 1-1: config 8 interface 198 has no altsetting 0 [ 616.175067][ T978] usb 1-1: config 8 interface 5 has no altsetting 0 [ 616.222715][ T978] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6c.67 [ 616.232026][T13145] wireguard0: entered promiscuous mode [ 616.237906][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.246787][T13145] wireguard0: entered allmulticast mode [ 616.256631][ T978] usb 1-1: Product: syz [ 616.263292][ T978] usb 1-1: Manufacturer: syz [ 616.272810][ T978] usb 1-1: SerialNumber: syz [ 616.436286][ T24] ortek 0003:05A4:8003.0014: unknown main item tag 0x0 [ 616.487630][ T24] ortek 0003:05A4:8003.0014: unknown main item tag 0x0 [ 616.533712][ T978] ums-onetouch 1-1:8.198: USB Mass Storage device detected [ 616.592902][ T24] ortek 0003:05A4:8003.0014: unknown main item tag 0x0 [ 616.599849][ T24] ortek 0003:05A4:8003.0014: unknown main item tag 0x0 [ 616.634879][T13135] kernel read not supported for file / œ7³Ïüâ`)ës{T‡rÒ)r§ÖOš˜ô2:"ôÀT+ÍŸvpÕ²DvcŽ“ØÅ6Òxãc‘ç‡@QXù: (pid: 13135 comm: syz.1.2059) [ 616.684406][ T24] ortek 0003:05A4:8003.0014: unknown main item tag 0x0 [ 616.792578][ T30] audit: type=1800 audit(1747446359.831:998): pid=13135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2059" name=20019C1437B3CFFCC3A26029EB737B548772D22972A7D6084F9A98F4323A22F412C0542BCD9F76708DD5B24476638E93D8C536D278E36391E787405158F91B3A dev="mqueue" ino=46800 res=0 errno=0 [ 616.845303][ T24] ortek 0003:05A4:8003.0014: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.1-1/input0 [ 616.924927][ T978] ums-onetouch 1-1:8.5: USB Mass Storage device detected [ 617.184024][ T978] usb 1-1: USB disconnect, device number 99 [ 618.370533][ T24] usb 2-1: USB disconnect, device number 88 [ 618.419141][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 618.562935][T13169] FAULT_INJECTION: forcing a failure. [ 618.562935][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 618.618265][T13169] CPU: 1 UID: 0 PID: 13169 Comm: syz.0.2068 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 618.618297][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.618311][T13169] Call Trace: [ 618.618320][T13169] [ 618.618330][T13169] dump_stack_lvl+0x189/0x250 [ 618.618370][T13169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.618400][T13169] ? __pfx__printk+0x10/0x10 [ 618.618418][T13169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 618.618448][T13169] ? sctp_get_port_local+0xe4c/0x1610 [ 618.618476][T13169] should_fail_ex+0x414/0x560 [ 618.618505][T13169] should_failslab+0xa8/0x100 [ 618.618537][T13169] __kmalloc_cache_noprof+0x70/0x3d0 [ 618.618566][T13169] ? sctp_add_bind_addr+0x8c/0x370 [ 618.618600][T13169] sctp_add_bind_addr+0x8c/0x370 [ 618.618629][T13169] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 618.618656][T13169] sctp_do_bind+0x5ab/0x940 [ 618.618692][T13169] sctp_connect_new_asoc+0x25c/0x690 [ 618.618718][T13169] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 618.618744][T13169] ? __ipv6_addr_type+0x14d/0x2f0 [ 618.618785][T13169] ? sctp_inet6_send_verify+0x6e/0x300 [ 618.618813][T13169] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 618.618838][T13169] __sctp_connect+0x5ba/0xd50 [ 618.618874][T13169] ? __pfx___sctp_connect+0x10/0x10 [ 618.618900][T13169] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 618.618927][T13169] ? security_sctp_bind_connect+0x7e/0x2e0 [ 618.618964][T13169] sctp_getsockopt_connectx3+0x2c4/0x440 [ 618.618999][T13169] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 618.619031][T13169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 618.619067][T13169] sctp_getsockopt+0x98a/0xb60 [ 618.619092][T13169] do_sock_getsockopt+0x35d/0x650 [ 618.619125][T13169] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 618.619156][T13169] ? __fget_files+0x2a/0x420 [ 618.619183][T13169] ? __fget_files+0x3a0/0x420 [ 618.619210][T13169] ? __fget_files+0x2a/0x420 [ 618.619247][T13169] __ia32_sys_getsockopt+0x1a5/0x250 [ 618.619288][T13169] __do_fast_syscall_32+0xb4/0x110 [ 618.619320][T13169] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.619352][T13169] do_fast_syscall_32+0x34/0x80 [ 618.619382][T13169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.619408][T13169] RIP: 0023:0xf7f67539 [ 618.619426][T13169] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 618.619445][T13169] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 618.619469][T13169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 618.619484][T13169] RDX: 000000000000006f RSI: 0000000080000180 RDI: 00000000800002c0 [ 618.619498][T13169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.619511][T13169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.619524][T13169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.619555][T13169] [ 619.095849][T13173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.126533][T13173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.135975][T13173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.147031][T13173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.156397][T13173] geneve3: entered promiscuous mode [ 619.161791][T13173] geneve3: entered allmulticast mode [ 619.195751][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 619.312567][T13177] FAULT_INJECTION: forcing a failure. [ 619.312567][T13177] name failslab, interval 1, probability 0, space 0, times 0 [ 619.395006][T13177] CPU: 0 UID: 0 PID: 13177 Comm: syz.0.2073 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 619.395038][T13177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.395052][T13177] Call Trace: [ 619.395061][T13177] [ 619.395071][T13177] dump_stack_lvl+0x189/0x250 [ 619.395110][T13177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.395142][T13177] ? __pfx__printk+0x10/0x10 [ 619.395170][T13177] ? __pfx___might_resched+0x10/0x10 [ 619.395196][T13177] should_fail_ex+0x414/0x560 [ 619.395223][T13177] ? xfrm_user_rcv_msg_compat+0x478/0x1460 [ 619.395251][T13177] should_failslab+0xa8/0x100 [ 619.395282][T13177] __kvmalloc_node_noprof+0x168/0x5e0 [ 619.395312][T13177] ? xfrm_user_rcv_msg_compat+0x478/0x1460 [ 619.395348][T13177] xfrm_user_rcv_msg_compat+0x478/0x1460 [ 619.395392][T13177] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 619.395470][T13177] ? xfrm_get_translator+0x1b/0x240 [ 619.395495][T13177] ? xfrm_get_translator+0x1b/0x240 [ 619.395524][T13177] xfrm_user_rcv_msg+0x285/0xab0 [ 619.395556][T13177] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 619.395623][T13177] ? __mutex_trylock_common+0x153/0x260 [ 619.395650][T13177] ? __pfx___mutex_trylock_common+0x10/0x10 [ 619.395671][T13177] ? __lock_acquire+0xaac/0xd20 [ 619.395712][T13177] netlink_rcv_skb+0x21c/0x490 [ 619.395740][T13177] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 619.395766][T13177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.395816][T13177] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.395841][T13177] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.395868][T13177] xfrm_netlink_rcv+0x79/0x90 [ 619.395893][T13177] netlink_unicast+0x758/0x8d0 [ 619.395928][T13177] netlink_sendmsg+0x805/0xb30 [ 619.395965][T13177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.395994][T13177] ? __import_iovec+0x5d4/0x7f0 [ 619.396022][T13177] ? aa_sock_msg_perm+0x94/0x160 [ 619.396049][T13177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.396074][T13177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.396101][T13177] __sock_sendmsg+0x219/0x270 [ 619.396128][T13177] ____sys_sendmsg+0x505/0x830 [ 619.396164][T13177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.396212][T13177] ___sys_sendmsg+0x21f/0x2a0 [ 619.396245][T13177] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.396315][T13177] ? __fget_files+0x2a/0x420 [ 619.396342][T13177] ? __fget_files+0x3a0/0x420 [ 619.396383][T13177] __sys_sendmsg+0x164/0x220 [ 619.396415][T13177] ? __pfx___sys_sendmsg+0x10/0x10 [ 619.396471][T13177] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 619.396502][T13177] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.396533][T13177] __do_fast_syscall_32+0xb4/0x110 [ 619.396564][T13177] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.396595][T13177] do_fast_syscall_32+0x34/0x80 [ 619.396625][T13177] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 619.396651][T13177] RIP: 0023:0xf7f67539 [ 619.396670][T13177] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 619.396689][T13177] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 619.396711][T13177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 619.396726][T13177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.396738][T13177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 619.396751][T13177] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 619.396764][T13177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 619.396794][T13177] [ 619.742684][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.913894][T13184] syzkaller1: entered promiscuous mode [ 619.919436][T13184] syzkaller1: entered allmulticast mode [ 620.082690][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 620.097138][T13184] kvm: user requested TSC rate below hardware speed [ 620.115722][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2078'. [ 620.150699][T13193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.352965][T13193] bridge0: port 1(bond4) entered blocking state [ 620.387422][T13193] bridge0: port 1(bond4) entered disabled state [ 620.428294][T13193] bond4: entered allmulticast mode [ 620.445470][T13193] bond4: entered promiscuous mode [ 620.637709][T13208] FAULT_INJECTION: forcing a failure. [ 620.637709][T13208] name failslab, interval 1, probability 0, space 0, times 0 [ 620.650669][T13208] CPU: 1 UID: 0 PID: 13208 Comm: syz.4.2081 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 620.650700][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 620.650714][T13208] Call Trace: [ 620.650724][T13208] [ 620.650735][T13208] dump_stack_lvl+0x189/0x250 [ 620.650776][T13208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.650808][T13208] ? __pfx__printk+0x10/0x10 [ 620.650836][T13208] ? __pfx___might_resched+0x10/0x10 [ 620.650858][T13208] ? fs_reclaim_acquire+0x7d/0x100 [ 620.650897][T13208] should_fail_ex+0x414/0x560 [ 620.650926][T13208] should_failslab+0xa8/0x100 [ 620.650958][T13208] __kmalloc_noprof+0xcb/0x4f0 [ 620.650984][T13208] ? kfree+0x4d/0x440 [ 620.651007][T13208] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 620.651042][T13208] tomoyo_realpath_from_path+0xe3/0x5d0 [ 620.651073][T13208] ? tomoyo_domain+0xda/0x130 [ 620.651109][T13208] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 620.651132][T13208] tomoyo_path_number_perm+0x1e8/0x5a0 [ 620.651157][T13208] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.651227][T13208] ? __fget_files+0x2a/0x420 [ 620.651261][T13208] ? __fget_files+0x3a0/0x420 [ 620.651289][T13208] ? __fget_files+0x2a/0x420 [ 620.651323][T13208] security_file_ioctl_compat+0xcb/0x2d0 [ 620.651355][T13208] __ia32_compat_sys_ioctl+0x128/0x840 [ 620.651385][T13208] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 620.651410][T13208] ? __fget_files+0x3a0/0x420 [ 620.651447][T13208] ? fput+0xa0/0xd0 [ 620.651480][T13208] ? ksys_write+0x1f0/0x250 [ 620.651514][T13208] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 620.651544][T13208] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.651574][T13208] __do_fast_syscall_32+0xb4/0x110 [ 620.651607][T13208] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.651638][T13208] do_fast_syscall_32+0x34/0x80 [ 620.651668][T13208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.651694][T13208] RIP: 0023:0xf70be539 [ 620.651712][T13208] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.651730][T13208] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 620.651752][T13208] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 620.651767][T13208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.651779][T13208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.651792][T13208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.651805][T13208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.651836][T13208] [ 620.651846][T13208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.631559][T13239] FAULT_INJECTION: forcing a failure. [ 621.631559][T13239] name failslab, interval 1, probability 0, space 0, times 0 [ 621.674735][T13239] CPU: 0 UID: 0 PID: 13239 Comm: syz.0.2088 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 621.674771][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 621.674786][T13239] Call Trace: [ 621.674795][T13239] [ 621.674805][T13239] dump_stack_lvl+0x189/0x250 [ 621.674845][T13239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.674869][T13239] ? __pfx__printk+0x10/0x10 [ 621.674886][T13239] ? __pfx___might_resched+0x10/0x10 [ 621.674902][T13239] ? fs_reclaim_acquire+0x7d/0x100 [ 621.674930][T13239] should_fail_ex+0x414/0x560 [ 621.674951][T13239] should_failslab+0xa8/0x100 [ 621.674973][T13239] __kmalloc_noprof+0xcb/0x4f0 [ 621.674993][T13239] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 621.675022][T13239] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 621.675052][T13239] genl_family_rcv_msg_doit+0xb8/0x300 [ 621.675080][T13239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 621.675106][T13239] ? rcu_is_watching+0x15/0xb0 [ 621.675123][T13239] ? apparmor_capable+0x137/0x1b0 [ 621.675152][T13239] ? bpf_lsm_capable+0x9/0x20 [ 621.675182][T13239] ? security_capable+0x7e/0x2e0 [ 621.675214][T13239] genl_rcv_msg+0x60e/0x790 [ 621.675257][T13239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.675297][T13239] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 621.675324][T13239] ? __pfx_nl80211_set_key+0x10/0x10 [ 621.675347][T13239] ? __pfx_nl80211_post_doit+0x10/0x10 [ 621.675388][T13239] netlink_rcv_skb+0x21c/0x490 [ 621.675407][T13239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.675430][T13239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.675465][T13239] ? down_read+0x1ad/0x2e0 [ 621.675488][T13239] genl_rcv+0x28/0x40 [ 621.675507][T13239] netlink_unicast+0x758/0x8d0 [ 621.675531][T13239] netlink_sendmsg+0x805/0xb30 [ 621.675561][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.675581][T13239] ? __import_iovec+0x5d4/0x7f0 [ 621.675601][T13239] ? aa_sock_msg_perm+0x94/0x160 [ 621.675620][T13239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.675638][T13239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.675657][T13239] __sock_sendmsg+0x219/0x270 [ 621.675676][T13239] ____sys_sendmsg+0x505/0x830 [ 621.675700][T13239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.675733][T13239] ___sys_sendmsg+0x21f/0x2a0 [ 621.675755][T13239] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.675802][T13239] ? __fget_files+0x2a/0x420 [ 621.675821][T13239] ? __fget_files+0x3a0/0x420 [ 621.675848][T13239] __sys_sendmsg+0x164/0x220 [ 621.675870][T13239] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.675901][T13239] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 621.675921][T13239] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.675941][T13239] __do_fast_syscall_32+0xb4/0x110 [ 621.675962][T13239] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.675983][T13239] do_fast_syscall_32+0x34/0x80 [ 621.676003][T13239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.676021][T13239] RIP: 0023:0xf7f67539 [ 621.676034][T13239] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 621.676048][T13239] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 621.676063][T13239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 621.676074][T13239] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.676082][T13239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.676091][T13239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 621.676100][T13239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.676120][T13239] [ 621.832979][ T5822] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 621.833387][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.042261][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.048293][ C0] hrtimer: interrupt took 365930812 ns [ 622.148332][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.450516][ T5888] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 622.585598][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 622.604036][ T5822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 622.640705][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 622.665465][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 622.675365][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 622.701112][ T5822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.741670][ T5822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.752534][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.842942][ T978] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 622.852539][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 622.860526][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.922123][ T5888] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.962543][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 622.981972][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.996342][ T5822] usb 5-1: GET_CAPABILITIES returned 0 [ 623.001898][ T5822] usbtmc 5-1:16.0: can't read capabilities [ 623.003523][ T5888] usb 4-1: config 0 descriptor?? [ 623.053039][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 623.065953][ T978] usb 3-1: config 0 has an invalid interface number: 182 but max is 1 [ 623.075339][ T978] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 623.075489][ T9] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 623.093016][ T978] usb 3-1: config 0 has no interface number 0 [ 623.099147][ T978] usb 3-1: config 0 has no interface number 1 [ 623.105774][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 623.116861][ T978] usb 3-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30 [ 623.129694][ T9] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 623.140984][ T978] usb 3-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 623.154737][ T9] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 623.168004][ T978] usb 3-1: config 0 interface 9 has no altsetting 0 [ 623.175135][ T978] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 623.184442][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 623.191184][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.203872][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 623.214745][ T9] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 623.224337][ T978] usb 3-1: config 0 descriptor?? [ 623.244673][ T9] usb 1-1: Product: syz [ 623.248908][ T9] usb 1-1: Manufacturer: syz [ 623.249479][T13231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.253877][ T9] usb 1-1: SerialNumber: syz [ 623.266551][T13231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.271636][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.284476][ T24] usb 4-1: USB disconnect, device number 86 [ 623.287614][ T978] snd-usb-audio 3-1:0.182: probe with driver snd-usb-audio failed with error -2 [ 623.315678][ T9] usb 1-1: config 0 descriptor?? [ 623.326084][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 623.340994][ T9] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 623.362878][ T5822] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 623.487728][ T978] usb 3-1: string descriptor 0 read error: -71 [ 623.503995][ T978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.522919][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 623.538464][ T5822] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 623.550506][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.552245][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.562565][ T5822] usb 2-1: config 0 has no interface number 0 [ 623.584036][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.596668][ T5822] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 623.612196][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.623338][ T5822] usb 2-1: Product: syz [ 623.623899][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.627792][ T5822] usb 2-1: Manufacturer: syz [ 623.643515][ T5822] usb 2-1: SerialNumber: syz [ 623.651454][ T5822] usb 2-1: config 0 descriptor?? [ 623.657045][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.695758][ T24] usb 1-1: USB disconnect, device number 100 [ 623.728588][ T24] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 623.746784][ T978] snd-usb-audio 3-1:0.9: probe with driver snd-usb-audio failed with error -2 [ 623.769210][ T978] usb 3-1: USB disconnect, device number 97 [ 623.800601][T11129] usb 5-1: USB disconnect, device number 91 [ 623.893179][ T5822] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 623.903687][ T5822] usb 2-1: No valid video chain found. [ 623.967582][T13253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.980002][T13253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.991404][T13253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.000444][T13253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.009581][T13253] geneve3: entered promiscuous mode [ 624.015057][T13253] geneve3: entered allmulticast mode [ 624.166665][ T9] usb 2-1: USB disconnect, device number 89 [ 624.328461][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.335105][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.739835][T13275] bond4: left allmulticast mode [ 624.912822][T13275] bond4: left promiscuous mode [ 625.175524][T13275] bridge0: port 1(bond4) entered disabled state [ 625.714982][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 625.782491][T11129] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 625.972625][T11129] usb 2-1: Using ep0 maxpacket: 8 [ 625.981255][T11129] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 625.998445][T11129] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 626.018019][T11129] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 626.046027][T11129] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.059312][T11129] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 626.062693][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 626.068449][T11129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.302929][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 626.310745][T11129] usb 2-1: GET_CAPABILITIES returned 0 [ 626.314635][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 626.319964][T11129] usbtmc 2-1:16.0: can't read capabilities [ 626.330985][ T9] usb 5-1: config 0 has no interface number 0 [ 626.348009][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 626.360935][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 626.382776][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.391587][ T9] usb 5-1: Product: syz [ 626.398159][ T9] usb 5-1: Manufacturer: syz [ 626.403201][ T9] usb 5-1: SerialNumber: syz [ 626.416359][ T9] usb 5-1: config 0 descriptor?? [ 626.429715][ T9] smsc75xx v1.0.0 [ 626.580412][ T24] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 626.741914][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.759876][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 626.790396][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.812440][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.826072][T13299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 626.983353][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.049504][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 627.099230][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 627.217011][ T978] usb 2-1: USB disconnect, device number 90 [ 627.604424][T13320] binfmt_misc: register: failed to install interpreter file ./file0 [ 627.882674][ T5888] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 628.032548][ T5888] usb 4-1: device descriptor read/64, error -71 [ 628.282530][ T5888] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 628.435176][ T5888] usb 4-1: device descriptor read/64, error -71 [ 628.553170][ T5888] usb usb4-port1: attempt power cycle [ 628.804567][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 628.846132][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 628.860180][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 628.871129][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 628.882427][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 628.918020][ T9] usb 5-1: USB disconnect, device number 92 [ 629.028942][T13336] FAULT_INJECTION: forcing a failure. [ 629.028942][T13336] name failslab, interval 1, probability 0, space 0, times 0 [ 629.042075][ T5888] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 629.068517][T13336] CPU: 0 UID: 0 PID: 13336 Comm: syz.0.2120 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 629.068550][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.068565][T13336] Call Trace: [ 629.068575][T13336] [ 629.068585][T13336] dump_stack_lvl+0x189/0x250 [ 629.068628][T13336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.068661][T13336] ? __pfx__printk+0x10/0x10 [ 629.068687][T13336] ? __pfx___might_resched+0x10/0x10 [ 629.068709][T13336] ? fs_reclaim_acquire+0x7d/0x100 [ 629.068748][T13336] should_fail_ex+0x414/0x560 [ 629.068778][T13336] should_failslab+0xa8/0x100 [ 629.068808][T13336] __kmalloc_noprof+0xcb/0x4f0 [ 629.068836][T13336] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 629.068885][T13336] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 629.068930][T13336] genl_family_rcv_msg_doit+0xb8/0x300 [ 629.068972][T13336] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.069009][T13336] ? rcu_is_watching+0x15/0xb0 [ 629.069033][T13336] ? apparmor_capable+0x137/0x1b0 [ 629.069067][T13336] ? bpf_lsm_capable+0x9/0x20 [ 629.069099][T13336] ? security_capable+0x7e/0x2e0 [ 629.069132][T13336] genl_rcv_msg+0x60e/0x790 [ 629.069173][T13336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.069204][T13336] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 629.069240][T13336] ? __pfx_nl80211_new_key+0x10/0x10 [ 629.069284][T13336] ? __pfx_nl80211_post_doit+0x10/0x10 [ 629.069326][T13336] netlink_rcv_skb+0x21c/0x490 [ 629.069354][T13336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.069389][T13336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.069441][T13336] ? down_read+0x1ad/0x2e0 [ 629.069476][T13336] genl_rcv+0x28/0x40 [ 629.069507][T13336] netlink_unicast+0x758/0x8d0 [ 629.069542][T13336] netlink_sendmsg+0x805/0xb30 [ 629.069578][T13336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.069607][T13336] ? __import_iovec+0x5d4/0x7f0 [ 629.069636][T13336] ? aa_sock_msg_perm+0x94/0x160 [ 629.069663][T13336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.069687][T13336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.069714][T13336] __sock_sendmsg+0x219/0x270 [ 629.069740][T13336] ____sys_sendmsg+0x505/0x830 [ 629.069778][T13336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.069826][T13336] ___sys_sendmsg+0x21f/0x2a0 [ 629.069860][T13336] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.069940][T13336] ? __fget_files+0x2a/0x420 [ 629.069970][T13336] ? __fget_files+0x3a0/0x420 [ 629.070012][T13336] __sys_sendmsg+0x164/0x220 [ 629.070045][T13336] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.070092][T13336] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 629.070124][T13336] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.070155][T13336] __do_fast_syscall_32+0xb4/0x110 [ 629.070188][T13336] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.070220][T13336] do_fast_syscall_32+0x34/0x80 [ 629.070251][T13336] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 629.070290][T13336] RIP: 0023:0xf7f67539 [ 629.070308][T13336] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 629.070327][T13336] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 629.070351][T13336] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 629.070366][T13336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 629.070379][T13336] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.070391][T13336] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 629.070404][T13336] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.070435][T13336] [ 629.080621][T13338] binder: BINDER_SET_CONTEXT_MGR already set [ 629.103329][ T5888] usb 4-1: device descriptor read/8, error -71 [ 629.273694][T13338] binder: 13337:13338 ioctl 4018620d 800000c0 returned -16 [ 629.443537][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.454526][ T978] usb 3-1: USB disconnect, device number 98 [ 629.688807][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 629.711482][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 629.737223][T13353] fuse: Unknown parameter 'FG' [ 629.785199][ T5888] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 629.826067][ T5888] usb 4-1: device descriptor read/8, error -71 [ 629.832432][ T30] audit: type=1326 audit(1747446372.951:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.0.2127" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 629.853942][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.941987][T13360] netlink: 'syz.2.2128': attribute type 6 has an invalid length. [ 629.949977][T13360] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.006600][ T5888] usb usb4-port1: unable to enumerate USB device [ 630.366827][T13368] FAULT_INJECTION: forcing a failure. [ 630.366827][T13368] name failslab, interval 1, probability 0, space 0, times 0 [ 630.380073][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.1.2131 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 630.380104][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.380119][T13368] Call Trace: [ 630.380128][T13368] [ 630.380139][T13368] dump_stack_lvl+0x189/0x250 [ 630.380179][T13368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.380211][T13368] ? __pfx__printk+0x10/0x10 [ 630.380236][T13368] ? __pfx___might_resched+0x10/0x10 [ 630.380259][T13368] ? fs_reclaim_acquire+0x7d/0x100 [ 630.380298][T13368] should_fail_ex+0x414/0x560 [ 630.380328][T13368] should_failslab+0xa8/0x100 [ 630.380361][T13368] __kmalloc_noprof+0xcb/0x4f0 [ 630.380389][T13368] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 630.380432][T13368] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 630.380475][T13368] genl_family_rcv_msg_doit+0xb8/0x300 [ 630.380518][T13368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 630.380555][T13368] ? rcu_is_watching+0x15/0xb0 [ 630.380579][T13368] ? apparmor_capable+0x137/0x1b0 [ 630.380613][T13368] ? bpf_lsm_capable+0x9/0x20 [ 630.380644][T13368] ? security_capable+0x7e/0x2e0 [ 630.380678][T13368] genl_rcv_msg+0x60e/0x790 [ 630.380718][T13368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.380749][T13368] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 630.380775][T13368] ? __pfx_nl80211_get_mpp+0x10/0x10 [ 630.380804][T13368] ? __pfx_nl80211_post_doit+0x10/0x10 [ 630.380846][T13368] netlink_rcv_skb+0x21c/0x490 [ 630.380873][T13368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.380912][T13368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.380973][T13368] ? down_read+0x1ad/0x2e0 [ 630.381014][T13368] genl_rcv+0x28/0x40 [ 630.381045][T13368] netlink_unicast+0x758/0x8d0 [ 630.381081][T13368] netlink_sendmsg+0x805/0xb30 [ 630.381119][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.381150][T13368] ? __import_iovec+0x5d4/0x7f0 [ 630.381180][T13368] ? aa_sock_msg_perm+0x94/0x160 [ 630.381207][T13368] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.381234][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.381262][T13368] __sock_sendmsg+0x219/0x270 [ 630.381290][T13368] ____sys_sendmsg+0x505/0x830 [ 630.381328][T13368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.381378][T13368] ___sys_sendmsg+0x21f/0x2a0 [ 630.381413][T13368] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.381483][T13368] ? __fget_files+0x2a/0x420 [ 630.381514][T13368] ? __fget_files+0x3a0/0x420 [ 630.381556][T13368] __sys_sendmsg+0x164/0x220 [ 630.381590][T13368] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.381639][T13368] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 630.381676][T13368] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.381707][T13368] __do_fast_syscall_32+0xb4/0x110 [ 630.381738][T13368] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.381772][T13368] do_fast_syscall_32+0x34/0x80 [ 630.381802][T13368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 630.381830][T13368] RIP: 0023:0xf7f21539 [ 630.381849][T13368] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 630.381869][T13368] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 630.381892][T13368] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 630.381908][T13368] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.381921][T13368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 630.381935][T13368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 630.381948][T13368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 630.381980][T13368] [ 631.218325][T13379] tap0: tun_chr_ioctl cmd 2148553947 [ 631.346936][T13383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.362797][ T9] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 631.502602][ T9] usb 2-1: device descriptor read/64, error -71 [ 631.742780][ T9] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 631.762568][ T5888] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 631.872548][ T9] usb 2-1: device descriptor read/64, error -71 [ 631.942558][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 631.956111][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 631.982595][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.994174][ T9] usb usb2-port1: attempt power cycle [ 632.018561][ T5888] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 632.032612][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.061276][ T5888] usb 4-1: Product: syz [ 632.068221][ T5888] usb 4-1: Manufacturer: syz [ 632.085216][T13400] FAULT_INJECTION: forcing a failure. [ 632.085216][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 632.086022][ T5888] usb 4-1: SerialNumber: syz [ 632.103305][T13400] CPU: 1 UID: 0 PID: 13400 Comm: syz.4.2144 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 632.103336][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.103350][T13400] Call Trace: [ 632.103358][T13400] [ 632.103368][T13400] dump_stack_lvl+0x189/0x250 [ 632.103407][T13400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.103439][T13400] ? __pfx__printk+0x10/0x10 [ 632.103479][T13400] ? __pfx___might_resched+0x10/0x10 [ 632.103499][T13400] ? fs_reclaim_acquire+0x7d/0x100 [ 632.103536][T13400] should_fail_ex+0x414/0x560 [ 632.103563][T13400] should_failslab+0xa8/0x100 [ 632.103593][T13400] __kmalloc_cache_noprof+0x70/0x3d0 [ 632.103621][T13400] ? rtnl_newlink+0xed/0x1c70 [ 632.103650][T13400] rtnl_newlink+0xed/0x1c70 [ 632.103687][T13400] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.103715][T13400] ? __lock_acquire+0xaac/0xd20 [ 632.103755][T13400] ? __lock_acquire+0xaac/0xd20 [ 632.103797][T13400] ? __lock_acquire+0xaac/0xd20 [ 632.103845][T13400] ? is_bpf_text_address+0x26/0x2b0 [ 632.103880][T13400] ? is_bpf_text_address+0x292/0x2b0 [ 632.103915][T13400] ? is_bpf_text_address+0x26/0x2b0 [ 632.103952][T13400] ? aa_get_newest_label+0xf7/0x5d0 [ 632.103980][T13400] ? __lock_acquire+0xaac/0xd20 [ 632.104033][T13400] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.104057][T13400] rtnetlink_rcv_msg+0x7cf/0xb70 [ 632.104080][T13400] ? kasan_save_track+0x4f/0x80 [ 632.104106][T13400] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 632.104130][T13400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.104155][T13400] ? __lock_acquire+0xaac/0xd20 [ 632.104198][T13400] netlink_rcv_skb+0x21c/0x490 [ 632.104225][T13400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.104250][T13400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.104295][T13400] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.104319][T13400] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.104350][T13400] netlink_unicast+0x758/0x8d0 [ 632.104384][T13400] netlink_sendmsg+0x805/0xb30 [ 632.104420][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.104448][T13400] ? __import_iovec+0x5d4/0x7f0 [ 632.104476][T13400] ? aa_sock_msg_perm+0x94/0x160 [ 632.104501][T13400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.104526][T13400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.104552][T13400] __sock_sendmsg+0x219/0x270 [ 632.104578][T13400] ____sys_sendmsg+0x505/0x830 [ 632.104614][T13400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.104660][T13400] ___sys_sendmsg+0x21f/0x2a0 [ 632.104693][T13400] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.104759][T13400] ? __fget_files+0x2a/0x420 [ 632.104786][T13400] ? __fget_files+0x3a0/0x420 [ 632.104825][T13400] __sys_sendmsg+0x164/0x220 [ 632.104856][T13400] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.104924][T13400] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 632.104955][T13400] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.104985][T13400] __do_fast_syscall_32+0xb4/0x110 [ 632.105016][T13400] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.105047][T13400] do_fast_syscall_32+0x34/0x80 [ 632.105077][T13400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 632.105103][T13400] RIP: 0023:0xf70be539 [ 632.105121][T13400] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 632.105139][T13400] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 632.105162][T13400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 632.105177][T13400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 632.105190][T13400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 632.105202][T13400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 632.105215][T13400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 632.105246][T13400] [ 632.253915][ T5888] usb 4-1: config 0 descriptor?? [ 632.356166][T13402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.516553][ T5888] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 632.526753][ T5888] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 632.572655][ T9] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 632.596343][ T9] usb 2-1: device descriptor read/8, error -71 [ 632.718032][T13406] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 632.801653][T13406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 632.850892][T13406] bond2: (slave bond3): making interface the new active one [ 632.859019][ T9] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 632.868774][T13406] bond2: (slave bond3): Enslaving as an active interface with an up link [ 632.895143][ T9] usb 2-1: device descriptor read/8, error -71 [ 633.014192][ T9] usb usb2-port1: unable to enumerate USB device [ 633.129878][ T5888] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 633.144508][ T5888] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 633.184894][T13427] FAULT_INJECTION: forcing a failure. [ 633.184894][T13427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.202974][ T978] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 633.218570][T13427] CPU: 1 UID: 0 PID: 13427 Comm: syz.4.2151 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 633.218601][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.218615][T13427] Call Trace: [ 633.218624][T13427] [ 633.218633][T13427] dump_stack_lvl+0x189/0x250 [ 633.218667][T13427] ? __lock_acquire+0xaac/0xd20 [ 633.218702][T13427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.218733][T13427] ? __pfx__printk+0x10/0x10 [ 633.218754][T13427] ? __might_fault+0xb0/0x130 [ 633.218794][T13427] should_fail_ex+0x414/0x560 [ 633.218822][T13427] _copy_from_user+0x2d/0xb0 [ 633.218863][T13427] get_compat_msghdr+0xad/0x4a0 [ 633.218898][T13427] ? __pfx_get_compat_msghdr+0x10/0x10 [ 633.218928][T13427] ? __lock_acquire+0xaac/0xd20 [ 633.218968][T13427] ___sys_recvmsg+0x17f/0x510 [ 633.219006][T13427] ? __pfx____sys_recvmsg+0x10/0x10 [ 633.219063][T13427] ? __fget_files+0x3a0/0x420 [ 633.219105][T13427] do_recvmmsg+0x36a/0x760 [ 633.219146][T13427] ? __pfx_do_recvmmsg+0x10/0x10 [ 633.219191][T13427] ? __pfx_vfs_write+0x10/0x10 [ 633.219233][T13427] __sys_recvmmsg+0x19d/0x280 [ 633.219267][T13427] ? __pfx___sys_recvmmsg+0x10/0x10 [ 633.219296][T13427] ? ksys_write+0x1f0/0x250 [ 633.219331][T13427] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 633.219365][T13427] __do_fast_syscall_32+0xb4/0x110 [ 633.219396][T13427] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.219428][T13427] do_fast_syscall_32+0x34/0x80 [ 633.219458][T13427] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 633.219485][T13427] RIP: 0023:0xf70be539 [ 633.219503][T13427] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 633.219522][T13427] RSP: 002b:00000000f508d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 633.219545][T13427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 633.219561][T13427] RDX: 000000000291962b RSI: 000000002e4b39ff RDI: 0000000000000000 [ 633.219575][T13427] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.219589][T13427] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.219602][T13427] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.219632][T13427] [ 633.476052][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 633.483578][ T978] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 633.499147][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.518142][ T978] usb 3-1: config 0 descriptor?? [ 633.821522][T13436] FAULT_INJECTION: forcing a failure. [ 633.821522][T13436] name failslab, interval 1, probability 0, space 0, times 0 [ 633.835241][T13436] CPU: 0 UID: 0 PID: 13436 Comm: syz.4.2154 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 633.835269][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.835282][T13436] Call Trace: [ 633.835291][T13436] [ 633.835300][T13436] dump_stack_lvl+0x189/0x250 [ 633.835337][T13436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.835369][T13436] ? __pfx__printk+0x10/0x10 [ 633.835394][T13436] ? __pfx___might_resched+0x10/0x10 [ 633.835413][T13436] ? fs_reclaim_acquire+0x7d/0x100 [ 633.835448][T13436] should_fail_ex+0x414/0x560 [ 633.835479][T13436] should_failslab+0xa8/0x100 [ 633.835508][T13436] kmem_cache_alloc_noprof+0x73/0x3c0 [ 633.835532][T13436] ? skb_clone+0x212/0x3a0 [ 633.835566][T13436] skb_clone+0x212/0x3a0 [ 633.835593][T13436] ? nfnetlink_rcv+0x496/0x2530 [ 633.835625][T13436] nfnetlink_rcv+0x4c4/0x2530 [ 633.835656][T13436] ? kernel_text_address+0xa5/0xe0 [ 633.835684][T13436] ? __kernel_text_address+0xd/0x40 [ 633.835711][T13436] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.835735][T13436] ? arch_stack_walk+0xfc/0x150 [ 633.835772][T13436] ? stack_trace_save+0x9c/0xe0 [ 633.835797][T13436] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 633.835823][T13436] ? stack_depot_save_flags+0x40/0x910 [ 633.835884][T13436] ? __lock_acquire+0xaac/0xd20 [ 633.835922][T13436] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.835953][T13436] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.835977][T13436] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.836006][T13436] netlink_unicast+0x758/0x8d0 [ 633.836037][T13436] netlink_sendmsg+0x805/0xb30 [ 633.836071][T13436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.836097][T13436] ? __import_iovec+0x5d4/0x7f0 [ 633.836124][T13436] ? aa_sock_msg_perm+0x94/0x160 [ 633.836149][T13436] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.836172][T13436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.836198][T13436] __sock_sendmsg+0x219/0x270 [ 633.836222][T13436] ____sys_sendmsg+0x505/0x830 [ 633.836256][T13436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.836300][T13436] ___sys_sendmsg+0x21f/0x2a0 [ 633.836330][T13436] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.836393][T13436] ? __fget_files+0x2a/0x420 [ 633.836419][T13436] ? __fget_files+0x3a0/0x420 [ 633.836456][T13436] __sys_sendmsg+0x164/0x220 [ 633.836495][T13436] ? __pfx___sys_sendmsg+0x10/0x10 [ 633.836537][T13436] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 633.836566][T13436] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.836594][T13436] __do_fast_syscall_32+0xb4/0x110 [ 633.836622][T13436] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.836651][T13436] do_fast_syscall_32+0x34/0x80 [ 633.836679][T13436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 633.836703][T13436] RIP: 0023:0xf70be539 [ 633.836721][T13436] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 633.836738][T13436] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 633.836760][T13436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 633.836791][T13436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.836804][T13436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.836816][T13436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.836829][T13436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 633.836859][T13436] [ 634.166484][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.184255][ T978] acrux 0003:1A34:0802.0015: item fetching failed at offset 0/3 [ 634.192773][ T978] acrux 0003:1A34:0802.0015: parse failed [ 634.198591][ T978] acrux 0003:1A34:0802.0015: probe with driver acrux failed with error -22 [ 634.238407][ T30] audit: type=1326 audit(1747446377.341:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.260832][ T30] audit: type=1326 audit(1747446377.341:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.334595][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2155'. [ 634.344089][T13446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2155'. [ 634.377046][ T30] audit: type=1326 audit(1747446377.501:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.399479][ T30] audit: type=1326 audit(1747446377.501:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.421996][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.428664][ T30] audit: type=1326 audit(1747446377.501:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.451268][ T30] audit: type=1326 audit(1747446377.501:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.473368][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.479638][ T30] audit: type=1326 audit(1747446377.501:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13432 comm="syz.0.2153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 634.570276][T13451] FAULT_INJECTION: forcing a failure. [ 634.570276][T13451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.584159][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.4.2157 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 634.584191][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.584206][T13451] Call Trace: [ 634.584214][T13451] [ 634.584223][T13451] dump_stack_lvl+0x189/0x250 [ 634.584257][T13451] ? __lock_acquire+0xaac/0xd20 [ 634.584291][T13451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.584319][T13451] ? __pfx__printk+0x10/0x10 [ 634.584336][T13451] ? __might_fault+0xb0/0x130 [ 634.584368][T13451] should_fail_ex+0x414/0x560 [ 634.584391][T13451] _copy_from_user+0x2d/0xb0 [ 634.584425][T13451] video_usercopy+0x354/0x14f0 [ 634.584460][T13451] ? __pfx___video_do_ioctl+0x10/0x10 [ 634.584491][T13451] ? __pfx_video_usercopy+0x10/0x10 [ 634.584532][T13451] ? __fget_files+0x2a/0x420 [ 634.584559][T13451] v4l2_ioctl+0x18a/0x1e0 [ 634.584586][T13451] v4l2_compat_ioctl32+0x1d7/0x260 [ 634.584609][T13451] __ia32_compat_sys_ioctl+0x551/0x840 [ 634.584632][T13451] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 634.584652][T13451] ? __fget_files+0x3a0/0x420 [ 634.584681][T13451] ? fput+0xa0/0xd0 [ 634.584708][T13451] ? ksys_write+0x1f0/0x250 [ 634.584734][T13451] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 634.584760][T13451] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.584784][T13451] __do_fast_syscall_32+0xb4/0x110 [ 634.584826][T13451] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.584852][T13451] do_fast_syscall_32+0x34/0x80 [ 634.584877][T13451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.584898][T13451] RIP: 0023:0xf70be539 [ 634.584914][T13451] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 634.584930][T13451] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 634.584950][T13451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05604 [ 634.584963][T13451] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.584974][T13451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 634.584985][T13451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 634.584996][T13451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 634.585020][T13451] [ 634.815876][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.906119][ T5888] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 634.913768][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 634.920733][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 634.927837][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 634.934729][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 634.941605][ T5888] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 635.304264][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2162'. [ 635.862494][ T5888] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 635.966087][ T9] usb 3-1: USB disconnect, device number 99 [ 636.030008][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.041872][ T5888] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 636.051375][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.106843][ T5888] usb 5-1: config 0 descriptor?? [ 636.122527][ T24] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 636.275982][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.321224][ T24] usb 2-1: config 0 has no interface number 0 [ 636.341612][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 636.462609][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.481631][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.546413][ T5888] ortek 0003:05A4:8003.0016: unknown main item tag 0x0 [ 636.563030][ T5888] ortek 0003:05A4:8003.0016: unknown main item tag 0x0 [ 636.580240][ T5888] ortek 0003:05A4:8003.0016: unknown main item tag 0x0 [ 636.597306][ T24] usb 2-1: config 0 descriptor?? [ 636.612241][ T5888] ortek 0003:05A4:8003.0016: unknown main item tag 0x0 [ 636.622843][T13466] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 636.643599][ T5888] ortek 0003:05A4:8003.0016: unknown main item tag 0x0 [ 636.651021][ T24] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 636.672911][ T5888] ortek 0003:05A4:8003.0016: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.4-1/input0 [ 636.694827][ T9] usb 4-1: USB disconnect, device number 91 [ 636.801122][T13470] kernel read not supported for file / œ7³Ïüâ`)ës{T‡rÒ)r§ÖOš˜ô2:"ôÀT+ÍŸvpÕ²DvcŽ“ØÅ6Òxãc‘ç‡@QXù: (pid: 13470 comm: syz.4.2163) [ 636.845545][ T30] audit: type=1800 audit(1747446379.951:1007): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2163" name=20019C1437B3CFFCC3A26029EB737B548772D22972A7D6084F9A98F4323A22F412C0542BCD9F76708DD5B24476638E93D8C536D278E36391E787405158F91B3A dev="mqueue" ino=48557 res=0 errno=0 [ 636.891783][T13466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.910808][T13466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.144277][ T5888] usb 2-1: USB disconnect, device number 95 [ 637.386190][T13489] fuse: Bad value for 'rootmode' [ 637.628862][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.674076][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.748938][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.797152][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.823224][T13499] netlink: 'syz.3.2171': attribute type 11 has an invalid length. [ 637.842986][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 638.242477][T11129] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 638.505114][T11129] usb 1-1: device descriptor read/all, error -61 [ 638.639293][ T5890] usb 5-1: USB disconnect, device number 93 [ 638.702568][T11129] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 638.842663][T11129] usb 1-1: device descriptor read/64, error -71 [ 638.953062][T11129] usb usb1-port1: attempt power cycle [ 639.374090][T11129] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 639.461644][T11129] usb 1-1: device descriptor read/8, error -71 [ 639.742546][T11129] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 639.785799][T11129] usb 1-1: device descriptor read/8, error -71 [ 639.905895][T11129] usb usb1-port1: unable to enumerate USB device [ 639.920802][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 639.954141][T13546] FAULT_INJECTION: forcing a failure. [ 639.954141][T13546] name failslab, interval 1, probability 0, space 0, times 0 [ 640.002522][T13546] CPU: 1 UID: 0 PID: 13546 Comm: syz.1.2184 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 640.002554][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 640.002568][T13546] Call Trace: [ 640.002578][T13546] [ 640.002588][T13546] dump_stack_lvl+0x189/0x250 [ 640.002628][T13546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.002661][T13546] ? __pfx__printk+0x10/0x10 [ 640.002685][T13546] ? __pfx___might_resched+0x10/0x10 [ 640.002707][T13546] ? fs_reclaim_acquire+0x7d/0x100 [ 640.002744][T13546] should_fail_ex+0x414/0x560 [ 640.002774][T13546] should_failslab+0xa8/0x100 [ 640.002805][T13546] __kmalloc_noprof+0xcb/0x4f0 [ 640.002832][T13546] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 640.002872][T13546] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 640.002914][T13546] genl_family_rcv_msg_doit+0xb8/0x300 [ 640.002955][T13546] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 640.002991][T13546] ? rcu_is_watching+0x15/0xb0 [ 640.003014][T13546] ? apparmor_capable+0x137/0x1b0 [ 640.003047][T13546] ? bpf_lsm_capable+0x9/0x20 [ 640.003077][T13546] ? security_capable+0x7e/0x2e0 [ 640.003110][T13546] genl_rcv_msg+0x60e/0x790 [ 640.003149][T13546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.003179][T13546] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 640.003203][T13546] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 640.003235][T13546] ? __pfx_nl80211_post_doit+0x10/0x10 [ 640.003276][T13546] netlink_rcv_skb+0x21c/0x490 [ 640.003303][T13546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.003348][T13546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.003400][T13546] ? down_read+0x1ad/0x2e0 [ 640.003434][T13546] genl_rcv+0x28/0x40 [ 640.003464][T13546] netlink_unicast+0x758/0x8d0 [ 640.003513][T13546] netlink_sendmsg+0x805/0xb30 [ 640.003548][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.003578][T13546] ? __import_iovec+0x5d4/0x7f0 [ 640.003606][T13546] ? aa_sock_msg_perm+0x94/0x160 [ 640.003632][T13546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.003656][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.003683][T13546] __sock_sendmsg+0x219/0x270 [ 640.003709][T13546] ____sys_sendmsg+0x505/0x830 [ 640.003744][T13546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.003791][T13546] ___sys_sendmsg+0x21f/0x2a0 [ 640.003823][T13546] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.003884][T13546] ? __fget_files+0x2a/0x420 [ 640.003907][T13546] ? __fget_files+0x3a0/0x420 [ 640.003939][T13546] __sys_sendmsg+0x164/0x220 [ 640.003966][T13546] ? __pfx___sys_sendmsg+0x10/0x10 [ 640.004002][T13546] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 640.004027][T13546] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.004051][T13546] __do_fast_syscall_32+0xb4/0x110 [ 640.004076][T13546] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.004102][T13546] do_fast_syscall_32+0x34/0x80 [ 640.004127][T13546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 640.004148][T13546] RIP: 0023:0xf7f21539 [ 640.004163][T13546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 640.004179][T13546] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 640.004198][T13546] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 640.004210][T13546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.004221][T13546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 640.004231][T13546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 640.004242][T13546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 640.004266][T13546] [ 640.788698][T13551] warning: `syz.1.2186' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 641.302243][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2192'. [ 641.322932][T11129] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 641.452466][T11129] usb 3-1: device descriptor read/64, error -71 [ 641.702529][T11129] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 641.832680][T11129] usb 3-1: device descriptor read/64, error -71 [ 641.942823][T11129] usb usb3-port1: attempt power cycle [ 642.283316][T11129] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 642.303047][ T24] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 642.312030][T11129] usb 3-1: device descriptor read/8, error -71 [ 642.467767][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 642.477989][ T24] usb 5-1: config 0 has no interface number 0 [ 642.486353][ T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 642.497727][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.514118][ T24] usb 5-1: config 0 descriptor?? [ 642.535966][ T24] usb 5-1: selecting invalid altsetting 1 [ 642.546524][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 642.553615][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 642.563520][T11129] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 642.596293][T11129] usb 3-1: device descriptor read/8, error -71 [ 642.656828][ T24] DVB: Unable to find symbol cx22700_attach() [ 642.705390][ T24] DVB: Unable to find symbol tda10046_attach() [ 642.711770][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 642.724973][T11129] usb usb3-port1: unable to enumerate USB device [ 642.745844][T11129] usb 5-1: USB disconnect, device number 94 [ 642.995526][T13589] FAULT_INJECTION: forcing a failure. [ 642.995526][T13589] name failslab, interval 1, probability 0, space 0, times 0 [ 643.009377][T13589] CPU: 0 UID: 0 PID: 13589 Comm: syz.3.2198 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 643.009415][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 643.009424][T13589] Call Trace: [ 643.009430][T13589] [ 643.009438][T13589] dump_stack_lvl+0x189/0x250 [ 643.009464][T13589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.009484][T13589] ? __pfx__printk+0x10/0x10 [ 643.009501][T13589] ? ref_tracker_alloc+0x318/0x460 [ 643.009519][T13589] should_fail_ex+0x414/0x560 [ 643.009536][T13589] should_failslab+0xa8/0x100 [ 643.009555][T13589] kmem_cache_alloc_noprof+0x73/0x3c0 [ 643.009590][T13589] ? skb_clone+0x212/0x3a0 [ 643.009614][T13589] skb_clone+0x212/0x3a0 [ 643.009637][T13589] __netlink_deliver_tap+0x404/0x850 [ 643.009662][T13589] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.009680][T13589] netlink_deliver_tap+0x19c/0x1b0 [ 643.009697][T13589] netlink_unicast+0x72f/0x8d0 [ 643.009720][T13589] netlink_sendmsg+0x805/0xb30 [ 643.009743][T13589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.009762][T13589] ? __import_iovec+0x5d4/0x7f0 [ 643.009780][T13589] ? aa_sock_msg_perm+0x94/0x160 [ 643.009798][T13589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.009814][T13589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.009832][T13589] __sock_sendmsg+0x219/0x270 [ 643.009849][T13589] ____sys_sendmsg+0x505/0x830 [ 643.009877][T13589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.009907][T13589] ___sys_sendmsg+0x21f/0x2a0 [ 643.009928][T13589] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.009971][T13589] ? __fget_files+0x2a/0x420 [ 643.009989][T13589] ? __fget_files+0x3a0/0x420 [ 643.010014][T13589] __sys_sendmsg+0x164/0x220 [ 643.010034][T13589] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.010063][T13589] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 643.010082][T13589] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.010101][T13589] __do_fast_syscall_32+0xb4/0x110 [ 643.010126][T13589] ? lockdep_hardirqs_on+0x9c/0x150 [ 643.010146][T13589] do_fast_syscall_32+0x34/0x80 [ 643.010165][T13589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.010182][T13589] RIP: 0023:0xf7f26539 [ 643.010194][T13589] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 643.010207][T13589] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 643.010222][T13589] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 643.010231][T13589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.010240][T13589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.010247][T13589] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 643.010256][T13589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.010275][T13589] [ 643.010694][T13589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.095712][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 643.464611][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 643.471640][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.485064][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.495605][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 643.509598][ T24] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 643.519035][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.530729][ T24] usb 2-1: config 0 descriptor?? [ 643.652817][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 643.653612][T13597] netlink: 'syz.4.2201': attribute type 13 has an invalid length. [ 643.670866][T13597] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.680441][T13597] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.690343][T13597] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.699685][T13597] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.816644][ T9] usb 4-1: config 0 has no interfaces? [ 643.836059][ T9] usb 4-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 643.856680][T13601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2201'. [ 643.867528][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 643.890895][ T9] usb 4-1: Manufacturer: syz [ 643.907150][ T9] usb 4-1: config 0 descriptor?? [ 644.009345][ T24] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 644.031103][ T24] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 644.059456][ T24] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 644.092164][ T24] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 644.099600][ T24] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 644.115703][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input28 [ 644.199406][T13587] random: crng reseeded on system resumption [ 644.325861][ T24] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 644.411027][ T24] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 645.559054][ T24] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 645.592653][ T24] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 645.630968][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.672716][ T24] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 645.684435][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.706276][ T24] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 645.723165][T11129] usb 2-1: reset high-speed USB device number 96 using dummy_hcd [ 645.814430][T13610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 645.932459][ T5891] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 645.958147][T13616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.978898][T13616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.092432][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 646.099511][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.112666][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 646.123119][ T5891] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.132106][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 646.152516][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.173449][ T5891] usb 3-1: config 0 descriptor?? [ 646.222685][ T5888] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 646.292668][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 646.303980][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 646.314273][ T9] usb 1-1: config 239 has an invalid interface number: 255 but max is 0 [ 646.328053][ T9] usb 1-1: config 239 has no interface number 0 [ 646.335038][ T9] usb 1-1: config 239 interface 255 altsetting 99 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 646.350503][ T9] usb 1-1: config 239 interface 255 has no altsetting 0 [ 646.356011][ T5891] usb 4-1: USB disconnect, device number 93 [ 646.361560][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=ba.f6 [ 646.395831][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.405621][ T5888] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.421391][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.433135][ T9] usb 1-1: Product: syz [ 646.437349][ T9] usb 1-1: Manufacturer: syz [ 646.448184][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.451977][ T9] usb 1-1: SerialNumber: syz [ 646.461443][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.476913][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.490287][ T5888] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.503626][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.511512][ T5890] usb 2-1: USB disconnect, device number 96 [ 646.513828][ T5888] usb 5-1: Product: syz [ 646.521736][ T5888] usb 5-1: Manufacturer: syz [ 646.522986][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.572227][T13624] FAULT_INJECTION: forcing a failure. [ 646.572227][T13624] name failslab, interval 1, probability 0, space 0, times 0 [ 646.589707][T13624] CPU: 1 UID: 0 PID: 13624 Comm: syz.3.2209 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 646.589738][T13624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 646.589753][T13624] Call Trace: [ 646.589762][T13624] [ 646.589771][T13624] dump_stack_lvl+0x189/0x250 [ 646.589813][T13624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.589845][T13624] ? __pfx__printk+0x10/0x10 [ 646.589884][T13624] ? ref_tracker_alloc+0x318/0x460 [ 646.589913][T13624] should_fail_ex+0x414/0x560 [ 646.589942][T13624] should_failslab+0xa8/0x100 [ 646.589975][T13624] kmem_cache_alloc_noprof+0x73/0x3c0 [ 646.590003][T13624] ? skb_clone+0x212/0x3a0 [ 646.590040][T13624] skb_clone+0x212/0x3a0 [ 646.590077][T13624] __netlink_deliver_tap+0x404/0x850 [ 646.590117][T13624] ? netlink_deliver_tap+0x2e/0x1b0 [ 646.590146][T13624] netlink_deliver_tap+0x19c/0x1b0 [ 646.590174][T13624] netlink_unicast+0x72f/0x8d0 [ 646.590209][T13624] netlink_sendmsg+0x805/0xb30 [ 646.590247][T13624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.590277][T13624] ? __import_iovec+0x5d4/0x7f0 [ 646.590306][T13624] ? aa_sock_msg_perm+0x94/0x160 [ 646.590334][T13624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.590359][T13624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 646.590387][T13624] __sock_sendmsg+0x219/0x270 [ 646.590414][T13624] ____sys_sendmsg+0x505/0x830 [ 646.590451][T13624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.590500][T13624] ___sys_sendmsg+0x21f/0x2a0 [ 646.590534][T13624] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.590604][T13624] ? __fget_files+0x2a/0x420 [ 646.590633][T13624] ? __fget_files+0x3a0/0x420 [ 646.590674][T13624] __sys_sendmsg+0x164/0x220 [ 646.590708][T13624] ? __pfx___sys_sendmsg+0x10/0x10 [ 646.590755][T13624] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 646.590787][T13624] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.590817][T13624] __do_fast_syscall_32+0xb4/0x110 [ 646.590848][T13624] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.590885][T13624] do_fast_syscall_32+0x34/0x80 [ 646.590916][T13624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 646.590943][T13624] RIP: 0023:0xf7f26539 [ 646.590962][T13624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 646.590981][T13624] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 646.591003][T13624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 646.591018][T13624] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.591031][T13624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 646.591043][T13624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 646.591056][T13624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 646.591087][T13624] [ 646.929664][ T5891] usb 3-1: USB disconnect, device number 104 [ 646.947069][ T5888] cdc_wdm 5-1:1.0: skipping garbage [ 646.959126][ T5888] cdc_wdm 5-1:1.0: skipping garbage [ 647.221117][ T9] visor 1-1:239.255: Sony Clie 3.5 converter detected [ 647.250340][ T5888] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 647.266235][ T9] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 647.286036][ T9] visor 1-1:239.255: probe with driver visor failed with error -71 [ 647.299792][ T9] usb 1-1: USB disconnect, device number 105 [ 647.368178][T13633] FAULT_INJECTION: forcing a failure. [ 647.368178][T13633] name failslab, interval 1, probability 0, space 0, times 0 [ 647.383130][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.3.2211 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 647.383162][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.383175][T13633] Call Trace: [ 647.383184][T13633] [ 647.383193][T13633] dump_stack_lvl+0x189/0x250 [ 647.383235][T13633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.383266][T13633] ? __pfx__printk+0x10/0x10 [ 647.383295][T13633] ? ref_tracker_alloc+0x318/0x460 [ 647.383325][T13633] should_fail_ex+0x414/0x560 [ 647.383354][T13633] should_failslab+0xa8/0x100 [ 647.383386][T13633] kmem_cache_alloc_noprof+0x73/0x3c0 [ 647.383426][T13633] ? skb_clone+0x212/0x3a0 [ 647.383463][T13633] skb_clone+0x212/0x3a0 [ 647.383509][T13633] __netlink_deliver_tap+0x404/0x850 [ 647.383556][T13633] ? netlink_deliver_tap+0x2e/0x1b0 [ 647.383580][T13633] netlink_deliver_tap+0x19c/0x1b0 [ 647.383610][T13633] netlink_unicast+0x72f/0x8d0 [ 647.383640][T13633] netlink_sendmsg+0x805/0xb30 [ 647.383671][T13633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.383697][T13633] ? __import_iovec+0x5d4/0x7f0 [ 647.383722][T13633] ? aa_sock_msg_perm+0x94/0x160 [ 647.383745][T13633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.383767][T13633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.383790][T13633] __sock_sendmsg+0x219/0x270 [ 647.383813][T13633] ____sys_sendmsg+0x505/0x830 [ 647.383845][T13633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.383925][T13633] ___sys_sendmsg+0x21f/0x2a0 [ 647.383958][T13633] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.384026][T13633] ? __fget_files+0x2a/0x420 [ 647.384053][T13633] ? __fget_files+0x3a0/0x420 [ 647.384093][T13633] __sys_sendmsg+0x164/0x220 [ 647.384125][T13633] ? __pfx___sys_sendmsg+0x10/0x10 [ 647.384170][T13633] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 647.384200][T13633] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.384229][T13633] __do_fast_syscall_32+0xb4/0x110 [ 647.384258][T13633] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.384289][T13633] do_fast_syscall_32+0x34/0x80 [ 647.384318][T13633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.384343][T13633] RIP: 0023:0xf7f26539 [ 647.384361][T13633] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 647.384380][T13633] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 647.384401][T13633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 647.384416][T13633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.384429][T13633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.384441][T13633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 647.384454][T13633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.384484][T13633] [ 647.384505][T13633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2211'. [ 647.857757][T13635] netlink: 'syz.2.2212': attribute type 13 has an invalid length. [ 648.044552][T13640] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2212'. [ 648.870701][T13654] FAULT_INJECTION: forcing a failure. [ 648.870701][T13654] name failslab, interval 1, probability 0, space 0, times 0 [ 648.890336][T13654] CPU: 1 UID: 0 PID: 13654 Comm: syz.1.2217 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 648.890364][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.890376][T13654] Call Trace: [ 648.890384][T13654] [ 648.890393][T13654] dump_stack_lvl+0x189/0x250 [ 648.890429][T13654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 648.890462][T13654] ? __pfx__printk+0x10/0x10 [ 648.890485][T13654] ? __pfx___might_resched+0x10/0x10 [ 648.890504][T13654] ? fs_reclaim_acquire+0x7d/0x100 [ 648.890537][T13654] should_fail_ex+0x414/0x560 [ 648.890563][T13654] should_failslab+0xa8/0x100 [ 648.890590][T13654] __kmalloc_noprof+0xcb/0x4f0 [ 648.890614][T13654] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 648.890648][T13654] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 648.890684][T13654] genl_family_rcv_msg_doit+0xb8/0x300 [ 648.890720][T13654] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 648.890749][T13654] ? __pfx___mutex_lock+0x10/0x10 [ 648.890775][T13654] ? __pfx_genl_get_cmd+0x10/0x10 [ 648.890800][T13654] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 648.890834][T13654] ? stack_depot_save_flags+0x40/0x910 [ 648.890861][T13654] genl_rcv_msg+0x60e/0x790 [ 648.890894][T13654] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.890921][T13654] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 648.890962][T13654] netlink_rcv_skb+0x21c/0x490 [ 648.890985][T13654] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.891014][T13654] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 648.891058][T13654] ? down_read+0x1ad/0x2e0 [ 648.891088][T13654] genl_rcv+0x28/0x40 [ 648.891113][T13654] netlink_unicast+0x758/0x8d0 [ 648.891143][T13654] netlink_sendmsg+0x805/0xb30 [ 648.891176][T13654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.891201][T13654] ? __import_iovec+0x5d4/0x7f0 [ 648.891226][T13654] ? aa_sock_msg_perm+0x94/0x160 [ 648.891249][T13654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 648.891271][T13654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.891294][T13654] __sock_sendmsg+0x219/0x270 [ 648.891318][T13654] ____sys_sendmsg+0x505/0x830 [ 648.891349][T13654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.891391][T13654] ___sys_sendmsg+0x21f/0x2a0 [ 648.891420][T13654] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.891487][T13654] ? __fget_files+0x2a/0x420 [ 648.891511][T13654] ? __fget_files+0x3a0/0x420 [ 648.891546][T13654] __sys_sendmsg+0x164/0x220 [ 648.891575][T13654] ? __pfx___sys_sendmsg+0x10/0x10 [ 648.891616][T13654] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 648.891642][T13654] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.891668][T13654] __do_fast_syscall_32+0xb4/0x110 [ 648.891695][T13654] ? lockdep_hardirqs_on+0x9c/0x150 [ 648.891723][T13654] do_fast_syscall_32+0x34/0x80 [ 648.891748][T13654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.891789][T13654] RIP: 0023:0xf7f21539 [ 648.891807][T13654] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 648.891826][T13654] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 648.891847][T13654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 648.891861][T13654] RDX: 0000000004008014 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.891873][T13654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.891885][T13654] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.891896][T13654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.891922][T13654] [ 649.300309][ T5891] usb 5-1: USB disconnect, device number 95 [ 649.762696][ T5890] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 649.794322][T11129] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 649.928366][ T5890] usb 2-1: config 11 has no interfaces? [ 649.935254][ T5890] usb 2-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice= 2.3b [ 649.947825][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.965114][T11129] usb 4-1: Using ep0 maxpacket: 16 [ 649.991117][T11129] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 650.012419][T11129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 650.044663][T11129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 650.079275][T11129] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 650.110080][T11129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.130393][T11129] usb 4-1: Product: syz [ 650.146323][T11129] usb 4-1: Manufacturer: syz [ 650.161239][T11129] usb 4-1: SerialNumber: syz [ 650.170698][ T5891] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 650.180954][ T5890] usb 2-1: string descriptor 0 read error: -71 [ 650.216104][T11129] usb 4-1: config 0 descriptor?? [ 650.230568][ T5890] usb 2-1: USB disconnect, device number 97 [ 650.241198][T13689] netlink: 'syz.0.2232': attribute type 13 has an invalid length. [ 650.366603][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 650.403275][ T5891] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 650.428720][T13693] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2232'. [ 650.435083][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 650.462932][T11129] appledisplay: Apple Cinema Display connected [ 650.483205][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.521778][T13682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 650.578365][ T5891] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 650.597161][ T5891] usb 5-1: invalid MIDI in EP 0 [ 650.887493][ T5891] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 650.939515][ T5891] usb 5-1: USB disconnect, device number 96 [ 650.968261][ T5888] usb 4-1: USB disconnect, device number 94 [ 650.968312][ C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 651.042923][ T5888] appledisplay: Apple Cinema Display disconnected [ 651.082867][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 651.242545][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 651.255561][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 651.270951][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 651.281289][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 651.291592][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.304961][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 651.314117][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.530817][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 651.537007][ T9] usbtmc 2-1:16.0: can't read capabilities [ 651.922895][ T5891] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 652.107624][ T5891] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 652.116924][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.130436][ T5891] usb 4-1: config 0 descriptor?? [ 652.278620][T11129] usb 2-1: USB disconnect, device number 98 [ 652.420076][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'. [ 652.733992][T13741] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 652.965165][T13751] FAULT_INJECTION: forcing a failure. [ 652.965165][T13751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.978742][T13751] CPU: 1 UID: 0 PID: 13751 Comm: syz.2.2252 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 652.978776][T13751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.978789][T13751] Call Trace: [ 652.978798][T13751] [ 652.978807][T13751] dump_stack_lvl+0x189/0x250 [ 652.978845][T13751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.978875][T13751] ? __pfx__printk+0x10/0x10 [ 652.978908][T13751] should_fail_ex+0x414/0x560 [ 652.978936][T13751] _copy_to_user+0x31/0xb0 [ 652.978969][T13751] simple_read_from_buffer+0xe1/0x170 [ 652.979001][T13751] proc_fail_nth_read+0x1df/0x250 [ 652.979036][T13751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.979070][T13751] ? rw_verify_area+0x258/0x650 [ 652.979094][T13751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 652.979126][T13751] vfs_read+0x1fd/0x980 [ 652.979156][T13751] ? __pfx___mutex_lock+0x10/0x10 [ 652.979186][T13751] ? __pfx_vfs_read+0x10/0x10 [ 652.979212][T13751] ? __fget_files+0x2a/0x420 [ 652.979246][T13751] ? __fget_files+0x3a0/0x420 [ 652.979266][T13751] ? __fget_files+0x2a/0x420 [ 652.979292][T13751] ksys_read+0x145/0x250 [ 652.979312][T13751] ? __pfx_ksys_read+0x10/0x10 [ 652.979330][T13751] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 652.979352][T13751] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.979373][T13751] __do_fast_syscall_32+0xb4/0x110 [ 652.979400][T13751] do_fast_syscall_32+0x34/0x80 [ 652.979421][T13751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.979440][T13751] RIP: 0023:0xf709e539 [ 652.979461][T13751] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 652.979474][T13751] RSP: 002b:00000000f508e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 652.979490][T13751] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f508e620 [ 652.979501][T13751] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 652.979510][T13751] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 652.979519][T13751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.979527][T13751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.979548][T13751] [ 652.980359][T13753] FAULT_INJECTION: forcing a failure. [ 652.980359][T13753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.996999][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 653.027845][T13753] CPU: 1 UID: 0 PID: 13753 Comm: syz.1.2253 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 653.027883][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.027898][T13753] Call Trace: [ 653.027913][T13753] [ 653.027923][T13753] dump_stack_lvl+0x189/0x250 [ 653.027968][T13753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.028004][T13753] ? __pfx__printk+0x10/0x10 [ 653.028042][T13753] should_fail_ex+0x414/0x560 [ 653.028075][T13753] _copy_to_user+0x31/0xb0 [ 653.028112][T13753] simple_read_from_buffer+0xe1/0x170 [ 653.028158][T13753] proc_fail_nth_read+0x1df/0x250 [ 653.028216][T13753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.028254][T13753] ? rw_verify_area+0x258/0x650 [ 653.028280][T13753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.028317][T13753] vfs_read+0x1fd/0x980 [ 653.028351][T13753] ? __pfx___mutex_lock+0x10/0x10 [ 653.028385][T13753] ? __pfx_vfs_read+0x10/0x10 [ 653.028414][T13753] ? __fget_files+0x2a/0x420 [ 653.028450][T13753] ? __fget_files+0x3a0/0x420 [ 653.028481][T13753] ? __fget_files+0x2a/0x420 [ 653.028523][T13753] ksys_read+0x145/0x250 [ 653.028554][T13753] ? __pfx_ksys_read+0x10/0x10 [ 653.028584][T13753] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 653.028618][T13753] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.028652][T13753] __do_fast_syscall_32+0xb4/0x110 [ 653.028685][T13753] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.028730][T13753] do_fast_syscall_32+0x34/0x80 [ 653.028762][T13753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.028790][T13753] RIP: 0023:0xf7f21539 [ 653.028811][T13753] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 653.028843][T13753] RSP: 002b:00000000f5046590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 653.028866][T13753] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5046620 [ 653.028881][T13753] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 653.028911][T13753] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 653.028925][T13753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.028939][T13753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.028972][T13753] [ 653.682727][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 653.689835][ T9] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.717721][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 653.724635][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 653.733769][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.755154][ T9] usb 1-1: config 0 descriptor?? [ 653.842666][ T978] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 653.855400][ T5891] pegasus 4-1:0.0: probe with driver pegasus failed with error -110 [ 654.006393][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 654.018272][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 654.042235][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.091593][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.144886][ T5891] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 654.152451][ T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.152510][ T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.152563][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.335114][ T5891] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 654.344798][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.356824][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 654.366741][ T5891] usb 2-1: config 1 has no interface number 0 [ 654.375399][ T5891] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 654.387360][ T5891] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 654.391123][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 654.404849][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 654.418700][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.427467][ T978] usb 5-1: GET_CAPABILITIES returned 0 [ 654.430394][ T5891] usb 2-1: Product: syz [ 654.434203][ T978] usbtmc 5-1:16.0: can't read capabilities [ 654.444610][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 654.452933][ T5891] usb 2-1: Manufacturer: syz [ 654.457976][ T5891] usb 2-1: SerialNumber: syz [ 654.475523][ T9] usb 1-1: USB disconnect, device number 106 [ 655.008081][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 655.190041][ T5891] usb 5-1: USB disconnect, device number 97 [ 655.365824][ T9] usb 4-1: USB disconnect, device number 95 [ 655.619817][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 655.932480][ T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 656.072583][ T9] usb 5-1: device descriptor read/64, error -71 [ 656.084177][ T978] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 656.256966][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 656.274100][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 656.295031][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 656.306328][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 656.318723][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.337557][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 656.349464][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 656.354530][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 656.360531][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.482871][ T9] usb 5-1: device descriptor read/64, error -71 [ 656.593019][ T9] usb usb5-port1: attempt power cycle [ 656.609165][ T978] usb 4-1: GET_CAPABILITIES returned 0 [ 656.618568][ T978] usbtmc 4-1:16.0: can't read capabilities [ 656.837482][ T5891] usb 2-1: USB disconnect, device number 99 [ 656.952457][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 656.973838][ T9] usb 5-1: device descriptor read/8, error -71 [ 657.222615][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 657.253145][ T9] usb 5-1: device descriptor read/8, error -71 [ 657.302501][ T5891] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 657.372921][ T9] usb usb5-port1: unable to enumerate USB device [ 657.379431][ T5890] usb 4-1: USB disconnect, device number 96 [ 657.469234][ T5891] usb 2-1: config 0 has no interfaces? [ 657.480354][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 657.489912][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.500537][ T5891] usb 2-1: Product: syz [ 657.504805][ T5891] usb 2-1: Manufacturer: syz [ 657.509504][ T5891] usb 2-1: SerialNumber: syz [ 657.518548][ T5891] usb 2-1: config 0 descriptor?? [ 658.210174][T13900] FAULT_INJECTION: forcing a failure. [ 658.210174][T13900] name failslab, interval 1, probability 0, space 0, times 0 [ 658.232173][T13900] CPU: 1 UID: 0 PID: 13900 Comm: syz.2.2313 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 658.232205][T13900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 658.232219][T13900] Call Trace: [ 658.232228][T13900] [ 658.232237][T13900] dump_stack_lvl+0x189/0x250 [ 658.232279][T13900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.232311][T13900] ? __pfx__printk+0x10/0x10 [ 658.232342][T13900] ? __pfx___might_resched+0x10/0x10 [ 658.232362][T13900] ? fs_reclaim_acquire+0x7d/0x100 [ 658.232401][T13900] should_fail_ex+0x414/0x560 [ 658.232429][T13900] should_failslab+0xa8/0x100 [ 658.232460][T13900] __kmalloc_noprof+0xcb/0x4f0 [ 658.232488][T13900] ? fib6_info_alloc+0x30/0xf0 [ 658.232509][T13900] ? fib6_get_table+0x39/0x270 [ 658.232535][T13900] fib6_info_alloc+0x30/0xf0 [ 658.232559][T13900] ip6_route_info_create+0x4b3/0x1360 [ 658.232602][T13900] ip6_route_add+0x28/0x160 [ 658.232631][T13900] inet6_rtm_newroute+0x222/0x1bf0 [ 658.232666][T13900] ? __lock_acquire+0xaac/0xd20 [ 658.232701][T13900] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 658.232724][T13900] ? __mutex_trylock_common+0x153/0x260 [ 658.232751][T13900] ? __pfx___mutex_trylock_common+0x10/0x10 [ 658.232779][T13900] ? rcu_is_watching+0x15/0xb0 [ 658.232799][T13900] ? trace_contention_end+0x39/0x120 [ 658.232823][T13900] ? __mutex_lock+0x330/0xe80 [ 658.232857][T13900] ? aa_get_newest_label+0xf7/0x5d0 [ 658.232923][T13900] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 658.232945][T13900] rtnetlink_rcv_msg+0x779/0xb70 [ 658.232970][T13900] ? kasan_save_track+0x4f/0x80 [ 658.232998][T13900] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 658.233023][T13900] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 658.233049][T13900] ? __lock_acquire+0xaac/0xd20 [ 658.233094][T13900] netlink_rcv_skb+0x21c/0x490 [ 658.233123][T13900] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 658.233149][T13900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.233198][T13900] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.233225][T13900] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.233257][T13900] netlink_unicast+0x758/0x8d0 [ 658.233294][T13900] netlink_sendmsg+0x805/0xb30 [ 658.233331][T13900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.233361][T13900] ? __import_iovec+0x5d4/0x7f0 [ 658.233391][T13900] ? aa_sock_msg_perm+0x94/0x160 [ 658.233417][T13900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.233443][T13900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.233471][T13900] __sock_sendmsg+0x219/0x270 [ 658.233499][T13900] ____sys_sendmsg+0x505/0x830 [ 658.233536][T13900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.233585][T13900] ___sys_sendmsg+0x21f/0x2a0 [ 658.233619][T13900] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.233690][T13900] ? __fget_files+0x2a/0x420 [ 658.233718][T13900] ? __fget_files+0x3a0/0x420 [ 658.233759][T13900] __sys_sendmsg+0x164/0x220 [ 658.233793][T13900] ? __pfx___sys_sendmsg+0x10/0x10 [ 658.233840][T13900] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 658.233871][T13900] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.233908][T13900] __do_fast_syscall_32+0xb4/0x110 [ 658.233940][T13900] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.233973][T13900] do_fast_syscall_32+0x34/0x80 [ 658.234003][T13900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.234031][T13900] RIP: 0023:0xf709e539 [ 658.234050][T13900] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 658.234070][T13900] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 658.234093][T13900] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 0000000080000680 [ 658.234107][T13900] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.234120][T13900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.234133][T13900] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 658.234146][T13900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.234177][T13900] [ 658.615297][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.892696][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 659.042520][ T5890] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 659.055000][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 659.067845][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 659.079577][T13917] FAULT_INJECTION: forcing a failure. [ 659.079577][T13917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.094428][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 659.104832][T13917] CPU: 0 UID: 0 PID: 13917 Comm: syz.4.2319 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 659.104855][T13917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 659.104865][T13917] Call Trace: [ 659.104870][T13917] [ 659.104876][T13917] dump_stack_lvl+0x189/0x250 [ 659.104899][T13917] ? __lock_acquire+0xaac/0xd20 [ 659.104921][T13917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.104940][T13917] ? __pfx__printk+0x10/0x10 [ 659.104953][T13917] ? __might_fault+0xb0/0x130 [ 659.104979][T13917] should_fail_ex+0x414/0x560 [ 659.104997][T13917] _copy_from_iter+0x1db/0x15a0 [ 659.105020][T13917] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 659.105036][T13917] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 659.105054][T13917] ? __pfx__copy_from_iter+0x10/0x10 [ 659.105073][T13917] ? __build_skb_around+0x257/0x3e0 [ 659.105093][T13917] ? netlink_sendmsg+0x642/0xb30 [ 659.105114][T13917] ? skb_put+0x11b/0x210 [ 659.105135][T13917] netlink_sendmsg+0x6b2/0xb30 [ 659.105158][T13917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.105176][T13917] ? __import_iovec+0x5d4/0x7f0 [ 659.105194][T13917] ? aa_sock_msg_perm+0x94/0x160 [ 659.105211][T13917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.105228][T13917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.105245][T13917] __sock_sendmsg+0x219/0x270 [ 659.105262][T13917] ____sys_sendmsg+0x52d/0x830 [ 659.105285][T13917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.105334][T13917] ___sys_sendmsg+0x21f/0x2a0 [ 659.105357][T13917] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.105403][T13917] ? __fget_files+0x2a/0x420 [ 659.105423][T13917] ? __fget_files+0x3a0/0x420 [ 659.105450][T13917] __sys_sendmmsg+0x28e/0x430 [ 659.105475][T13917] ? __pfx___sys_sendmmsg+0x10/0x10 [ 659.105503][T13917] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 659.105535][T13917] ? ksys_write+0x1f0/0x250 [ 659.105560][T13917] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 659.105582][T13917] __do_fast_syscall_32+0xb4/0x110 [ 659.105604][T13917] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.105625][T13917] do_fast_syscall_32+0x34/0x80 [ 659.105644][T13917] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 659.105663][T13917] RIP: 0023:0xf70be539 [ 659.105675][T13917] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 659.105688][T13917] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 659.105704][T13917] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 659.105714][T13917] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 659.105723][T13917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 659.105732][T13917] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 659.105745][T13917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 659.105780][T13917] [ 659.105943][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 659.382532][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 659.410376][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.423387][ T5890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 659.424914][ T5890] usb 1-1: config 7 has an invalid interface number: 48 but max is 0 [ 659.431320][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.443182][ T5890] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 659.452754][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.473348][ T5890] usb 1-1: config 7 has no interface number 0 [ 659.489488][ T5890] usb 1-1: config 7 interface 48 has no altsetting 0 [ 659.509376][ T5890] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 659.526604][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.535547][ T5890] usb 1-1: Product: syz [ 659.540207][ T5890] usb 1-1: Manufacturer: syz [ 659.545738][ T5890] usb 1-1: SerialNumber: syz [ 659.690453][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 659.699935][ T9] usbtmc 4-1:16.0: can't read capabilities [ 659.762769][T13924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2321'. [ 659.776408][T13924] unsupported nla_type 52263 [ 659.784933][ T5890] cdc_phonet 1-1:7.48: probe with driver cdc_phonet failed with error -22 [ 659.805999][ T5890] usb 1-1: USB disconnect, device number 107 [ 660.013246][ T5890] usb 2-1: USB disconnect, device number 100 [ 660.050131][T13936] netlink: 'syz.2.2326': attribute type 13 has an invalid length. [ 660.154480][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 660.174807][T13943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2326'. [ 660.611821][ T9] usb 4-1: USB disconnect, device number 97 [ 660.782007][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2340'. [ 660.803231][ T5890] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 660.972453][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 660.989728][ T5890] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 661.000840][ T5890] usb 1-1: config 0 has no interface number 0 [ 661.010034][T13969] loop6: detected capacity change from 0 to 7 [ 661.016508][ T5890] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 661.031538][T13969] Dev loop6: unable to read RDB block 7 [ 661.037608][T13969] loop6: AHDI p1 p2 p3 p4 [ 661.042344][T13969] loop6: partition table partially beyond EOD, [ 661.042647][ T5890] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 661.058186][T13969] truncated [ 661.061657][T13969] loop6: p1 start 926365495 is beyond EOD, truncated [ 661.069054][T13969] loop6: p2 size 47 extends beyond EOD, truncated [ 661.076043][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.086434][T13969] loop6: p3 start 1886353253 is beyond EOD, truncated [ 661.093403][ T5890] usb 1-1: Product: syz [ 661.097721][ T5890] usb 1-1: Manufacturer: syz [ 661.117973][ T5890] usb 1-1: SerialNumber: syz [ 661.139077][ T5890] usb 1-1: config 0 descriptor?? [ 661.145901][T13982] syzkaller1: entered promiscuous mode [ 661.151970][T13982] syzkaller1: entered allmulticast mode [ 661.178294][ T5890] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 661.198345][ T5887] udevd[5887]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 661.218461][ T5890] em28xx 1-1:0.132: Video interface 132 found: [ 661.548359][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 661.581222][ T5890] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 661.584747][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 661.762803][ T978] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 661.871767][ T30] audit: type=1326 audit(1747446404.991:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.1.2352" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f21539 code=0x0 [ 661.931816][T14008] netlink: 'syz.2.2353': attribute type 8 has an invalid length. [ 661.943523][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 661.951084][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 661.988776][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 662.003454][ T5890] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 662.057776][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.057883][ T5890] em28xx 1-1:0.132: board has no eeprom [ 662.319909][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.408392][ T5890] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 662.408416][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.425988][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.439651][ T5890] em28xx 1-1:0.132: analog set to bulk mode. [ 662.465334][ T5891] em28xx 1-1:0.132: Registering V4L2 extension [ 662.657207][ T978] usb 4-1: GET_CAPABILITIES returned 0 [ 662.677422][ T978] usbtmc 4-1:16.0: can't read capabilities [ 662.968661][T14024] FAULT_INJECTION: forcing a failure. [ 662.968661][T14024] name failslab, interval 1, probability 0, space 0, times 0 [ 663.002685][T14024] CPU: 0 UID: 0 PID: 14024 Comm: syz.1.2358 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 663.002718][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.002733][T14024] Call Trace: [ 663.002742][T14024] [ 663.002751][T14024] dump_stack_lvl+0x189/0x250 [ 663.002799][T14024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.002831][T14024] ? __pfx__printk+0x10/0x10 [ 663.002857][T14024] ? __pfx___might_resched+0x10/0x10 [ 663.002879][T14024] ? fs_reclaim_acquire+0x7d/0x100 [ 663.002918][T14024] should_fail_ex+0x414/0x560 [ 663.002947][T14024] should_failslab+0xa8/0x100 [ 663.002980][T14024] __kmalloc_noprof+0xcb/0x4f0 [ 663.003008][T14024] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 663.003048][T14024] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 663.003092][T14024] genl_family_rcv_msg_doit+0xb8/0x300 [ 663.003134][T14024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 663.003171][T14024] ? rcu_is_watching+0x15/0xb0 [ 663.003194][T14024] ? apparmor_capable+0x137/0x1b0 [ 663.003228][T14024] ? bpf_lsm_capable+0x9/0x20 [ 663.003259][T14024] ? security_capable+0x7e/0x2e0 [ 663.003292][T14024] genl_rcv_msg+0x60e/0x790 [ 663.003332][T14024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.003364][T14024] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 663.003410][T14024] netlink_rcv_skb+0x21c/0x490 [ 663.003438][T14024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.003472][T14024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.003524][T14024] ? down_read+0x1ad/0x2e0 [ 663.003571][T14024] genl_rcv+0x28/0x40 [ 663.003600][T14024] netlink_unicast+0x758/0x8d0 [ 663.003634][T14024] netlink_sendmsg+0x805/0xb30 [ 663.003671][T14024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.003701][T14024] ? __import_iovec+0x5d4/0x7f0 [ 663.003729][T14024] ? aa_sock_msg_perm+0x94/0x160 [ 663.003755][T14024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.003780][T14024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.003813][T14024] __sock_sendmsg+0x219/0x270 [ 663.003840][T14024] ____sys_sendmsg+0x505/0x830 [ 663.003876][T14024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.003924][T14024] ___sys_sendmsg+0x21f/0x2a0 [ 663.003957][T14024] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.004039][T14024] ? __fget_files+0x2a/0x420 [ 663.004064][T14024] ? __fget_files+0x3a0/0x420 [ 663.004102][T14024] __sys_sendmsg+0x164/0x220 [ 663.004133][T14024] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.004176][T14024] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 663.004204][T14024] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.004231][T14024] __do_fast_syscall_32+0xb4/0x110 [ 663.004260][T14024] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.004289][T14024] do_fast_syscall_32+0x34/0x80 [ 663.004316][T14024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.004340][T14024] RIP: 0023:0xf7f21539 [ 663.004357][T14024] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 663.004375][T14024] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 663.004396][T14024] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000540 [ 663.004411][T14024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.004422][T14024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.004433][T14024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 663.004444][T14024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.004472][T14024] [ 663.470850][T14031] FAULT_INJECTION: forcing a failure. [ 663.470850][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 663.487646][T14031] CPU: 0 UID: 0 PID: 14031 Comm: syz.1.2361 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 663.487678][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.487692][T14031] Call Trace: [ 663.487700][T14031] [ 663.487710][T14031] dump_stack_lvl+0x189/0x250 [ 663.487750][T14031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.487787][T14031] ? __pfx__printk+0x10/0x10 [ 663.487812][T14031] ? __pfx___might_resched+0x10/0x10 [ 663.487834][T14031] ? fs_reclaim_acquire+0x7d/0x100 [ 663.487872][T14031] should_fail_ex+0x414/0x560 [ 663.487901][T14031] should_failslab+0xa8/0x100 [ 663.487931][T14031] __kmalloc_noprof+0xcb/0x4f0 [ 663.487959][T14031] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 663.488011][T14031] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 663.488051][T14031] genl_family_rcv_msg_doit+0xb8/0x300 [ 663.488089][T14031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 663.488121][T14031] ? __pfx___mutex_lock+0x10/0x10 [ 663.488150][T14031] ? __pfx_genl_get_cmd+0x10/0x10 [ 663.488177][T14031] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 663.488212][T14031] ? stack_depot_save_flags+0x40/0x910 [ 663.488242][T14031] genl_rcv_msg+0x60e/0x790 [ 663.488279][T14031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.488309][T14031] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 663.488364][T14031] netlink_rcv_skb+0x21c/0x490 [ 663.488389][T14031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.488419][T14031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.488465][T14031] ? down_read+0x1ad/0x2e0 [ 663.488494][T14031] genl_rcv+0x28/0x40 [ 663.488520][T14031] netlink_unicast+0x758/0x8d0 [ 663.488551][T14031] netlink_sendmsg+0x805/0xb30 [ 663.488584][T14031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.488610][T14031] ? __import_iovec+0x5d4/0x7f0 [ 663.488634][T14031] ? aa_sock_msg_perm+0x94/0x160 [ 663.488659][T14031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.488683][T14031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.488707][T14031] __sock_sendmsg+0x219/0x270 [ 663.488730][T14031] ____sys_sendmsg+0x505/0x830 [ 663.488768][T14031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.488811][T14031] ___sys_sendmsg+0x21f/0x2a0 [ 663.488840][T14031] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.488901][T14031] ? __fget_files+0x2a/0x420 [ 663.488927][T14031] ? __fget_files+0x3a0/0x420 [ 663.488963][T14031] __sys_sendmsg+0x164/0x220 [ 663.488992][T14031] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.489033][T14031] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 663.489060][T14031] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.489086][T14031] __do_fast_syscall_32+0xb4/0x110 [ 663.489113][T14031] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.489141][T14031] do_fast_syscall_32+0x34/0x80 [ 663.489167][T14031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.489190][T14031] RIP: 0023:0xf7f21539 [ 663.489206][T14031] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 663.489223][T14031] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 663.489244][T14031] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 663.489257][T14031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.489268][T14031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.489279][T14031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 663.489291][T14031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.489318][T14031] [ 663.703379][ T5891] em28xx 1-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 663.876683][ T5891] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 663.943011][ T5891] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 663.960783][ T978] usb 1-1: USB disconnect, device number 108 [ 663.967838][ T978] em28xx 1-1:0.132: Disconnecting em28xx [ 663.984399][ T9] usb 4-1: USB disconnect, device number 98 [ 664.002572][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 664.192512][ T5890] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 664.215443][ T5891] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 664.233720][ T5891] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 664.246821][ T5891] em28xx 1-1:0.132: No AC97 audio processor [ 664.256815][T14056] FAULT_INJECTION: forcing a failure. [ 664.256815][T14056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.274480][ T5891] usb 1-1: Decoder not found [ 664.289646][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.3.2370 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 664.289673][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 664.289685][T14056] Call Trace: [ 664.289693][T14056] [ 664.289701][T14056] dump_stack_lvl+0x189/0x250 [ 664.289736][T14056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.289769][T14056] ? __pfx__printk+0x10/0x10 [ 664.289799][T14056] should_fail_ex+0x414/0x560 [ 664.289825][T14056] _copy_to_user+0x31/0xb0 [ 664.289854][T14056] simple_read_from_buffer+0xe1/0x170 [ 664.289883][T14056] proc_fail_nth_read+0x1df/0x250 [ 664.289913][T14056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.289944][T14056] ? rw_verify_area+0x258/0x650 [ 664.289963][T14056] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.289987][T14056] vfs_read+0x1fd/0x980 [ 664.290008][T14056] ? __pfx___mutex_lock+0x10/0x10 [ 664.290030][T14056] ? __pfx_vfs_read+0x10/0x10 [ 664.290049][T14056] ? __fget_files+0x2a/0x420 [ 664.290072][T14056] ? __fget_files+0x3a0/0x420 [ 664.290092][T14056] ? __fget_files+0x2a/0x420 [ 664.290118][T14056] ksys_read+0x145/0x250 [ 664.290137][T14056] ? __pfx_ksys_read+0x10/0x10 [ 664.290156][T14056] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 664.290178][T14056] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.290200][T14056] __do_fast_syscall_32+0xb4/0x110 [ 664.290221][T14056] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.290243][T14056] do_fast_syscall_32+0x34/0x80 [ 664.290264][T14056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.290282][T14056] RIP: 0023:0xf7f26539 [ 664.290296][T14056] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 664.290309][T14056] RSP: 002b:00000000f5046590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 664.290325][T14056] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5046620 [ 664.290336][T14056] RDX: 000000000000000f RSI: 00000000f73b2ff4 RDI: 0000000000000000 [ 664.290345][T14056] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 664.290354][T14056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 664.290364][T14056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.290385][T14056] [ 664.311191][ T5891] em28xx 1-1:0.132: failed to create media graph [ 664.556438][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 664.584365][ T5890] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 664.675061][ T5890] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 664.722506][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.730579][ T5890] usb 5-1: Product: syz [ 664.768506][ T5891] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 664.775690][ T5890] usb 5-1: Manufacturer: syz [ 664.781875][ T5890] usb 5-1: SerialNumber: syz [ 664.833094][ T5890] usb 5-1: config 0 descriptor?? [ 664.841047][T14057] ================================================================== [ 664.843960][ T5891] em28xx 1-1:0.132: Remote control support is not available for this card. [ 664.849133][T14057] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 664.865086][T14057] Read of size 8 at addr ffff88807c86c738 by task v4l_id/14057 [ 664.872657][T14057] [ 664.874990][T14057] CPU: 0 UID: 0 PID: 14057 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 664.875011][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 664.875022][T14057] Call Trace: [ 664.875030][T14057] [ 664.875038][T14057] dump_stack_lvl+0x189/0x250 [ 664.875065][T14057] ? __virt_addr_valid+0x18c/0x540 [ 664.875088][T14057] ? rcu_is_watching+0x15/0xb0 [ 664.875103][T14057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.875125][T14057] ? rcu_is_watching+0x15/0xb0 [ 664.875139][T14057] ? lock_release+0x4b/0x3e0 [ 664.875164][T14057] ? __virt_addr_valid+0x18c/0x540 [ 664.875185][T14057] ? __virt_addr_valid+0x469/0x540 [ 664.875208][T14057] print_report+0xb4/0x290 [ 664.875228][T14057] ? v4l2_fh_open+0xc7/0x430 [ 664.875248][T14057] kasan_report+0x118/0x150 [ 664.875271][T14057] ? v4l2_fh_open+0xc7/0x430 [ 664.875294][T14057] v4l2_fh_open+0xc7/0x430 [ 664.875315][T14057] ? __pfx___mutex_lock+0x10/0x10 [ 664.875339][T14057] em28xx_v4l2_open+0x157/0x9a0 [ 664.875364][T14057] v4l2_open+0x20f/0x360 [ 664.875393][T14057] chrdev_open+0x4cc/0x5e0 [ 664.875416][T14057] ? __pfx_chrdev_open+0x10/0x10 [ 664.875440][T14057] ? __pfx_chrdev_open+0x10/0x10 [ 664.875460][T14057] do_dentry_open+0xdf0/0x1970 [ 664.875490][T14057] vfs_open+0x3b/0x340 [ 664.875513][T14057] ? path_openat+0x2ecd/0x3830 [ 664.875530][T14057] path_openat+0x2ee5/0x3830 [ 664.875545][T14057] ? arch_stack_walk+0xfc/0x150 [ 664.875579][T14057] ? __pfx_path_openat+0x10/0x10 [ 664.875594][T14057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.875617][T14057] do_filp_open+0x1fa/0x410 [ 664.875636][T14057] ? __pfx_do_filp_open+0x10/0x10 [ 664.875660][T14057] ? _raw_spin_unlock+0x28/0x50 [ 664.875678][T14057] ? alloc_fd+0x64c/0x6c0 [ 664.875702][T14057] do_sys_openat2+0x121/0x1c0 [ 664.875717][T14057] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.875732][T14057] ? exc_page_fault+0x68/0x110 [ 664.875753][T14057] ? do_user_addr_fault+0xc8a/0x1390 [ 664.875771][T14057] __x64_sys_openat+0x138/0x170 [ 664.875787][T14057] do_syscall_64+0xf6/0x210 [ 664.875810][T14057] ? clear_bhb_loop+0x60/0xb0 [ 664.875828][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.875844][T14057] RIP: 0033:0x7f7d3fca7407 [ 664.875859][T14057] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 664.875873][T14057] RSP: 002b:00007ffe4a2e93c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 664.875890][T14057] RAX: ffffffffffffffda RBX: 00007f7d40343880 RCX: 00007f7d3fca7407 [ 664.875903][T14057] RDX: 0000000000000000 RSI: 00007ffe4a2eaf1b RDI: ffffffffffffff9c [ 664.875915][T14057] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 664.875925][T14057] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 664.875945][T14057] R13: 00007ffe4a2e9610 R14: 00007f7d404aa000 R15: 000055d3f08d34d8 [ 664.875962][T14057] [ 664.875967][T14057] [ 665.163863][T14057] Allocated by task 5891: [ 665.168185][T14057] kasan_save_track+0x3e/0x80 [ 665.172867][T14057] __kasan_kmalloc+0x93/0xb0 [ 665.177460][T14057] __kmalloc_cache_noprof+0x230/0x3d0 [ 665.182837][T14057] em28xx_v4l2_init+0x10b/0x2e70 [ 665.187799][T14057] em28xx_init_extension+0x11d/0x1c0 [ 665.193097][T14057] process_scheduled_works+0xade/0x17a0 [ 665.198642][T14057] worker_thread+0x8a0/0xda0 [ 665.203247][T14057] kthread+0x711/0x8a0 [ 665.207319][T14057] ret_from_fork+0x4b/0x80 [ 665.211739][T14057] ret_from_fork_asm+0x1a/0x30 [ 665.216498][T14057] [ 665.218813][T14057] Freed by task 5891: [ 665.222785][T14057] kasan_save_track+0x3e/0x80 [ 665.227463][T14057] kasan_save_free_info+0x46/0x50 [ 665.232481][T14057] __kasan_slab_free+0x62/0x70 [ 665.237248][T14057] kfree+0x193/0x440 [ 665.241142][T14057] em28xx_v4l2_init+0x1683/0x2e70 [ 665.246164][T14057] em28xx_init_extension+0x11d/0x1c0 [ 665.251452][T14057] process_scheduled_works+0xade/0x17a0 [ 665.257085][T14057] worker_thread+0x8a0/0xda0 [ 665.261683][T14057] kthread+0x711/0x8a0 [ 665.265761][T14057] ret_from_fork+0x4b/0x80 [ 665.270179][T14057] ret_from_fork_asm+0x1a/0x30 [ 665.274954][T14057] [ 665.277277][T14057] The buggy address belongs to the object at ffff88807c86c000 [ 665.277277][T14057] which belongs to the cache kmalloc-8k of size 8192 [ 665.291333][T14057] The buggy address is located 1848 bytes inside of [ 665.291333][T14057] freed 8192-byte region [ffff88807c86c000, ffff88807c86e000) [ 665.305317][T14057] [ 665.307652][T14057] The buggy address belongs to the physical page: [ 665.314079][T14057] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c868 [ 665.322843][T14057] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 665.331340][T14057] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 665.338892][T14057] page_type: f5(slab) [ 665.342887][T14057] raw: 00fff00000000040 ffff88801a042280 ffffea00009afe00 dead000000000004 [ 665.351474][T14057] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 665.360055][T14057] head: 00fff00000000040 ffff88801a042280 ffffea00009afe00 dead000000000004 [ 665.368719][T14057] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 665.377387][T14057] head: 00fff00000000003 ffffea0001f21a01 00000000ffffffff 00000000ffffffff [ 665.386059][T14057] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 665.394729][T14057] page dumped because: kasan: bad access detected [ 665.401145][T14057] page_owner tracks the page as allocated [ 665.406855][T14057] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9764, tgid 9741 (syz.2.1059), ts 389953224387, free_ts 389759776923 [ 665.428230][T14057] post_alloc_hook+0x1d8/0x230 [ 665.433005][T14057] get_page_from_freelist+0x21ce/0x22b0 [ 665.438562][T14057] __alloc_frozen_pages_noprof+0x181/0x370 [ 665.444372][T14057] alloc_pages_mpol+0x232/0x4a0 [ 665.449223][T14057] allocate_slab+0x8a/0x3b0 [ 665.453725][T14057] ___slab_alloc+0xbfc/0x1480 [ 665.458411][T14057] __kmalloc_cache_noprof+0x296/0x3d0 [ 665.463788][T14057] audit_log_d_path+0xb5/0x190 [ 665.468553][T14057] audit_log_d_path_exe+0x42/0x70 [ 665.473573][T14057] audit_log_task+0x2b3/0x3c0 [ 665.478254][T14057] audit_seccomp+0x86/0x190 [ 665.482774][T14057] __seccomp_filter+0x9aa/0x1a40 [ 665.487722][T14057] syscall_trace_enter+0xaa/0x160 [ 665.492762][T14057] __do_fast_syscall_32+0x9b/0x110 [ 665.497882][T14057] do_fast_syscall_32+0x34/0x80 [ 665.502750][T14057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.509099][T14057] page last free pid 9756 tgid 9753 stack trace: [ 665.515434][T14057] __free_frozen_pages+0xb0e/0xcd0 [ 665.520563][T14057] __put_partials+0x161/0x1c0 [ 665.525247][T14057] put_cpu_partial+0x17c/0x250 [ 665.530009][T14057] __slab_free+0x2f7/0x400 [ 665.534436][T14057] qlist_free_all+0x9a/0x140 [ 665.539036][T14057] kasan_quarantine_reduce+0x148/0x160 [ 665.544506][T14057] __kasan_slab_alloc+0x22/0x80 [ 665.549381][T14057] kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 665.555287][T14057] __io_alloc_req_refill+0xa2/0x300 [ 665.560517][T14057] io_submit_sqes+0xc70/0x1d20 [ 665.565280][T14057] __se_sys_io_uring_enter+0x2df/0x2b20 [ 665.570836][T14057] __do_fast_syscall_32+0xb4/0x110 [ 665.575964][T14057] do_fast_syscall_32+0x34/0x80 [ 665.580824][T14057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 665.587167][T14057] [ 665.589515][T14057] Memory state around the buggy address: [ 665.595142][T14057] ffff88807c86c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.603207][T14057] ffff88807c86c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.611270][T14057] >ffff88807c86c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.619328][T14057] ^ [ 665.625213][T14057] ffff88807c86c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.633269][T14057] ffff88807c86c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.641326][T14057] ================================================================== [ 665.652705][ T5890] usb 5-1: bad CDC descriptors [ 665.658267][ T5890] usb 5-1: unsupported MDLM descriptors [ 665.670764][T14083] program syz.1.2379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.686401][ T978] em28xx 1-1:0.132: Closing input extension [ 665.726333][T14057] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 665.733591][T14057] CPU: 0 UID: 0 PID: 14057 Comm: v4l_id Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 665.745332][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 665.755411][T14057] Call Trace: [ 665.758698][T14057] [ 665.761639][T14057] dump_stack_lvl+0x99/0x250 [ 665.766241][T14057] ? __asan_memcpy+0x40/0x70 [ 665.770839][T14057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.776044][T14057] ? __pfx__printk+0x10/0x10 [ 665.780645][T14057] panic+0x2db/0x790 [ 665.784587][T14057] ? __pfx_panic+0x10/0x10 [ 665.789027][T14057] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 665.794937][T14057] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 665.801271][T14057] ? print_memory_metadata+0x314/0x400 [ 665.806754][T14057] ? v4l2_fh_open+0xc7/0x430 [ 665.811360][T14057] check_panic_on_warn+0x89/0xb0 [ 665.816315][T14057] ? v4l2_fh_open+0xc7/0x430 [ 665.820932][T14057] end_report+0x78/0x160 [ 665.825187][T14057] kasan_report+0x129/0x150 [ 665.829704][T14057] ? v4l2_fh_open+0xc7/0x430 [ 665.834313][T14057] v4l2_fh_open+0xc7/0x430 [ 665.838743][T14057] ? __pfx___mutex_lock+0x10/0x10 [ 665.843793][T14057] em28xx_v4l2_open+0x157/0x9a0 [ 665.848651][T14057] v4l2_open+0x20f/0x360 [ 665.852903][T14057] chrdev_open+0x4cc/0x5e0 [ 665.857328][T14057] ? __pfx_chrdev_open+0x10/0x10 [ 665.862268][T14057] ? __pfx_chrdev_open+0x10/0x10 [ 665.867239][T14057] do_dentry_open+0xdf0/0x1970 [ 665.872019][T14057] vfs_open+0x3b/0x340 [ 665.876092][T14057] ? path_openat+0x2ecd/0x3830 [ 665.880852][T14057] path_openat+0x2ee5/0x3830 [ 665.885441][T14057] ? arch_stack_walk+0xfc/0x150 [ 665.890324][T14057] ? __pfx_path_openat+0x10/0x10 [ 665.895281][T14057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.901358][T14057] do_filp_open+0x1fa/0x410 [ 665.905864][T14057] ? __pfx_do_filp_open+0x10/0x10 [ 665.910898][T14057] ? _raw_spin_unlock+0x28/0x50 [ 665.915750][T14057] ? alloc_fd+0x64c/0x6c0 [ 665.920097][T14057] do_sys_openat2+0x121/0x1c0 [ 665.924776][T14057] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.929991][T14057] ? exc_page_fault+0x68/0x110 [ 665.934767][T14057] ? do_user_addr_fault+0xc8a/0x1390 [ 665.940054][T14057] __x64_sys_openat+0x138/0x170 [ 665.944904][T14057] do_syscall_64+0xf6/0x210 [ 665.949450][T14057] ? clear_bhb_loop+0x60/0xb0 [ 665.954130][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.960035][T14057] RIP: 0033:0x7f7d3fca7407 [ 665.964464][T14057] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 665.984073][T14057] RSP: 002b:00007ffe4a2e93c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 665.992492][T14057] RAX: ffffffffffffffda RBX: 00007f7d40343880 RCX: 00007f7d3fca7407 [ 666.000471][T14057] RDX: 0000000000000000 RSI: 00007ffe4a2eaf1b RDI: ffffffffffffff9c [ 666.008443][T14057] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 666.016417][T14057] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 666.024397][T14057] R13: 00007ffe4a2e9610 R14: 00007f7d404aa000 R15: 000055d3f08d34d8 [ 666.032389][T14057] [ 666.035728][T14057] Kernel Offset: disabled [ 666.040053][T14057] Rebooting in 86400 seconds..