last executing test programs: 2m53.653652408s ago: executing program 3 (id=1318): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x58}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x24060400) r1 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) cachestat(r1, &(0x7f0000000240)={0x401, 0x294b9e90}, &(0x7f0000000280), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x100, 0x303, 0x0, 0x7, 0x54, 0x0, 0x20}, 0x9c) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xf) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m53.317457969s ago: executing program 3 (id=1321): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x800, 0xa08) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x407, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x8, 0x6, 0x44495658, 0x9, 0x86, 0x4, 0x2, 0xdd4, 0x1, 0x3, 0x1, 0x2}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x0, 0x11}, 0xffffffff, 0x29, 'id1\x00', 'timer1\x00', 0x0, 0xfff, 0x201, 0xf9f6, 0x4}) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000002c0)={0x10000, 0x118000}) 2m49.720478295s ago: executing program 3 (id=1334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000040)={0x0, 0x0, 0xffffffff, 0x8, 0xfffffffd}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x20007}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='htcp\x00', 0x5) shutdown(r3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) syz_open_pts(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="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"], 0x1874}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e25, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c80)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xc, 0xe}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m48.078139409s ago: executing program 3 (id=1344): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m47.672762917s ago: executing program 3 (id=1352): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2ffc, 0x7, 0x800, 0xff}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x804) 2m47.267942035s ago: executing program 3 (id=1354): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x254, 0x0, 0x11, 0x148, 0x128, 0x10, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x10, 0xe0, 0x128, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@mark={{0x2c}, {0x6, 0xff7ffff8, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gre0\x00'}}}, {{@ip={@broadcast, @loopback, 0xac418c18f39f1285, 0x0, 'veth0_macvtap\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x5}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2b0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) 2m46.763878121s ago: executing program 32 (id=1354): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x254, 0x0, 0x11, 0x148, 0x128, 0x10, 0x1c0, 0x2a8, 0x2a8, 0x1c0, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x10, 0xe0, 0x128, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@mark={{0x2c}, {0x6, 0xff7ffff8, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ip6gre0\x00'}}}, {{@ip={@broadcast, @loopback, 0xac418c18f39f1285, 0x0, 'veth0_macvtap\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x6, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x5}, {0x140}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2b0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) 9.501292531s ago: executing program 1 (id=2215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x1, 0x70fd2b, 0x25d7dbfe, {}, [{@nsim={{0xe}, {0x33, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0xc800) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x4e2ec67456aaab21, 0xd00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.538069455s ago: executing program 4 (id=2228): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffe, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x44ca43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = syz_io_uring_setup(0x21f1, &(0x7f0000000480)={0x0, 0x3349, 0x0, 0xfffffffb, 0x157, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r10], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x20, 0x4007, @fd=r6, 0x902, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.048264153s ago: executing program 2 (id=2232): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2a000000000000000000000000002102074b7b181af5a8a200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002d003f00000000000000000004008d80050011802e"], 0x1c}], 0x1, 0x0, 0x0, 0x24040041}, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e24, 0xfffffffb, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x800) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x200) getpeername$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000200)=0x6e) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "1a0fe421f88c0566c0dfb90a06d337259adf8d418f92ff78aca0b1c2a78d69d0ebdcba0a09266feb0c38ace56c0fa30d517ed8ada7bdc52d412930fff25ea4f29a6bd88c7b11a02467b77f3e29bbf9ee3e06f375d15260f4ea8a42d7624065c70a0a6d1253afb12993c2c14c694249a7640989297df2bdf15e9a9c87ab3725517d302477083932f7f3499ce9bbbe7425ec2f0a5a61e58ed87450c1bf93d76f24ef378bb109beb29522a6a24247983e9b520b5a3cf6c111be4d8e15"}, 0xc6) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.706087196s ago: executing program 1 (id=2234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {0x0, 0x4000}, {0x4, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 4.664671454s ago: executing program 2 (id=2235): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2}], 0x1, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x34, @string={0x34, 0x3, "b5dc9779515d6c613f9c9ea3005313f061571a003e7a589f3aae2dbcc521f91a9af597cc2d49b04916f0c6bcf4c4d04dc1fb"}}, 0x0, 0x0, 0x0}, 0x0) 4.557942616s ago: executing program 4 (id=2237): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xbb) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x34, 0x41, 0xeb, 0x40, 0x3923, 0x718a, 0x766a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0xee, 0x0, 0x2, 0x94, 0x90, 0xa0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x88, 0x2}}]}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004600)={@cgroup, 0xffffffffffffffff, 0x9, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000000080)={0xc, 0x7ff, {}, {0xffffffffffffffff}, 0x3, 0x7fffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x0, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0xc000, 0x0, r5, 0x0, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x3, 0x1, 0x8, 0xfffffffffffbfffe, 0x800, 0x97c, {0x0, 0x100, 0x100, 0x0, 0xfffffffffffffffe, 0x800, 0x4, 0x6, 0x0, 0x1000, 0xfff, r5, r2, 0x3, 0x1ff}}}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket$kcm(0x29, 0x7, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x80, 0x2000009, 0xfffffffe, 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000fbdbdf250a808000000000000000000008"], 0x24}}, 0x0) 4.099923044s ago: executing program 1 (id=2239): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) msgget$private(0x0, 0xc0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.012977864s ago: executing program 1 (id=2241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r0, 0x29, 0x71ba4b1209ae744b, &(0x7f0000000000)=0x400, 0x4) 3.923908632s ago: executing program 2 (id=2243): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) signalfd(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009602"]) getegid() recvfrom(r0, 0x0, 0x0, 0x240, 0x0, 0x0) 3.750224365s ago: executing program 2 (id=2245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r6, 0x1, 0x70fd2b, 0x25d7dbfe, {}, [{@nsim={{0xe}, {0x33, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48040}, 0xc800) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x4e2ec67456aaab21, 0xd00}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.661756683s ago: executing program 4 (id=2247): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffe, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$loop(&(0x7f0000000040), 0x81, 0x44ca43) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = syz_io_uring_setup(0x21f1, &(0x7f0000000480)={0x0, 0x3349, 0x0, 0xfffffffb, 0x157, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f0000000400)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r10], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x20, 0x4007, @fd=r6, 0x902, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.536187152s ago: executing program 1 (id=2249): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x18000000}}, 0x10) 2.407473175s ago: executing program 0 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e00010069703667726574617000005f34000280080001", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000151400070020"], 0x68}}, 0x0) 2.264627611s ago: executing program 5 (id=2251): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) msgget$private(0x0, 0xc0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.980672586s ago: executing program 5 (id=2252): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574617000005f3400028008000100", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1.753800579s ago: executing program 0 (id=2253): r0 = syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x810, r0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000000150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c11941", 0x48}], 0x1}, 0x2000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000004d40), &(0x7f0000000200), &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000040)) 1.688070393s ago: executing program 5 (id=2254): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}, {0x0}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/154, 0x9a}], 0x9) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.448214437s ago: executing program 5 (id=2255): r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}, {0x0}], 0x2) openat$sequencer(0xffffff9c, 0x0, 0x2, 0x0) 1.447586747s ago: executing program 0 (id=2256): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000000)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) r1 = openat$vicodec1(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3fc, 0x218, 0x10c, 0x0, 0x31c, 0x31c, 0x31c, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @remote, @multicast1, 0x8, 0xffffffff}}}, {{@arp={@empty, @multicast1, 0x0, 0xffff00, 0xf, 0x3, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xac417c2543924a05]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x878, 0xa, 0x6, 0x3, 0xa000, 'rose0\x00', 'pimreg1\x00', {}, {0xff}, 0x0, 0x95}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x1}}}, {{@uncond, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0xfffffffa, {0x7}}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x448) r3 = openat$urandom(0xffffff9c, &(0x7f0000000680), 0x10000, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f00000006c0)=0x4) r4 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000700), 0x22a000, 0x0) write$vga_arbiter(r4, &(0x7f0000000740)=@unlock_all, 0xb) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000780)={'vlan0\x00', {0x2, 0x4e24, @empty}}) userfaultfd(0x400) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10, 0x7e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000850}, 0x80) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x65) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000940)) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) r8 = geteuid() sendmsg$nl_generic(r5, &(0x7f0000000e80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f00000009c0)={0x448, 0x11, 0x200, 0x70bd29, 0x25dfdbfd, {0x7}, [@typed={0x5, 0x3f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x12a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0xc, 0xac, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @uid=r8}]}, @nested={0xc, 0x7e, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @u32=0x5}]}, @nested={0x116, 0xa8, 0x0, 0x1, [@nested={0x4, 0x43}, @generic="413fb3b56b54ad6b545bc92949a3b721450e72a227b0915480396ac3fac113bfb00abdf502b78211bc7d06c74cb0636f985c3d8f096f515ad44748c600b532e799c294832188971e1e8e9172d59cc7b5a69c639d", @generic="ba6cf54e3f308b2094438d8a9f75523c095db9a2662bf7c6fa2a2987ca19d0e06b3a5f30d4d7a57527316ca086906f57ec9a244ec86559a85b9f32c1a68fa4067f9a13ca03febf6507a5d13d05b558c8c00345c80145ce10b5fe0c54ee4ff1eaab793f1476", @generic="5b66ec2145ebaf26981fbe66770b407d3b0a039f69283f367f36592bcc224c575d1268b3087ec22700d25a", @generic="81b54b806823ab8e496e8cf8ebb643086857c452491eae74e89f0c4ff09ea57b4af87a3a77dc5f268af8"]}, @generic="6743af3dea878de873f0f7db10b7", @nested={0x1a8, 0x78, 0x0, 0x1, [@generic="68bbab658c9174e10ceb", @generic="36de1d394eea264db5cdd059819c2067d2cd8f8f141bd19925930cb841e18f0e03e6321d38ba3d06c509f67802e0c92ce8d05bd0cb726e49c210876aad2b13828062eae3830499b1add3f3bf5b5481997c77caccf46e600c24f7a85be78ad384a0747991f102e5bf915839f3c8dea8dbb92177a0338cdf0c7c6cee1b060d20df63165128fabd34f8cdaccdef37dd9bf551e51ae529aa2704474d931097168c93da590092b985f7590a458652937a6e63541ecf0d42374bb227a590f36b6451eddce0634b7311797cf387a8818f63ba28ced5d35fce74eeaedb982d8b6bc070", @generic="283eb5910f3121e4224c51a8d21637af2692e37e465a6bfdcfaf41b909aa1d69b3637e9aee51b641e19cc492a0fcc92b20", @nested={0x4, 0xe2}, @generic="21ea583e65755046d91a2be409409f57666b88fcb5fe1a85b90135f8e380aff98dd8d692be1fac31a8e3a73c3483d3da36312b49044ee4956db653de75", @nested={0x4, 0xa6}, @generic="be848915e95ae16fe0303270df259bc67e6853fa17c27f314399b8d6d2779617a2d027f1c0ce51b158ce94da6ef5dd3990be6e0b4c3d803f34f10f80ada2edc5d13ea63099"]}, @generic="b6be11eb58909830c62c152214d6447c1ac2dca49c475ab343d8875aa25fea26c6a84eed94a2d54e694f66f591c545802e2b16a2312bd4e8b0790d68816981b35c897ff78aff5a26943d3882801e51a8c80fb77e38d2ed485319aa629f19c1a356a97a932aba7306889cd57a112b88cebf48694385ec6c5d936ecb917155a74dccb9ff84", @generic="cc7d3197327723495b5fb5f82d38f962f82346b96248843c1e50938e3e94b9601c6a61f114851b5297b91bb5eeef53744648d6bf2aaa742fff6990df92df274e928dfb1b781a291d37f87ad69e9ea748943bcb73924aa3b2e37be659e14342b552a753aab1d4b5f27f42ad61b4388e1157eb82160a74ad94fd347756fed450a4c346a513eae515427c150ef705b3363874e9e8a4b655a0b550f986b1f7aaaa683916592ab0545f94e2f373753e25723dca9f4f694b1e3cec"]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x11) unshare(0x80) openat$binderfs(0xffffff9c, &(0x7f0000000ec0)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000fc0)={'ip6_vti0\x00', &(0x7f0000000f40)={'ip6gre0\x00', 0x0, 0x4, 0x2d, 0x0, 0x8, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x80, 0x7800, 0x9, 0x6}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@bridge_getlink={0x4c, 0x12, 0x1, 0x70bd29, 0x0, {0x7, 0x0, 0x0, r9, 0x101, 0x20100}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "92d10e159bbd58dabaaca186"}, @IFLA_GROUP={0x8, 0x1b, 0xc51}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x92ad}]}, 0x4c}, 0x1, 0x0, 0x0, 0x58050}, 0x8804) rmdir(&(0x7f0000001100)='./file0\x00') r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', r9, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000013c0)={&(0x7f0000001140)="c5ac123df1444f67b2ab8e1f55bfd75ae6e6cce69ef8dddeea3b5301fb8e064862c0faa720832d0d29f92d1874c8b7c162eda8664b3092090c3cafd748679e32b37edbbd7a5c395627c0ef9936a287c9374f259fe5762ce2f8bb1193a87fa751ebef06afb16884ef5727176a002936a65e4f342d9d7690aebfc917daab49723ed14aaa", &(0x7f0000001200)=""/55, &(0x7f0000001240)="fd97a1d0a5fbb2651eeb23f6e99ce1", &(0x7f0000001280)="0ff730b4735c19c60a6b7d5d4df048b0c3e396da5a22b0a1f4c30ceb67b6c819a0ace84d402d32d94965ccb0c5ffff3eb178abd2d4727b52600b50cc7aaca3977f90fba2361bb39d893ee03acccb2de74357140e80e44e683ed49d3c348e1506e3a24059a22690d4419e9a971f1c8e472bc1d1582c0a77a4bce85a7e65c0dc5ce37fe9a2cacd5c25f159dcc37d2d5486723de7d9cec4", 0x200, r10}, 0x38) 1.258830213s ago: executing program 4 (id=2257): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1f0500000000000071102200000000009c000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.032820423s ago: executing program 0 (id=2258): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x8000, @local, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="86", 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x4}, &(0x7f0000000000)=0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r2, 0xcc, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0xffff0000, @mcast2, 0x1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x6, @remote, 0x1ff}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e23, 0x202b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}]}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000680001"], 0x38}}, 0x90) shutdown(r0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000280)={0x0, 0x6, 0xa, 0x80080}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r4, 0x2, 0x40, &(0x7f0000000080)="c2aeac8f7268b85ff4b7f3b74a03b45dffe374a798f61153350d9da1b907db2b72d5219258cfff1013359bd996c808797c9e50410380f6", 0x37) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) 828.063615ms ago: executing program 4 (id=2259): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0xfffffffc, 0x1}, {0x8}, {0x1}, @result={0xffffffe0, 0xfffff001}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (fail_nth: 9) 750.810606ms ago: executing program 1 (id=2260): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$unix(0xffffffffffffffff, 0x0, 0x14004090) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x14004090) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="310300000000070000000900000008000333", @ANYRES32, @ANYBLOB='\b', @ANYRES32], 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008031, 0xffffffffffffffff, 0x30b8b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008031, 0xffffffffffffffff, 0x30b8b000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) syz_pidfd_open(0x0, 0x0) (async) syz_pidfd_open(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) 722.964397ms ago: executing program 0 (id=2261): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x2d, 0x8, 0xfb, 0x5}, {0x5, 0x9, 0x6, 0x1}]}) 335.845317ms ago: executing program 2 (id=2262): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) msgget$private(0x0, 0xc0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 219.924998ms ago: executing program 5 (id=2263): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYBLOB="0000000000000000480012800e00010069703667726574617000005f3400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000151400070020"], 0x68}}, 0x0) 161.156634ms ago: executing program 4 (id=2264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x22020600) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') preadv(r2, 0x0, 0x0, 0x21, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe(0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000003c0)={0x2, r4, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f}) (fail_nth: 1) pipe2$watch_queue(0x0, 0x80) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200002, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000300)="c077dd92883ba59fdb1e5927b36bb5f4249551a7df778f1d4c00664c7b413ca6f3") setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x4) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 113.386494ms ago: executing program 2 (id=2265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=ANY=[], 0x50}}, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}, {0x0}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/154, 0x9a}], 0x9) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 72.727413ms ago: executing program 0 (id=2266): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e00010069703667726574617000005f3400028008000100", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 0s ago: executing program 5 (id=2267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r4, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r5}, 0x10) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x4, 0x80000, 0x8, 0x6, 0x9, 0x45a, 0x0, 0x0, 0x8, 0x10001}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0xf, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x2a2}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x20044080) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000500)="96de3aa060bd", 0x6}], 0x1}}], 0x1, 0x40011) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0xffffffff, 0x34424752, 0x5, 0x5, [{0x0, 0xfffffffd}, {0x1}, {0x0, 0xffffffff}, {0x0, 0x6}, {0x1}, {0xfffffffe, 0x2db2}, {0x8000000, 0x2}, {0x5, 0xfffffffe}], 0x8, 0x4, 0x4, 0x0, 0x5}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) kernel console output (not intermixed with test programs): yz.1.1601'. [ 442.643955][T10796] sctp: [Deprecated]: syz.4.1607 (pid 10796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.643955][T10796] Use struct sctp_sack_info instead [ 442.697096][T10796] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1607'. [ 442.763572][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 442.763590][ T30] audit: type=1326 audit(1747390888.731:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 442.833977][ T30] audit: type=1326 audit(1747390888.741:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 442.928798][ T30] audit: type=1326 audit(1747390888.741:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 442.965528][ C1] syz_tun: tun_net_xmit 86 [ 443.009959][ T30] audit: type=1326 audit(1747390888.741:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 443.060956][ T30] audit: type=1326 audit(1747390888.741:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 443.117119][ T30] audit: type=1326 audit(1747390888.741:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 443.139902][ T30] audit: type=1326 audit(1747390888.741:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 443.174527][T10815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1612'. [ 443.233456][ T30] audit: type=1326 audit(1747390888.751:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 443.395445][ T30] audit: type=1326 audit(1747390888.751:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 443.449416][ T30] audit: type=1326 audit(1747390888.751:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.0.1605" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 444.706089][T10832] Invalid logical block size (43090) [ 444.814047][T10840] syz_tun: tun_net_xmit 86 [ 445.171730][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.196990][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.200578][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.223187][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.845586][ C0] syz_tun: tun_net_xmit 86 [ 446.026008][ T5880] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 446.090258][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.096796][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.185895][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 446.193186][ T5880] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 446.202185][ T5880] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 446.211081][ T5880] usb 6-1: config 0 has no interface number 0 [ 446.218079][ T5880] usb 6-1: config 0 has no interface number 1 [ 446.230337][ T5880] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 446.240057][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.249334][ T5880] usb 6-1: Product: syz [ 446.253599][ T5880] usb 6-1: Manufacturer: syz [ 446.261937][ T5880] usb 6-1: SerialNumber: syz [ 446.269268][ T5880] usb 6-1: config 0 descriptor?? [ 446.386470][ T5880] viperboard 6-1:0.61: version 0.00 found at bus 006 address 009 [ 446.411546][ T5880] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 446.420766][ T5880] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 446.447059][ T5880] viperboard 6-1:0.98: version 0.00 found at bus 006 address 009 [ 446.468687][ T5880] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 446.477649][ T5880] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 446.494953][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.507620][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.603416][ T5821] usb 6-1: USB disconnect, device number 9 [ 446.886067][ C0] syz_tun: tun_net_xmit 86 [ 447.262374][T10869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.273801][T10869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.474831][T10872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1628'. [ 447.846016][ C0] syz_tun: tun_net_xmit 86 [ 448.816040][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.826702][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.885541][ C0] syz_tun: tun_net_xmit 86 [ 449.006024][ T5886] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 449.176220][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 449.201697][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.257108][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.322519][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 449.322970][ T30] audit: type=1326 audit(1747390895.291:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 449.353804][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.386784][ T5886] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 449.405948][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.421165][T10899] FAULT_INJECTION: forcing a failure. [ 449.421165][T10899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.443559][T10899] CPU: 1 UID: 0 PID: 10899 Comm: syz.1.1639 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 449.443587][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.443599][T10899] Call Trace: [ 449.443609][T10899] [ 449.443617][T10899] dump_stack_lvl+0x189/0x250 [ 449.443652][T10899] ? __lock_acquire+0xaac/0xd20 [ 449.443684][T10899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.443714][T10899] ? __pfx__printk+0x10/0x10 [ 449.443735][T10899] ? __might_fault+0xb0/0x130 [ 449.443774][T10899] should_fail_ex+0x414/0x560 [ 449.443802][T10899] copy_fpstate_to_sigframe+0x9f0/0xcc0 [ 449.443832][T10899] ? copy_fpstate_to_sigframe+0x180/0xcc0 [ 449.443859][T10899] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 449.443882][T10899] ? preempt_schedule_common+0x83/0xd0 [ 449.443924][T10899] ? do_raw_spin_lock+0x121/0x290 [ 449.443948][T10899] ? posixtimer_deliver_signal+0x2d9/0x3e0 [ 449.443974][T10899] ? fpu__alloc_mathframe+0xa8/0x130 [ 449.443997][T10899] get_sigframe+0x58d/0x7d0 [ 449.444023][T10899] ? __pfx_get_sigframe+0x10/0x10 [ 449.444041][T10899] ? preempt_schedule+0xae/0xc0 [ 449.444074][T10899] ? __pfx_preempt_schedule+0x10/0x10 [ 449.444115][T10899] ia32_setup_frame+0x10c/0x940 [ 449.444143][T10899] ? _raw_spin_unlock_irq+0x45/0x50 [ 449.444177][T10899] ? __pfx_ia32_setup_frame+0x10/0x10 [ 449.444212][T10899] arch_do_signal_or_restart+0x40d/0x780 [ 449.444236][T10899] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 449.444270][T10899] ? local_irq_enable_exit_to_user+0x5/0x10 [ 449.444305][T10899] syscall_exit_to_user_mode+0x8b/0x120 [ 449.444335][T10899] __do_fast_syscall_32+0xc1/0x110 [ 449.444363][T10899] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.444395][T10899] do_fast_syscall_32+0x34/0x80 [ 449.444424][T10899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.444448][T10899] RIP: 0023:0xf710e539 [ 449.444466][T10899] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 449.444483][T10899] RSP: 002b:00000000f50fe590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 449.444505][T10899] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00000000f50fe610 [ 449.444518][T10899] RDX: 0000000000000001 RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 449.444530][T10899] RBP: 00000000f74a4f80 R08: 0000000000000000 R09: 0000000000000000 [ 449.444543][T10899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 449.444555][T10899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.444588][T10899] [ 449.506196][ T30] audit: type=1326 audit(1747390895.291:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 449.507671][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.513315][ T30] audit: type=1326 audit(1747390895.291:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 449.672605][ T5886] usb 6-1: config 0 descriptor?? [ 449.722964][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.936003][ C0] syz_tun: tun_net_xmit 86 [ 450.083902][T10908] tipc: Invalid UDP bearer configuration [ 450.083964][T10908] tipc: Enabling of bearer rejected, failed to enable media [ 450.132903][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 450.151633][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.161987][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 450.174278][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.232157][ T5886] usb 6-1: USB disconnect, device number 10 [ 450.397149][ T30] audit: type=1326 audit(1747390895.291:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 450.492052][ T30] audit: type=1326 audit(1747390895.291:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 450.589063][ T30] audit: type=1326 audit(1747390895.291:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 450.609413][T10910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.682141][T10910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.705924][ T30] audit: type=1326 audit(1747390895.291:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 450.813274][ T30] audit: type=1326 audit(1747390895.291:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 450.842755][ T30] audit: type=1326 audit(1747390895.291:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 450.909793][ T30] audit: type=1326 audit(1747390895.291:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10897 comm="syz.1.1639" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e558 code=0x7ffc0000 [ 451.155715][ T5821] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 451.319560][ T5821] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 451.335332][ T5821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.365367][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 451.525627][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 451.542448][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 451.607974][ T10] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 451.638392][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 451.659839][ T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 451.669807][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.681338][ T10] usb 2-1: Product: syz [ 451.698333][ T10] usb 2-1: Manufacturer: syz [ 451.713607][ T10] usb 2-1: SerialNumber: syz [ 451.741985][ T10] usb 2-1: config 0 descriptor?? [ 451.817106][ T10] usb 2-1: cannot find UAC_HEADER [ 451.889189][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 451.956550][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.556857][T10945] syz_tun: tun_net_xmit 86 [ 453.600072][T10947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1656'. [ 453.945238][ T5821] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.015281][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.034503][ T1214] usb 2-1: USB disconnect, device number 87 [ 454.084997][ T5821] usb 6-1: can't set config #1, error -71 [ 454.110964][ T5821] usb 6-1: USB disconnect, device number 11 [ 454.565669][ C0] syz_tun: tun_net_xmit 86 [ 454.809598][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1669'. [ 455.270941][T10985] veth1_macvtap: left promiscuous mode [ 455.277081][T10985] macsec0: entered promiscuous mode [ 455.504429][T10993] tipc: Started in network mode [ 455.529820][T10993] tipc: Node identity 0000000000000000000055c3ed4180a2, cluster identity 4711 [ 455.550819][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 455.576371][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 455.605554][ C0] syz_tun: tun_net_xmit 86 [ 455.644123][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 456.137749][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.156466][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.501524][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1680'. [ 457.989823][T11026] FAULT_INJECTION: forcing a failure. [ 457.989823][T11026] name failslab, interval 1, probability 0, space 0, times 0 [ 458.041735][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.4.1684 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 458.041758][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 458.041768][T11026] Call Trace: [ 458.041776][T11026] [ 458.041783][T11026] dump_stack_lvl+0x189/0x250 [ 458.041817][T11026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.041839][T11026] ? __pfx__printk+0x10/0x10 [ 458.041858][T11026] ? __pfx___might_resched+0x10/0x10 [ 458.041875][T11026] ? fs_reclaim_acquire+0x7d/0x100 [ 458.041904][T11026] should_fail_ex+0x414/0x560 [ 458.041927][T11026] should_failslab+0xa8/0x100 [ 458.041967][T11026] __kmalloc_noprof+0xcb/0x4f0 [ 458.041994][T11026] ? kfree+0x4d/0x440 [ 458.042009][T11026] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 458.042037][T11026] tomoyo_realpath_from_path+0xe3/0x5d0 [ 458.042059][T11026] ? tomoyo_domain+0xda/0x130 [ 458.042083][T11026] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 458.042099][T11026] tomoyo_path_number_perm+0x1e8/0x5a0 [ 458.042117][T11026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.042163][T11026] ? __fget_files+0x2a/0x420 [ 458.042187][T11026] ? __fget_files+0x3a0/0x420 [ 458.042207][T11026] ? __fget_files+0x2a/0x420 [ 458.042230][T11026] security_file_ioctl_compat+0xcb/0x2d0 [ 458.042247][T11026] __ia32_compat_sys_ioctl+0x128/0x840 [ 458.042273][T11026] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 458.042294][T11026] ? __fget_files+0x3a0/0x420 [ 458.042319][T11026] ? fput+0xa0/0xd0 [ 458.042343][T11026] ? ksys_write+0x1f0/0x250 [ 458.042366][T11026] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 458.042389][T11026] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.042409][T11026] __do_fast_syscall_32+0xb4/0x110 [ 458.042430][T11026] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.042451][T11026] do_fast_syscall_32+0x34/0x80 [ 458.042472][T11026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.042491][T11026] RIP: 0023:0xf7fc6539 [ 458.042505][T11026] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 458.042518][T11026] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 458.042534][T11026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008563f [ 458.042544][T11026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 458.042553][T11026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.042561][T11026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 458.042569][T11026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.042590][T11026] [ 458.418908][T11026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.846090][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1690'. [ 458.859837][ T5821] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 458.878278][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.887335][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.043191][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 459.060762][ T5821] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.070248][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.078598][ T5821] usb 6-1: Product: syz [ 459.083058][ T5821] usb 6-1: Manufacturer: syz [ 459.088500][ T5821] usb 6-1: SerialNumber: syz [ 459.098715][ T5821] usb 6-1: config 0 descriptor?? [ 459.388738][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1694'. [ 459.401739][ T5821] usb 6-1: USB disconnect, device number 12 [ 459.947478][T11061] FAULT_INJECTION: forcing a failure. [ 459.947478][T11061] name failslab, interval 1, probability 0, space 0, times 0 [ 459.961113][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.0.1697 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 459.961153][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.961165][T11061] Call Trace: [ 459.961174][T11061] [ 459.961183][T11061] dump_stack_lvl+0x189/0x250 [ 459.961224][T11061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.961256][T11061] ? __pfx__printk+0x10/0x10 [ 459.961292][T11061] should_fail_ex+0x414/0x560 [ 459.961321][T11061] should_failslab+0xa8/0x100 [ 459.961353][T11061] kmem_cache_alloc_noprof+0x73/0x3c0 [ 459.961381][T11061] ? skb_clone+0x212/0x3a0 [ 459.961421][T11061] skb_clone+0x212/0x3a0 [ 459.961450][T11061] ? dev_queue_xmit_nit+0x26f/0xcc0 [ 459.961481][T11061] dev_queue_xmit_nit+0x416/0xcc0 [ 459.961508][T11061] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 459.961547][T11061] dev_hard_start_xmit+0x1d5/0x880 [ 459.961597][T11061] __dev_queue_xmit+0x1adf/0x3a70 [ 459.961642][T11061] ? __dev_queue_xmit+0x27e/0x3a70 [ 459.961692][T11061] ? __pfx___dev_queue_xmit+0x10/0x10 [ 459.961722][T11061] ? _copy_from_iter+0x24c/0x15a0 [ 459.961755][T11061] ? sock_alloc_send_pskb+0x875/0x990 [ 459.961797][T11061] ? packet_parse_headers+0x7ff/0xb60 [ 459.961832][T11061] ? packet_parse_headers+0x8b8/0xb60 [ 459.961871][T11061] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 459.961915][T11061] ? __pfx_packet_parse_headers+0x10/0x10 [ 459.961948][T11061] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 459.961989][T11061] ? packet_xmit+0x68/0x330 [ 459.962024][T11061] packet_sendmsg+0x41be/0x5400 [ 459.962089][T11061] ? __pfx___might_resched+0x10/0x10 [ 459.962130][T11061] ? __pfx_packet_sendmsg+0x10/0x10 [ 459.962156][T11061] ? aa_sk_perm+0x81e/0x950 [ 459.962187][T11061] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 459.962220][T11061] ? __asan_memset+0x22/0x50 [ 459.962241][T11061] ? __import_iovec+0x5d4/0x7f0 [ 459.962269][T11061] ? aa_sock_msg_perm+0x94/0x160 [ 459.962296][T11061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.962323][T11061] ? __pfx_packet_sendmsg+0x10/0x10 [ 459.962351][T11061] __sock_sendmsg+0x219/0x270 [ 459.962378][T11061] ____sys_sendmsg+0x505/0x830 [ 459.962416][T11061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.962466][T11061] ___sys_sendmsg+0x21f/0x2a0 [ 459.962498][T11061] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.962571][T11061] ? __fget_files+0x2a/0x420 [ 459.962599][T11061] ? __fget_files+0x3a0/0x420 [ 459.962641][T11061] __sys_sendmsg+0x164/0x220 [ 459.962673][T11061] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.962721][T11061] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 459.962752][T11061] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.962789][T11061] __do_fast_syscall_32+0xb4/0x110 [ 459.962820][T11061] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.962852][T11061] do_fast_syscall_32+0x34/0x80 [ 459.962882][T11061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.962931][T11061] RIP: 0023:0xf7f46539 [ 459.962949][T11061] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 459.962967][T11061] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 459.962990][T11061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 459.963004][T11061] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 459.963017][T11061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.963029][T11061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 459.963041][T11061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.963072][T11061] [ 460.547384][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.577902][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.861206][T11079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1703'. [ 462.101617][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'. [ 462.971098][T11101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.012506][T11101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.293459][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 463.293478][ T30] audit: type=1326 audit(1747390909.261:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.5.1711" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95539 code=0x0 [ 463.321987][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.451680][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'. [ 463.586730][T11117] syz_tun: tun_net_xmit 86 [ 463.702758][T11122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1717'. [ 463.857979][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.895989][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.028389][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.041034][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.505853][ T5880] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 464.646493][ C0] syz_tun: tun_net_xmit 86 [ 464.655954][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 464.671148][ T5880] usb 6-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 464.696122][ T5880] usb 6-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 464.710479][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 464.730336][ T5880] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 464.747881][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.756714][ T5880] usb 6-1: Product: syz [ 464.761167][ T5880] usb 6-1: Manufacturer: syz [ 464.770178][ T5880] usb 6-1: SerialNumber: syz [ 464.776896][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1726'. [ 464.781023][ T5880] usb 6-1: config 0 descriptor?? [ 464.801478][ T5880] usb 6-1: cannot find UAC_HEADER [ 464.839115][ T5880] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 464.878481][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.900100][T11147] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1727'. [ 464.973723][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 465.685611][ C0] syz_tun: tun_net_xmit 86 [ 465.769725][T11160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1731'. [ 466.293867][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.311110][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1733'. [ 466.332100][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.553512][ T10] usb 6-1: USB disconnect, device number 13 [ 466.728371][ C0] syz_tun: tun_net_xmit 86 [ 467.060575][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1737'. [ 467.132233][T11180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 467.765710][ C0] syz_tun: tun_net_xmit 86 [ 468.227445][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.261515][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.305082][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1751'. [ 468.805623][ C0] syz_tun: tun_net_xmit 86 [ 468.812173][T11220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.882650][T11220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.997523][T11220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.007656][ T5821] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 469.209031][ T5821] usb 6-1: Using ep0 maxpacket: 8 [ 469.219855][ T5821] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 469.243409][ T5821] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.280361][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.318839][ T5821] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.345127][ T5821] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.377758][ T5821] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 469.387615][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.396502][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.418764][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.662980][ T5821] usb 6-1: usb_control_msg returned -32 [ 469.676322][ T5821] usbtmc 6-1:16.0: can't read capabilities [ 469.882346][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'. [ 470.037984][T11244] gretap1: entered allmulticast mode [ 470.234641][ T1214] usb 6-1: USB disconnect, device number 14 [ 470.608905][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.627909][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.651671][T11249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1765'. [ 470.661053][T11249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.668419][T11249] IPv6: NLM_F_CREATE should be set when creating new route [ 470.989636][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.017887][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.043233][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.064780][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.100258][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.120209][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.226112][ T5880] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 471.355984][ T5880] usb 6-1: device descriptor read/64, error -71 [ 471.375884][ T5886] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 471.549599][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 471.562133][ T5886] usb 2-1: config 11 has an invalid descriptor of length 128, skipping remainder of the config [ 471.574397][ T5886] usb 2-1: config 11 has 0 interfaces, different from the descriptor's value: 1 [ 471.592278][ T5886] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 471.603567][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.604280][T11276] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 471.613241][ T5880] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 471.634344][ T5886] usb 2-1: Product: syz [ 471.642684][ T5886] usb 2-1: Manufacturer: syz [ 471.652473][ T5886] usb 2-1: SerialNumber: syz [ 471.704233][T11280] input: syz0 as /devices/virtual/input/input28 [ 471.716279][T11280] input: failed to attach handler leds to device input28, error: -6 [ 471.796290][ T5880] usb 6-1: device descriptor read/64, error -71 [ 471.842252][T11282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1774'. [ 471.904577][ T5886] usb 2-1: USB disconnect, device number 88 [ 471.912325][ T5880] usb usb6-port1: attempt power cycle [ 472.157554][ T5886] syz_tun: tun_net_xmit 90 [ 472.295956][ T5880] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 472.330434][ T5880] usb 6-1: device descriptor read/8, error -71 [ 472.354050][T11297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1780'. [ 472.567818][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 472.582268][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.589447][ T5886] syz_tun: tun_net_xmit 90 [ 472.596012][ T5880] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 472.596719][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.626683][ T5880] usb 6-1: device descriptor read/8, error -71 [ 472.696462][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1786'. [ 472.708376][T11311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.725060][T11311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.736390][ T5880] usb usb6-port1: unable to enumerate USB device [ 472.876251][ T5880] syz_tun: tun_net_xmit 90 [ 473.022110][T11322] fuse: Bad value for 'fd' [ 473.588531][T11341] FAULT_INJECTION: forcing a failure. [ 473.588531][T11341] name failslab, interval 1, probability 0, space 0, times 0 [ 473.608233][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.0.1796 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 473.608262][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.608274][T11341] Call Trace: [ 473.608282][T11341] [ 473.608291][T11341] dump_stack_lvl+0x189/0x250 [ 473.608328][T11341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.608357][T11341] ? __pfx__printk+0x10/0x10 [ 473.608382][T11341] ? __pfx___might_resched+0x10/0x10 [ 473.608400][T11341] ? fs_reclaim_acquire+0x7d/0x100 [ 473.608434][T11341] should_fail_ex+0x414/0x560 [ 473.608461][T11341] should_failslab+0xa8/0x100 [ 473.608489][T11341] kmem_cache_alloc_noprof+0x73/0x3c0 [ 473.608521][T11341] ? ptlock_alloc+0x20/0x70 [ 473.608552][T11341] ptlock_alloc+0x20/0x70 [ 473.608576][T11341] pte_alloc_one+0x6d/0x160 [ 473.608603][T11341] __handle_mm_fault+0x27e8/0x5380 [ 473.608646][T11341] ? __pfx___handle_mm_fault+0x10/0x10 [ 473.608691][T11341] ? find_vma+0xe7/0x160 [ 473.608716][T11341] ? __pfx_find_vma+0x10/0x10 [ 473.608744][T11341] handle_mm_fault+0x3f6/0x8c0 [ 473.608779][T11341] do_user_addr_fault+0x764/0x1390 [ 473.608814][T11341] exc_page_fault+0x68/0x110 [ 473.608843][T11341] asm_exc_page_fault+0x26/0x30 [ 473.608861][T11341] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 473.608881][T11341] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 473.608897][T11341] RSP: 0018:ffffc9001039fd78 EFLAGS: 00050212 [ 473.608916][T11341] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 473.608928][T11341] RDX: 0000000000000001 RSI: 0000000080000200 RDI: ffffc9001039fe20 [ 473.608941][T11341] RBP: ffffc9001039fed0 R08: ffffc9001039fe2f R09: 1ffff92002073fc5 [ 473.608963][T11341] R10: dffffc0000000000 R11: fffff52002073fc6 R12: ffffc9001039fe60 [ 473.608977][T11341] R13: ffffc9001039fe20 R14: ffffc9001039fe20 R15: 0000000080000200 [ 473.609009][T11341] _copy_from_user+0x7a/0xb0 [ 473.609038][T11341] __se_sys_prlimit64+0x12e/0xb10 [ 473.609075][T11341] ? __pfx___se_sys_prlimit64+0x10/0x10 [ 473.609101][T11341] ? ksys_write+0x1f0/0x250 [ 473.609132][T11341] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 473.609159][T11341] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.609185][T11341] __do_fast_syscall_32+0xb4/0x110 [ 473.609213][T11341] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.609241][T11341] do_fast_syscall_32+0x34/0x80 [ 473.609268][T11341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.609290][T11341] RIP: 0023:0xf7f46539 [ 473.609306][T11341] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 473.609322][T11341] RSP: 002b:00000000f504555c EFLAGS: 00000206 ORIG_RAX: 0000000000000154 [ 473.609340][T11341] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 473.609353][T11341] RDX: 0000000080000200 RSI: 0000000080000080 RDI: 0000000000000000 [ 473.609364][T11341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.609375][T11341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 473.609386][T11341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.609414][T11341] [ 473.934931][ T5886] syz_tun: tun_net_xmit 90 [ 474.132747][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 474.845948][ T5886] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 474.896685][T11372] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 474.924431][T11372] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 474.958562][T11372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.008713][ T5886] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 475.017319][ T5886] usb 6-1: config 2 has no interface number 0 [ 475.023548][ T5886] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 475.036358][ T5886] usb 6-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 475.050633][ T5886] usb 6-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid maxpacket 12543, setting to 64 [ 475.079318][ T5886] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 475.089256][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.101705][ T5886] usb 6-1: Product: syz [ 475.112338][ T5886] usb 6-1: Manufacturer: syz [ 475.130844][ T5886] usb 6-1: SerialNumber: syz [ 475.151733][T11363] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 475.170385][T11363] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 475.214875][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1811'. [ 475.221278][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 475.533647][ T5886] usb 6-1: probing VID:PID(0424:012C) [ 475.550962][ T5886] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 475.560327][ T5886] usb 6-1: vub300 testing BULK IN EndPoint(1) 82 [ 475.572871][ T5886] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 475.623938][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.634945][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.730614][ T5886] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 475.764375][ T5886] usb 6-1: USB disconnect, device number 19 [ 476.038796][T11395] FAULT_INJECTION: forcing a failure. [ 476.038796][T11395] name failslab, interval 1, probability 0, space 0, times 0 [ 476.128070][T11395] CPU: 0 UID: 0 PID: 11395 Comm: syz.2.1818 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 476.128100][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 476.128113][T11395] Call Trace: [ 476.128122][T11395] [ 476.128131][T11395] dump_stack_lvl+0x189/0x250 [ 476.128170][T11395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.128200][T11395] ? __pfx__printk+0x10/0x10 [ 476.128217][T11395] ? __lock_acquire+0xaac/0xd20 [ 476.128263][T11395] should_fail_ex+0x414/0x560 [ 476.128292][T11395] should_failslab+0xa8/0x100 [ 476.128322][T11395] kmem_cache_alloc_noprof+0x73/0x3c0 [ 476.128348][T11395] ? skb_clone+0x212/0x3a0 [ 476.128383][T11395] skb_clone+0x212/0x3a0 [ 476.128417][T11395] __netlink_deliver_tap+0x404/0x850 [ 476.128457][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.128483][T11395] netlink_deliver_tap+0x19c/0x1b0 [ 476.128509][T11395] netlink_sendskb+0x68/0x140 [ 476.128534][T11395] nfnetlink_rcv+0x22a0/0x2530 [ 476.128598][T11395] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 476.128680][T11395] ? skb_clone+0x246/0x3a0 [ 476.128727][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.128761][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 476.128793][T11395] netlink_unicast+0x75b/0x8d0 [ 476.128827][T11395] netlink_sendmsg+0x805/0xb30 [ 476.128863][T11395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.128891][T11395] ? __import_iovec+0x5d4/0x7f0 [ 476.128919][T11395] ? aa_sock_msg_perm+0x94/0x160 [ 476.128946][T11395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.128970][T11395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.128998][T11395] __sock_sendmsg+0x219/0x270 [ 476.129024][T11395] ____sys_sendmsg+0x505/0x830 [ 476.129064][T11395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.129111][T11395] ___sys_sendmsg+0x21f/0x2a0 [ 476.129144][T11395] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.129212][T11395] ? __fget_files+0x2a/0x420 [ 476.129240][T11395] ? __fget_files+0x3a0/0x420 [ 476.129279][T11395] __sys_sendmsg+0x164/0x220 [ 476.129310][T11395] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.129356][T11395] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 476.129385][T11395] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.129415][T11395] __do_fast_syscall_32+0xb4/0x110 [ 476.129445][T11395] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.129476][T11395] do_fast_syscall_32+0x34/0x80 [ 476.129505][T11395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.129531][T11395] RIP: 0023:0xf7f45539 [ 476.129549][T11395] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 476.129568][T11395] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 476.129590][T11395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 476.129605][T11395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.129617][T11395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.129630][T11395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 476.129642][T11395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.129672][T11395] [ 476.930917][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1822'. [ 477.026183][ T5886] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 477.041306][T11408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1823'. [ 477.185997][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 477.204220][ T5886] usb 6-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 477.218888][ T5886] usb 6-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 477.234836][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 477.282312][ T5886] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 477.331568][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.371279][ T5886] usb 6-1: Product: syz [ 477.385126][ T5886] usb 6-1: Manufacturer: syz [ 477.406330][ T5886] usb 6-1: SerialNumber: syz [ 477.417004][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.449998][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.522935][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.533639][ T5886] usb 6-1: config 0 descriptor?? [ 477.549510][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.586538][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.599135][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.611903][ T5886] usb 6-1: cannot find UAC_HEADER [ 477.685306][T11413] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 477.727351][ T5886] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 477.768524][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.125381][ T5821] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 479.301296][ T5821] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.317292][ T5821] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.337979][ T24] usb 6-1: USB disconnect, device number 20 [ 479.375657][ T5821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.399665][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.453945][T11433] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 479.484500][ T5821] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.535878][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 479.684886][ T5821] usb 2-1: USB disconnect, device number 89 [ 480.258443][ T24] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 480.356894][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.367026][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.404566][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.416210][ T24] usb 6-1: device descriptor read/64, error -71 [ 480.416247][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.500768][T11454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1839'. [ 480.675937][ T24] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 480.807928][ T5821] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 480.846319][ T24] usb 6-1: device descriptor read/64, error -71 [ 480.966380][ T24] usb usb6-port1: attempt power cycle [ 481.023799][ T5821] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.048397][ T5821] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.081153][ T5821] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.127030][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.139702][T11456] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 481.164554][ T5821] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.358691][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.376519][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.396107][ T24] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 481.427773][ T24] usb 6-1: device descriptor read/8, error -71 [ 481.454960][ T5886] usb 2-1: USB disconnect, device number 90 [ 481.590034][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'. [ 481.845498][ T24] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 481.899829][T11476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.912071][ T24] usb 6-1: device descriptor read/8, error -71 [ 481.921294][T11476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.026466][ T24] usb usb6-port1: unable to enumerate USB device [ 482.722213][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1851'. [ 482.857071][ T1214] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 482.913899][ T1214] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 483.445406][ T30] audit: type=1326 audit(1747390929.411:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.515885][ T30] audit: type=1326 audit(1747390929.411:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.575303][ T30] audit: type=1326 audit(1747390929.441:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.625941][ T30] audit: type=1326 audit(1747390929.441:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.636165][ T1214] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 483.660242][ T30] audit: type=1326 audit(1747390929.441:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.700073][ T30] audit: type=1326 audit(1747390929.441:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.724333][ T30] audit: type=1326 audit(1747390929.441:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.745459][ T5821] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 483.748879][ T30] audit: type=1326 audit(1747390929.441:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.790330][ T30] audit: type=1326 audit(1747390929.441:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.826506][ T30] audit: type=1326 audit(1747390929.441:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11501 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 483.851233][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.892033][ T1214] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 483.917112][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.937131][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.985337][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 484.206540][T11508] hid-generic 0000:0000:0000.0011: pid 11508 passed too short report [ 484.235961][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.254810][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.289043][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58368, setting to 1024 [ 484.386865][ T1214] usb 2-1: config 0 descriptor?? [ 484.493338][ T5821] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 484.493370][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.510063][ T5821] usb 6-1: config 0 descriptor?? [ 484.878950][ T5821] usbhid 6-1:0.0: can't add hid device: -71 [ 484.885008][ T5821] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 484.918682][ T5821] usb 6-1: USB disconnect, device number 25 [ 485.117414][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.131202][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.191143][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.216851][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.227352][ T1214] usbhid 2-1:0.0: can't add hid device: -71 [ 485.234176][ T1214] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 485.382304][ T1214] usb 2-1: USB disconnect, device number 91 [ 485.560906][T11528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1863'. [ 486.089453][T11538] syz_tun: tun_net_xmit 86 [ 486.310195][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1867'. [ 486.516574][ T1214] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 486.560487][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.576579][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.593277][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.628580][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.735463][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 486.786426][ T5886] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 486.811245][ T1214] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 486.826357][ T1214] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 486.942131][ T1214] usb 2-1: config 0 interface 0 has no altsetting 0 [ 486.951232][ T5886] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 486.974598][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.976061][ T1214] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 486.995446][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.006148][ T1214] usb 2-1: Product: syz [ 487.010375][ T1214] usb 2-1: Manufacturer: syz [ 487.021628][ T1214] usb 2-1: SerialNumber: syz [ 487.100589][ T1214] usb 2-1: config 0 descriptor?? [ 487.111299][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.120670][ T1214] usb 2-1: cannot find UAC_HEADER [ 487.128004][ C0] syz_tun: tun_net_xmit 86 [ 487.172270][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 487.254899][ T5886] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 487.279637][ T1214] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 487.351740][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.493209][ T5886] usb 6-1: config 0 descriptor?? [ 487.636948][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.705943][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 487.756003][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 487.810904][ T5886] usb 6-1: USB disconnect, device number 26 [ 488.165586][ C0] syz_tun: tun_net_xmit 86 [ 488.307224][T11567] FAULT_INJECTION: forcing a failure. [ 488.307224][T11567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.375083][T11567] CPU: 0 UID: 0 PID: 11567 Comm: syz.0.1874 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 488.375114][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.375127][T11567] Call Trace: [ 488.375136][T11567] [ 488.375146][T11567] dump_stack_lvl+0x189/0x250 [ 488.375200][T11567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.375230][T11567] ? __pfx__printk+0x10/0x10 [ 488.375264][T11567] should_fail_ex+0x414/0x560 [ 488.375291][T11567] _copy_from_user+0x2d/0xb0 [ 488.375321][T11567] bpf_test_init+0xf8/0x170 [ 488.375348][T11567] bpf_prog_test_run_skb+0x1e9/0x1560 [ 488.375371][T11567] ? __fget_files+0x2a/0x420 [ 488.375401][T11567] ? __fget_files+0x2a/0x420 [ 488.375435][T11567] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 488.375459][T11567] bpf_prog_test_run+0x2ac/0x340 [ 488.375491][T11567] __sys_bpf+0x4a4/0x860 [ 488.375519][T11567] ? __pfx___sys_bpf+0x10/0x10 [ 488.375556][T11567] ? ksys_write+0x1f0/0x250 [ 488.375590][T11567] __ia32_sys_bpf+0x7c/0x90 [ 488.375623][T11567] __do_fast_syscall_32+0xb4/0x110 [ 488.375651][T11567] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.375680][T11567] do_fast_syscall_32+0x34/0x80 [ 488.375707][T11567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 488.375731][T11567] RIP: 0023:0xf7f46539 [ 488.375748][T11567] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 488.375766][T11567] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 488.375787][T11567] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 488.375800][T11567] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 488.375812][T11567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 488.375823][T11567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 488.375835][T11567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 488.375860][T11567] [ 488.572458][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.628224][T11570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1876'. [ 488.651767][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 488.876351][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.935722][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.000996][ T5886] usb 2-1: USB disconnect, device number 92 [ 489.157963][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.201115][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.492140][T11580] netlink: 'syz.5.1879': attribute type 1 has an invalid length. [ 489.726154][T11582] netlink: 'syz.0.1890': attribute type 1 has an invalid length. [ 489.900127][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.911506][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.009359][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 490.009375][ T30] audit: type=1326 audit(1747390935.971:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.037993][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.052826][ T30] audit: type=1326 audit(1747390935.971:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.100824][ T30] audit: type=1326 audit(1747390935.971:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.143766][ T30] audit: type=1326 audit(1747390935.981:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.215460][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 490.621187][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.631707][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.648467][ T30] audit: type=1326 audit(1747390935.981:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.671905][ T30] audit: type=1326 audit(1747390935.981:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.695987][ T30] audit: type=1326 audit(1747390935.981:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.705710][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 490.720277][ T30] audit: type=1326 audit(1747390935.981:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.746734][ T30] audit: type=1326 audit(1747390935.981:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.769640][ T30] audit: type=1326 audit(1747390935.981:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11596 comm="syz.4.1884" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 490.992326][ T10] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.022574][ T10] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 491.066019][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 491.072818][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 491.149563][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.302043][ T10] usb 6-1: config 0 descriptor?? [ 491.775695][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.794686][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.811399][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.874037][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.273724][ T10] corsair-cpro 0003:1B1C:0C10.0012: item fetching failed at offset 3/5 [ 492.291110][ T10] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -22 [ 492.465394][ T1214] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 492.714084][ T1214] usb 2-1: not running at top speed; connect to a high speed hub [ 492.724243][T11627] netdevsim netdevsim5 netdevsim1: Unsupported IPsec algorithm [ 492.744838][ T1214] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 492.756733][ T1214] usb 2-1: config 1 interface 0 has no altsetting 0 [ 492.784507][ T1214] usb 2-1: string descriptor 0 read error: -22 [ 492.792049][ T1214] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 492.809549][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.979996][T11626] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 493.310885][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.324046][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.502412][T11632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.519994][T11632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.347947][ T10] usb 6-1: USB disconnect, device number 27 [ 494.730035][T11643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.730471][T11643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.925907][ T5886] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 494.989365][ T5917] usb 2-1: USB disconnect, device number 93 [ 495.088330][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.099107][ T5886] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 495.113173][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.161705][ T5886] usb 6-1: config 0 descriptor?? [ 495.223946][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1899'. [ 495.301243][T11659] FAULT_INJECTION: forcing a failure. [ 495.301243][T11659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.315461][T11659] CPU: 0 UID: 0 PID: 11659 Comm: syz.0.1902 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 495.315493][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.315507][T11659] Call Trace: [ 495.315516][T11659] [ 495.315526][T11659] dump_stack_lvl+0x189/0x250 [ 495.315562][T11659] ? __lock_acquire+0xaac/0xd20 [ 495.315597][T11659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.315629][T11659] ? __pfx__printk+0x10/0x10 [ 495.315651][T11659] ? __might_fault+0xb0/0x130 [ 495.315702][T11659] should_fail_ex+0x414/0x560 [ 495.315731][T11659] _copy_from_user+0x2d/0xb0 [ 495.315765][T11659] do_sys_poll+0x239/0x1050 [ 495.315809][T11659] ? cgroup_rstat_updated+0x144/0xb50 [ 495.315844][T11659] ? __pfx_do_sys_poll+0x10/0x10 [ 495.315948][T11659] ? rcu_read_lock_any_held+0xb3/0x120 [ 495.315973][T11659] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 495.315999][T11659] ? vfs_write+0x8d8/0xa90 [ 495.316049][T11659] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 495.316085][T11659] ? set_compat_user_sigmask+0xc1/0x1b0 [ 495.316108][T11659] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 495.316131][T11659] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 495.316165][T11659] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 495.316201][T11659] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 495.316237][T11659] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 495.316269][T11659] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.316298][T11659] __do_fast_syscall_32+0xb4/0x110 [ 495.316325][T11659] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.316350][T11659] do_fast_syscall_32+0x34/0x80 [ 495.316377][T11659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.316404][T11659] RIP: 0023:0xf7f46539 [ 495.316422][T11659] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 495.316442][T11659] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 495.316464][T11659] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 495.316479][T11659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.316490][T11659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.316502][T11659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.316514][T11659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.316544][T11659] [ 496.124456][T11641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.141659][T11641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.154430][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.194424][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.333928][ T5886] usbhid 6-1:0.0: can't add hid device: -71 [ 496.341814][ T5886] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 496.354625][ T5886] usb 6-1: USB disconnect, device number 28 [ 496.385797][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 496.408475][T11679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.417981][T11679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.596000][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 496.604860][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 496.639857][ T24] usb 2-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 496.669685][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 496.681693][ T24] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 496.693844][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.704663][ T24] usb 2-1: Product: syz [ 496.712239][ T24] usb 2-1: Manufacturer: syz [ 496.719535][ T24] usb 2-1: SerialNumber: syz [ 496.731336][ T24] usb 2-1: config 0 descriptor?? [ 496.751686][ T24] usb 2-1: cannot find UAC_HEADER [ 496.781018][ T24] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 496.824662][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.951614][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 497.637165][ T1214] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 497.811736][ T1214] usb 6-1: not running at top speed; connect to a high speed hub [ 497.849235][ T1214] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 497.869555][ T1214] usb 6-1: config 1 interface 0 has no altsetting 0 [ 497.987513][ T1214] usb 6-1: string descriptor 0 read error: -22 [ 497.993997][ T1214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 498.019309][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.116343][T11697] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 498.532179][ T1214] usb 2-1: USB disconnect, device number 94 [ 498.717961][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 498.717978][ T30] audit: type=1326 audit(1747390944.691:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 498.822151][ T30] audit: type=1326 audit(1747390944.721:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 498.889168][ T30] audit: type=1326 audit(1747390944.731:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 498.936638][T11715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.962999][T11715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.971918][ T30] audit: type=1326 audit(1747390944.731:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 499.133241][T11715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.142511][T11715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.190319][ T30] audit: type=1326 audit(1747390944.731:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 499.258579][ T30] audit: type=1326 audit(1747390944.731:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 499.285901][ T30] audit: type=1326 audit(1747390944.731:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 499.311333][ T30] audit: type=1326 audit(1747390944.731:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 499.333931][ T30] audit: type=1326 audit(1747390944.731:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 499.380378][ T30] audit: type=1326 audit(1747390944.731:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f45539 code=0x7ffc0000 [ 500.604115][ T1214] usb 6-1: USB disconnect, device number 29 [ 500.821451][T11746] fuse: Unknown parameter 'roo [ 500.821451][T11746] Šode' [ 500.998972][T11752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.014951][T11752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.553583][T11766] input: syz0 as /devices/virtual/input/input29 [ 501.615928][ T5880] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 501.809593][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 501.842059][ T5880] usb 6-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 501.865951][ T5880] usb 6-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 501.888358][T11776] FAULT_INJECTION: forcing a failure. [ 501.888358][T11776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.912548][ T5880] usb 6-1: config 0 interface 0 has no altsetting 0 [ 501.949212][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.1.1941 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 501.949242][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.949254][T11776] Call Trace: [ 501.949263][T11776] [ 501.949272][T11776] dump_stack_lvl+0x189/0x250 [ 501.949306][T11776] ? __lock_acquire+0xaac/0xd20 [ 501.949345][T11776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.949374][T11776] ? __pfx__printk+0x10/0x10 [ 501.949394][T11776] ? __might_fault+0xb0/0x130 [ 501.949432][T11776] should_fail_ex+0x414/0x560 [ 501.949458][T11776] _copy_from_iter+0x1db/0x15a0 [ 501.949493][T11776] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 501.949516][T11776] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 501.949544][T11776] ? __pfx__copy_from_iter+0x10/0x10 [ 501.949572][T11776] ? __build_skb_around+0x257/0x3e0 [ 501.949601][T11776] ? netlink_sendmsg+0x642/0xb30 [ 501.949624][T11776] ? skb_put+0x11b/0x210 [ 501.949654][T11776] netlink_sendmsg+0x6b2/0xb30 [ 501.949687][T11776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.949714][T11776] ? __import_iovec+0x5d4/0x7f0 [ 501.949741][T11776] ? aa_sock_msg_perm+0x94/0x160 [ 501.949765][T11776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.949788][T11776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.949814][T11776] __sock_sendmsg+0x219/0x270 [ 501.949839][T11776] ____sys_sendmsg+0x505/0x830 [ 501.949872][T11776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.949916][T11776] ___sys_sendmsg+0x21f/0x2a0 [ 501.949946][T11776] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.950009][T11776] ? __fget_files+0x2a/0x420 [ 501.950036][T11776] ? __fget_files+0x3a0/0x420 [ 501.950072][T11776] __sys_sendmsg+0x164/0x220 [ 501.950103][T11776] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.950145][T11776] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 501.950173][T11776] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.950201][T11776] __do_fast_syscall_32+0xb4/0x110 [ 501.950229][T11776] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.950257][T11776] do_fast_syscall_32+0x34/0x80 [ 501.950285][T11776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 501.950310][T11776] RIP: 0023:0xf710e539 [ 501.950331][T11776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 501.950350][T11776] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 501.950371][T11776] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 501.950385][T11776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 501.950397][T11776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 501.950408][T11776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.950420][T11776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 501.950448][T11776] [ 501.959132][ T5880] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 502.287262][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.298771][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.312977][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.321712][ T5880] usb 6-1: Product: syz [ 502.333448][ T5880] usb 6-1: Manufacturer: syz [ 502.339179][ T5880] usb 6-1: SerialNumber: syz [ 502.359687][ T5880] usb 6-1: config 0 descriptor?? [ 502.374999][ T5880] usb 6-1: cannot find UAC_HEADER [ 502.507332][ T5880] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 502.613910][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.223005][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 503.469029][T11805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.478560][T11805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.489857][T11805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.498911][T11805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.508838][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 503.637681][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 503.671220][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1952'. [ 503.925859][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 504.015106][T11811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.071751][T11811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.075298][ T10] usb 2-1: device descriptor read/64, error -71 [ 504.305974][ T1214] usb 6-1: USB disconnect, device number 30 [ 504.333599][T11816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.345501][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 504.402999][T11816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.517084][ T10] usb 2-1: device descriptor read/64, error -71 [ 504.662513][ T10] usb usb2-port1: attempt power cycle [ 505.029502][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 505.096172][ T10] usb 2-1: device descriptor read/8, error -71 [ 505.224566][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.240180][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.376500][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 505.418197][ T10] usb 2-1: device descriptor read/8, error -71 [ 505.459695][T11820] syz.5.1955 (11820): drop_caches: 2 [ 505.539683][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.557545][ T10] usb usb2-port1: unable to enumerate USB device [ 505.600400][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.664980][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.677938][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.968243][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.993909][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.538619][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 506.581692][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.594895][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.705958][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 506.720891][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.764043][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.798660][ T10] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 506.809679][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.827319][ T10] usb 6-1: config 0 descriptor?? [ 506.870417][T11850] bridge_slave_0: entered promiscuous mode [ 507.322990][ T10] hid-rmi 0003:06CB:81A7.0013: item fetching failed at offset 10/11 [ 507.376649][ T10] hid-rmi 0003:06CB:81A7.0013: parse failed [ 507.382839][ T10] hid-rmi 0003:06CB:81A7.0013: probe with driver hid-rmi failed with error -22 [ 507.530325][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.537144][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.948932][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.968750][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.050074][T11871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.070307][T11871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.673327][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'. [ 508.860678][ T10] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 508.987994][T11892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.997408][T11892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.015353][ T10] usb 2-1: device descriptor read/64, error -71 [ 509.033177][T11893] warning: `syz.0.1978' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 509.148020][ T5886] usb 6-1: USB disconnect, device number 31 [ 509.285792][ T10] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 509.327520][T11898] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 509.413617][T11898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.425817][ T10] usb 2-1: device descriptor read/64, error -71 [ 509.537340][ T10] usb usb2-port1: attempt power cycle [ 509.684950][T11897] bond3: (slave veth7): Enslaving as an active interface with a down link [ 509.716342][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.738583][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.762041][T11898] bond2: (slave veth0_to_bond): Releasing active interface [ 509.815258][T11898] vlan0: entered promiscuous mode [ 509.881763][T11898] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 509.902307][ T10] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 509.930404][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.941234][ T10] usb 2-1: device descriptor read/8, error -71 [ 509.950874][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.012210][T11912] ALSA: mixer_oss: invalid OSS volume '0000000000000000000000300000000' [ 510.026193][T11912] ALSA: mixer_oss: invalid OSS volume '' [ 510.126551][ T24] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 510.187257][ T10] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 510.229051][ T10] usb 2-1: device descriptor read/8, error -71 [ 510.276054][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 510.314975][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 510.335931][ T24] usb 6-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 510.350429][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 510.367249][ T10] usb usb2-port1: unable to enumerate USB device [ 510.392649][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1995'. [ 510.412163][T11927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1995'. [ 510.498037][ T24] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 510.515332][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.523457][ T24] usb 6-1: Product: syz [ 510.543120][ T24] usb 6-1: Manufacturer: syz [ 510.551134][ T24] usb 6-1: SerialNumber: syz [ 510.574683][ T24] usb 6-1: config 0 descriptor?? [ 510.588547][ T24] usb 6-1: cannot find UAC_HEADER [ 510.642106][ T24] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 510.740842][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.145469][ T10] usb 6-1: USB disconnect, device number 32 [ 513.173895][T11981] kvm: kvm [11979]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000004) = 0x0 [ 513.206991][T11981] input: syz1 as /devices/virtual/input/input30 [ 513.219309][T11985] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2014'. [ 513.815812][ T5880] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 514.007345][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 514.034738][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short [ 514.079395][ T5880] usb 2-1: config 255 has an invalid interface number: 234 but max is 0 [ 514.106196][ T5880] usb 2-1: config 255 has no interface number 0 [ 514.128240][ T5880] usb 2-1: config 255 interface 234 has no altsetting 0 [ 514.139537][ T5880] usb 2-1: New USB device found, idVendor=04cb, idProduct=013f, bcdDevice=60.6f [ 514.154756][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.165949][ T5880] usb 2-1: Product: syz [ 514.170346][ T5880] usb 2-1: Manufacturer: syz [ 514.174990][ T5880] usb 2-1: SerialNumber: syz [ 514.350180][T12007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.362787][T12007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.429558][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.440224][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.540474][ T5880] gspca_main: finepix-2.14.0 probing 04cb:013f [ 514.585245][ T5880] usb 2-1: USB disconnect, device number 103 [ 514.726218][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 514.840778][T12017] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 514.863804][T12017] netlink: 'syz.2.2026': attribute type 2 has an invalid length. [ 514.894804][T12017] netlink: 'syz.2.2026': attribute type 1 has an invalid length. [ 514.925146][T12017] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.2026'. [ 515.365727][ T10] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 515.575914][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.590212][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 515.621213][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.659543][ T10] usb 2-1: config 0 descriptor?? [ 515.834852][T12045] syzkaller0: entered promiscuous mode [ 515.843850][T12045] syzkaller0: entered allmulticast mode [ 516.404435][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.414462][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.601782][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 516.616859][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 516.657844][ T10] usb 2-1: USB disconnect, device number 104 [ 516.813847][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 516.869682][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.881280][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.065051][T12069] xt_NFQUEUE: number of total queues is 0 [ 517.072530][T12069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.084148][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.101152][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'. [ 517.714341][T12089] FAULT_INJECTION: forcing a failure. [ 517.714341][T12089] name failslab, interval 1, probability 0, space 0, times 0 [ 517.749100][T12089] CPU: 1 UID: 0 PID: 12089 Comm: syz.1.2055 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 517.749135][T12089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 517.749150][T12089] Call Trace: [ 517.749159][T12089] [ 517.749170][T12089] dump_stack_lvl+0x189/0x250 [ 517.749214][T12089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.749247][T12089] ? __pfx__printk+0x10/0x10 [ 517.749286][T12089] should_fail_ex+0x414/0x560 [ 517.749317][T12089] should_failslab+0xa8/0x100 [ 517.749351][T12089] __kmalloc_cache_noprof+0x70/0x3d0 [ 517.749381][T12089] ? sctp_add_bind_addr+0x8c/0x370 [ 517.749420][T12089] sctp_add_bind_addr+0x8c/0x370 [ 517.749457][T12089] sctp_copy_local_addr_list+0x30b/0x4e0 [ 517.749494][T12089] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 517.749525][T12089] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 517.749559][T12089] ? sctp_v6_is_any+0x64/0x80 [ 517.749581][T12089] ? sctp_copy_one_addr+0x93/0x360 [ 517.749616][T12089] sctp_bind_addr_copy+0xb3/0x3c0 [ 517.749657][T12089] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 517.749690][T12089] sctp_connect_new_asoc+0x2e0/0x690 [ 517.749717][T12089] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 517.749739][T12089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 517.749770][T12089] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 517.749799][T12089] ? security_sctp_bind_connect+0x7e/0x2e0 [ 517.749837][T12089] sctp_sendmsg+0x155c/0x2810 [ 517.749872][T12089] ? __pfx_sctp_sendmsg+0x10/0x10 [ 517.749897][T12089] ? aa_sk_perm+0x81e/0x950 [ 517.749926][T12089] ? __pfx_aa_sk_perm+0x10/0x10 [ 517.749953][T12089] ? sock_rps_record_flow+0x19/0x400 [ 517.749992][T12089] ? inet_sendmsg+0x2f4/0x370 [ 517.750030][T12089] __sock_sendmsg+0x19c/0x270 [ 517.750060][T12089] __sys_sendto+0x3bd/0x520 [ 517.750092][T12089] ? __pfx___sys_sendto+0x10/0x10 [ 517.750117][T12089] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 517.750166][T12089] ? __fget_files+0x3a0/0x420 [ 517.750208][T12089] ? ksys_write+0x1f0/0x250 [ 517.750246][T12089] __ia32_sys_sendto+0xdd/0x100 [ 517.750280][T12089] __do_fast_syscall_32+0xb4/0x110 [ 517.750312][T12089] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.750345][T12089] do_fast_syscall_32+0x34/0x80 [ 517.750376][T12089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.750403][T12089] RIP: 0023:0xf710e539 [ 517.750424][T12089] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 517.750443][T12089] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 517.750467][T12089] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 517.750483][T12089] RDX: 0000000000000001 RSI: 0000000000000040 RDI: 0000000080000140 [ 517.750497][T12089] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 517.750510][T12089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.750523][T12089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.750555][T12089] [ 518.048310][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.211972][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 518.240917][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'. [ 518.286192][T12103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.347027][T12103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.006003][T12124] syzkaller0: entered promiscuous mode [ 519.015142][T12124] syzkaller0: entered allmulticast mode [ 519.308382][T12131] binder: 12130:12131 ioctl c0306201 80001d40 returned -14 [ 519.435705][T12131] tipc: Cannot configure node identity twice [ 519.518214][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 519.518236][ T30] audit: type=1326 audit(1747390965.491:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12132 comm="syz.1.2066" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 520.839143][T12150] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2072'. [ 521.988117][T12162] netlink: 'syz.0.2076': attribute type 10 has an invalid length. [ 523.187173][ T37] vlan0: left promiscuous mode [ 523.195094][T12162] bond0: left promiscuous mode [ 523.219872][T12162] bond_slave_0: left promiscuous mode [ 523.254740][T12162] bond_slave_1: left promiscuous mode [ 523.283592][T12162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.306495][ T12] bond0: (slave bond_slave_0): interface is now down [ 523.314582][ T12] bond0: (slave bond_slave_1): interface is now down [ 523.360835][T12162] team0: Port device bond0 added [ 523.401580][ T4529] bond0: (slave bond_slave_0): interface is now down [ 523.418871][ T4529] bond0: (slave bond_slave_1): interface is now down [ 523.435125][T12167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.466903][ T4529] bond0: now running without any active interface! [ 523.477072][T12167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.594864][T12174] overlayfs: missing 'lowerdir' [ 523.607533][T12167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.650352][T12162] syz.0.2076 (12162) used greatest stack depth: 19720 bytes left [ 523.659530][T12167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.874666][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 523.900917][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 523.949422][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 523.996697][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2082'. [ 524.356873][T12196] syzkaller0: entered promiscuous mode [ 524.372828][T12196] syzkaller0: entered allmulticast mode [ 524.626936][T12204] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2091'. [ 524.721948][T12207] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2092'. [ 525.267906][T12215] loop2: detected capacity change from 0 to 7 [ 525.308175][T12215] Dev loop2: unable to read RDB block 7 [ 525.317656][T12215] loop2: AHDI p1 p2 p3 p4 [ 525.327575][T12215] loop2: partition table partially beyond EOD, truncated [ 525.363314][T12215] loop2: p1 start 1601398130 is beyond EOD, truncated [ 525.372440][T12215] loop2: p2 start 1702059890 is beyond EOD, truncated [ 525.392035][T12215] loop2: p3 size 150995200 extends beyond EOD, truncated [ 525.605744][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.614613][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.643371][T12226] fuse: Bad value for 'fd' [ 525.700913][T12226] xt_hashlimit: max too large, truncated to 1048576 [ 525.744718][T12226] xt_hashlimit: overflow, rate too high: 0 [ 526.413478][T12240] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2103'. [ 527.780831][T12238] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.791166][T12238] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.800048][T12238] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.808866][T12238] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.896011][T12238] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 528.135633][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 528.226077][ T5886] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 528.353107][ T5918] bond0: (slave bond_slave_0): interface is now down [ 528.372677][ T5918] bond0: (slave bond_slave_1): interface is now down [ 528.385994][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 528.393695][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.395286][ T5918] bond0: (slave vxlan0): interface is now down [ 528.419983][T12261] netlink: 'syz.5.2111': attribute type 10 has an invalid length. [ 528.436629][ T5886] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 528.451827][ T5918] bond0: now running without any active interface! [ 528.458439][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.484694][ T5886] usb 2-1: config 0 descriptor?? [ 528.535894][T12261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.547971][T12261] team0: Port device bond0 added [ 528.832033][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.854092][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.924728][ T5886] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 529.062651][T12278] syzkaller0: entered promiscuous mode [ 529.087956][T12278] syzkaller0: entered allmulticast mode [ 529.191840][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2116'. [ 529.204057][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2116'. [ 529.279467][T12285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2117'. [ 529.327398][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.358481][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.400612][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.436311][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.494338][ T5886] usb 2-1: USB disconnect, device number 105 [ 529.613616][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2120'. [ 529.703851][T12295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2120'. [ 530.214780][T12307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.224113][T12307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.331990][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.344810][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.073361][T12313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2128'. [ 531.252561][ T30] audit: type=1326 audit(1747390977.221:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.276999][ T30] audit: type=1326 audit(1747390977.251:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=15 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.318467][ T30] audit: type=1326 audit(1747390977.251:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.343642][ T30] audit: type=1326 audit(1747390977.251:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.390762][ T30] audit: type=1326 audit(1747390977.251:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.434056][T12318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2130'. [ 531.444194][ T30] audit: type=1326 audit(1747390977.251:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.477523][ T30] audit: type=1326 audit(1747390977.251:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.512643][ T30] audit: type=1326 audit(1747390977.251:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.540541][ T30] audit: type=1326 audit(1747390977.251:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 531.574214][ T30] audit: type=1326 audit(1747390977.251:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz.1.2130" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 532.659724][T12329] netlink: 'syz.4.2133': attribute type 2 has an invalid length. [ 532.677592][T12329] netlink: 'syz.4.2133': attribute type 4 has an invalid length. [ 532.708671][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 532.735727][ T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 532.895941][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 532.921878][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 532.953211][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.984463][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.008675][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 533.166139][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 533.185744][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.231382][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.244594][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 533.272595][T12355] FAULT_INJECTION: forcing a failure. [ 533.272595][T12355] name failslab, interval 1, probability 0, space 0, times 0 [ 533.285913][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.296111][T12355] CPU: 0 UID: 0 PID: 12355 Comm: syz.2.2139 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 533.296142][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.296156][T12355] Call Trace: [ 533.296166][T12355] [ 533.296176][T12355] dump_stack_lvl+0x189/0x250 [ 533.296227][T12355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.296256][T12355] ? __pfx__printk+0x10/0x10 [ 533.296284][T12355] ? __pfx___might_resched+0x10/0x10 [ 533.296310][T12355] should_fail_ex+0x414/0x560 [ 533.296338][T12355] should_failslab+0xa8/0x100 [ 533.296370][T12355] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 533.296397][T12355] ? __alloc_skb+0x112/0x2d0 [ 533.296428][T12355] __alloc_skb+0x112/0x2d0 [ 533.296459][T12355] netlink_sendmsg+0x5c6/0xb30 [ 533.296510][T12355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.296540][T12355] ? __import_iovec+0x5d4/0x7f0 [ 533.296569][T12355] ? aa_sock_msg_perm+0x94/0x160 [ 533.296595][T12355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.296619][T12355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.296646][T12355] __sock_sendmsg+0x219/0x270 [ 533.296672][T12355] ____sys_sendmsg+0x505/0x830 [ 533.296708][T12355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.296754][T12355] ___sys_sendmsg+0x21f/0x2a0 [ 533.296784][T12355] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.296850][T12355] ? __fget_files+0x2a/0x420 [ 533.296876][T12355] ? __fget_files+0x3a0/0x420 [ 533.296913][T12355] __sys_sendmsg+0x164/0x220 [ 533.296943][T12355] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.296986][T12355] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 533.297015][T12355] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.297042][T12355] __do_fast_syscall_32+0xb4/0x110 [ 533.297071][T12355] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.297100][T12355] do_fast_syscall_32+0x34/0x80 [ 533.297127][T12355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.297152][T12355] RIP: 0023:0xf7f45539 [ 533.297170][T12355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 533.297188][T12355] RSP: 002b:00000000f504555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 533.297210][T12355] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 533.297224][T12355] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.297236][T12355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 533.297248][T12355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.297260][T12355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.297288][T12355] [ 533.301277][ T24] usb 2-1: config 0 descriptor?? [ 533.943197][T12321] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 534.742425][T12371] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2142'. [ 534.765011][T12370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2143'. [ 534.797742][T12370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2143'. [ 536.006153][ T5830] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 536.161124][T12394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.170741][T12394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.492826][T12396] FAULT_INJECTION: forcing a failure. [ 536.492826][T12396] name failslab, interval 1, probability 0, space 0, times 0 [ 536.515797][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 536.515821][ T30] audit: type=1326 audit(1747390982.451:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 536.561387][ T30] audit: type=1326 audit(1747390982.461:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 536.565307][T12396] CPU: 1 UID: 0 PID: 12396 Comm: syz.4.2151 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 536.565341][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.565363][T12396] Call Trace: [ 536.565373][T12396] [ 536.565383][T12396] dump_stack_lvl+0x189/0x250 [ 536.565429][T12396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.565465][T12396] ? __pfx__printk+0x10/0x10 [ 536.565492][T12396] ? __pfx_snprintf+0x10/0x10 [ 536.565527][T12396] should_fail_ex+0x414/0x560 [ 536.565560][T12396] should_failslab+0xa8/0x100 [ 536.565595][T12396] __kmalloc_noprof+0xcb/0x4f0 [ 536.565626][T12396] ? aa_label_asxprint+0x70/0x130 [ 536.565669][T12396] aa_label_asxprint+0x70/0x130 [ 536.565710][T12396] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 536.565744][T12396] security_lsmprop_to_secctx+0x96/0x2c0 [ 536.565780][T12396] audit_log_task_context+0xff/0x240 [ 536.565813][T12396] ? __pfx_audit_log_task_context+0x10/0x10 [ 536.565840][T12396] ? __pfx_audit_log_format+0x10/0x10 [ 536.565865][T12396] ? audit_log_start+0x6bf/0x870 [ 536.565899][T12396] audit_log_task+0x190/0x3c0 [ 536.565939][T12396] ? __pfx_audit_log_task+0x10/0x10 [ 536.565985][T12396] ? stack_depot_save_flags+0x40/0x910 [ 536.566012][T12396] ? __pfx_migrate_enable+0x10/0x10 [ 536.566044][T12396] audit_seccomp+0x86/0x190 [ 536.566086][T12396] __seccomp_filter+0x9aa/0x1a40 [ 536.566137][T12396] ? __pfx___seccomp_filter+0x10/0x10 [ 536.566214][T12396] ? __secure_computing+0xe2/0x2a0 [ 536.566265][T12396] syscall_trace_enter+0xaa/0x160 [ 536.566300][T12396] __do_fast_syscall_32+0x9b/0x110 [ 536.566333][T12396] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.566366][T12396] do_fast_syscall_32+0x34/0x80 [ 536.566398][T12396] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 536.566425][T12396] RIP: 0023:0xf7fc6539 [ 536.566446][T12396] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 536.566466][T12396] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 536.566489][T12396] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50e6620 [ 536.566505][T12396] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 536.566519][T12396] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 536.566533][T12396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 536.566545][T12396] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.566577][T12396] [ 536.566667][T12396] audit: error in audit_log_task_context [ 536.589984][ T30] audit: type=1326 audit(1747390982.461:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 537.163718][ T30] audit: type=1326 audit(1747390982.461:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 537.186526][ T30] audit: type=1326 audit(1747390982.461:951): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 537.214677][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2154'. [ 537.230035][T12404] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2154'. [ 537.285518][ T30] audit: type=1326 audit(1747390982.851:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 537.371714][ T30] audit: type=1326 audit(1747390982.851:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 537.379032][T12408] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2155'. [ 537.415083][ T30] audit: type=1326 audit(1747390982.851:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 537.445631][ T30] audit: type=1326 audit(1747390982.851:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.4.2151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x7ffc0000 [ 538.212727][T12426] FAULT_INJECTION: forcing a failure. [ 538.212727][T12426] name failslab, interval 1, probability 0, space 0, times 0 [ 538.394561][T12426] CPU: 0 UID: 0 PID: 12426 Comm: syz.2.2160 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 538.394593][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.394607][T12426] Call Trace: [ 538.394616][T12426] [ 538.394625][T12426] dump_stack_lvl+0x189/0x250 [ 538.394667][T12426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.394708][T12426] ? __pfx__printk+0x10/0x10 [ 538.394732][T12426] ? __pfx___might_resched+0x10/0x10 [ 538.394751][T12426] ? fs_reclaim_acquire+0x7d/0x100 [ 538.394787][T12426] should_fail_ex+0x414/0x560 [ 538.394815][T12426] should_failslab+0xa8/0x100 [ 538.394845][T12426] __kmalloc_noprof+0xcb/0x4f0 [ 538.394870][T12426] ? tomoyo_encode+0x28b/0x550 [ 538.394900][T12426] tomoyo_encode+0x28b/0x550 [ 538.394933][T12426] tomoyo_realpath_from_path+0x58d/0x5d0 [ 538.394961][T12426] ? tomoyo_domain+0xda/0x130 [ 538.394996][T12426] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 538.395017][T12426] tomoyo_path_number_perm+0x1e8/0x5a0 [ 538.395060][T12426] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 538.395133][T12426] ? __fget_files+0x2a/0x420 [ 538.395166][T12426] ? __fget_files+0x3a0/0x420 [ 538.395192][T12426] ? __fget_files+0x2a/0x420 [ 538.395224][T12426] security_file_ioctl_compat+0xcb/0x2d0 [ 538.395249][T12426] __ia32_compat_sys_ioctl+0x128/0x840 [ 538.395277][T12426] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 538.395302][T12426] ? __fget_files+0x3a0/0x420 [ 538.395338][T12426] ? fput+0xa0/0xd0 [ 538.395371][T12426] ? ksys_write+0x1f0/0x250 [ 538.395404][T12426] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 538.395435][T12426] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.395476][T12426] __do_fast_syscall_32+0xb4/0x110 [ 538.395511][T12426] do_fast_syscall_32+0x34/0x80 [ 538.395539][T12426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.395563][T12426] RIP: 0023:0xf7f45539 [ 538.395581][T12426] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 538.395598][T12426] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 538.395620][T12426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 538.395634][T12426] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.395646][T12426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.395658][T12426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.395670][T12426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.395697][T12426] [ 538.664306][T12422] syzkaller0: entered promiscuous mode [ 538.669856][T12422] syzkaller0: entered allmulticast mode [ 538.724115][T12426] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.120708][T12439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.144590][T12439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.208767][T12411] ALSA: mixer_oss: invalid OSS volume '' [ 540.026149][T12444] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2166'. [ 540.060870][T12446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2167'. [ 540.072546][T12447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2166'. [ 540.193922][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.204037][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.309513][ T5886] IPVS: starting estimator thread 0... [ 540.410554][T12450] IPVS: using max 38 ests per chain, 91200 per kthread [ 542.080448][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.123331][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.884221][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.906808][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.035082][T12481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.076554][T12481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.177702][T12487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.196576][T12487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.885927][T12496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2185'. [ 544.081163][T12502] FAULT_INJECTION: forcing a failure. [ 544.081163][T12502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.095049][T12502] CPU: 1 UID: 0 PID: 12502 Comm: syz.1.2187 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 544.095081][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.095095][T12502] Call Trace: [ 544.095105][T12502] [ 544.095115][T12502] dump_stack_lvl+0x189/0x250 [ 544.095164][T12502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.095197][T12502] ? __pfx__printk+0x10/0x10 [ 544.095232][T12502] should_fail_ex+0x414/0x560 [ 544.095261][T12502] _copy_to_user+0x31/0xb0 [ 544.095295][T12502] simple_read_from_buffer+0xe1/0x170 [ 544.095328][T12502] proc_fail_nth_read+0x1df/0x250 [ 544.095365][T12502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.095400][T12502] ? rw_verify_area+0x258/0x650 [ 544.095426][T12502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 544.095471][T12502] vfs_read+0x1fd/0x980 [ 544.095500][T12502] ? __pfx___mutex_lock+0x10/0x10 [ 544.095540][T12502] ? __pfx_vfs_read+0x10/0x10 [ 544.095565][T12502] ? __fget_files+0x2a/0x420 [ 544.095599][T12502] ? __fget_files+0x3a0/0x420 [ 544.095625][T12502] ? __fget_files+0x2a/0x420 [ 544.095663][T12502] ksys_read+0x145/0x250 [ 544.095690][T12502] ? __pfx_ksys_read+0x10/0x10 [ 544.095712][T12502] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 544.095739][T12502] ? syscall_user_dispatch+0x4f/0x90 [ 544.095776][T12502] __do_fast_syscall_32+0xb4/0x110 [ 544.095806][T12502] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.095837][T12502] do_fast_syscall_32+0x34/0x80 [ 544.095867][T12502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 544.095892][T12502] RIP: 0023:0xf710e539 [ 544.095911][T12502] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 544.095929][T12502] RSP: 002b:00000000f50fe590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 544.095952][T12502] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50fe620 [ 544.095967][T12502] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000 [ 544.095979][T12502] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 544.095992][T12502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 544.096004][T12502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 544.096033][T12502] [ 544.814522][T12512] binder: BINDER_SET_CONTEXT_MGR already set [ 544.821621][T12512] binder: 12511:12512 ioctl 4018620d 80000040 returned -16 [ 545.005001][T12518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2195'. [ 545.133687][T12523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.163693][T12525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2197'. [ 545.180795][T12523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.294680][T12523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.304338][T12523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.492351][T12528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.504233][T12528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.152982][T12551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.163730][T12549] binder: BINDER_SET_CONTEXT_MGR already set [ 547.172278][T12549] binder: 12548:12549 ioctl 4018620d 80000040 returned -16 [ 547.222163][T12551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.994144][T12563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2209'. [ 548.053811][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.073510][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.108546][T12568] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2211'. [ 549.251139][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.260781][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.379166][T12579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2215'. [ 549.798964][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.819587][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.923255][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.045959][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.538029][T12595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.558909][T12595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.119550][T12604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2224'. [ 551.294417][T12608] netlink: 'syz.5.2227': attribute type 1 has an invalid length. [ 551.362072][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 551.384919][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 551.493566][T12608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.495606][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2227'. [ 551.550493][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 552.013756][T12622] vimc link validate: Scaler:src:16x154 (0x33524742, 7, 0, 6, 0) RGB/YUV Capture:snk:16x16 (0x38416761, 8, 0, 0, 0) [ 552.423526][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2227'. [ 553.289933][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.310432][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.477508][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.523859][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.641774][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2238'. [ 554.108212][ T1214] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 554.184720][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.198796][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.270843][T12665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.283521][T12665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.314153][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'. [ 554.334305][ T1214] usb 6-1: Using ep0 maxpacket: 32 [ 554.364995][ T1214] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 554.373689][ T1214] usb 6-1: config 0 has no interface number 0 [ 554.535732][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.557483][ T1214] usb 6-1: config 0 interface 37 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 554.567473][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.660560][ T1214] usb 6-1: config 0 interface 37 has no altsetting 0 [ 554.679511][ T1214] usb 6-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 554.688779][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.697871][ T1214] usb 6-1: Product: syz [ 554.702997][ T1214] usb 6-1: Manufacturer: syz [ 554.708278][ T1214] usb 6-1: SerialNumber: syz [ 554.725930][ T1214] usb 6-1: config 0 descriptor?? [ 554.740775][ T1214] rtl8150 6-1:0.37: couldn't find required endpoints [ 554.749230][ T1214] rtl8150 6-1:0.37: probe with driver rtl8150 failed with error -5 [ 555.000849][ T24] usb 6-1: USB disconnect, device number 33 [ 555.022245][ T5886] IPVS: starting estimator thread 0... [ 555.116240][T12668] IPVS: using max 27 ests per chain, 64800 per kthread [ 555.201624][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'. [ 555.956044][T12678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2250'. [ 555.999059][T12679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2252'. [ 556.925551][T12696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2258'. [ 557.100629][T12698] FAULT_INJECTION: forcing a failure. [ 557.100629][T12698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.143803][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.4.2259 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 557.143833][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.143846][T12698] Call Trace: [ 557.143854][T12698] [ 557.143863][T12698] dump_stack_lvl+0x189/0x250 [ 557.143898][T12698] ? __lock_acquire+0xaac/0xd20 [ 557.143931][T12698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.143960][T12698] ? __pfx__printk+0x10/0x10 [ 557.143980][T12698] ? __might_fault+0xb0/0x130 [ 557.144020][T12698] should_fail_ex+0x414/0x560 [ 557.144066][T12698] _copy_from_user+0x2d/0xb0 [ 557.144099][T12698] snd_seq_write+0x300/0x810 [ 557.144148][T12698] ? __pfx_snd_seq_write+0x10/0x10 [ 557.144172][T12698] ? bpf_lsm_file_permission+0x9/0x20 [ 557.144200][T12698] ? security_file_permission+0x75/0x290 [ 557.144237][T12698] ? rw_verify_area+0x258/0x650 [ 557.144262][T12698] ? __pfx_snd_seq_write+0x10/0x10 [ 557.144287][T12698] vfs_write+0x27b/0xa90 [ 557.144321][T12698] ? __pfx_vfs_write+0x10/0x10 [ 557.144348][T12698] ? __fget_files+0x2a/0x420 [ 557.144380][T12698] ? __fget_files+0x2a/0x420 [ 557.144407][T12698] ? __fget_files+0x3a0/0x420 [ 557.144434][T12698] ? __fget_files+0x2a/0x420 [ 557.144472][T12698] ksys_write+0x145/0x250 [ 557.144500][T12698] ? __pfx_ksys_write+0x10/0x10 [ 557.144527][T12698] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 557.144560][T12698] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.144590][T12698] __do_fast_syscall_32+0xb4/0x110 [ 557.144621][T12698] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.144652][T12698] do_fast_syscall_32+0x34/0x80 [ 557.144681][T12698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.144706][T12698] RIP: 0023:0xf7fc6539 [ 557.144724][T12698] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.144741][T12698] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 557.144763][T12698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 557.144777][T12698] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.144793][T12698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.144805][T12698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.144817][T12698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.144848][T12698] [ 557.899544][T12700] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 557.907442][T12700] #PF: supervisor instruction fetch in kernel mode [ 557.913961][T12700] #PF: error_code(0x0010) - not-present page [ 557.919964][T12700] PGD 8000000062a86067 P4D 8000000062a86067 PUD 7c952067 PMD 0 [ 557.927681][T12700] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 557.933099][T12700] CPU: 1 UID: 0 PID: 12700 Comm: syz.1.2260 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 557.945246][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.955335][T12700] RIP: 0010:0x0 [ 557.958829][T12700] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 557.966220][T12700] RSP: 0018:ffffc9000d30f818 EFLAGS: 00010293 [ 557.972313][T12700] RAX: ffffffff81f771d4 RBX: 1ffffd4000379618 RCX: ffff888027249e00 [ 557.980316][T12700] RDX: 0000000000000000 RSI: ffffea0001bcb0c0 RDI: ffff88803098dc00 [ 557.988315][T12700] RBP: ffffc9000d30f8d0 R08: ffffea0001bcb0c7 R09: 1ffffd4000379618 [ 557.996315][T12700] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.004308][T12700] R13: ffffea0001bcb0c8 R14: ffffea0001bcb0c0 R15: 1ffffd4000379619 [ 558.012404][T12700] FS: 0000000000000000(0000) GS:ffff8881261c7000(0063) knlGS:00000000f50feb40 [ 558.021365][T12700] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 558.027970][T12700] CR2: ffffffffffffffd6 CR3: 0000000079f6a000 CR4: 00000000003526f0 [ 558.035985][T12700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.043982][T12700] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 558.051974][T12700] Call Trace: [ 558.055274][T12700] [ 558.058222][T12700] filemap_read_folio+0x114/0x380 [ 558.063284][T12700] ? __pfx_filemap_read_folio+0x10/0x10 [ 558.068873][T12700] ? filemap_add_folio+0x1af/0x270 [ 558.074023][T12700] do_read_cache_folio+0x354/0x590 [ 558.079166][T12700] freader_get_folio+0x3c4/0x7f0 [ 558.084139][T12700] freader_fetch+0xa3/0x5d0 [ 558.088692][T12700] __build_id_parse+0x133/0x7d0 [ 558.093578][T12700] ? __pfx___build_id_parse+0x10/0x10 [ 558.098989][T12700] ? find_vma+0xe7/0x160 [ 558.103262][T12700] ? __pfx_find_vma+0x10/0x10 [ 558.107985][T12700] ? query_matching_vma+0x1b2/0x1d0 [ 558.113218][T12700] procfs_procmap_ioctl+0x7f0/0xce0 [ 558.118462][T12700] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 558.124218][T12700] ? __fget_files+0x2a/0x420 [ 558.128842][T12700] ? __fget_files+0x2a/0x420 [ 558.133465][T12700] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 558.139051][T12700] __ia32_compat_sys_ioctl+0x551/0x840 [ 558.144538][T12700] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 558.150551][T12700] ? rcu_is_watching+0x15/0xb0 [ 558.155351][T12700] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 558.161970][T12700] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.167199][T12700] __do_fast_syscall_32+0xb4/0x110 [ 558.172351][T12700] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.177581][T12700] do_fast_syscall_32+0x34/0x80 [ 558.182463][T12700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.188821][T12700] RIP: 0023:0xf710e539 [ 558.192912][T12700] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 558.212633][T12700] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 558.221083][T12700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0686611 [ 558.229168][T12700] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.237162][T12700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.245150][T12700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 558.253138][T12700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.261140][T12700] [ 558.264200][T12700] Modules linked in: [ 558.268169][T12700] CR2: 0000000000000000 [ 558.272343][T12700] ---[ end trace 0000000000000000 ]--- [ 558.277849][T12700] RIP: 0010:0x0 [ 558.281359][T12700] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 558.288748][T12700] RSP: 0018:ffffc9000d30f818 EFLAGS: 00010293 [ 558.294838][T12700] RAX: ffffffff81f771d4 RBX: 1ffffd4000379618 RCX: ffff888027249e00 [ 558.302835][T12700] RDX: 0000000000000000 RSI: ffffea0001bcb0c0 RDI: ffff88803098dc00 [ 558.310830][T12700] RBP: ffffc9000d30f8d0 R08: ffffea0001bcb0c7 R09: 1ffffd4000379618 [ 558.318827][T12700] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 558.326824][T12700] R13: ffffea0001bcb0c8 R14: ffffea0001bcb0c0 R15: 1ffffd4000379619 [ 558.334822][T12700] FS: 0000000000000000(0000) GS:ffff8881261c7000(0063) knlGS:00000000f50feb40 [ 558.343772][T12700] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 558.350374][T12700] CR2: ffffffffffffffd6 CR3: 0000000079f6a000 CR4: 00000000003526f0 [ 558.358368][T12700] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.366362][T12700] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 558.374379][T12700] Kernel panic - not syncing: Fatal exception [ 558.380866][T12700] Kernel Offset: disabled [ 558.385198][T12700] Rebooting in 86400 seconds..