last executing test programs: 3m36.14253355s ago: executing program 2 (id=234): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m35.459276811s ago: executing program 2 (id=236): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "f2a41b000e6a98a2b93f812fff1f7cb5b732ac92dc145f4d4c00f54d2b0bd0938a5c79db2b0c5f8cd742dd59"}, 0x41724f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m34.959230815s ago: executing program 2 (id=238): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x8, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000473000/0x1000)=nil, 0x1000, 0x6, 0x8031, r0, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) io_uring_enter(r4, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) mmap$usbfs(&(0x7f00005e6000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r8, 0x2) r9 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r9, 0xc034564b, &(0x7f0000000040)={0xd000000, 0x34343452, 0x140, 0xb4, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x9}}}) set_tid_address(0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x4000002, 0xffffffffffffffff, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m30.943480799s ago: executing program 2 (id=251): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x467, 0x200) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = userfaultfd(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) userfaultfd(0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 3m25.627643047s ago: executing program 2 (id=269): rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7, 0x6, 0x2, 0x4}, 0x6}, 0x20, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c1, 0x1004, 0x8, 0xfff, 0xa4a4, 0x0, 0x1, 0x7], 0x0, 0x2025c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m25.203191187s ago: executing program 2 (id=271): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea", 0x1}], 0x1, 0x0, 0x0, 0xf401}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x2, 0x400c0) 3m24.550447659s ago: executing program 32 (id=271): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea", 0x1}], 0x1, 0x0, 0x0, 0xf401}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="f0", 0x1}], 0x1}}], 0x2, 0x400c0) 9.815336561s ago: executing program 3 (id=1093): r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) r2 = syz_pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_init1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xa2) syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x228000) ioctl$VIDIOC_QBUF(r2, 0xff05, 0x0) 9.737217938s ago: executing program 0 (id=1094): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x2b8, 0xb0000010, 0xd0, 0x5c8f0200, 0x1a0, 0x3a8, 0x3a8, 0x1a0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff000000], [0xff, 0xff, 0xffffff00], 'vlan0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x3, 0x6}, 0x0, 0xa8, 0xd0, 0x700}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c00008008000340000000021400000010ee000000000000000000000084000a"], 0xd0}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x48000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) read$FUSE(r3, &(0x7f0000003ec0)={0x2020}, 0x2020) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001900)=@newchain={0x19, 0x64, 0x1, 0xfffffff7, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0xfff3, 0xfff3}, {0xe, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd603e8c4b93dd660}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x1, 0x9, 0xbbc6, 0x64b0, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x8000, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0xa99, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0x58, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x8, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x6, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x4, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x5, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0x2, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x7, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6103, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x7, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x5, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0x78b5, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x3, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x6, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80000001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x81, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x400, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x1, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x4, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x6, 0x8, 0x8, 0x4, {0x6, 0x0, 0xb, 0x2, 0x8, 0x1}, {0x4, 0x2, 0x30, 0x1, 0x7, 0x3}, 0xb, 0x5}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001300)={'gretap0\x00', 0x0, 0x40, 0x20, 0x7f, 0x0, {{0x5, 0x4, 0x3, 0x10, 0x14, 0x65, 0x0, 0xfa, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f00000001c0)=0x4) 8.969880384s ago: executing program 3 (id=1095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x70, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_MARK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xb111}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x6}]}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x5, 0x1, 0x4, 0xb, 0x4]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x20040040) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 8.471193843s ago: executing program 0 (id=1099): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000010c0)={0x2, 'sit0\x00', {0x7}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod\a=00000000000040000,user_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES8=r3, @ANYBLOB=',allow_other,\x00'], 0xfb, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') write$vga_arbiter(r4, &(0x7f0000000180), 0xf) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @loopback}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x1, 0x1}, 0x26) read$FUSE(r5, &(0x7f0000001240)={0x2020}, 0x2020) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="746172676574205043d29a2b7dec49"], 0x14) clock_gettime(0x0, &(0x7f0000000300)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f000000e000/0x3000)=nil, 0x3000) preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)}}], 0x1, 0x20080058) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 7.499132111s ago: executing program 1 (id=1102): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x400c084) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') pread64(r4, &(0x7f000001a240)=""/102387, 0x18ff3, 0x100008) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x1, 0x0, 0x6, 0x6, 0xffffffffffffffe0, 0x1}, @jmp={0x5, 0x1, 0xd, 0xa, 0x4, 0xffffffffffffffe0, 0x10}, @alu={0x4, 0x0, 0x2, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x10001, 0x29, &(0x7f0000000340)=""/41, 0x41000, 0x8, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x6, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, r6], 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) clock_nanosleep(0x3, 0x0, &(0x7f0000000740), &(0x7f0000000780)) 7.047548542s ago: executing program 1 (id=1103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) r2 = syz_io_uring_setup(0x20000efa, &(0x7f000003f300)={0x0, 0x2c03, 0x10, 0x0, 0x20021e}, &(0x7f0000000080), &(0x7f0000000000)) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x2}) io_uring_enter(r2, 0x0, 0x3, 0xb, 0x0, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$dupfd(r3, 0xe302009757a35a9e, r0) shutdown(r0, 0x1) 6.802333025s ago: executing program 3 (id=1104): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x487, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x80, 0xc, 0x0, 0x8, 0x5}, 0x94, &(0x7f00000002c0)={0x5, 0xf, 0x94, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x8f0, 0xf, 0x1, [0xf]}, @generic={0x65, 0x10, 0xb, "b3660dcf946c85cd99ac96fc3ffed98c0350050288b321be12ac5f206dcc2de03a65d386681ec6240e8a8b17d4efaae558ff47fa35dcc9ff9f3c7d2bd25a65bc84dd3176ba071e485db21e1ba21e1f23e5537617dd535973d82dee9f97e6af3f8839"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x2, 0xd}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x1, 0xff, 0x1}]}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0) chown(&(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000280)='\t') 6.786295248s ago: executing program 1 (id=1105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0) (fail_nth: 3) 6.38321012s ago: executing program 1 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005401000000008000840"], 0x64}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000008"], 0x24}}, 0x0) 6.070240833s ago: executing program 4 (id=1109): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7fff, 0x2, 0x3) r2 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x1000, &(0x7f0000000280)="c10caacfedf6ec7d519e657db57f3b253fc50a4286f6e018b816ba47ac3d6c2bc9cc197154681c8f32ffe564d200ceecca80", 0x32, &(0x7f00000002c0), &(0x7f0000000980), &(0x7f00000009c0)="cd5ae3459ed70fb6286efaf48c71f5145a1e2b964f8ddeacbdb4aef578bd9caa862daf02ca3b6a7b96630004dc6440e92c19eac6cff0e16d2795dc0e9e9c7e60011a6dda76a7df585db434f919c75b751897ca34242eeca1dca8d9633519a52d4a242c1a42caec8391855fbf4f0d3b12eea0cb150c5c2e8bde2d4daa865bc8968153c3aef279131c034240405a06f8e07a91a5753506a0301ce0e8f71a450e50d85eea2ba4afd292bbb381660d73fee25ab354a0eaae5361b97af5863d") setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) ptrace(0x10, r10) ptrace$setregset(0x4212, r10, 0x204, &(0x7f00000000c0)={&(0x7f0000000600)="5ffc7461409a03001ec800fb26e4f8a321d2c718769a8b5327cd721273654519b56e0f1900bb2dbe721f9957fc9db7427a4b91f1d2583e353fa75eda8d131ef50e7f2fe078495da46d6a63fbec18a8e91e6532ab98d5e7dcbefd49e2a648700f4f967fb5cf6b956674f8c8c44d047cb9fb7d0275bdc70faa70cacb512d1298d176d869419c9307348c7bfa183c4ec785187759cc27f677f46e6640ae55eb45e3dabe081af83ad5d0fac91c29f71b0000000000000000", 0xb6}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e24, 0x10000, @local, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x39) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xc72f, 0x7fffffff, 0x6c00, 0xc69, 0xc10, 0x2, 0x6, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x8, 0x4, 0x663, 0xfffffffb, 0xfffffff7}}, &(0x7f00000003c0)=0xb0) 6.006537448s ago: executing program 1 (id=1110): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setitimer(0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@netfilter={0x5, 0x0, 0x7fff, 0x1}}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) preadv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000300)=""/138, 0x8a}], 0x2, 0x100, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bcc5f408cc171010c079010203010901000000000000000904a60000f421f8ec"], 0x0) 5.558042927s ago: executing program 4 (id=1111): ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x303401, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) tkill(0x0, 0x13) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x800, &(0x7f0000000440)) 5.345790193s ago: executing program 0 (id=1112): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "f2a41b000e6a98a2b93f812fff1f7cb5b732ac92dc145f4d4c00f54d2b0bd0938a5c79db2b0c5f8cd742dd59"}, 0x41724f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.867620617s ago: executing program 0 (id=1113): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x48, 0xff, 0x0, 0xffeffffe}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r5, &(0x7f0000000300)="5af9", 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc4c, 0x4}) setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000140)="4c7efbb7c3186344412eea19e4b29ca8a36e6fb1314829e443a6e3cc233ccee2f4654ea0e6e35238bdbb159bd66e52bd504da037f207ffd6a1c1e05d80d7161179e4b51234604206063d017fa03df35c13f5fdf74827e80acd4cf663a9dc0152ac5b4fe139b2c420b91bbf5ed4c156ee39e17d4d8157166bc091574f67fc93a20ce27905a3161aaa6e8a589a552407fe453bc990e1d3eea5a73d8ed62ba8cbba9918fe80000950629761136ff5fb1458b186bb027816fe950a56002acccde700c82d7e326f4c3b320954dc029cfdeb51bc84eb58865c0a35280d3b99436ee4a8e024", 0xe2) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000010000300", @ANYRES32=r2, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) 4.063268221s ago: executing program 3 (id=1114): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000980)="c8", 0xff82, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0xf, @loopback, 0x8}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.987478002s ago: executing program 5 (id=1115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x20, 0x0, 0x2b}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x1, 0x40, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4}, {}, {}, 0x70bd28, 0x3506, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x30, r1, 0x32015000) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x6, 0x4) 3.272904707s ago: executing program 4 (id=1116): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980200000000001800128008000100677265000c00028008000100", @ANYRES16=r1], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x11, 0xc, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) (fail_nth: 3) 3.094918105s ago: executing program 3 (id=1117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) 3.094403274s ago: executing program 4 (id=1118): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000000040)=""/195) write$6lowpan_enable(r0, &(0x7f0000000140)='0', 0x1) r1 = accept$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000380)={0x1, 0x1, 0x1000, 0x15, &(0x7f0000000280)="0e3d92a0a1804578837921879e868f7c8f79491555", 0xb4, 0x0, &(0x7f00000002c0)="a57495a3d17f1e2fafa08c18fdb9b5b9a4ee8d291a7c8cf7cbb2c1ada0037089f5aa33863d819dae92cade70b8bc672e83b0cd808b4213c6f2b16ecd41a9212bfcca6327128a8d481588c25b178ca7476eaaf0fd455cf53a9ac03eb0328013772f0c76f570a21fac7564bb8ceafcfafe30c3eaf14fedfe587c52d64f2fdf0e252456bb48b6493e93b8035e401945ae09ebecb65009ee73f9afa6c5f33b742c80f369ffbe39fb9d19a9014d25afdfb6695757c7a2"}) io_setup(0x5, &(0x7f0000000400)=0x0) io_pgetevents(r2, 0x5, 0x6, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x9]}, 0x8}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000580), 0x80400, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000006c0)={0x6, 0x0, [{0x4, 0x101, 0x7293, 0x7}, {0xb, 0x1, 0x152fb66d, 0xc, 0x2}, {0xc0000001, 0x7ff, 0x18, 0x0, 0x8}, {0x40000001, 0x4, 0x4, 0xe4ef, 0x80000000}, {0x0, 0x6, 0xa, 0x2, 0x4}, {0xd, 0x8, 0xd, 0x0, 0x80}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002900)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002ac0)={0x0, 0x0}, &(0x7f0000002b00)=0xc) r6 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002ec0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000002fc0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000030c0)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000031c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000003200)={0x1, 0x7, {}, {0xee01}, 0x1ff, 0x5}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003240)={0x0, 0x0, 0x0}, &(0x7f0000003280)=0xc) stat(&(0x7f00000032c0)='./file0\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000037c0)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@multicast1}}, &(0x7f00000038c0)=0xe8) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() syz_fuse_handle_req(r0, &(0x7f0000000780)="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", 0x2000, &(0x7f0000003c00)={&(0x7f0000002780)={0x50, 0xfffffffffffffff5, 0xfffffffffffffffe, {0x7, 0x2b, 0x64ab, 0x80000, 0x9f, 0xfff7, 0x8, 0x5, 0x0, 0x0, 0x40, 0x5}}, &(0x7f0000002800)={0x18, 0xfffffffffffffff5, 0xa, {0x3}}, &(0x7f0000002840)={0x18, 0x0, 0x8, {0xe}}, &(0x7f0000002880)={0x18, 0xffffffffffffffda, 0xf, {0x7}}, &(0x7f00000028c0)={0x18, 0x0, 0xffffffff, {0x3ff}}, &(0x7f0000002940)={0x28, 0x24, 0x2, {{0x7, 0x3, 0x0, r4}}}, &(0x7f0000002980)={0x60, 0xffffffffffffffda, 0x4, {{0x6, 0x7, 0x45, 0x3, 0x5, 0x2, 0x100, 0x7}}}, &(0x7f0000002a00)={0x18, 0x0, 0x1, {0xd}}, &(0x7f0000002a40)={0x27, 0xfffffffffffffff5, 0x30000, {'$.e}}{)^%@.}-%\'!&\x05#]&\x86\x00'}}, &(0x7f0000002a80)={0x20, 0xffffffffffffffda, 0x1000000000}, &(0x7f0000002b40)={0x78, 0xfffffffffffffffe, 0x7, {0x5, 0x8a07, 0x0, {0x5, 0x4, 0x0, 0x10, 0x100, 0x1, 0x7, 0x78d, 0x400, 0x6000, 0x6, r5, r6, 0x2, 0xedb}}}, &(0x7f0000002c80)={0x90, 0xfffffffffffffff5, 0x3f4a0c60, {0x2, 0x2, 0x8000000000000001, 0x9, 0x0, 0xfffffffb, {0x2, 0x5, 0x8000000000000001, 0x4, 0x54, 0x6, 0x2, 0x9, 0x7, 0x6000, 0xc3, 0xffffffffffffffff, r7, 0x0, 0xfffffff9}}}, &(0x7f0000002d40)={0x150, 0xffffffffffffffda, 0x0, [{0x5, 0x7af, 0xb, 0xffff, '/dev/adsp1\x00'}, {0x2, 0x6, 0x1, 0x4, '\x00'}, {0x4, 0xb, 0x0, 0x80000001}, {0x2, 0x10001, 0xf, 0x0, '/dev/dlm_plock\x00'}, {0x4, 0x8000000000000000, 0x5, 0x7, '@*#-#'}, {0x2, 0x9cf7, 0x0, 0xa}, {0x6, 0x0, 0x1, 0x7, '+'}, {0x5, 0x4, 0xb, 0x1, '/dev/adsp1\x00'}, {0x4, 0xe7df, 0x0, 0x1}, {0x5, 0x7, 0x7, 0xfff, '/:))#{)'}]}, &(0x7f0000003480)={0x338, 0x0, 0x80000001, [{{0x4, 0x2, 0x400, 0x3ff0000000000, 0x4, 0xffff, {0x6, 0x5, 0xf, 0x7, 0xe, 0x8, 0x6, 0x8, 0x3ff, 0xc000, 0x439f, r8, r9, 0xfff, 0x3}}, {0x0, 0x0, 0x0, 0x9}}, {{0x5, 0x2, 0x5, 0x4, 0x73c7, 0x6516ce64, {0x2, 0x6470, 0x0, 0xf15a, 0x8, 0x2, 0x2, 0xfc8d, 0x4, 0x2000, 0xffffffff, r10, 0xee01, 0x1ff, 0x7}}, {0x4, 0x8000000000000001, 0x5, 0x40, '-%!@%'}}, {{0x3, 0x3, 0x6, 0x7f, 0x10000, 0x2, {0x0, 0x3, 0x9, 0x8, 0x8000000000000001, 0xb2, 0x7, 0x6, 0xb, 0xc000, 0x0, r11, r12, 0x7, 0x2}}, {0x0, 0x9, 0xb, 0x6, '/dev/adsp1\x00'}}, {{0x1, 0x3, 0x10000, 0xd6a, 0x0, 0x5, {0x1, 0xfffffffffffffffc, 0x6, 0x9, 0x5, 0x2, 0x401, 0x6, 0xffff8000, 0x1000, 0x1, 0xee00, r13, 0x7, 0x40}}, {0x4, 0x9, 0x2, 0x1ff, ',]'}}, {{0x2, 0x1, 0x40, 0x1, 0x1ff, 0x0, {0x2, 0x6, 0x9, 0x99, 0x401, 0xd9b, 0x9ca, 0x6000000, 0xbbb, 0x4000, 0x6, r14, r15, 0x1, 0x3}}, {0x0, 0x0, 0x9, 0x4f, ')^%^@{}:+'}}]}, &(0x7f00000039c0)={0xa0, 0xfffffffffffffffe, 0x9, {{0x5, 0x3, 0x4, 0x0, 0x1, 0x1, {0x5, 0x2, 0x7, 0x92c5, 0x8000000000000000, 0xe0, 0x4, 0x80000001, 0x8db1, 0x2000, 0x0, r16, r17, 0x8001, 0xd1}}, {0x0, 0x10}}}, &(0x7f0000003a80)={0x20, 0x0, 0xc62, {0x8, 0x4, 0xfbd6, 0x5a}}, &(0x7f0000003ac0)={0x130, 0x0, 0x1, {0x100000000000000, 0x8651, 0x0, '\x00', {0x4000, 0x4, 0x3000000, 0x8, 0xee01, r18, 0x2000, '\x00', 0x1ff, 0x6, 0x10000, 0x4, {0x1, 0x9}, {0x8000000000000000, 0x1}, {0x5, 0xb1}, {0x4, 0x8}, 0x1000, 0x0, 0x8, 0x6}}}}) syz_genetlink_get_family_id$batadv(&(0x7f0000003cc0), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003d40)={0x2, &(0x7f0000003d00)=[{0xa6d, 0x6, 0x5c, 0x2}, {0x5ab, 0x3, 0x0, 0x1}]}, 0x10) write$tun(r0, &(0x7f0000003d80)={@void, @val={0x1, 0x1, 0xfff, 0x0, 0x40, 0x4}, @mpls={[{0x10}, {0x7, 0x0, 0x1}, {0x6}, {0xe4, 0x0, 0x1}, {0x400}, {0x1}, {0x8d, 0x0, 0x1}, {0x8}], @llc={@llc={0x0, 0xfe, "b0", "7e74b8c3b38eea58e0f3d7584113e8a722ae68488336f8bd0016c375e976faed3b90e012fd23db458988f94c51ca23fdba29f4b1849c0fdf0c5ae1e7efa93248e5eef8371447cd75c85abc7521465c12a4ccdc5a47cb9a0bf3f4cc77875b245acf4f978c2db7a8dde49df457ccd17aac0d09f24f9611efde140d"}}}}, 0xa7) 2.901987767s ago: executing program 5 (id=1119): ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x2, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 2.900807165s ago: executing program 1 (id=1120): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08fe4640d3e6d82f4a00fd019078ac1e0001ac1414aa0300907800000000010000e0000002e0000002864300000000000ce256b28c04001200fb52000e7434954373561de584b703c80009e706f8cd8ed1d30bd224f8000a65807fe97612fe86001073bc2300ad9d19a3000000000000860600"/142], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd, 0x1, {}, 0x3ff, 0xc}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x4, 0x3, 0x3}, 0x10) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x8, r0, 0x0, 0x1, 0x245a0a, 0xf7, &(0x7f0000000440)="75a1c6d1c1c122e4102a7b19dc1f7a6082234a5e689abfaeeecca664a6bfbd3b0709de7196dbd7c5cce465c22c87c31f3e4c25a18eaa6d794edeaacb150465c7da6da5b93cc2f87c1afb1211138a8469bae1957cc85dfcc7db49156df832f17709b6eabdf8ca14d8ee45a44301ca28732444feef4a6190725bdfad1a9d9708e324b258226ca5f344aa646f467ed9a495d49701d67b21142eec616c55331188aa4b864ac0b86ac4858cf8a854094d722d08cec6a54cd0d8585ccdc5a776221d0fedb4430e53f7ef549db33abd6f25b205260321052f687f4f20ffdae910d55db5dce8e7231e250d455f58c89baf58adf67b7d73c9b14702", 0x4}) syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r12 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r12, 0x84, 0x7b, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) ioctl$int_in(r10, 0x5452, &(0x7f00000000c0)=0x5) splice(r0, &(0x7f0000000040), r11, 0x0, 0x807, 0x0) 2.709939297s ago: executing program 5 (id=1121): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x9}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffd}]}}]}, 0x40}}, 0x0) 2.239184017s ago: executing program 5 (id=1122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "06000061", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @empty, 0x8005b}}, 0x105, 0xac, 0xf06, 0x0, 0xad, 0x4, 0x1}, 0x9c) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x0) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) 1.739408417s ago: executing program 0 (id=1123): ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x2, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) (fail_nth: 3) 1.722998654s ago: executing program 4 (id=1124): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x8}}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006b02"]) (fail_nth: 3) 1.314549203s ago: executing program 0 (id=1125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe2(0x0, 0x800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) socket(0x10, 0x3, 0x4) r2 = syz_io_uring_setup(0xa07, &(0x7f00000000c0)={0x0, 0xcc72, 0x800, 0x1, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000200)=0xfffffffc, 0x0, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0xff, r6, 0x5}, 0xc) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1.012768885s ago: executing program 3 (id=1126): r0 = socket(0x10, 0x803, 0x1) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902"], 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x5, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(r3, &(0x7f00000019c0)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0xffffffffffffff8c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9!m\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9^\x00\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86\xe8R\xe4\xcd\xec\xcc\xd1\x0fr\xc1}6\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xa4\xbe\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99', 0x3) fcntl$addseals(r6, 0x409, 0x7) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000000)="d119", 0x2}, {&(0x7f0000000740)="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", 0x150}], 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x1000}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="881b5600", @ANYRES16=r8, @ANYBLOB="05072bbd7000ffdbdf250100000070000280340001800800010000000000080001000300000008000100060000000800010004000000080001000600000008000100080000000c000180080001000100000014000180080001000200000008000100060000000c00018008000100050000000c000180080001000200000004000300"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) 494.649661ms ago: executing program 5 (id=1127): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 131.303756ms ago: executing program 4 (id=1128): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090300000000ffffffff2e000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x2010) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x200441c5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x64, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xb}, {0xfff1, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x800}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x200}]}}]}, 0x64}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x20000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) 0s ago: executing program 5 (id=1129): syz_emit_ethernet(0x16, &(0x7f0000000000)={@random="a7dcf670d5d9", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@snap={0xaa, 0x1, "87", "b989d1", 0x886c}}}}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_emit_ethernet(0x1046, &(0x7f0000000640)={@random="5b37182347bc", @random="61090f00a000", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "119d81", 0x1063, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x41}, {[@dstopts={0x33, 0x0, '\x00', [@pad1]}], "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"}}}}}, 0x0) kernel console output (not intermixed with test programs): ][T11564] ? __pfx_seq_read+0x10/0x10 [ 281.799834][T11564] ? rw_verify_area+0x2a6/0x4d0 [ 281.799861][T11564] ? __lock_acquire+0xab9/0xd20 [ 281.799879][T11564] ? __pfx_seq_read+0x10/0x10 [ 281.799907][T11564] vfs_read+0x200/0xa30 [ 281.799934][T11564] ? fdget_pos+0x247/0x320 [ 281.799959][T11564] ? __pfx___mutex_lock+0x10/0x10 [ 281.799990][T11564] ? __pfx_vfs_read+0x10/0x10 [ 281.800020][T11564] ? __fget_files+0x2a/0x420 [ 281.800044][T11564] ? __fget_files+0x3a0/0x420 [ 281.800063][T11564] ? __fget_files+0x2a/0x420 [ 281.800092][T11564] ksys_read+0x145/0x250 [ 281.800124][T11564] ? __pfx_ksys_read+0x10/0x10 [ 281.800156][T11564] ? do_syscall_64+0xbe/0xfa0 [ 281.800189][T11564] do_syscall_64+0xfa/0xfa0 [ 281.800216][T11564] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.800245][T11564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.800265][T11564] ? clear_bhb_loop+0x60/0xb0 [ 281.800291][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.800311][T11564] RIP: 0033:0x7f60dc18f6c9 [ 281.800329][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.800346][T11564] RSP: 002b:00007f60dcf41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.800369][T11564] RAX: ffffffffffffffda RBX: 00007f60dc3e6090 RCX: 00007f60dc18f6c9 [ 281.800383][T11564] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000004 [ 281.800396][T11564] RBP: 00007f60dcf41090 R08: 0000000000000000 R09: 0000000000000000 [ 281.800408][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.800419][T11564] R13: 00007f60dc3e6128 R14: 00007f60dc3e6090 R15: 00007f60dc50fa28 [ 281.800453][T11564] [ 282.076873][ T5954] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 282.230553][ T5954] usb 6-1: Using ep0 maxpacket: 32 [ 282.239001][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.250030][ T5954] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.259853][ T5954] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 282.269684][ T5954] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 282.287890][ T5954] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.297628][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.305743][ T5954] usb 6-1: Product: syz [ 282.309943][ T5954] usb 6-1: Manufacturer: syz [ 282.314900][ T5954] usb 6-1: SerialNumber: syz [ 282.394919][T11574] macsec1: entered promiscuous mode [ 282.402182][T11574] macvlan0: entered promiscuous mode [ 282.408100][T11574] macsec1: entered allmulticast mode [ 282.415794][T11574] macvlan0: entered allmulticast mode [ 282.425000][T11574] veth1_vlan: entered allmulticast mode [ 283.413388][ T5954] cdc_ncm 6-1:1.0: bind() failure [ 283.425881][ T5954] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 283.434877][ T5954] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 283.446021][ T5954] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 283.497722][ T1219] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 283.510914][ T877] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 283.600357][ T5954] usb 6-1: USB disconnect, device number 25 [ 283.615370][ T1219] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 283.712604][ T1219] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 283.730917][ T877] usb 2-1: Using ep0 maxpacket: 32 [ 283.740510][ T877] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 283.751764][ T1219] usb 4-1: cp210x converter now attached to ttyUSB0 [ 283.762564][ T877] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 283.794094][ T877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 283.974853][ T1219] usb 4-1: USB disconnect, device number 27 [ 284.023571][ T877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.028640][ T1219] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 284.050976][ T877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 284.064786][ T877] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 284.105494][ T877] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 284.150499][ T877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.151254][ T1219] cp210x 4-1:0.0: device disconnected [ 284.233662][ T877] usb 2-1: config 0 descriptor?? [ 284.460914][ T877] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 284.761398][ T1219] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 284.797905][T11681] IPv6: addrconf: prefix option has invalid lifetime [ 284.874717][T11685] FAULT_INJECTION: forcing a failure. [ 284.874717][T11685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.889394][T11685] CPU: 0 UID: 0 PID: 11685 Comm: syz.4.819 Not tainted syzkaller #0 PREEMPT(full) [ 284.889425][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.889438][T11685] Call Trace: [ 284.889447][T11685] [ 284.889455][T11685] dump_stack_lvl+0x189/0x250 [ 284.889484][T11685] ? __pfx____ratelimit+0x10/0x10 [ 284.889507][T11685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.889531][T11685] ? __pfx__printk+0x10/0x10 [ 284.889551][T11685] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 284.889579][T11685] ? filemap_get_entry+0xad/0x2f0 [ 284.889592][T11685] ? filemap_get_entry+0xad/0x2f0 [ 284.889609][T11685] should_fail_ex+0x414/0x560 [ 284.889637][T11685] copy_folio_from_iter_atomic+0x325/0x1910 [ 284.889658][T11685] ? shmem_allowable_huge_orders+0x1d7/0x4f0 [ 284.889685][T11685] ? shmem_get_folio_gfp+0x1432/0x1660 [ 284.889713][T11685] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 284.889734][T11685] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 284.889762][T11685] ? shmem_write_begin+0x15f/0x2b0 [ 284.889788][T11685] generic_perform_write+0x5df/0x900 [ 284.889817][T11685] ? __pfx_generic_perform_write+0x10/0x10 [ 284.889833][T11685] ? down_write+0x162/0x1f0 [ 284.889854][T11685] ? file_update_time+0x2da/0x490 [ 284.889876][T11685] shmem_file_write_iter+0xf8/0x120 [ 284.889902][T11685] vfs_write+0x5c9/0xb30 [ 284.889929][T11685] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 284.889954][T11685] ? __pfx_vfs_write+0x10/0x10 [ 284.889985][T11685] ? __fget_files+0x2a/0x420 [ 284.890007][T11685] ksys_write+0x145/0x250 [ 284.890032][T11685] ? __pfx_ksys_write+0x10/0x10 [ 284.890058][T11685] ? do_syscall_64+0xbe/0xfa0 [ 284.890090][T11685] do_syscall_64+0xfa/0xfa0 [ 284.890113][T11685] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.890135][T11685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.890151][T11685] ? clear_bhb_loop+0x60/0xb0 [ 284.890170][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.890185][T11685] RIP: 0033:0x7fb70118f6c9 [ 284.890200][T11685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.890214][T11685] RSP: 002b:00007fb701f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.890231][T11685] RAX: ffffffffffffffda RBX: 00007fb7013e5fa0 RCX: 00007fb70118f6c9 [ 284.890243][T11685] RDX: 0000000000000078 RSI: 0000200000000180 RDI: 0000000000000004 [ 284.890253][T11685] RBP: 00007fb701f68090 R08: 0000000000000000 R09: 0000000000000000 [ 284.890263][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.890273][T11685] R13: 00007fb7013e6038 R14: 00007fb7013e5fa0 R15: 00007fb70150fa28 [ 284.890299][T11685] [ 285.174363][ T1219] usb 6-1: config 0 has no interfaces? [ 285.210507][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 285.447754][ T1219] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 285.457590][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.467090][ T1219] usb 6-1: Product: syz [ 285.475646][ T1219] usb 6-1: Manufacturer: syz [ 285.487690][ T1219] usb 6-1: SerialNumber: syz [ 285.513577][ T1219] usb 6-1: config 0 descriptor?? [ 285.592060][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 285.603875][ T24] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 285.629779][ T24] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.664327][ T24] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 285.685279][ T24] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 285.696011][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.706735][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 285.726777][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.755324][ T24] usb 1-1: Product: syz [ 285.759632][ T24] usb 1-1: Manufacturer: syz [ 285.767169][ T24] usb 1-1: SerialNumber: syz [ 285.816656][ T24] usb 1-1: config 0 descriptor?? [ 285.865119][T11642] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.010338][T11646] syzkaller0: entered promiscuous mode [ 286.017228][T11646] syzkaller0: entered allmulticast mode [ 286.056363][ T24] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 286.075844][ T5186] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.119394][ T5186] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.159485][ T5186] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.171849][ T5186] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.254604][T11668] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.373894][ T9] usb 2-1: USB disconnect, device number 21 [ 286.414975][ T6407] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.429940][ T9] usblp0: removed [ 286.513828][ T5186] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 286.540897][ T877] usb 1-1: USB disconnect, device number 24 [ 286.564463][ T5186] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 286.692540][T11732] FAULT_INJECTION: forcing a failure. [ 286.692540][T11732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.737394][T11732] CPU: 1 UID: 0 PID: 11732 Comm: syz.1.822 Not tainted syzkaller #0 PREEMPT(full) [ 286.737416][T11732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.737426][T11732] Call Trace: [ 286.737432][T11732] [ 286.737438][T11732] dump_stack_lvl+0x189/0x250 [ 286.737467][T11732] ? __pfx____ratelimit+0x10/0x10 [ 286.737499][T11732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.737525][T11732] ? __pfx__printk+0x10/0x10 [ 286.737546][T11732] ? __might_fault+0xb0/0x130 [ 286.737578][T11732] should_fail_ex+0x414/0x560 [ 286.737603][T11732] _copy_from_iter+0x1de/0x1790 [ 286.737622][T11732] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 286.737643][T11732] ? policy_nodemask+0x27c/0x720 [ 286.737656][T11732] ? __pfx__copy_from_iter+0x10/0x10 [ 286.737676][T11732] ? set_page_refcounted+0xa0/0x1e0 [ 286.737689][T11732] ? page_copy_sane+0x4e/0x280 [ 286.737707][T11732] copy_page_from_iter+0xdd/0x170 [ 286.737726][T11732] tun_get_user+0x1d7b/0x3e90 [ 286.737749][T11732] ? tun_get_user+0x6f6/0x3e90 [ 286.737771][T11732] ? aa_file_perm+0x44d/0x1550 [ 286.737784][T11732] ? __pfx_tun_get_user+0x10/0x10 [ 286.737800][T11732] ? _parse_integer_limit+0x1ae/0x1f0 [ 286.737820][T11732] ? __lock_acquire+0xab9/0xd20 [ 286.737838][T11732] ? ref_tracker_alloc+0x318/0x460 [ 286.737850][T11732] ? __lock_acquire+0xab9/0xd20 [ 286.737865][T11732] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 286.737882][T11732] ? tun_get+0x1c/0x2f0 [ 286.737902][T11732] ? tun_get+0x1c/0x2f0 [ 286.737917][T11732] ? tun_get+0x1c/0x2f0 [ 286.737937][T11732] tun_chr_write_iter+0x113/0x200 [ 286.737956][T11732] vfs_write+0x5c9/0xb30 [ 286.737979][T11732] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 286.737997][T11732] ? __pfx_vfs_write+0x10/0x10 [ 286.738023][T11732] ? __fget_files+0x2a/0x420 [ 286.738043][T11732] ksys_write+0x145/0x250 [ 286.738064][T11732] ? __pfx_ksys_write+0x10/0x10 [ 286.738087][T11732] ? do_syscall_64+0xbe/0xfa0 [ 286.738109][T11732] do_syscall_64+0xfa/0xfa0 [ 286.738128][T11732] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.738147][T11732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.738161][T11732] ? clear_bhb_loop+0x60/0xb0 [ 286.738178][T11732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.738191][T11732] RIP: 0033:0x7fb36578e17f [ 286.738204][T11732] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 286.738216][T11732] RSP: 002b:00007fb3665d2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 286.738232][T11732] RAX: ffffffffffffffda RBX: 00007fb3659e6090 RCX: 00007fb36578e17f [ 286.738242][T11732] RDX: 000000000000003e RSI: 00002000000014c0 RDI: 00000000000000c8 [ 286.738252][T11732] RBP: 00007fb3665d2090 R08: 0000000000000000 R09: 0000000000000000 [ 286.738261][T11732] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 286.738275][T11732] R13: 00007fb3659e6128 R14: 00007fb3659e6090 R15: 00007fb365b0fa28 [ 286.738298][T11732] [ 287.396849][ T1219] usb 6-1: USB disconnect, device number 26 [ 287.556677][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 287.556714][ T30] audit: type=1326 audit(1762477375.128:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.4.826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb70118f6c9 code=0x0 [ 287.751656][T11755] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 287.765389][T11763] FAULT_INJECTION: forcing a failure. [ 287.765389][T11763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.789124][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.0.829 Not tainted syzkaller #0 PREEMPT(full) [ 287.789174][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.789192][T11763] Call Trace: [ 287.789203][T11763] [ 287.789215][T11763] dump_stack_lvl+0x189/0x250 [ 287.789276][T11763] ? __pfx____ratelimit+0x10/0x10 [ 287.789306][T11763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.789345][T11763] ? __pfx__printk+0x10/0x10 [ 287.789375][T11763] ? __might_fault+0xb0/0x130 [ 287.789427][T11763] should_fail_ex+0x414/0x560 [ 287.789468][T11763] _copy_from_user+0x2d/0xb0 [ 287.789503][T11763] get_timespec64+0x8e/0x1a0 [ 287.789532][T11763] ? __pfx_get_timespec64+0x10/0x10 [ 287.789571][T11763] __se_sys_pselect6+0x129/0x300 [ 287.789623][T11763] ? __pfx___se_sys_pselect6+0x10/0x10 [ 287.789658][T11763] ? __pfx_ksys_write+0x10/0x10 [ 287.789695][T11763] ? __x64_sys_pselect6+0x21/0xf0 [ 287.789740][T11763] do_syscall_64+0xfa/0xfa0 [ 287.789776][T11763] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.789814][T11763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.789849][T11763] ? clear_bhb_loop+0x60/0xb0 [ 287.789877][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.789900][T11763] RIP: 0033:0x7f60dc18f6c9 [ 287.789926][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.789956][T11763] RSP: 002b:00007f60dd0d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 287.789984][T11763] RAX: ffffffffffffffda RBX: 00007f60dc3e6090 RCX: 00007f60dc18f6c9 [ 287.790006][T11763] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 287.790023][T11763] RBP: 00007f60dd0d2090 R08: 0000200000000280 R09: 0000000000000000 [ 287.790039][T11763] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 287.790053][T11763] R13: 00007f60dc3e6128 R14: 00007f60dc3e6090 R15: 00007f60dc50fa28 [ 287.790099][T11763] [ 288.621102][ T1219] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 288.860726][ T877] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 289.044120][ T877] usb 5-1: no configurations [ 289.063113][ T877] usb 5-1: can't read configurations, error -22 [ 289.220599][ T877] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 289.400240][ T877] usb 5-1: no configurations [ 289.405113][ T877] usb 5-1: can't read configurations, error -22 [ 289.417358][ T877] usb usb5-port1: attempt power cycle [ 289.617328][T11808] FAULT_INJECTION: forcing a failure. [ 289.617328][T11808] name failslab, interval 1, probability 0, space 0, times 0 [ 289.660907][T11808] CPU: 0 UID: 0 PID: 11808 Comm: syz.0.837 Not tainted syzkaller #0 PREEMPT(full) [ 289.660954][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.660968][T11808] Call Trace: [ 289.660976][T11808] [ 289.660992][T11808] dump_stack_lvl+0x189/0x250 [ 289.661026][T11808] ? __pfx____ratelimit+0x10/0x10 [ 289.661054][T11808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.661082][T11808] ? __pfx__printk+0x10/0x10 [ 289.661121][T11808] ? __pfx___might_resched+0x10/0x10 [ 289.661142][T11808] ? fs_reclaim_acquire+0x7d/0x100 [ 289.661198][T11808] should_fail_ex+0x414/0x560 [ 289.661234][T11808] should_failslab+0xa8/0x100 [ 289.661256][T11808] kmem_cache_alloc_node_noprof+0x77/0x710 [ 289.661287][T11808] ? __alloc_skb+0x112/0x2d0 [ 289.661304][T11808] ? netlink_autobind+0xdb/0x300 [ 289.661330][T11808] __alloc_skb+0x112/0x2d0 [ 289.661354][T11808] netlink_sendmsg+0x5c6/0xb30 [ 289.661385][T11808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.661409][T11808] ? aa_sock_msg_perm+0xf1/0x1d0 [ 289.661438][T11808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.661456][T11808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.661474][T11808] __sock_sendmsg+0x21c/0x270 [ 289.661502][T11808] ____sys_sendmsg+0x505/0x830 [ 289.661532][T11808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.661564][T11808] ? import_iovec+0x74/0xa0 [ 289.661595][T11808] ___sys_sendmsg+0x21f/0x2a0 [ 289.661618][T11808] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.661673][T11808] ? __fget_files+0x2a/0x420 [ 289.661691][T11808] ? __fget_files+0x3a0/0x420 [ 289.661721][T11808] __x64_sys_sendmsg+0x19b/0x260 [ 289.661756][T11808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.661789][T11808] ? __pfx_ksys_write+0x10/0x10 [ 289.661822][T11808] ? do_syscall_64+0xbe/0xfa0 [ 289.661855][T11808] do_syscall_64+0xfa/0xfa0 [ 289.661883][T11808] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.661912][T11808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.661933][T11808] ? clear_bhb_loop+0x60/0xb0 [ 289.661958][T11808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.661978][T11808] RIP: 0033:0x7f60dc18f6c9 [ 289.661997][T11808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.662016][T11808] RSP: 002b:00007f60dd0f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.662039][T11808] RAX: ffffffffffffffda RBX: 00007f60dc3e5fa0 RCX: 00007f60dc18f6c9 [ 289.662054][T11808] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 289.662068][T11808] RBP: 00007f60dd0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 289.662080][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.662092][T11808] R13: 00007f60dc3e6038 R14: 00007f60dc3e5fa0 R15: 00007f60dc50fa28 [ 289.662124][T11808] [ 290.010560][ T877] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 290.052168][ T877] usb 5-1: no configurations [ 290.056804][ T877] usb 5-1: can't read configurations, error -22 [ 290.143007][T11811] FAULT_INJECTION: forcing a failure. [ 290.143007][T11811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.163288][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.0.838 Not tainted syzkaller #0 PREEMPT(full) [ 290.163319][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.163337][T11811] Call Trace: [ 290.163345][T11811] [ 290.163354][T11811] dump_stack_lvl+0x189/0x250 [ 290.163387][T11811] ? __pfx____ratelimit+0x10/0x10 [ 290.163416][T11811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.163444][T11811] ? __pfx__printk+0x10/0x10 [ 290.163466][T11811] ? __might_fault+0xb0/0x130 [ 290.163507][T11811] should_fail_ex+0x414/0x560 [ 290.163543][T11811] _copy_from_user+0x2d/0xb0 [ 290.163571][T11811] sctp_setsockopt+0x19f/0x1200 [ 290.163592][T11811] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 290.163624][T11811] do_sock_setsockopt+0x17c/0x1b0 [ 290.163650][T11811] __x64_sys_setsockopt+0x13f/0x1b0 [ 290.163686][T11811] do_syscall_64+0xfa/0xfa0 [ 290.163712][T11811] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.163739][T11811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.163758][T11811] ? clear_bhb_loop+0x60/0xb0 [ 290.163780][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.163798][T11811] RIP: 0033:0x7f60dc18f6c9 [ 290.163816][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.163834][T11811] RSP: 002b:00007f60dd0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.163855][T11811] RAX: ffffffffffffffda RBX: 00007f60dc3e5fa0 RCX: 00007f60dc18f6c9 [ 290.163868][T11811] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 290.163879][T11811] RBP: 00007f60dd0f3090 R08: 000000000000009c R09: 0000000000000000 [ 290.163891][T11811] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 290.163901][T11811] R13: 00007f60dc3e6038 R14: 00007f60dc3e5fa0 R15: 00007f60dc50fa28 [ 290.163933][T11811] [ 290.354284][ T877] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 290.383626][ T877] usb 5-1: no configurations [ 290.388327][ T877] usb 5-1: can't read configurations, error -22 [ 290.395497][ T877] usb usb5-port1: unable to enumerate USB device [ 290.578706][ T30] audit: type=1326 audit(1762477378.148:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.3.840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f339bd8f6c9 code=0x0 [ 290.611023][T11815] fuse: Bad value for 'fd' [ 290.865571][T11772] netlink: 'syz.5.831': attribute type 1 has an invalid length. [ 292.040838][ T5896] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 292.128929][T11861] FAULT_INJECTION: forcing a failure. [ 292.128929][T11861] name failslab, interval 1, probability 0, space 0, times 0 [ 292.163542][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT(full) [ 292.163571][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 292.163584][T11861] Call Trace: [ 292.163593][T11861] [ 292.163601][T11861] dump_stack_lvl+0x189/0x250 [ 292.163635][T11861] ? __pfx____ratelimit+0x10/0x10 [ 292.163663][T11861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.163691][T11861] ? __pfx__printk+0x10/0x10 [ 292.163718][T11861] ? __pfx___might_resched+0x10/0x10 [ 292.163740][T11861] ? fs_reclaim_acquire+0x7d/0x100 [ 292.163785][T11861] should_fail_ex+0x414/0x560 [ 292.163821][T11861] should_failslab+0xa8/0x100 [ 292.163844][T11861] kmem_cache_alloc_node_noprof+0x77/0x710 [ 292.163873][T11861] ? __alloc_skb+0x112/0x2d0 [ 292.163891][T11861] ? netlink_autobind+0xdb/0x300 [ 292.163916][T11861] __alloc_skb+0x112/0x2d0 [ 292.163940][T11861] netlink_sendmsg+0x5c6/0xb30 [ 292.163970][T11861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.163994][T11861] ? aa_sock_msg_perm+0xf1/0x1d0 [ 292.164026][T11861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.164045][T11861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.164067][T11861] __sock_sendmsg+0x21c/0x270 [ 292.164098][T11861] ____sys_sendmsg+0x505/0x830 [ 292.164126][T11861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.164158][T11861] ? import_iovec+0x74/0xa0 [ 292.164188][T11861] ___sys_sendmsg+0x21f/0x2a0 [ 292.164212][T11861] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.164272][T11861] ? __fget_files+0x2a/0x420 [ 292.164290][T11861] ? __fget_files+0x3a0/0x420 [ 292.164320][T11861] __x64_sys_sendmsg+0x19b/0x260 [ 292.164345][T11861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.164377][T11861] ? __pfx_ksys_write+0x10/0x10 [ 292.164410][T11861] ? do_syscall_64+0xbe/0xfa0 [ 292.164443][T11861] do_syscall_64+0xfa/0xfa0 [ 292.164470][T11861] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.164500][T11861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.164520][T11861] ? clear_bhb_loop+0x60/0xb0 [ 292.164544][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.164564][T11861] RIP: 0033:0x7f60dc18f6c9 [ 292.164582][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.164599][T11861] RSP: 002b:00007f60dd0f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.164626][T11861] RAX: ffffffffffffffda RBX: 00007f60dc3e5fa0 RCX: 00007f60dc18f6c9 [ 292.164641][T11861] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 292.164654][T11861] RBP: 00007f60dd0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 292.164667][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.164679][T11861] R13: 00007f60dc3e6038 R14: 00007f60dc3e5fa0 R15: 00007f60dc50fa28 [ 292.164713][T11861] [ 292.593104][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.603864][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.640564][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 292.678447][ T5896] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 292.688794][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 292.697530][ T5896] usb 4-1: SerialNumber: syz [ 292.897403][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.906958][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.941072][ T9] usb 2-1: config 0 descriptor?? [ 292.958620][ T5896] usb 4-1: 0:2 : does not exist [ 292.965619][ T9] cp210x 2-1:0.0: cp210x converter detected [ 293.032692][ T5896] usb 4-1: USB disconnect, device number 28 [ 293.299493][T11884] xt_ecn: cannot match TCP bits for non-tcp packets [ 293.402167][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.050597][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 295.071273][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 295.078889][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 295.097838][T11956] capability: warning: `syz.1.854' uses 32-bit capabilities (legacy support in use) [ 295.150980][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 295.294880][ T9] usb 2-1: USB disconnect, device number 22 [ 295.456503][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.617892][ T9] cp210x 2-1:0.0: device disconnected [ 296.057091][T11993] netlink: 27 bytes leftover after parsing attributes in process `syz.0.858'. [ 296.134905][T11995] netlink: 56 bytes leftover after parsing attributes in process `syz.3.859'. [ 296.176880][T11995] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 296.189688][T11995] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 296.202792][T11999] FAULT_INJECTION: forcing a failure. [ 296.202792][T11999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.228318][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.1.860 Not tainted syzkaller #0 PREEMPT(full) [ 296.228347][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.228369][T11999] Call Trace: [ 296.228377][T11999] [ 296.228386][T11999] dump_stack_lvl+0x189/0x250 [ 296.228416][T11999] ? __pfx____ratelimit+0x10/0x10 [ 296.228442][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.228469][T11999] ? __pfx__printk+0x10/0x10 [ 296.228490][T11999] ? __might_fault+0xb0/0x130 [ 296.228529][T11999] should_fail_ex+0x414/0x560 [ 296.228564][T11999] _copy_from_iter+0x1de/0x1790 [ 296.228597][T11999] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 296.228624][T11999] ? policy_nodemask+0x27c/0x720 [ 296.228643][T11999] ? __pfx__copy_from_iter+0x10/0x10 [ 296.228663][T11999] ? set_page_refcounted+0xa0/0x1e0 [ 296.228683][T11999] ? page_copy_sane+0x4e/0x280 [ 296.228700][T11999] copy_page_from_iter+0xdd/0x170 [ 296.228719][T11999] tun_get_user+0x1d7b/0x3e90 [ 296.228745][T11999] ? tun_get_user+0x6f6/0x3e90 [ 296.228768][T11999] ? aa_file_perm+0x44d/0x1550 [ 296.228781][T11999] ? __pfx_tun_get_user+0x10/0x10 [ 296.228797][T11999] ? _parse_integer_limit+0x1ae/0x1f0 [ 296.228818][T11999] ? __lock_acquire+0xab9/0xd20 [ 296.228836][T11999] ? ref_tracker_alloc+0x318/0x460 [ 296.228849][T11999] ? __lock_acquire+0xab9/0xd20 [ 296.228864][T11999] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 296.228881][T11999] ? tun_get+0x1c/0x2f0 [ 296.228902][T11999] ? tun_get+0x1c/0x2f0 [ 296.228917][T11999] ? tun_get+0x1c/0x2f0 [ 296.228936][T11999] tun_chr_write_iter+0x113/0x200 [ 296.228955][T11999] vfs_write+0x5c9/0xb30 [ 296.228979][T11999] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 296.228996][T11999] ? __pfx_vfs_write+0x10/0x10 [ 296.229023][T11999] ? __fget_files+0x2a/0x420 [ 296.229043][T11999] ksys_write+0x145/0x250 [ 296.229064][T11999] ? __pfx_ksys_write+0x10/0x10 [ 296.229086][T11999] ? do_syscall_64+0xbe/0xfa0 [ 296.229111][T11999] do_syscall_64+0xfa/0xfa0 [ 296.229129][T11999] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.229150][T11999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.229164][T11999] ? clear_bhb_loop+0x60/0xb0 [ 296.229181][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.229195][T11999] RIP: 0033:0x7fb36578e17f [ 296.229208][T11999] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 296.229220][T11999] RSP: 002b:00007fb3665f3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 296.229235][T11999] RAX: ffffffffffffffda RBX: 00007fb3659e5fa0 RCX: 00007fb36578e17f [ 296.229245][T11999] RDX: 000000000000006e RSI: 0000200000001800 RDI: 00000000000000c8 [ 296.229254][T11999] RBP: 00007fb3665f3090 R08: 0000000000000000 R09: 0000000000000000 [ 296.229263][T11999] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 296.229272][T11999] R13: 00007fb3659e6038 R14: 00007fb3659e5fa0 R15: 00007fb365b0fa28 [ 296.229294][T11999] [ 297.068583][T12024] FAULT_INJECTION: forcing a failure. [ 297.068583][T12024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.109119][T12024] CPU: 1 UID: 0 PID: 12024 Comm: syz.1.870 Not tainted syzkaller #0 PREEMPT(full) [ 297.109149][T12024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.109161][T12024] Call Trace: [ 297.109169][T12024] [ 297.109178][T12024] dump_stack_lvl+0x189/0x250 [ 297.109210][T12024] ? __pfx____ratelimit+0x10/0x10 [ 297.109238][T12024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.109265][T12024] ? __pfx__printk+0x10/0x10 [ 297.109285][T12024] ? __might_fault+0xb0/0x130 [ 297.109331][T12024] should_fail_ex+0x414/0x560 [ 297.109367][T12024] _copy_from_user+0x2d/0xb0 [ 297.109394][T12024] ___sys_recvmsg+0x12e/0x510 [ 297.109423][T12024] ? __pfx____sys_recvmsg+0x10/0x10 [ 297.109477][T12024] ? __might_fault+0xb0/0x130 [ 297.109508][T12024] do_recvmmsg+0x307/0x770 [ 297.109539][T12024] ? __pfx_do_recvmmsg+0x10/0x10 [ 297.109574][T12024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.109621][T12024] __x64_sys_recvmmsg+0x190/0x240 [ 297.109648][T12024] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 297.109675][T12024] ? do_syscall_64+0xbe/0xfa0 [ 297.109707][T12024] do_syscall_64+0xfa/0xfa0 [ 297.109733][T12024] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.109761][T12024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.109780][T12024] ? clear_bhb_loop+0x60/0xb0 [ 297.109803][T12024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.109823][T12024] RIP: 0033:0x7fb36578f6c9 [ 297.109839][T12024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.109856][T12024] RSP: 002b:00007fb3665f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 297.109877][T12024] RAX: ffffffffffffffda RBX: 00007fb3659e5fa0 RCX: 00007fb36578f6c9 [ 297.109891][T12024] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 297.109904][T12024] RBP: 00007fb3665f3090 R08: 0000000000000000 R09: 0000000000000000 [ 297.109916][T12024] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 297.109927][T12024] R13: 00007fb3659e6038 R14: 00007fb3659e5fa0 R15: 00007fb365b0fa28 [ 297.109958][T12024] [ 297.129423][ T30] audit: type=1326 audit(1762477384.688:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70118f6c9 code=0x7ffc0000 [ 297.348851][T12039] netlink: 27 bytes leftover after parsing attributes in process `syz.5.872'. [ 297.448944][T12015] netlink: 220 bytes leftover after parsing attributes in process `syz.3.867'. [ 297.459507][T12015] netlink: 220 bytes leftover after parsing attributes in process `syz.3.867'. [ 297.468641][T12015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.867'. [ 297.477820][ T30] audit: type=1326 audit(1762477384.688:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12033 comm="syz.4.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb70118f6c9 code=0x7ffc0000 [ 297.512938][T12045] netlink: 7 bytes leftover after parsing attributes in process `syz.4.874'. [ 297.722478][T12062] FAULT_INJECTION: forcing a failure. [ 297.722478][T12062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.859476][T12062] CPU: 1 UID: 0 PID: 12062 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(full) [ 297.859505][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.859519][T12062] Call Trace: [ 297.859528][T12062] [ 297.859537][T12062] dump_stack_lvl+0x189/0x250 [ 297.859571][T12062] ? __pfx____ratelimit+0x10/0x10 [ 297.859599][T12062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.859628][T12062] ? __pfx__printk+0x10/0x10 [ 297.859662][T12062] should_fail_ex+0x414/0x560 [ 297.859700][T12062] _copy_to_user+0x31/0xb0 [ 297.859729][T12062] simple_read_from_buffer+0xe1/0x170 [ 297.859767][T12062] proc_fail_nth_read+0x1b3/0x220 [ 297.859798][T12062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.859825][T12062] ? rw_verify_area+0x2a6/0x4d0 [ 297.859852][T12062] ? __lock_acquire+0xab9/0xd20 [ 297.859870][T12062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.859898][T12062] vfs_read+0x200/0xa30 [ 297.859926][T12062] ? fdget_pos+0x247/0x320 [ 297.859950][T12062] ? __pfx___mutex_lock+0x10/0x10 [ 297.859979][T12062] ? __pfx_vfs_read+0x10/0x10 [ 297.860004][T12062] ? __fget_files+0x2a/0x420 [ 297.860028][T12062] ? __fget_files+0x3a0/0x420 [ 297.860046][T12062] ? __fget_files+0x2a/0x420 [ 297.860075][T12062] ksys_read+0x145/0x250 [ 297.860106][T12062] ? __pfx_ksys_read+0x10/0x10 [ 297.860139][T12062] ? do_syscall_64+0xbe/0xfa0 [ 297.860172][T12062] do_syscall_64+0xfa/0xfa0 [ 297.860200][T12062] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.860236][T12062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.860257][T12062] ? clear_bhb_loop+0x60/0xb0 [ 297.860282][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.860302][T12062] RIP: 0033:0x7fb70118e0dc [ 297.860320][T12062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.860338][T12062] RSP: 002b:00007fb701f47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.860364][T12062] RAX: ffffffffffffffda RBX: 00007fb7013e6090 RCX: 00007fb70118e0dc [ 297.860378][T12062] RDX: 000000000000000f RSI: 00007fb701f470a0 RDI: 0000000000000004 [ 297.860390][T12062] RBP: 00007fb701f47090 R08: 0000000000000000 R09: 0000000000000000 [ 297.860415][T12062] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 297.860427][T12062] R13: 00007fb7013e6128 R14: 00007fb7013e6090 R15: 00007fb70150fa28 [ 297.860460][T12062] [ 298.092970][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.302367][T12074] set match dimension is over the limit! [ 298.411538][ T5896] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 298.577909][ T5896] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.605913][ T5896] usb 6-1: config 0 has no interface number 0 [ 298.668349][ T5896] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.821137][ T5896] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.837204][ T5896] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 298.846623][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.913493][ T5896] usb 6-1: config 0 descriptor?? [ 299.173136][ T5896] usbhid 6-1:0.1: can't add hid device: -71 [ 299.179203][ T5896] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 299.226947][ T5896] usb 6-1: USB disconnect, device number 28 [ 299.360767][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.520477][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 299.532396][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.542584][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.562824][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.577001][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.630681][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.687598][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.045722][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 300.512256][ T9] usb 2-1: usb_control_msg returned -71 [ 300.520815][ T9] usbtmc 2-1:16.0: can't read capabilities [ 300.549871][ T9] usb 2-1: USB disconnect, device number 23 [ 300.609509][T12122] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.011838][T12164] FAULT_INJECTION: forcing a failure. [ 302.011838][T12164] name failslab, interval 1, probability 0, space 0, times 0 [ 302.061838][T12164] CPU: 0 UID: 0 PID: 12164 Comm: syz.0.893 Not tainted syzkaller #0 PREEMPT(full) [ 302.061868][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.061882][T12164] Call Trace: [ 302.061890][T12164] [ 302.061899][T12164] dump_stack_lvl+0x189/0x250 [ 302.061934][T12164] ? __pfx____ratelimit+0x10/0x10 [ 302.061971][T12164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.062001][T12164] ? __pfx__printk+0x10/0x10 [ 302.062030][T12164] ? __pfx___might_resched+0x10/0x10 [ 302.062051][T12164] ? fs_reclaim_acquire+0x7d/0x100 [ 302.062090][T12164] should_fail_ex+0x414/0x560 [ 302.062128][T12164] should_failslab+0xa8/0x100 [ 302.062151][T12164] __kvmalloc_node_noprof+0x158/0x910 [ 302.062185][T12164] ? xp_create_and_assign_umem+0xa9/0xd00 [ 302.062225][T12164] xp_create_and_assign_umem+0xa9/0xd00 [ 302.062264][T12164] ? dev_get_by_index+0x22/0x2e0 [ 302.062291][T12164] ? dev_get_by_index+0x22/0x2e0 [ 302.062315][T12164] ? dev_get_by_index+0x22/0x2e0 [ 302.062347][T12164] xsk_bind+0x42d/0xf90 [ 302.062371][T12164] ? apparmor_socket_bind+0xff/0x1e0 [ 302.062408][T12164] __sys_bind+0x2c6/0x3e0 [ 302.062442][T12164] ? __pfx___sys_bind+0x10/0x10 [ 302.062486][T12164] ? __pfx_ksys_write+0x10/0x10 [ 302.062523][T12164] __x64_sys_bind+0x7a/0x90 [ 302.062556][T12164] do_syscall_64+0xfa/0xfa0 [ 302.062585][T12164] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.062614][T12164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.062635][T12164] ? clear_bhb_loop+0x60/0xb0 [ 302.062660][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.062681][T12164] RIP: 0033:0x7f60dc18f6c9 [ 302.062699][T12164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.062717][T12164] RSP: 002b:00007f60dd0b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 302.062739][T12164] RAX: ffffffffffffffda RBX: 00007f60dc3e6180 RCX: 00007f60dc18f6c9 [ 302.062754][T12164] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 302.062767][T12164] RBP: 00007f60dd0b1090 R08: 0000000000000000 R09: 0000000000000000 [ 302.062779][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.062791][T12164] R13: 00007f60dc3e6218 R14: 00007f60dc3e6180 R15: 00007f60dc50fa28 [ 302.062826][T12164] [ 302.457061][T12168] FAULT_INJECTION: forcing a failure. [ 302.457061][T12168] name failslab, interval 1, probability 0, space 0, times 0 [ 302.564373][T12168] CPU: 0 UID: 0 PID: 12168 Comm: syz.5.894 Not tainted syzkaller #0 PREEMPT(full) [ 302.564401][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.564414][T12168] Call Trace: [ 302.564422][T12168] [ 302.564431][T12168] dump_stack_lvl+0x189/0x250 [ 302.564481][T12168] ? __pfx____ratelimit+0x10/0x10 [ 302.564510][T12168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.564538][T12168] ? __pfx__printk+0x10/0x10 [ 302.564566][T12168] ? __pfx___might_resched+0x10/0x10 [ 302.564588][T12168] ? fs_reclaim_acquire+0x7d/0x100 [ 302.564634][T12168] should_fail_ex+0x414/0x560 [ 302.564678][T12168] should_failslab+0xa8/0x100 [ 302.564701][T12168] __kmalloc_noprof+0xcb/0x7f0 [ 302.564730][T12168] ? tomoyo_encode+0x28b/0x550 [ 302.564767][T12168] tomoyo_encode+0x28b/0x550 [ 302.564805][T12168] tomoyo_realpath_from_path+0x58d/0x5d0 [ 302.564839][T12168] ? tomoyo_domain+0xd9/0x130 [ 302.564865][T12168] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 302.564892][T12168] tomoyo_path_number_perm+0x1e8/0x5a0 [ 302.564922][T12168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 302.564992][T12168] ? __fget_files+0x2a/0x420 [ 302.565016][T12168] ? __fget_files+0x3a0/0x420 [ 302.565035][T12168] ? __fget_files+0x2a/0x420 [ 302.565058][T12168] security_file_ioctl+0xcb/0x2d0 [ 302.565087][T12168] __se_sys_ioctl+0x47/0x170 [ 302.565117][T12168] do_syscall_64+0xfa/0xfa0 [ 302.565144][T12168] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.565173][T12168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.565194][T12168] ? clear_bhb_loop+0x60/0xb0 [ 302.565219][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.565239][T12168] RIP: 0033:0x7fd11a18f6c9 [ 302.565258][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.565275][T12168] RSP: 002b:00007fd11b0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.565297][T12168] RAX: ffffffffffffffda RBX: 00007fd11a3e6090 RCX: 00007fd11a18f6c9 [ 302.565313][T12168] RDX: 0000200000000180 RSI: 000000000000541b RDI: 0000000000000003 [ 302.565327][T12168] RBP: 00007fd11b0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.565339][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.565351][T12168] R13: 00007fd11a3e6128 R14: 00007fd11a3e6090 R15: 00007fd11a50fa28 [ 302.565385][T12168] [ 302.570076][T12168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 303.600508][ T877] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 303.761179][ T877] usb 6-1: Using ep0 maxpacket: 32 [ 303.776081][ T877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.797126][ T877] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 303.814818][ T877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.835384][ T877] usb 6-1: Product: syz [ 303.848605][ T877] usb 6-1: Manufacturer: syz [ 303.858976][ T877] usb 6-1: SerialNumber: syz [ 303.876811][ T877] usb 6-1: config 0 descriptor?? [ 303.897837][ T877] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 304.014881][T12193] netlink: 204 bytes leftover after parsing attributes in process `syz.0.901'. [ 304.099302][ T877] gspca_sunplus: reg_r err -32 [ 304.169622][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.905'. [ 304.242785][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 304.272161][T12205] netlink: 'syz.3.907': attribute type 22 has an invalid length. [ 304.334065][T12206] bridge0: port 1(wlan0) entered blocking state [ 304.342083][T12206] bridge0: port 1(wlan0) entered disabled state [ 304.348614][T12206] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 304.360018][T12206] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 304.557930][ T30] audit: type=1326 audit(1762477392.128:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.582531][ T30] audit: type=1326 audit(1762477392.128:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.623313][ T30] audit: type=1326 audit(1762477392.138:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.649153][ T30] audit: type=1326 audit(1762477392.138:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.672460][ T30] audit: type=1326 audit(1762477392.138:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.697136][ T30] audit: type=1326 audit(1762477392.138:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.725761][ T30] audit: type=1326 audit(1762477392.138:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.749114][ T30] audit: type=1326 audit(1762477392.138:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.772071][ T30] audit: type=1326 audit(1762477392.138:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 304.795630][ T30] audit: type=1326 audit(1762477392.138:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12225 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339bd8f6c9 code=0x7ffc0000 [ 305.060677][ T5954] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 305.801470][ T5954] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 305.831780][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.852883][ T5954] usb 4-1: Product: syz [ 305.860023][ T5954] usb 4-1: Manufacturer: syz [ 305.872295][ T5954] usb 4-1: SerialNumber: syz [ 305.880959][ T877] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 305.961150][ T5954] usb 4-1: config 0 descriptor?? [ 306.001182][ T5954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 306.051206][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.084823][ T5954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 306.097309][T12264] netlink: 75 bytes leftover after parsing attributes in process `syz.0.921'. [ 306.120949][ T5954] usb 4-1: media controller created [ 306.310588][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.779301][ T1219] usb 6-1: USB disconnect, device number 29 [ 306.976101][ T5954] DVB: Unable to find symbol mt352_attach() [ 306.978443][T12282] netlink: 'syz.0.924': attribute type 3 has an invalid length. [ 307.411732][ T5954] DVB: Unable to find symbol nxt6000_attach() [ 307.465456][ T5954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 307.523339][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 307.628970][ T5954] dvb-usb: schedule remote query interval to 1000 msecs. [ 307.695828][ T5954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 307.996739][ T5954] dvb-usb: bulk message failed: -22 (7/0) [ 308.064403][T12292] fuse: Unknown parameter 'groupßid' [ 308.248477][T12292] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 308.281836][T12294] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 308.284616][ T5954] dvb-usb: bulk message failed: -22 (7/0) [ 308.364184][ T5954] usb 4-1: USB disconnect, device number 29 [ 308.786594][ T5954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 309.173817][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026f8e000: rx timeout, send abort [ 309.182196][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026f8fc00: rx timeout, send abort [ 309.190671][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026f8e000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 309.206030][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888026f8fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 309.733440][T12333] Invalid logical block size (1348567262) [ 309.851590][T12341] set match dimension is over the limit! [ 310.146462][ T5954] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 310.275819][T12348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 310.667066][ T5954] usb 2-1: too many endpoints for config 1 interface 0 altsetting 6: 72, using maximum allowed: 30 [ 310.710857][ T5954] usb 2-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 72 [ 310.750551][ T5954] usb 2-1: config 1 interface 0 has no altsetting 0 [ 310.771166][ T5954] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.40 [ 310.780796][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.794460][ T5954] usb 2-1: Product: Ћ [ 310.805262][ T5954] usb 2-1: Manufacturer: щ [ 311.109495][ T5954] usbhid 2-1:1.0: can't add hid device: -71 [ 311.137328][ T5954] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 311.229936][ T5954] usb 2-1: USB disconnect, device number 24 [ 311.411092][ T5896] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 311.572451][ T5896] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 311.581392][ T5896] usb 4-1: config 0 has no interface number 0 [ 311.588325][ T5896] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.618316][ T5896] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 311.634386][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 311.643535][ T5896] usb 4-1: Product: syz [ 311.647800][ T5896] usb 4-1: SerialNumber: syz [ 311.659348][ T5896] usb 4-1: config 0 descriptor?? [ 311.888524][ T5896] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 311.969701][T12398] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 311.987688][T12398] IPVS: sed: FWM 3 0x00000003 - no destination available [ 312.073606][T12362] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 312.131143][ T44] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 312.293134][ T44] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.317530][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.354702][ T44] usb 6-1: config 0 descriptor?? [ 312.384617][ T5923] usb 4-1: USB disconnect, device number 30 [ 312.404946][ T44] cp210x 6-1:0.0: cp210x converter detected [ 312.617410][T12421] syz_tun: entered allmulticast mode [ 312.626630][T12419] syz_tun: left allmulticast mode [ 312.682822][T12422] netlink: 59 bytes leftover after parsing attributes in process `syz.1.952'. [ 312.814974][T12426] input: syz0 as /devices/virtual/input/input12 [ 313.480928][ T5896] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 313.671876][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 313.696404][ T5896] usb 5-1: config 90 has an invalid interface number: 236 but max is 0 [ 313.718284][ T5896] usb 5-1: config 90 has no interface number 0 [ 313.824850][ T1219] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 313.849894][ T5896] usb 5-1: config 90 interface 236 has no altsetting 0 [ 313.904006][T12464] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 313.941884][ T5896] usb 5-1: New USB device found, idVendor=1199, idProduct=9079, bcdDevice=6a.b0 [ 313.963337][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.995407][ T5896] usb 5-1: Product: syz [ 314.003060][ T5896] usb 5-1: Manufacturer: syz [ 314.007768][ T5896] usb 5-1: SerialNumber: syz [ 314.081336][ T1219] usb 1-1: Using ep0 maxpacket: 16 [ 314.091993][ T1219] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.142749][ T1219] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 314.214817][ T1219] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 314.229400][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.249916][ T1219] usb 1-1: Product: syz [ 314.259295][ T1219] usb 1-1: Manufacturer: syz [ 314.283766][ T1219] usb 1-1: SerialNumber: syz [ 314.445849][ T1219] usb 1-1: config 0 descriptor?? [ 314.800258][T12487] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 314.878499][T12477] binder: 12465:12477 ioctl c018620c 0 returned -14 [ 315.096047][T12504] FAULT_INJECTION: forcing a failure. [ 315.096047][T12504] name failslab, interval 1, probability 0, space 0, times 0 [ 315.352643][T12504] CPU: 1 UID: 0 PID: 12504 Comm: syz.1.966 Not tainted syzkaller #0 PREEMPT(full) [ 315.352684][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 315.352710][T12504] Call Trace: [ 315.352719][T12504] [ 315.352727][T12504] dump_stack_lvl+0x189/0x250 [ 315.352759][T12504] ? __pfx____ratelimit+0x10/0x10 [ 315.352785][T12504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.352810][T12504] ? __pfx__printk+0x10/0x10 [ 315.352835][T12504] ? __pfx___might_resched+0x10/0x10 [ 315.352861][T12504] should_fail_ex+0x414/0x560 [ 315.352897][T12504] should_failslab+0xa8/0x100 [ 315.352918][T12504] __kmalloc_noprof+0xcb/0x7f0 [ 315.352944][T12504] ? kfree+0x4d/0x6d0 [ 315.352964][T12504] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 315.353000][T12504] tomoyo_realpath_from_path+0xe3/0x5d0 [ 315.353031][T12504] ? tomoyo_domain+0xd9/0x130 [ 315.353071][T12504] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 315.353097][T12504] tomoyo_path_number_perm+0x1e8/0x5a0 [ 315.353126][T12504] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.353193][T12504] ? __fget_files+0x2a/0x420 [ 315.353217][T12504] ? __fget_files+0x3a0/0x420 [ 315.353234][T12504] ? __fget_files+0x2a/0x420 [ 315.353257][T12504] security_file_ioctl+0xcb/0x2d0 [ 315.353284][T12504] __se_sys_ioctl+0x47/0x170 [ 315.353313][T12504] do_syscall_64+0xfa/0xfa0 [ 315.353339][T12504] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.353365][T12504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.353385][T12504] ? clear_bhb_loop+0x60/0xb0 [ 315.353408][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.353426][T12504] RIP: 0033:0x7fb36578f6c9 [ 315.353440][T12504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.353452][T12504] RSP: 002b:00007fb3665d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.353468][T12504] RAX: ffffffffffffffda RBX: 00007fb3659e6090 RCX: 00007fb36578f6c9 [ 315.353478][T12504] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 315.353487][T12504] RBP: 00007fb3665d2090 R08: 0000000000000000 R09: 0000000000000000 [ 315.353496][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.353504][T12504] R13: 00007fb3659e6128 R14: 00007fb3659e6090 R15: 00007fb365b0fa28 [ 315.353527][T12504] [ 315.354979][T12504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.793660][ T44] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 315.924608][ T44] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 316.008181][ T44] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 316.049557][ T5923] usb 1-1: USB disconnect, device number 25 [ 316.153376][ T44] usb 6-1: cp210x converter now attached to ttyUSB0 [ 316.194653][ T44] usb 6-1: USB disconnect, device number 30 [ 316.273491][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.285946][ T44] cp210x 6-1:0.0: device disconnected [ 316.641221][ T44] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 316.801141][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 316.867978][ T44] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 316.897133][ T44] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 316.960210][ T44] usb 6-1: config 8 has an invalid descriptor of length 82, skipping remainder of the config [ 317.082861][ T44] usb 6-1: config 8 has no interface number 0 [ 317.116062][ T44] usb 6-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 317.164771][ T44] usb 6-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 317.183679][ T44] usb 6-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.207414][ T44] usb 6-1: config 8 interface 223 has no altsetting 0 [ 317.229089][ T44] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 317.259209][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.266185][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.281458][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.292316][ T44] usb 6-1: Product: syz [ 317.296680][ T44] usb 6-1: Manufacturer: syz [ 317.302216][ T44] usb 6-1: SerialNumber: syz [ 317.315051][T12532] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 317.572009][ T44] usb 6-1: USB disconnect, device number 31 [ 317.651948][T12569] netlink: 'syz.0.970': attribute type 3 has an invalid length. [ 317.872110][ T5896] usb 5-1: USB disconnect, device number 26 [ 318.392598][ T5923] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 318.620677][ T5923] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 318.632940][ T5923] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 318.648397][ T5923] usb 1-1: config 0 has no interface number 0 [ 318.660403][ T5923] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 318.674966][ T5923] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.690239][ T5923] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 318.888366][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.007584][ T5923] usb 1-1: config 0 descriptor?? [ 319.676623][ T5923] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input13 [ 319.708147][ T5923] input: failed to attach handler kbd to device input13, error: -5 [ 320.023137][T12635] pim6reg: entered allmulticast mode [ 320.474368][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 320.474382][ T30] audit: type=1326 audit(1762477408.048:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.508481][ T30] audit: type=1326 audit(1762477408.088:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.562145][ T30] audit: type=1326 audit(1762477408.088:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.588731][ T30] audit: type=1326 audit(1762477408.088:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.613193][T12643] netlink: 156 bytes leftover after parsing attributes in process `syz.3.982'. [ 320.651122][ T30] audit: type=1326 audit(1762477408.088:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.673422][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.736437][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.984'. [ 320.755640][ T30] audit: type=1326 audit(1762477408.088:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.809790][ T30] audit: type=1326 audit(1762477408.088:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.847816][ T30] audit: type=1326 audit(1762477408.088:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.870127][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.896726][ T30] audit: type=1326 audit(1762477408.088:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 320.929082][ T30] audit: type=1326 audit(1762477408.108:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.5.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd11a18f6c9 code=0x7ffc0000 [ 321.022423][ T5923] usb 1-1: USB disconnect, device number 26 [ 321.057299][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.986'. [ 321.238377][T12669] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 321.616256][T12680] netlink: 14 bytes leftover after parsing attributes in process `syz.5.992'. [ 321.856836][T12689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.994'. [ 321.956908][T12680] team0 (unregistering): Port device team_slave_0 removed [ 321.967718][T12680] team0 (unregistering): Port device team_slave_1 removed [ 322.012436][T12689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.994'. [ 322.041481][T12689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.994'. [ 322.305433][T12724] FAULT_INJECTION: forcing a failure. [ 322.305433][T12724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.343697][T12724] CPU: 0 UID: 0 PID: 12724 Comm: syz.1.995 Not tainted syzkaller #0 PREEMPT(full) [ 322.343724][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.343736][T12724] Call Trace: [ 322.343744][T12724] [ 322.343752][T12724] dump_stack_lvl+0x189/0x250 [ 322.343782][T12724] ? __pfx____ratelimit+0x10/0x10 [ 322.343808][T12724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.343833][T12724] ? __pfx__printk+0x10/0x10 [ 322.343864][T12724] should_fail_ex+0x414/0x560 [ 322.343896][T12724] _copy_to_user+0x31/0xb0 [ 322.343923][T12724] simple_read_from_buffer+0xe1/0x170 [ 322.343956][T12724] proc_fail_nth_read+0x1b3/0x220 [ 322.343983][T12724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.344010][T12724] ? rw_verify_area+0x2a6/0x4d0 [ 322.344033][T12724] ? __lock_acquire+0xab9/0xd20 [ 322.344050][T12724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.344075][T12724] vfs_read+0x200/0xa30 [ 322.344098][T12724] ? fdget_pos+0x247/0x320 [ 322.344121][T12724] ? __pfx___mutex_lock+0x10/0x10 [ 322.344155][T12724] ? __pfx_vfs_read+0x10/0x10 [ 322.344182][T12724] ? __fget_files+0x2a/0x420 [ 322.344203][T12724] ? __fget_files+0x3a0/0x420 [ 322.344220][T12724] ? __fget_files+0x2a/0x420 [ 322.344246][T12724] ksys_read+0x145/0x250 [ 322.344274][T12724] ? __pfx_ksys_read+0x10/0x10 [ 322.344321][T12724] ? do_syscall_64+0xbe/0xfa0 [ 322.344352][T12724] do_syscall_64+0xfa/0xfa0 [ 322.344378][T12724] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.344405][T12724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.344424][T12724] ? clear_bhb_loop+0x60/0xb0 [ 322.344448][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.344467][T12724] RIP: 0033:0x7fb36578e0dc [ 322.344484][T12724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.344501][T12724] RSP: 002b:00007fb3665f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.344522][T12724] RAX: ffffffffffffffda RBX: 00007fb3659e5fa0 RCX: 00007fb36578e0dc [ 322.344554][T12724] RDX: 000000000000000f RSI: 00007fb3665f30a0 RDI: 0000000000000004 [ 322.344567][T12724] RBP: 00007fb3665f3090 R08: 0000000000000000 R09: 0000000000000000 [ 322.344579][T12724] R10: 00000000000039e1 R11: 0000000000000246 R12: 0000000000000001 [ 322.344591][T12724] R13: 00007fb3659e6038 R14: 00007fb3659e5fa0 R15: 00007fb365b0fa28 [ 322.344625][T12724] [ 322.698588][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 322.748666][T12733] vim2m vim2m.0: vidioc_s_fmt queue busy [ 322.980969][T12749] FAULT_INJECTION: forcing a failure. [ 322.980969][T12749] name failslab, interval 1, probability 0, space 0, times 0 [ 323.060496][T12749] CPU: 0 UID: 0 PID: 12749 Comm: syz.5.1003 Not tainted syzkaller #0 PREEMPT(full) [ 323.060527][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.060540][T12749] Call Trace: [ 323.060548][T12749] [ 323.060556][T12749] dump_stack_lvl+0x189/0x250 [ 323.060590][T12749] ? __pfx____ratelimit+0x10/0x10 [ 323.060618][T12749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.060645][T12749] ? __pfx__printk+0x10/0x10 [ 323.060670][T12749] ? __pfx___might_resched+0x10/0x10 [ 323.060692][T12749] ? fs_reclaim_acquire+0x7d/0x100 [ 323.060728][T12749] should_fail_ex+0x414/0x560 [ 323.060762][T12749] should_failslab+0xa8/0x100 [ 323.060784][T12749] kmem_cache_alloc_node_noprof+0x77/0x710 [ 323.060812][T12749] ? __alloc_skb+0x112/0x2d0 [ 323.060829][T12749] ? netlink_autobind+0xdb/0x300 [ 323.060855][T12749] __alloc_skb+0x112/0x2d0 [ 323.060877][T12749] netlink_sendmsg+0x5c6/0xb30 [ 323.060906][T12749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.060929][T12749] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.060961][T12749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.060979][T12749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.060999][T12749] __sock_sendmsg+0x21c/0x270 [ 323.061029][T12749] ____sys_sendmsg+0x505/0x830 [ 323.061063][T12749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.061094][T12749] ? import_iovec+0x74/0xa0 [ 323.061140][T12749] ___sys_sendmsg+0x21f/0x2a0 [ 323.061164][T12749] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.061209][T12749] ? __fget_files+0x2a/0x420 [ 323.061223][T12749] ? __fget_files+0x3a0/0x420 [ 323.061257][T12749] __x64_sys_sendmsg+0x19b/0x260 [ 323.061274][T12749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.061297][T12749] ? __pfx_ksys_write+0x10/0x10 [ 323.061320][T12749] ? do_syscall_64+0xbe/0xfa0 [ 323.061343][T12749] do_syscall_64+0xfa/0xfa0 [ 323.061362][T12749] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.061382][T12749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.061396][T12749] ? clear_bhb_loop+0x60/0xb0 [ 323.061413][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.061427][T12749] RIP: 0033:0x7fd11a18f6c9 [ 323.061439][T12749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.061451][T12749] RSP: 002b:00007fd11b0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.061467][T12749] RAX: ffffffffffffffda RBX: 00007fd11a3e5fa0 RCX: 00007fd11a18f6c9 [ 323.061477][T12749] RDX: 000000000000c010 RSI: 0000200000000280 RDI: 0000000000000003 [ 323.061487][T12749] RBP: 00007fd11b0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.061495][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.061504][T12749] R13: 00007fd11a3e6038 R14: 00007fd11a3e5fa0 R15: 00007fd11a50fa28 [ 323.061526][T12749] [ 323.680506][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 323.729557][T12756] set match dimension is over the limit! [ 323.950528][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 323.959120][ T5923] usb 2-1: config 13 has an invalid interface number: 161 but max is 2 [ 323.967911][ T5923] usb 2-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 323.977199][ T5923] usb 2-1: config 13 has an invalid descriptor of length 1, skipping remainder of the config [ 323.988892][ T5923] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 3 [ 324.001417][ T5923] usb 2-1: config 13 has no interface number 0 [ 324.009163][ T5923] usb 2-1: config 13 interface 161 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 324.025471][ T5923] usb 2-1: config 13 interface 161 altsetting 6 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 324.037948][ T5923] usb 2-1: config 13 interface 161 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 324.053261][ T5923] usb 2-1: config 13 interface 161 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 324.145950][ T5923] usb 2-1: config 13 interface 161 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 8 [ 324.177723][ T5923] usb 2-1: config 13 interface 161 altsetting 6 endpoint 0x7 has an invalid bInterval 110, changing to 10 [ 324.305932][ T5923] usb 2-1: config 13 interface 161 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 324.317518][ T5923] usb 2-1: config 13 interface 161 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 324.317645][T12760] openvswitch: netlink: Flow key attr not present in new flow. [ 324.380214][ T5923] usb 2-1: config 13 interface 161 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 324.438805][ T5923] usb 2-1: config 13 interface 161 altsetting 6 endpoint 0xE has an invalid bInterval 207, changing to 11 [ 324.464945][ T5923] usb 2-1: config 13 interface 161 has no altsetting 0 [ 324.487571][ T5923] usb 2-1: New USB device found, idVendor=03f0, idProduct=031d, bcdDevice= 0.00 [ 324.497172][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 324.513865][ T5923] usb 2-1: Product: Ь [ 324.531375][ T5923] usb 2-1: SerialNumber: 弫྅Ԉâ–㶉咕⽉î¢î‹›á¹…꾜샤陈鋨â‰çŸá¥Žç´‹âŒˆâ–†ë­Šæ‡‹ë¥˜â¡†ç„‹ã†·ì‚”渼㯘躻è±èŠ”⢂Åé»ç§°è«»ä…•í’¥îµ—⣰㧶疢啿ç»è©®æ†™ä³¼èµ¨Æ™ä§žã³²îœ½à³—DŽ䬂餤輸湟ﶾෟ욄咷㊟ᦞ巅î³å¶”㉔涺暚숶쾗 [ 324.614840][T12750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.091859][ T1219] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 326.131996][T12781] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1009'. [ 326.271113][ T1219] usb 1-1: Using ep0 maxpacket: 32 [ 326.278411][ T1219] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 326.303341][ T1219] usb 1-1: config 0 has no interface number 0 [ 326.361647][ T1219] usb 1-1: config 0 interface 83 altsetting 0 has an endpoint descriptor with address 0x5A, changing to 0xA [ 326.406742][ T1219] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 326.487357][ T1219] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 326.497759][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.528736][ T1219] usb 1-1: Product: syz [ 326.539159][ T1219] usb 1-1: Manufacturer: syz [ 326.553534][ T1219] usb 1-1: SerialNumber: syz [ 326.605798][ T1219] usb 1-1: config 0 descriptor?? [ 326.628644][ T1219] redrat3 1-1:0.83: Couldn't find all endpoints [ 326.739957][T12790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1011'. [ 326.856077][ T1219] usb 1-1: USB disconnect, device number 27 [ 326.980041][T12806] loop4: detected capacity change from 0 to 2560 [ 326.999825][T12806] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 327.024598][T12806] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 327.034422][T12806] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 327.037035][ T5895] Buffer I/O error on dev loop4, logical block 64, async page read [ 327.135351][T12812] mmap: syz.4.1014 (12812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 327.236715][ T5923] cdc_mbim 2-1:13.161: skipping garbage [ 327.256175][ T5923] cdc_mbim 2-1:13.161: CDC Union missing and no IAD found [ 327.264419][ T5923] cdc_mbim 2-1:13.161: bind() failure [ 327.286737][ T5923] usb 2-1: USB disconnect, device number 25 [ 327.381640][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058999c00: rx timeout, send abort [ 327.389994][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805899a000: rx timeout, send abort [ 327.398879][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058999c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 327.413265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805899a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 327.490268][T12836] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1017'. [ 327.736257][T12845] FAULT_INJECTION: forcing a failure. [ 327.736257][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.756313][T12845] CPU: 0 UID: 0 PID: 12845 Comm: syz.5.1018 Not tainted syzkaller #0 PREEMPT(full) [ 327.756339][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.756350][T12845] Call Trace: [ 327.756358][T12845] [ 327.756365][T12845] dump_stack_lvl+0x189/0x250 [ 327.756405][T12845] ? __pfx____ratelimit+0x10/0x10 [ 327.756430][T12845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.756455][T12845] ? __pfx__printk+0x10/0x10 [ 327.756475][T12845] ? __might_fault+0xb0/0x130 [ 327.756513][T12845] should_fail_ex+0x414/0x560 [ 327.756546][T12845] _copy_from_user+0x2d/0xb0 [ 327.756570][T12845] ____sys_sendmsg+0x2fe/0x830 [ 327.756597][T12845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.756632][T12845] __sys_sendmsg_sock+0x28/0x40 [ 327.756651][T12845] io_sendmsg+0x1fa/0x580 [ 327.756679][T12845] __io_issue_sqe+0x181/0x4b0 [ 327.756704][T12845] ? io_file_get_normal+0x101/0x2f0 [ 327.756730][T12845] io_issue_sqe+0x165/0x1060 [ 327.756763][T12845] io_submit_sqes+0xa54/0x1e60 [ 327.756817][T12845] __se_sys_io_uring_enter+0x2df/0x2b20 [ 327.756863][T12845] ? ksys_write+0x1cb/0x250 [ 327.756892][T12845] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 327.756923][T12845] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 327.756952][T12845] ? __pfx_vfs_write+0x10/0x10 [ 327.756979][T12845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.757014][T12845] ? __fget_files+0x3a0/0x420 [ 327.757039][T12845] ? fput+0xa0/0xd0 [ 327.757061][T12845] ? ksys_write+0x22a/0x250 [ 327.757088][T12845] ? __pfx_ksys_write+0x10/0x10 [ 327.757121][T12845] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 327.757148][T12845] do_syscall_64+0xfa/0xfa0 [ 327.757173][T12845] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.757199][T12845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.757218][T12845] ? clear_bhb_loop+0x60/0xb0 [ 327.757241][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.757260][T12845] RIP: 0033:0x7fd11a18f6c9 [ 327.757277][T12845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.757293][T12845] RSP: 002b:00007fd11b0f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 327.757312][T12845] RAX: ffffffffffffffda RBX: 00007fd11a3e5fa0 RCX: 00007fd11a18f6c9 [ 327.757324][T12845] RDX: 000000000080ffff RSI: 00000000000047f6 RDI: 0000000000000005 [ 327.757335][T12845] RBP: 00007fd11b0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.757347][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.757358][T12845] R13: 00007fd11a3e6038 R14: 00007fd11a3e5fa0 R15: 00007fd11a50fa28 [ 327.757394][T12845] [ 328.018259][T12847] FAULT_INJECTION: forcing a failure. [ 328.018259][T12847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.032661][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.3.1020 Not tainted syzkaller #0 PREEMPT(full) [ 328.032689][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.032702][T12847] Call Trace: [ 328.032710][T12847] [ 328.032719][T12847] dump_stack_lvl+0x189/0x250 [ 328.032752][T12847] ? __pfx____ratelimit+0x10/0x10 [ 328.032779][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.032806][T12847] ? __pfx__printk+0x10/0x10 [ 328.032828][T12847] ? __might_fault+0xb0/0x130 [ 328.032869][T12847] should_fail_ex+0x414/0x560 [ 328.032905][T12847] _copy_from_user+0x2d/0xb0 [ 328.032932][T12847] kstrtouint_from_user+0xc4/0x170 [ 328.032956][T12847] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 328.032995][T12847] proc_fail_nth_write+0x88/0x200 [ 328.033022][T12847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.033065][T12847] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.033091][T12847] vfs_write+0x27e/0xb30 [ 328.033126][T12847] ? __pfx_vfs_write+0x10/0x10 [ 328.033153][T12847] ? __fget_files+0x2a/0x420 [ 328.033176][T12847] ? __fget_files+0x3a0/0x420 [ 328.033192][T12847] ? __fget_files+0x2a/0x420 [ 328.033219][T12847] ksys_write+0x145/0x250 [ 328.033244][T12847] ? __fget_files+0x2a/0x420 [ 328.033262][T12847] ? __pfx_ksys_write+0x10/0x10 [ 328.033293][T12847] ? do_syscall_64+0xbe/0xfa0 [ 328.033323][T12847] do_syscall_64+0xfa/0xfa0 [ 328.033348][T12847] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.033373][T12847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.033392][T12847] ? clear_bhb_loop+0x60/0xb0 [ 328.033415][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.033433][T12847] RIP: 0033:0x7f339bd8e17f [ 328.033449][T12847] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 328.033465][T12847] RSP: 002b:00007f3399ff6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 328.033485][T12847] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f339bd8e17f [ 328.033498][T12847] RDX: 0000000000000001 RSI: 00007f3399ff60a0 RDI: 0000000000000005 [ 328.033508][T12847] RBP: 00007f3399ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 328.033519][T12847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 328.033528][T12847] R13: 00007f339bfe6128 R14: 00007f339bfe6090 R15: 00007f339c10fa28 [ 328.033560][T12847] [ 329.171131][ T5954] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 329.332899][ T5954] usb 1-1: config 0 interface 0 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.344486][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 329.371377][ T5954] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 329.426306][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.464561][ T5954] usb 1-1: config 0 descriptor?? [ 329.769635][T12883] atomic_op ffff888030521998 conn xmit_atomic 0000000000000000 [ 329.902349][ T5954] usbhid 1-1:0.0: can't add hid device: -71 [ 329.929664][ T5954] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 330.044416][ T5954] usb 1-1: USB disconnect, device number 28 [ 330.201360][T12894] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 330.246054][T12894] FAULT_INJECTION: forcing a failure. [ 330.246054][T12894] name failslab, interval 1, probability 0, space 0, times 0 [ 330.346250][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.0.1028 Not tainted syzkaller #0 PREEMPT(full) [ 330.346279][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.346292][T12894] Call Trace: [ 330.346300][T12894] [ 330.346310][T12894] dump_stack_lvl+0x189/0x250 [ 330.346342][T12894] ? __pfx____ratelimit+0x10/0x10 [ 330.346368][T12894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.346395][T12894] ? __pfx__printk+0x10/0x10 [ 330.346422][T12894] ? __pfx___might_resched+0x10/0x10 [ 330.346442][T12894] ? fs_reclaim_acquire+0x7d/0x100 [ 330.346483][T12894] should_fail_ex+0x414/0x560 [ 330.346519][T12894] should_failslab+0xa8/0x100 [ 330.346540][T12894] __kmalloc_cache_noprof+0x6f/0x6f0 [ 330.346568][T12894] ? sctp_association_new+0x89/0x25f0 [ 330.346596][T12894] sctp_association_new+0x89/0x25f0 [ 330.346619][T12894] ? sctp_has_association+0x1cd/0x1f0 [ 330.346641][T12894] ? sctp_has_association+0x2f/0x1f0 [ 330.346665][T12894] ? __ipv6_addr_type+0x247/0x2f0 [ 330.346691][T12894] sctp_connect_new_asoc+0x2c5/0x690 [ 330.346715][T12894] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 330.346736][T12894] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 330.346756][T12894] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 330.346774][T12894] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 330.346792][T12894] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 330.346813][T12894] ? security_sctp_bind_connect+0x7e/0x2e0 [ 330.346839][T12894] sctp_sendmsg+0x155c/0x2810 [ 330.346872][T12894] ? __pfx_sctp_sendmsg+0x10/0x10 [ 330.346894][T12894] ? aa_sk_perm+0x81e/0x950 [ 330.346927][T12894] ? __pfx_aa_sk_perm+0x10/0x10 [ 330.346956][T12894] ? sock_rps_record_flow+0x19/0x410 [ 330.346988][T12894] ? inet_sendmsg+0x2f4/0x370 [ 330.347004][T12894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.347026][T12894] __sock_sendmsg+0x19c/0x270 [ 330.347056][T12894] __sys_sendto+0x3bd/0x520 [ 330.347077][T12894] ? __pfx___sys_sendto+0x10/0x10 [ 330.347092][T12894] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 330.347134][T12894] ? __fget_files+0x3a0/0x420 [ 330.347175][T12894] __x64_sys_sendto+0xde/0x100 [ 330.347205][T12894] do_syscall_64+0xfa/0xfa0 [ 330.347231][T12894] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.347258][T12894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.347276][T12894] ? clear_bhb_loop+0x60/0xb0 [ 330.347299][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.347317][T12894] RIP: 0033:0x7f60dc18f6c9 [ 330.347335][T12894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.347351][T12894] RSP: 002b:00007f60dd0f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.347371][T12894] RAX: ffffffffffffffda RBX: 00007f60dc3e5fa0 RCX: 00007f60dc18f6c9 [ 330.347386][T12894] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000009 [ 330.347399][T12894] RBP: 00007f60dd0f3090 R08: 000020000005ffe4 R09: 000000000000001c [ 330.347412][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.347424][T12894] R13: 00007f60dc3e6038 R14: 00007f60dc3e5fa0 R15: 00007f60dc50fa28 [ 330.347458][T12894] [ 330.918687][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 331.087248][ T44] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 331.097401][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.143090][ T44] usb 2-1: config 0 descriptor?? [ 331.178931][ T44] cp210x 2-1:0.0: cp210x converter detected [ 331.953225][ T5954] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 332.150395][ T5954] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 332.162872][ T5923] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 332.170782][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 332.281251][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 332.323051][ T5954] usb 1-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 332.351072][ T5923] usb 4-1: config 0 has no interfaces? [ 332.357039][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.376125][ T5923] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.389696][ T5954] usb 1-1: config 0 descriptor?? [ 332.395952][T12915] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 332.420506][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.428900][ T5923] usb 4-1: Product: syz [ 332.433626][ T5923] usb 4-1: Manufacturer: syz [ 332.438384][ T5923] usb 4-1: SerialNumber: syz [ 332.460240][ T5923] usb 4-1: config 0 descriptor?? [ 332.735051][ T1219] usb 4-1: USB disconnect, device number 31 [ 332.898781][ T5954] wacom 0003:056A:0039.0005: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.0-1/input0 [ 333.260456][ T877] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 333.601596][ T44] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 333.609588][ T44] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 333.661435][ T877] usb 5-1: Using ep0 maxpacket: 32 [ 333.680964][ T877] usb 5-1: config 90 has an invalid interface number: 236 but max is 0 [ 333.701213][ T877] usb 5-1: config 90 has no interface number 0 [ 333.718987][T12963] FAULT_INJECTION: forcing a failure. [ 333.718987][T12963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.738643][ T877] usb 5-1: config 90 interface 236 has no altsetting 0 [ 333.739632][ T44] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 333.776682][T12963] CPU: 1 UID: 0 PID: 12963 Comm: syz.3.1040 Not tainted syzkaller #0 PREEMPT(full) [ 333.776710][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.776719][T12963] Call Trace: [ 333.776725][T12963] [ 333.776731][T12963] dump_stack_lvl+0x189/0x250 [ 333.776755][T12963] ? __pfx____ratelimit+0x10/0x10 [ 333.776775][T12963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.776794][T12963] ? __pfx__printk+0x10/0x10 [ 333.776809][T12963] ? __might_fault+0xb0/0x130 [ 333.776837][T12963] should_fail_ex+0x414/0x560 [ 333.776862][T12963] _copy_from_user+0x2d/0xb0 [ 333.776882][T12963] kstrtouint_from_user+0xc4/0x170 [ 333.776900][T12963] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 333.776927][T12963] proc_fail_nth_write+0x88/0x200 [ 333.776945][T12963] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.776968][T12963] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.776987][T12963] vfs_write+0x27e/0xb30 [ 333.777014][T12963] ? __pfx_vfs_write+0x10/0x10 [ 333.777036][T12963] ? rcu_is_watching+0x15/0xb0 [ 333.777053][T12963] ? __rseq_handle_notify_resume+0x384/0x1220 [ 333.777078][T12963] ksys_write+0x145/0x250 [ 333.777100][T12963] ? __pfx_ksys_write+0x10/0x10 [ 333.777122][T12963] ? do_syscall_64+0xbe/0xfa0 [ 333.777152][T12963] do_syscall_64+0xfa/0xfa0 [ 333.777171][T12963] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.777191][T12963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.777205][T12963] ? clear_bhb_loop+0x60/0xb0 [ 333.777222][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.777236][T12963] RIP: 0033:0x7f339bd8e17f [ 333.777248][T12963] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 333.777260][T12963] RSP: 002b:00007f339cb50030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 333.777276][T12963] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f339bd8e17f [ 333.777286][T12963] RDX: 0000000000000001 RSI: 00007f339cb500a0 RDI: 0000000000000004 [ 333.777294][T12963] RBP: 00007f339cb50090 R08: 0000000000000000 R09: 0000000000000000 [ 333.777303][T12963] R10: 0000000000000008 R11: 0000000000000293 R12: 0000000000000001 [ 333.777311][T12963] R13: 00007f339bfe6038 R14: 00007f339bfe5fa0 R15: 00007f339c10fa28 [ 333.777334][T12963] [ 334.235683][ T44] usb 2-1: cp210x converter now attached to ttyUSB0 [ 334.246879][ T44] usb 2-1: USB disconnect, device number 26 [ 334.257130][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 334.266152][ T44] cp210x 2-1:0.0: device disconnected [ 334.288936][ T877] usb 5-1: New USB device found, idVendor=1199, idProduct=9079, bcdDevice=6a.b0 [ 334.388139][ T877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.421703][ T877] usb 5-1: Product: syz [ 334.449395][ T877] usb 5-1: Manufacturer: syz [ 334.476355][ T877] usb 5-1: SerialNumber: syz [ 334.676800][T12982] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.341294][ T5923] usb 1-1: USB disconnect, device number 29 [ 335.670971][T13014] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 337.870171][ T877] usb 5-1: USB disconnect, device number 27 [ 338.227226][T13068] FAULT_INJECTION: forcing a failure. [ 338.227226][T13068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.310238][T13068] CPU: 1 UID: 0 PID: 13068 Comm: syz.1.1053 Not tainted syzkaller #0 PREEMPT(full) [ 338.310260][T13068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.310269][T13068] Call Trace: [ 338.310275][T13068] [ 338.310282][T13068] dump_stack_lvl+0x189/0x250 [ 338.310306][T13068] ? __pfx____ratelimit+0x10/0x10 [ 338.310327][T13068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.310349][T13068] ? __pfx__printk+0x10/0x10 [ 338.310376][T13068] ? __might_fault+0xb0/0x130 [ 338.310416][T13068] should_fail_ex+0x414/0x560 [ 338.310451][T13068] _copy_from_user+0x2d/0xb0 [ 338.310479][T13068] inet6_ioctl+0x180/0x280 [ 338.310503][T13068] ? __pfx_inet6_ioctl+0x10/0x10 [ 338.310544][T13068] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 338.310578][T13068] sock_do_ioctl+0xdc/0x300 [ 338.310608][T13068] ? __pfx_sock_do_ioctl+0x10/0x10 [ 338.310668][T13068] sock_ioctl+0x576/0x790 [ 338.310695][T13068] ? __pfx_sock_ioctl+0x10/0x10 [ 338.310733][T13068] ? __fget_files+0x3a0/0x420 [ 338.310748][T13068] ? __fget_files+0x2a/0x420 [ 338.310768][T13068] ? bpf_lsm_file_ioctl+0x9/0x20 [ 338.310790][T13068] ? __pfx_sock_ioctl+0x10/0x10 [ 338.310811][T13068] __se_sys_ioctl+0xfc/0x170 [ 338.310835][T13068] do_syscall_64+0xfa/0xfa0 [ 338.310861][T13068] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.310887][T13068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.310906][T13068] ? clear_bhb_loop+0x60/0xb0 [ 338.310928][T13068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.310946][T13068] RIP: 0033:0x7fb36578f6c9 [ 338.310963][T13068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.310978][T13068] RSP: 002b:00007fb3665f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.311001][T13068] RAX: ffffffffffffffda RBX: 00007fb3659e5fa0 RCX: 00007fb36578f6c9 [ 338.311011][T13068] RDX: 00002000000002c0 RSI: 000000000000890b RDI: 0000000000000003 [ 338.311019][T13068] RBP: 00007fb3665f3090 R08: 0000000000000000 R09: 0000000000000000 [ 338.311028][T13068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.311035][T13068] R13: 00007fb3659e6038 R14: 00007fb3659e5fa0 R15: 00007fb365b0fa28 [ 338.311057][T13068] [ 339.430509][ T5954] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 339.570984][ T5896] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 339.581453][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 339.588524][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.599834][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.609941][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.622959][ T5954] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.632183][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.643233][ T5954] usb 6-1: config 0 descriptor?? [ 339.742991][ T5896] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.752657][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.763998][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 339.777270][ T5896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.793089][ T5896] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.805773][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.814528][ T5896] usb 1-1: Product: syz [ 339.818833][ T5896] usb 1-1: Manufacturer: syz [ 339.835493][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 339.848822][ T5896] cdc_wdm 1-1:1.0: skipping garbage [ 339.861669][ T5896] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 339.867718][ T5896] cdc_wdm 1-1:1.0: Unknown control protocol [ 340.045282][T13134] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1068'. [ 340.076760][ T5896] usb 1-1: USB disconnect, device number 30 [ 340.154557][T13149] IPv6: addrconf: prefix option has invalid lifetime [ 340.261867][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1062'. [ 340.276802][T13153] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 340.300891][ T877] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 340.481804][ T877] usb 4-1: Using ep0 maxpacket: 8 [ 340.499443][ T877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.520470][ T877] usb 4-1: config 4 interface 0 has no altsetting 0 [ 340.538845][ T877] usb 4-1: string descriptor 0 read error: -22 [ 340.548819][ T877] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=48.05 [ 340.568598][ T877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.640787][ T877] gspca_main: spca501-2.14.0 probing 0000:0000 [ 340.819848][T13134] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1068'. [ 341.043090][ T877] gspca_spca501: reg write: error -71 [ 341.069562][ T877] spca501 4-1:4.0: Reg write failed for 0x02,0xa048,0x00 [ 341.078027][ T877] spca501 4-1:4.0: probe with driver spca501 failed with error -22 [ 341.103416][ T877] usb 4-1: USB disconnect, device number 32 [ 341.718641][T13207] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 341.850782][T13218] FAULT_INJECTION: forcing a failure. [ 341.850782][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 341.874740][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.3.1076 Not tainted syzkaller #0 PREEMPT(full) [ 341.874773][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.874787][T13218] Call Trace: [ 341.874794][T13218] [ 341.874803][T13218] dump_stack_lvl+0x189/0x250 [ 341.874836][T13218] ? __pfx____ratelimit+0x10/0x10 [ 341.874864][T13218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.874892][T13218] ? __pfx__printk+0x10/0x10 [ 341.874920][T13218] ? __pfx___might_resched+0x10/0x10 [ 341.874949][T13218] should_fail_ex+0x414/0x560 [ 341.874986][T13218] should_failslab+0xa8/0x100 [ 341.875009][T13218] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 341.875039][T13218] ? __d_alloc+0x36/0x7a0 [ 341.875069][T13218] __d_alloc+0x36/0x7a0 [ 341.875097][T13218] d_alloc_parallel+0xe1/0x1610 [ 341.875132][T13218] ? __lock_acquire+0xab9/0xd20 [ 341.875161][T13218] ? __lock_acquire+0xab9/0xd20 [ 341.875181][T13218] ? __pfx_d_alloc_parallel+0x10/0x10 [ 341.875203][T13218] ? look_up_lock_class+0x74/0x170 [ 341.875233][T13218] ? __raw_spin_lock_init+0x45/0x100 [ 341.875263][T13218] ? __init_waitqueue_head+0xa9/0x150 [ 341.875297][T13218] __lookup_slow+0x116/0x3d0 [ 341.875325][T13218] ? __pfx___lookup_slow+0x10/0x10 [ 341.875367][T13218] ? down_read+0x1ad/0x2e0 [ 341.875389][T13218] lookup_slow+0x53/0x70 [ 341.875414][T13218] walk_component+0x2d2/0x400 [ 341.875434][T13218] ? path_lookupat+0x156/0x430 [ 341.875468][T13218] path_lookupat+0x163/0x430 [ 341.875499][T13218] filename_lookup+0x212/0x570 [ 341.875520][T13218] ? __lock_acquire+0xab9/0xd20 [ 341.875545][T13218] ? __pfx_filename_lookup+0x10/0x10 [ 341.875593][T13218] ? strncpy_from_user+0x150/0x290 [ 341.875626][T13218] ? getname_flags+0x1e5/0x540 [ 341.875650][T13218] do_readlinkat+0xd9/0x500 [ 341.875676][T13218] ? __pfx_do_readlinkat+0x10/0x10 [ 341.875698][T13218] ? ksys_write+0x22a/0x250 [ 341.875729][T13218] ? __pfx_ksys_write+0x10/0x10 [ 341.875763][T13218] __x64_sys_readlinkat+0x9a/0xb0 [ 341.875789][T13218] do_syscall_64+0xfa/0xfa0 [ 341.875817][T13218] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.875845][T13218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.875866][T13218] ? clear_bhb_loop+0x60/0xb0 [ 341.875889][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.875920][T13218] RIP: 0033:0x7f339bd8f6c9 [ 341.875936][T13218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.875951][T13218] RSP: 002b:00007f339cb50038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 341.875971][T13218] RAX: ffffffffffffffda RBX: 00007f339bfe5fa0 RCX: 00007f339bd8f6c9 [ 341.875985][T13218] RDX: 9999999999999999 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 341.875998][T13218] RBP: 00007f339cb50090 R08: 0000000000000000 R09: 0000000000000000 [ 341.876010][T13218] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 341.876021][T13218] R13: 00007f339bfe6038 R14: 00007f339bfe5fa0 R15: 00007f339c10fa28 [ 341.876052][T13218] [ 342.653528][T13240] hub 9-0:1.0: USB hub found [ 342.692391][T13240] hub 9-0:1.0: 1 port detected [ 343.781202][ T5954] usbhid 6-1:0.0: can't add hid device: -71 [ 343.787259][ T5954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 343.811628][T13264] FAULT_INJECTION: forcing a failure. [ 343.811628][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 343.824365][T13264] CPU: 1 UID: 0 PID: 13264 Comm: syz.1.1086 Not tainted syzkaller #0 PREEMPT(full) [ 343.824390][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.824402][T13264] Call Trace: [ 343.824409][T13264] [ 343.824416][T13264] dump_stack_lvl+0x189/0x250 [ 343.824445][T13264] ? __pfx____ratelimit+0x10/0x10 [ 343.824471][T13264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.824501][T13264] ? __pfx__printk+0x10/0x10 [ 343.824526][T13264] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 343.824551][T13264] should_fail_ex+0x414/0x560 [ 343.824588][T13264] should_failslab+0xa8/0x100 [ 343.824606][T13264] ? __pfx_ip6_dst_gc+0x10/0x10 [ 343.824626][T13264] kmem_cache_alloc_noprof+0x74/0x6e0 [ 343.824653][T13264] ? dst_alloc+0x105/0x170 [ 343.824676][T13264] ? __pfx_ip6_dst_gc+0x10/0x10 [ 343.824716][T13264] dst_alloc+0x105/0x170 [ 343.824745][T13264] ip6_pol_route+0xa21/0x1180 [ 343.824771][T13264] ? ip6_pol_route+0x162/0x1180 [ 343.824801][T13264] ? __pfx_ip6_pol_route+0x10/0x10 [ 343.824824][T13264] ? ip6_compressed_string+0xa9e/0xb70 [ 343.824850][T13264] ? is_bpf_text_address+0x292/0x2b0 [ 343.824879][T13264] ? __pfx_ip6_compressed_string+0x10/0x10 [ 343.824907][T13264] ? __kernel_text_address+0xd/0x40 [ 343.824944][T13264] fib6_rule_lookup+0x1fc/0x6f0 [ 343.824972][T13264] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 343.824998][T13264] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 343.825040][T13264] ? dev_get_by_index_rcu+0xf4/0x110 [ 343.825074][T13264] ip6_route_output_flags+0x364/0x5d0 [ 343.825101][T13264] ? ip6_route_output_flags+0x2e/0x5d0 [ 343.825130][T13264] ip6_dst_lookup_tail+0x1ae/0x1510 [ 343.825175][T13264] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 343.825213][T13264] ? sk_dst_check+0x25/0x480 [ 343.825246][T13264] ? sk_dst_check+0x25/0x480 [ 343.825272][T13264] ? sk_dst_check+0x30e/0x480 [ 343.825305][T13264] ip6_sk_dst_lookup_flow+0x73d/0x9b0 [ 343.825338][T13264] ? udpv6_sendmsg+0x175d/0x2510 [ 343.825380][T13264] udpv6_sendmsg+0x195a/0x2510 [ 343.825420][T13264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 343.825455][T13264] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 343.825490][T13264] ? __lock_acquire+0xab9/0xd20 [ 343.825529][T13264] ? __local_bh_enable_ip+0x12d/0x1c0 [ 343.825551][T13264] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 343.825580][T13264] ? inet_send_prepare+0x1b9/0x270 [ 343.825600][T13264] ? inet_send_prepare+0x1b9/0x270 [ 343.825621][T13264] ? inet6_sendmsg+0xe4/0x120 [ 343.825645][T13264] __sock_sendmsg+0xe5/0x270 [ 343.825673][T13264] ____sys_sendmsg+0x52d/0x830 [ 343.825702][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.825733][T13264] ? import_iovec+0x74/0xa0 [ 343.825764][T13264] ___sys_sendmsg+0x21f/0x2a0 [ 343.825788][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.825849][T13264] ? __fget_files+0x2a/0x420 [ 343.825868][T13264] ? __fget_files+0x3a0/0x420 [ 343.825908][T13264] __sys_sendmmsg+0x227/0x430 [ 343.825946][T13264] ? __pfx___sys_sendmmsg+0x10/0x10 [ 343.825975][T13264] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 343.826020][T13264] ? ksys_write+0x22a/0x250 [ 343.826049][T13264] ? __pfx_ksys_write+0x10/0x10 [ 343.826080][T13264] __x64_sys_sendmmsg+0xa0/0xc0 [ 343.826102][T13264] do_syscall_64+0xfa/0xfa0 [ 343.826128][T13264] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.826154][T13264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.826172][T13264] ? clear_bhb_loop+0x60/0xb0 [ 343.826194][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.826210][T13264] RIP: 0033:0x7fb36578f6c9 [ 343.826227][T13264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.826242][T13264] RSP: 002b:00007fb3665f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.826260][T13264] RAX: ffffffffffffffda RBX: 00007fb3659e5fa0 RCX: 00007fb36578f6c9 [ 343.826273][T13264] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 343.826285][T13264] RBP: 00007fb3665f3090 R08: 0000000000000000 R09: 0000000000000000 [ 343.826296][T13264] R10: 55cfe9da1f5ebbe6 R11: 0000000000000246 R12: 0000000000000001 [ 343.826308][T13264] R13: 00007fb3659e6038 R14: 00007fb3659e5fa0 R15: 00007fb365b0fa28 [ 343.826366][T13264] [ 344.329038][ T5954] usb 6-1: USB disconnect, device number 32 [ 344.343525][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 344.343546][ T30] audit: type=1326 audit(1762477431.838:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13265 comm="syz.0.1087" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60dc18f6c9 code=0x0 [ 344.618886][T13267] FAULT_INJECTION: forcing a failure. [ 344.618886][T13267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.646595][T13267] CPU: 1 UID: 0 PID: 13267 Comm: syz.3.1085 Not tainted syzkaller #0 PREEMPT(full) [ 344.646622][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.646634][T13267] Call Trace: [ 344.646642][T13267] [ 344.646650][T13267] dump_stack_lvl+0x189/0x250 [ 344.646683][T13267] ? __pfx____ratelimit+0x10/0x10 [ 344.646709][T13267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.646735][T13267] ? __pfx__printk+0x10/0x10 [ 344.646756][T13267] ? __might_fault+0xb0/0x130 [ 344.646794][T13267] should_fail_ex+0x414/0x560 [ 344.646829][T13267] _copy_from_user+0x2d/0xb0 [ 344.646855][T13267] io_submit_one+0xc2/0x1310 [ 344.646893][T13267] ? __pfx_io_submit_one+0x10/0x10 [ 344.646916][T13267] ? __might_fault+0xb0/0x130 [ 344.646955][T13267] ? __might_fault+0xb0/0x130 [ 344.646985][T13267] __se_sys_io_submit+0x185/0x2f0 [ 344.647008][T13267] ? __pfx___se_sys_io_submit+0x10/0x10 [ 344.647026][T13267] ? ksys_write+0x22a/0x250 [ 344.647070][T13267] ? do_syscall_64+0xbe/0xfa0 [ 344.647100][T13267] do_syscall_64+0xfa/0xfa0 [ 344.647126][T13267] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.647154][T13267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.647191][T13267] ? clear_bhb_loop+0x60/0xb0 [ 344.647216][T13267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.647235][T13267] RIP: 0033:0x7f339bd8f6c9 [ 344.647254][T13267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.647272][T13267] RSP: 002b:00007f3399ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 344.647305][T13267] RAX: ffffffffffffffda RBX: 00007f339bfe6090 RCX: 00007f339bd8f6c9 [ 344.647319][T13267] RDX: 0000200000000340 RSI: 0000000000000003 RDI: 00007f339cb2f000 [ 344.647331][T13267] RBP: 00007f3399ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 344.647342][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.647353][T13267] R13: 00007f339bfe6128 R14: 00007f339bfe6090 R15: 00007f339c10fa28 [ 344.647384][T13267] [ 344.872552][T13279] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1090'. [ 345.081195][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 345.295518][T13293] set match dimension is over the limit! [ 345.446328][T13295] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1094'. [ 346.379260][T13324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.930522][ T5954] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 347.137922][ T5954] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 347.162334][ T5954] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 347.190564][ T5954] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.211096][ T5954] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 347.240407][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.273878][ T5954] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.288767][ T5954] usb 1-1: invalid MIDI out EP 0 [ 347.383924][T13353] input: syz0 as /devices/virtual/input/input17 [ 347.476117][T13333] fuse: Bad value for 'fd' [ 347.568747][ T30] audit: type=1326 audit(1762477435.138:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13343 comm="syz.5.1101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd11a18f6c9 code=0x0 [ 347.638138][ T5954] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 347.679184][T13368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.159451][T13382] FAULT_INJECTION: forcing a failure. [ 348.159451][T13382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.176653][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(full) [ 348.176681][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.176694][T13382] Call Trace: [ 348.176703][T13382] [ 348.176711][T13382] dump_stack_lvl+0x189/0x250 [ 348.176742][T13382] ? __pfx____ratelimit+0x10/0x10 [ 348.176764][T13382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.176782][T13382] ? __pfx__printk+0x10/0x10 [ 348.176804][T13382] should_fail_ex+0x414/0x560 [ 348.176828][T13382] _copy_to_user+0x31/0xb0 [ 348.176847][T13382] simple_read_from_buffer+0xe1/0x170 [ 348.176870][T13382] proc_fail_nth_read+0x1b3/0x220 [ 348.176890][T13382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.176909][T13382] ? rw_verify_area+0x2a6/0x4d0 [ 348.176932][T13382] ? __lock_acquire+0xab9/0xd20 [ 348.176944][T13382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.176962][T13382] vfs_read+0x200/0xa30 [ 348.176979][T13382] ? fdget_pos+0x247/0x320 [ 348.176995][T13382] ? __pfx___mutex_lock+0x10/0x10 [ 348.177015][T13382] ? __pfx_vfs_read+0x10/0x10 [ 348.177034][T13382] ? __fget_files+0x2a/0x420 [ 348.177049][T13382] ? __fget_files+0x3a0/0x420 [ 348.177060][T13382] ? __fget_files+0x2a/0x420 [ 348.177079][T13382] ksys_read+0x145/0x250 [ 348.177099][T13382] ? __pfx_ksys_read+0x10/0x10 [ 348.177119][T13382] ? do_syscall_64+0xbe/0xfa0 [ 348.177140][T13382] do_syscall_64+0xfa/0xfa0 [ 348.177160][T13382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.177173][T13382] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 348.177186][T13382] ? clear_bhb_loop+0x60/0xb0 [ 348.177202][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.177215][T13382] RIP: 0033:0x7fb36578e0dc [ 348.177227][T13382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 348.177239][T13382] RSP: 002b:00007fb3665f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.177253][T13382] RAX: ffffffffffffffda RBX: 00007fb3659e5fa0 RCX: 00007fb36578e0dc [ 348.177263][T13382] RDX: 000000000000000f RSI: 00007fb3665f30a0 RDI: 0000000000000005 [ 348.177271][T13382] RBP: 00007fb3665f3090 R08: 0000000000000000 R09: 0000000000000000 [ 348.177279][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.177287][T13382] R13: 00007fb3659e6038 R14: 00007fb3659e5fa0 R15: 00007fb365b0fa28 [ 348.177308][T13382] [ 348.460480][ T5954] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 348.509637][T13387] FAULT_INJECTION: forcing a failure. [ 348.509637][T13387] name failslab, interval 1, probability 0, space 0, times 0 [ 348.532597][T13387] CPU: 1 UID: 0 PID: 13387 Comm: syz.4.1106 Not tainted syzkaller #0 PREEMPT(full) [ 348.532626][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.532639][T13387] Call Trace: [ 348.532656][T13387] [ 348.532665][T13387] dump_stack_lvl+0x189/0x250 [ 348.532697][T13387] ? __pfx____ratelimit+0x10/0x10 [ 348.532725][T13387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.532752][T13387] ? __pfx__printk+0x10/0x10 [ 348.532778][T13387] ? __pfx___might_resched+0x10/0x10 [ 348.532801][T13387] ? fs_reclaim_acquire+0x7d/0x100 [ 348.532837][T13387] should_fail_ex+0x414/0x560 [ 348.532873][T13387] should_failslab+0xa8/0x100 [ 348.532896][T13387] __kvmalloc_node_noprof+0x158/0x910 [ 348.532927][T13387] ? xt_alloc_table_info+0x40/0xb0 [ 348.532961][T13387] xt_alloc_table_info+0x40/0xb0 [ 348.532987][T13387] do_ip6t_set_ctl+0x88a/0xce0 [ 348.533021][T13387] ? rcu_is_watching+0x15/0xb0 [ 348.533046][T13387] ? trace_contention_end+0x39/0x120 [ 348.533071][T13387] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 348.533125][T13387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.533167][T13387] ? __pfx_aa_sk_perm+0x10/0x10 [ 348.533201][T13387] nf_setsockopt+0x26f/0x290 [ 348.533228][T13387] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 348.533261][T13387] do_sock_setsockopt+0x17c/0x1b0 [ 348.533287][T13387] __x64_sys_setsockopt+0x13f/0x1b0 [ 348.533326][T13387] do_syscall_64+0xfa/0xfa0 [ 348.533354][T13387] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.533382][T13387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.533402][T13387] ? clear_bhb_loop+0x60/0xb0 [ 348.533426][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.533444][T13387] RIP: 0033:0x7fb70118f6c9 [ 348.533461][T13387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.533478][T13387] RSP: 002b:00007fb701f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.533499][T13387] RAX: ffffffffffffffda RBX: 00007fb7013e5fa0 RCX: 00007fb70118f6c9 [ 348.533514][T13387] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 348.533525][T13387] RBP: 00007fb701f68090 R08: 00000000000003b0 R09: 0000000000000000 [ 348.533537][T13387] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.533548][T13387] R13: 00007fb7013e6038 R14: 00007fb7013e5fa0 R15: 00007fb70150fa28 [ 348.533578][T13387] [ 348.860762][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 348.870174][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.927402][ T5954] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 349.027775][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1108'. [ 349.037044][T13404] bridge_slave_1: left allmulticast mode [ 349.043696][T13404] bridge_slave_1: left promiscuous mode [ 349.068794][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.085768][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.196456][T13404] bridge_slave_0: left allmulticast mode [ 349.217903][ T5954] usb 4-1: config 0 descriptor?? [ 349.246564][T13404] bridge_slave_0: left promiscuous mode [ 349.330525][ T877] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 349.439163][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.492788][ T5926] usb 1-1: USB disconnect, device number 31 [ 349.501172][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.519756][ T877] usb 2-1: Using ep0 maxpacket: 8 [ 349.553245][ T877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 349.576538][ T877] usb 2-1: can't read configurations, error -61 [ 349.618768][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.730466][ T877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 349.766180][ T5954] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 349.950597][ T877] usb 2-1: Using ep0 maxpacket: 8 [ 349.959472][ T877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 349.971189][ T877] usb 2-1: can't read configurations, error -61 [ 350.050418][ T877] usb usb2-port1: attempt power cycle [ 350.099372][T13439] set match dimension is over the limit! [ 350.212762][ T5896] usb 4-1: USB disconnect, device number 33 [ 350.520707][ T877] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 350.530851][ T1219] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 350.542748][ T877] usb 2-1: Using ep0 maxpacket: 8 [ 350.550423][ T877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 350.558351][ T877] usb 2-1: can't read configurations, error -61 [ 350.689631][ T1219] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 350.701005][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.711383][ T1219] usb 1-1: Product: syz [ 350.740613][ T877] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 350.761641][ T1219] usb 1-1: Manufacturer: syz [ 350.766873][ T1219] usb 1-1: SerialNumber: syz [ 350.781215][ T877] usb 2-1: Using ep0 maxpacket: 8 [ 350.787864][ T1219] usb 1-1: config 0 descriptor?? [ 350.789634][ T877] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 350.836208][ T877] usb 2-1: can't read configurations, error -61 [ 350.901241][ T877] usb usb2-port1: unable to enumerate USB device [ 351.237530][ T1219] airspy 1-1:0.0: Board ID: 00 [ 351.245585][ T1219] airspy 1-1:0.0: Firmware version: [ 351.659184][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 352.073548][T13457] netlink: 'syz.0.1113': attribute type 3 has an invalid length. [ 352.412872][T13487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.525730][ T1219] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f [ 352.569671][ T1219] airspy 1-1:0.0: Registered as swradio24 [ 352.585465][ T1219] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 352.633282][ T1219] usb 1-1: USB disconnect, device number 32 [ 352.800553][ T5923] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 352.973688][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 352.980285][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 352.993004][ T5923] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 353.010512][ T5923] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 353.020560][ T5923] usb 2-1: Product: syz [ 353.030808][ T5923] usb 2-1: Manufacturer: syz [ 353.035534][ T5923] usb 2-1: SerialNumber: syz [ 353.167044][T13530] FAULT_INJECTION: forcing a failure. [ 353.167044][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.193704][T13530] CPU: 0 UID: 0 PID: 13530 Comm: syz.0.1123 Not tainted syzkaller #0 PREEMPT(full) [ 353.193733][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.193746][T13530] Call Trace: [ 353.193755][T13530] [ 353.193764][T13530] dump_stack_lvl+0x189/0x250 [ 353.193796][T13530] ? __pfx____ratelimit+0x10/0x10 [ 353.193827][T13530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.193854][T13530] ? __pfx__printk+0x10/0x10 [ 353.193887][T13530] should_fail_ex+0x414/0x560 [ 353.193923][T13530] _copy_to_user+0x31/0xb0 [ 353.193952][T13530] simple_read_from_buffer+0xe1/0x170 [ 353.193988][T13530] proc_fail_nth_read+0x1b3/0x220 [ 353.194016][T13530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.194045][T13530] ? rw_verify_area+0x2a6/0x4d0 [ 353.194071][T13530] ? __lock_acquire+0xab9/0xd20 [ 353.194088][T13530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 353.194114][T13530] vfs_read+0x200/0xa30 [ 353.194140][T13530] ? fdget_pos+0x247/0x320 [ 353.194162][T13530] ? __pfx___mutex_lock+0x10/0x10 [ 353.194192][T13530] ? __pfx_vfs_read+0x10/0x10 [ 353.194221][T13530] ? __fget_files+0x2a/0x420 [ 353.194243][T13530] ? __fget_files+0x3a0/0x420 [ 353.194268][T13530] ? __fget_files+0x2a/0x420 [ 353.194296][T13530] ksys_read+0x145/0x250 [ 353.194326][T13530] ? __pfx_ksys_read+0x10/0x10 [ 353.194353][T13530] ? __secure_computing+0xe2/0x2a0 [ 353.194386][T13530] do_syscall_64+0xfa/0xfa0 [ 353.194416][T13530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.194435][T13530] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.194455][T13530] ? clear_bhb_loop+0x60/0xb0 [ 353.194478][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.194498][T13530] RIP: 0033:0x7f60dc18e0dc [ 353.194516][T13530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 353.194534][T13530] RSP: 002b:00007f60dd0f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 353.194555][T13530] RAX: ffffffffffffffda RBX: 00007f60dc3e5fa0 RCX: 00007f60dc18e0dc [ 353.194569][T13530] RDX: 000000000000000f RSI: 00007f60dd0f30a0 RDI: 0000000000000004 [ 353.194581][T13530] RBP: 00007f60dd0f3090 R08: 0000000000000000 R09: 0000000000000001 [ 353.194593][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.194605][T13530] R13: 00007f60dc3e6038 R14: 00007f60dc3e5fa0 R15: 00007f60dc50fa28 [ 353.194638][T13530] [ 353.561050][ T5923] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 353.569464][ T5923] visor 2-1:1.0: probe with driver visor failed with error -110 [ 353.778066][T13533] FAULT_INJECTION: forcing a failure. [ 353.778066][T13533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.911335][T13533] CPU: 0 UID: 0 PID: 13533 Comm: syz.4.1124 Not tainted syzkaller #0 PREEMPT(full) [ 353.911363][T13533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.911375][T13533] Call Trace: [ 353.911383][T13533] [ 353.911391][T13533] dump_stack_lvl+0x189/0x250 [ 353.911421][T13533] ? __pfx____ratelimit+0x10/0x10 [ 353.911452][T13533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.911477][T13533] ? __pfx__printk+0x10/0x10 [ 353.911496][T13533] ? __might_fault+0xb0/0x130 [ 353.911533][T13533] should_fail_ex+0x414/0x560 [ 353.911563][T13533] ? __pfx_do_set_msr+0x10/0x10 [ 353.911584][T13533] _copy_from_user+0x2d/0xb0 [ 353.911609][T13533] msr_io+0xa2/0x570 [ 353.911633][T13533] ? kvm_arch_vcpu_ioctl+0x6e9/0x2b40 [ 353.911654][T13533] ? __pfx_msr_io+0x10/0x10 [ 353.911682][T13533] kvm_arch_vcpu_ioctl+0x723/0x2b40 [ 353.911705][T13533] ? kvm_arch_vcpu_ioctl+0x6e9/0x2b40 [ 353.911735][T13533] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 353.911758][T13533] ? __lock_acquire+0xab9/0xd20 [ 353.911798][T13533] ? is_bpf_text_address+0x26/0x2b0 [ 353.911823][T13533] ? is_bpf_text_address+0x292/0x2b0 [ 353.911843][T13533] ? is_bpf_text_address+0x26/0x2b0 [ 353.911866][T13533] ? kernel_text_address+0xa5/0xe0 [ 353.911895][T13533] ? __kernel_text_address+0xd/0x40 [ 353.911921][T13533] ? unwind_get_return_address+0x4d/0x90 [ 353.911943][T13533] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.911968][T13533] ? arch_stack_walk+0xfc/0x150 [ 353.912005][T13533] ? __pfx_stack_trace_save+0x10/0x10 [ 353.912032][T13533] ? stack_depot_save_flags+0x40/0x860 [ 353.912084][T13533] ? __lock_acquire+0xab9/0xd20 [ 353.912111][T13533] ? __mutex_trylock_common+0x153/0x260 [ 353.912136][T13533] ? __pfx___mutex_trylock_common+0x10/0x10 [ 353.912165][T13533] ? rcu_is_watching+0x15/0xb0 [ 353.912188][T13533] ? trace_contention_end+0x39/0x120 [ 353.912211][T13533] ? __mutex_lock+0x335/0x1350 [ 353.912246][T13533] ? kasan_quarantine_put+0xdd/0x220 [ 353.912272][T13533] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.912297][T13533] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 353.912328][T13533] ? __pfx___mutex_lock+0x10/0x10 [ 353.912356][T13533] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 353.912385][T13533] ? do_vfs_ioctl+0xbe8/0x1430 [ 353.912408][T13533] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 353.912439][T13533] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 353.912467][T13533] kvm_vcpu_ioctl+0x74d/0xe90 [ 353.912500][T13533] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 353.912549][T13533] ? __fget_files+0x2a/0x420 [ 353.912572][T13533] ? __fget_files+0x3a0/0x420 [ 353.912588][T13533] ? __fget_files+0x2a/0x420 [ 353.912627][T13533] ? bpf_lsm_file_ioctl+0x9/0x20 [ 353.912649][T13533] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 353.912677][T13533] __se_sys_ioctl+0xfc/0x170 [ 353.912706][T13533] do_syscall_64+0xfa/0xfa0 [ 353.912732][T13533] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.912759][T13533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.912779][T13533] ? clear_bhb_loop+0x60/0xb0 [ 353.912803][T13533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.912823][T13533] RIP: 0033:0x7fb70118f6c9 [ 353.912841][T13533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.912857][T13533] RSP: 002b:00007fb701f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.912878][T13533] RAX: ffffffffffffffda RBX: 00007fb7013e5fa0 RCX: 00007fb70118f6c9 [ 353.912893][T13533] RDX: 0000200000000100 RSI: 000000004008ae89 RDI: 0000000000000005 [ 353.912906][T13533] RBP: 00007fb701f68090 R08: 0000000000000000 R09: 0000000000000000 [ 353.912919][T13533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.912930][T13533] R13: 00007fb7013e6038 R14: 00007fb7013e5fa0 R15: 00007fb70150fa28 [ 353.912964][T13533] [ 354.388255][T13539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 354.939968][T13552] ================================================================== [ 354.948118][T13552] BUG: KASAN: null-ptr-deref in generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 354.956562][T13552] Read of size 24 at addr 0000000000000010 by task syz.4.1128/13552 [ 354.964545][T13552] [ 354.966892][T13552] CPU: 0 UID: 0 PID: 13552 Comm: syz.4.1128 Not tainted syzkaller #0 PREEMPT(full) [ 354.966912][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.966922][T13552] Call Trace: [ 354.966929][T13552] [ 354.966936][T13552] dump_stack_lvl+0x189/0x250 [ 354.966962][T13552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.966985][T13552] ? __virt_addr_valid+0x7c/0x5c0 [ 354.967009][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 354.967034][T13552] kasan_report+0x118/0x150 [ 354.967050][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 354.967076][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 354.967100][T13552] kasan_check_range+0x2b0/0x2c0 [ 354.967115][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 354.967139][T13552] __asan_memcpy+0x29/0x70 [ 354.967160][T13552] generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 354.967184][T13552] ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10 [ 354.967211][T13552] ? generic_hwtstamp_get_lower+0xf5/0x2f0 [ 354.967233][T13552] ? dev_get_hwtstamp_phylib+0x28d/0x4d0 [ 354.967256][T13552] tsconfig_prepare_data+0x12c/0x600 [ 354.967272][T13552] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 354.967290][T13552] ? __nlmsg_put+0xef/0x1b0 [ 354.967315][T13552] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 354.967329][T13552] ethnl_default_dump_one+0x2f3/0x7e0 [ 354.967364][T13552] ethnl_default_dumpit+0x30c/0x600 [ 354.967380][T13552] ? ethnl_default_dumpit+0xd1/0x600 [ 354.967397][T13552] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 354.967414][T13552] ? __build_skb_around+0x262/0x3f0 [ 354.967441][T13552] genl_dumpit+0x10b/0x1b0 [ 354.967461][T13552] netlink_dump+0x6e4/0xe90 [ 354.967489][T13552] ? __pfx_netlink_dump+0x10/0x10 [ 354.967512][T13552] ? ethnl_default_parse+0x195/0x290 [ 354.967534][T13552] ? genl_start+0x581/0x6c0 [ 354.967554][T13552] __netlink_dump_start+0x5cb/0x7e0 [ 354.967580][T13552] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 354.967601][T13552] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 354.967620][T13552] ? genl_get_cmd+0x67f/0x910 [ 354.967639][T13552] ? __pfx_genl_start+0x10/0x10 [ 354.967656][T13552] ? __pfx_genl_dumpit+0x10/0x10 [ 354.967673][T13552] ? __pfx_genl_done+0x10/0x10 [ 354.967695][T13552] genl_rcv_msg+0x5da/0x790 [ 354.967716][T13552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.967733][T13552] ? __pfx_ethnl_default_start+0x10/0x10 [ 354.967748][T13552] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 354.967763][T13552] ? __pfx_ethnl_default_done+0x10/0x10 [ 354.967779][T13552] ? __asan_memcpy+0x40/0x70 [ 354.967798][T13552] ? __pfx_ref_tracker_free+0x10/0x10 [ 354.967816][T13552] netlink_rcv_skb+0x208/0x470 [ 354.967828][T13552] ? __lock_acquire+0xab9/0xd20 [ 354.967843][T13552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.967861][T13552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.967891][T13552] ? down_read+0x1ad/0x2e0 [ 354.967906][T13552] genl_rcv+0x28/0x40 [ 354.967922][T13552] netlink_unicast+0x82f/0x9e0 [ 354.967947][T13552] ? __pfx_netlink_unicast+0x10/0x10 [ 354.967969][T13552] ? netlink_sendmsg+0x642/0xb30 [ 354.967982][T13552] ? skb_put+0x11b/0x210 [ 354.967997][T13552] netlink_sendmsg+0x805/0xb30 [ 354.968014][T13552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.968067][T13552] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.968118][T13552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.968135][T13552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.968151][T13552] __sock_sendmsg+0x21c/0x270 [ 354.968175][T13552] ____sys_sendmsg+0x505/0x830 [ 354.968195][T13552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.968216][T13552] ? import_iovec+0x74/0xa0 [ 354.968238][T13552] ___sys_sendmsg+0x21f/0x2a0 [ 354.968256][T13552] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.968287][T13552] ? __fget_files+0x2a/0x420 [ 354.968302][T13552] ? __fget_files+0x3a0/0x420 [ 354.968321][T13552] __x64_sys_sendmsg+0x19b/0x260 [ 354.968340][T13552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.968370][T13552] ? do_syscall_64+0xbe/0xfa0 [ 354.968395][T13552] do_syscall_64+0xfa/0xfa0 [ 354.968429][T13552] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.968452][T13552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.968468][T13552] ? clear_bhb_loop+0x60/0xb0 [ 354.968486][T13552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.968502][T13552] RIP: 0033:0x7fb70118f6c9 [ 354.968518][T13552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.968533][T13552] RSP: 002b:00007fb701f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.968551][T13552] RAX: ffffffffffffffda RBX: 00007fb7013e6090 RCX: 00007fb70118f6c9 [ 354.968564][T13552] RDX: 0000000000002010 RSI: 0000200000000240 RDI: 0000000000000005 [ 354.968575][T13552] RBP: 00007fb701211f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.968586][T13552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.968596][T13552] R13: 00007fb7013e6128 R14: 00007fb7013e6090 R15: 00007fb70150fa28 [ 354.968616][T13552] [ 354.968623][T13552] ================================================================== [ 355.491077][T13552] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.498349][T13552] CPU: 0 UID: 0 PID: 13552 Comm: syz.4.1128 Not tainted syzkaller #0 PREEMPT(full) [ 355.507746][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.517817][T13552] Call Trace: [ 355.521109][T13552] [ 355.524048][T13552] dump_stack_lvl+0x99/0x250 [ 355.528657][T13552] ? __asan_memcpy+0x40/0x70 [ 355.533266][T13552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.538479][T13552] ? __pfx__printk+0x10/0x10 [ 355.543081][T13552] vpanic+0x237/0x6d0 [ 355.547081][T13552] ? __pfx_vpanic+0x10/0x10 [ 355.551592][T13552] ? preempt_schedule+0xae/0xc0 [ 355.556452][T13552] ? __pfx_preempt_schedule+0x10/0x10 [ 355.561864][T13552] panic+0xb9/0xc0 [ 355.565617][T13552] ? __pfx_panic+0x10/0x10 [ 355.570063][T13552] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 355.575966][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 355.582054][T13552] check_panic_on_warn+0x89/0xb0 [ 355.587016][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 355.593095][T13552] end_report+0x78/0x160 [ 355.597339][T13552] kasan_report+0x129/0x150 [ 355.601841][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 355.607919][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 355.613996][T13552] kasan_check_range+0x2b0/0x2c0 [ 355.618945][T13552] ? generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 355.625042][T13552] __asan_memcpy+0x29/0x70 [ 355.629471][T13552] generic_hwtstamp_ioctl_lower+0x190/0x2d0 [ 355.635384][T13552] ? __pfx_generic_hwtstamp_ioctl_lower+0x10/0x10 [ 355.641823][T13552] ? generic_hwtstamp_get_lower+0xf5/0x2f0 [ 355.647642][T13552] ? dev_get_hwtstamp_phylib+0x28d/0x4d0 [ 355.653290][T13552] tsconfig_prepare_data+0x12c/0x600 [ 355.658582][T13552] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 355.664393][T13552] ? __nlmsg_put+0xef/0x1b0 [ 355.668914][T13552] ? __pfx_tsconfig_prepare_data+0x10/0x10 [ 355.674735][T13552] ethnl_default_dump_one+0x2f3/0x7e0 [ 355.680126][T13552] ethnl_default_dumpit+0x30c/0x600 [ 355.685332][T13552] ? ethnl_default_dumpit+0xd1/0x600 [ 355.690629][T13552] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 355.696351][T13552] ? __build_skb_around+0x262/0x3f0 [ 355.701560][T13552] genl_dumpit+0x10b/0x1b0 [ 355.705986][T13552] netlink_dump+0x6e4/0xe90 [ 355.710516][T13552] ? __pfx_netlink_dump+0x10/0x10 [ 355.715560][T13552] ? ethnl_default_parse+0x195/0x290 [ 355.720861][T13552] ? genl_start+0x581/0x6c0 [ 355.725472][T13552] __netlink_dump_start+0x5cb/0x7e0 [ 355.730689][T13552] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 355.736425][T13552] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 355.742674][T13552] ? genl_get_cmd+0x67f/0x910 [ 355.747358][T13552] ? __pfx_genl_start+0x10/0x10 [ 355.752241][T13552] ? __pfx_genl_dumpit+0x10/0x10 [ 355.757184][T13552] ? __pfx_genl_done+0x10/0x10 [ 355.761957][T13552] genl_rcv_msg+0x5da/0x790 [ 355.766469][T13552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.771496][T13552] ? __pfx_ethnl_default_start+0x10/0x10 [ 355.777127][T13552] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 355.782843][T13552] ? __pfx_ethnl_default_done+0x10/0x10 [ 355.788395][T13552] ? __asan_memcpy+0x40/0x70 [ 355.792998][T13552] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.798384][T13552] netlink_rcv_skb+0x208/0x470 [ 355.803149][T13552] ? __lock_acquire+0xab9/0xd20 [ 355.808006][T13552] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.813039][T13552] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.818337][T13552] ? down_read+0x1ad/0x2e0 [ 355.822755][T13552] genl_rcv+0x28/0x40 [ 355.826756][T13552] netlink_unicast+0x82f/0x9e0 [ 355.831534][T13552] ? __pfx_netlink_unicast+0x10/0x10 [ 355.836834][T13552] ? netlink_sendmsg+0x642/0xb30 [ 355.841774][T13552] ? skb_put+0x11b/0x210 [ 355.846017][T13552] netlink_sendmsg+0x805/0xb30 [ 355.850787][T13552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.856086][T13552] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.861036][T13552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.866323][T13552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.871611][T13552] __sock_sendmsg+0x21c/0x270 [ 355.876301][T13552] ____sys_sendmsg+0x505/0x830 [ 355.881091][T13552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.886379][T13552] ? import_iovec+0x74/0xa0 [ 355.890889][T13552] ___sys_sendmsg+0x21f/0x2a0 [ 355.895584][T13552] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.900805][T13552] ? __fget_files+0x2a/0x420 [ 355.905400][T13552] ? __fget_files+0x3a0/0x420 [ 355.910083][T13552] __x64_sys_sendmsg+0x19b/0x260 [ 355.915030][T13552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.920503][T13552] ? do_syscall_64+0xbe/0xfa0 [ 355.925203][T13552] do_syscall_64+0xfa/0xfa0 [ 355.929722][T13552] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.934931][T13552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.941007][T13552] ? clear_bhb_loop+0x60/0xb0 [ 355.945695][T13552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.951590][T13552] RIP: 0033:0x7fb70118f6c9 [ 355.956006][T13552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.975618][T13552] RSP: 002b:00007fb701f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.984070][T13552] RAX: ffffffffffffffda RBX: 00007fb7013e6090 RCX: 00007fb70118f6c9 [ 355.992047][T13552] RDX: 0000000000002010 RSI: 0000200000000240 RDI: 0000000000000005 [ 356.000028][T13552] RBP: 00007fb701211f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.008015][T13552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.015995][T13552] R13: 00007fb7013e6128 R14: 00007fb7013e6090 R15: 00007fb70150fa28 [ 356.024148][T13552] [ 356.027331][T13552] Kernel Offset: disabled [ 356.031674][T13552] Rebooting in 86400 seconds..