last executing test programs: 15.179290889s ago: executing program 2 (id=1031): pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f00000002c0)="e548971460432f57b96e2e4a", 0xc}, {&(0x7f0000001340)="566334e9b77b26bcf9d6e5570861d65c", 0x10}], 0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 15.118351611s ago: executing program 2 (id=1032): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) 14.538490554s ago: executing program 3 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) semget(0x3, 0x2, 0x441) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 12.382416355s ago: executing program 3 (id=1039): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$mouse(0x0, 0x0, 0x2042) read$fb(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0xfffc, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x36f656a535eccba0}, 0x9c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x140}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10100) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) 10.267655486s ago: executing program 4 (id=1043): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd0200004000000004000000000000000000010000000000840105"], 0x23c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001140), r4) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 10.06287422s ago: executing program 0 (id=1044): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 9.721295322s ago: executing program 3 (id=1045): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) 8.72678625s ago: executing program 1 (id=1046): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r5 = memfd_create(0x0, 0x0) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000009, 0x2012, r5, 0x1000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) sendmmsg$inet(r4, &(0x7f0000000000), 0x0, 0x24040055) shutdown(r4, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 8.590483605s ago: executing program 4 (id=1047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "a48ce447bb2f04f1aaa1a0baeaddd6216d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "6eee"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) 8.09358632s ago: executing program 0 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x301200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2040094980000140003006e657464657673696d3000000000000034001680300001802c000c80140001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7.673371691s ago: executing program 1 (id=1049): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000017c0)={0x0, @l2={0x1f, 0x5, @any, 0x290, 0x2}, @l2tp={0x2, 0x0, @multicast1, 0x2}, @rc={0x1f, @none, 0xc}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x3ff, 0x1}) 6.94021798s ago: executing program 0 (id=1050): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) semget(0x3, 0x2, 0x441) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 6.867783236s ago: executing program 4 (id=1051): r0 = getpgrp(0x0) r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000000), 0x1004) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x5, 0x1, 0x4, 0xfffffffffffffffd, 0x80000000, 0x7, 0x5, 0x8, 0x1, 0x4, 0x9, 0x100, 0x261e, 0x80]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r2, 0x7}, 0x8) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000300)={{r4}, "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"}) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$802154_dgram(r5, &(0x7f0000001340)={0x24, @none={0x0, 0xffff}}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001380), 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000023c0)={r5, r5, 0x3, 0x1000, &(0x7f00000013c0)="058881827ecda0176d01b6ae08a1133c765b20b6d8aee434bdfb37ead19b5ee42403a39d2471065dce8a09ff018e0dda82d0e81b0c6398eea9e87ad1fad807d1162b5f4e2d4a40366d791a971c495dc500e66aca1b7b1e5197934f7166da2a0226807d95a9edc9b7df07f03aa571981162b504da835f7bf58023c995aa09572a198684ea72a1c2df1e3e2f4a7b4e290ac1142371ccd2964a9f18b05f9a7a78512ea44fa3edf2d250706ebb9dfe04618d59cc8f1ffe9c97ab1fb091845f4917eea2a23db14ee56e2de9f452cb5c137ad5d38d0986c9086bed16699459c602184b762f5caa2f38a33f7a7c6c3a90efe3b40b34bc8ebb94728fe22045f7bf3d49f3d3c91ed56d9ba7a5d56acef0338da60e415b4bc2d9013558a2b55f2636c46b3effec92b2451bfdd8e75bbad365ee38858f468122c47041ddbeea9b18cfd195265079c9c9fb576727003935263fae3772ad5f947758554f0bb80debf369ffb892d9a9f9465bcc34240fab29de0e7c464b20cb5da6ac15fbe2e142c19c105a78e3d7cf1ed6ed0ad0f5abee799d3eb3c1375dc3a03ab43fc7d661a338b1940464bb9c622971c8960d013578c5f727e41c1ebffd35f843a2504bc158fc21cd39f3109b8ae345787a530ea1e916e815fb0412407fa04efd7cdc91bd26a4e2ed2c9df8fdf716805068c8bcb17bb86cf8d52258e8965ec561e01e587ee347018a9dfd18ae241a2a7eded2d8a63c15e32d36900fadd1cc90a2f369d28470a605d2d1361fddce2efb886ed9b71c45883619afddd5f08952a4a7bcb3745570c3a7a51702f9438194191182b10685945792cf8e3719b27ae62f194730282bb0f1edc86b4b3dfa2fe21344f86dbc0c6ebbf3947c3c2eedf960d1f43f00f21f4796fa7a6d606b4fc4688118b273c96ceb41c22a1d35fbb4c0ea2b3a86f979dd26c073764684d763bd12cd84f576344f7c3b54fbf1c965a1072c44ece6e7a59584ea2bd252e6429e3c92dfe60d592f53b292a293664b56c6a06467a5f36fd4316a7fc0f26c251e99c46913f0bf5cfbcfed70203117375e0c2069e353e6b368d462da52e6712651fc373a4cb833308fc73a804505eb2a57e53d4419c71689f28837c1742c452432b2eb821b75112152c6d73c03184ca70aace655f703f45cef20b09e4f3832fa54044d3382dd4afb2df0c1aa539689cb0e2dff104fad84129327cb8c16cf19810ae2d05053cac0ed0693f9a1257a6e798d9845f1bc1579510f726c94f1b7ffbb3b1b80aca6edf117e74eda1afbe9b2f3efb1d0e62cf1599032b407041093c04485757d89e582a2aef9b3124d0022aeb83236f8346b23d4002e413a6fa454b383a30e9b4d8811210bf751be63f8a8199e060dfbe33ef5e1f03b71144ea3fc0b492226e476527275e81bc3ab08be73b3a483e239ff1e53b896be9f079f042596d2d4c03591317961e8e9e099590136038fe64e32307dee087ff2e7c45b4e7ff9fbc6e1c883bc931a242bdc9e20d670305765b2533a809851a2de786bba2a30b544a401c267a560ccb00d6bd81d97245b8ae3ea62129563fba37a1037c334f093a27933472a8e2d805cb8d03caeba4d60282edcaf60f3473393717739ff73f7b18d565bc7407a2aee306d55faa2aea195d5abc46d245462a0666d571181c012ebac377145e9f8afa36016c70b9ad39ecadaf6005bada22db3cad9aaa500156b6eecb261180c786390900d9dfd2d042190e1719d6f6c42c811132b3ee7b9de660884edcb767dfbf168ab5d27b2d779c03207fde31110b1d96cefc541831e7f04f78a0840f4078413c9ede53ada5c9af6effb73dbed7a7e1860067e6dcac52c541d452e23e012178b4838d2a47966eeb4ca50c266453028b002ee56965b5f1243964ef02a1b662b40f44d71cce98ceb41681451c46aa5ba8c1434856f452b04084bac871b24afcac8938a6ab4917dc9201bea87b77760f1a4b773e5ef91b1daff7193da195ecbd60468865949b33c18c09ebb3a3db1bf446e86de511df449dbe09be9d9f8f8f0019e5ece562f01641749defad9368195977dc13687e1532269ed20d5bdc750af77631aba5dd34bcb7b83e4fb84f852d521f1b4a0027a31eee504dcccfdf149155a34e0f9610559e3a29059f836beb1a26f55819b5f652bc36b3a05b77c7b6cf692538766a3d88e83412ebc29c10075602a5814f82f20aa7fb14d7a920a0e29768ba02358583cd1c36d45f2245329071f07f87c84aae7f21d63fafeed76a6dd98a29e981eb1019f19d3c6e81a30292939bae3d6b2ec796beeb181133cd586569c1f1b74fd151ec94762079731fbba4ca29dd34885712e10e0fcc21ce1cc4f3a33f40bc9e34f840f68210b56d7452e54df6328a647ffc503dd6dce0542bdfca45620101f94492a3b8c6e366a7fd33c0b8d53fd41d8df8ef23655aaeb582d216110c217da7906c38f0d6fca154eb26c2843f6abf68c3197d2bfc22c113b574c39cdff0f2222f5fd1ce0907bd988906b169e77fa9a4d5072861af68e3c906a7ca7aa5212b598626affff623614fbb7d8280f23461e601049d8a4eeaf1a6f8bda0dedc3bae821952c4eaea1422feb2f797b6b3e9cb34e973ff6af2976cadfefc9a7021170a3d9ac5dbe6cdd9502fcd087b68e710f8d5e6035201e1dca51f05b2531ae4d83d0bbecc7d605e4a07d8718c301d5b58022f26be0e4f69b7f4cc555dbcc632de60c1b2aeb95ff95c713de48118063e3f6fa1f79aae322abb85a470161947f1f58751713e851ef1fd5e2560728a25ee23445a4048e563f94b9e2f29af7ebd556e787ac8d700bbb567095720fa48252b47a8abf6997746a0ce15df0681138fe475f3250d5e5d4eb8060e84b78080b7d3b85ed7440ea47f8c02c64b281895b183cd6c9f17c52d79d64d48816c7ec113e2714483c79b68c69ec820cd1c30887a0733d007c335c145328d3aa9f67deaf2edf785aeb9cc61b33b27e0e2cdd798ed69f1e961553f1239840836e009da16c1657930b033ed7212aa6e24d7e773d7e49e2f8753136efb9614cd9f413f1d0865b06617bffdc964787535e33879641398c75d9d87a2f3da3523b8da4a0ef5cfbd45ca96bb6021c08f8fa93b4898525aa23017c15ac2118c4b6e994d28b712b9b4e62f50a62917fd603713212b8dd5dc4c27a57325ac3cdd5b8462cebddace69a89a99e6df9da9e51087e725261c24ad7775e7e5dd94479ff967663b8a31fbdf09b26eea63116d9c241b985a3a5481c5e2b8d5b1a369e7b76b52e2bab38ee8c16af157eaea87f6f892c474f2db53828fcd456028e4e0009c3fb3302d1be3eec4b7e4c6aca3213061cd680390e01eba0abaf3d019a50e8b8a6abaf8c069f97f31706d0396be688d90b19267d14d97c454bbf280d2b6e6d3dd68360bade0556a04da2900059867a0f93a811674980edfebd4915ef83102c2a45e8ca824a620112ad772929286fba25eccdc8056d9369975f0c4500831713c189e68efc8f85113bb41b328fda75e24136e1813a842db1a2d9e8d233b1f7296785bba4eeba2a7bde327a429c4a9e3aa7c4703893f240b9784ac76fb5b997e56f9ee6cf91509b7342adbb6d589dd684289cab4ed0aaba04b43c10f39c06ba1a67c9e1179cdbaacdeb7b4160d2ff1ec4f4ba0b6f111d4630da626c979d2a3c198b2bdf9ddcc23c59bb7bb14ee0c2f7e67574d0dd91f33acf76ea93dd7ebb9f17e8f19c376885860af61de7342b75da3a2fb067d7133e8729f30b54dc9a2ae8395f776feeaf93dcc58e8473d3714aa524f9a6c3066c8ca20dde41c0e0917c8de28e63bb7bbb06b05e9d2c9cc26fdb1fd7475ef867d8af27dc8fe84c95bf3e7c60debe2d5137060a34d6adb69f5003c1ee34eb2fc9db7b07c28f859614a7c011649ca283bb764d75fe37fde04a4e338d8e70eed81ad776506cb46ba7531a1779dbdef9fffedc34e29db54da671db6bbcb4ee68987a841bd5c01d66af378305beef48df853f215c1be6a0029e05fefe9739f06b3a142954b80892adf598932cc2ec9aad01385aefc92dca630b0b049605db6a93a952f03e85873132d92facba0671e60bea33963412f7c011118184b0d179da2aab21db0dcea36822aa424f621456b1e5df92824b2d133fa321d38b42aa57c28cbebf1b64cc05c162da7561c04aaee7f5dac6d82aca8e595c8d2baac39093ff65e3f58abdf151094c6a9e5dc0c4d87ef20d846d78471bf496b98601a6c7566cf8e5aa661082508095d6c4cbbf70ffc5b84beaa8e0d1a8103216966e2d3a21f744b4ea04f73b74bb8112cfcd5e5fb8d359b85b643a7763192c95d07b8ad29fc7acc2056b709d79fcc292a6f4f27f7d3ed5f69509092d117439983f12f8e800262a61c0c44f0dbdbf88d5d2b7f528febeac0f29ce53d0973b0def92e231676ab00be6942b9ba9427792d2c0c59c7c757950633ba38bb1c835eda032cd833e2e0d925abbde5038c633d005ae873eca3943bc4147fd85dbb91eaa837d416d260910bd54f0afc97b0776ac3abefec85c3582a2299b8258be888073b1bb3759a7bf23b8d36bb913fa4079ec3a0ce64adb79859b9c4b7a10c8e86ef081961438faf489e5c920c3f5a13a27487353b1e9e026cddbe7943d43d510d4f368480e70e36aa689bfb7764aedafead112a713fb10c984b3c070f1b555d8a1584482abed36a616ccc0910b8c16074b66c1540ff8ebb05df5fef90b76a47427b362e3a9b6e1b4696d9ed11011ccbc970a4e4000245c84a3aae6d70e3a4d45baa0d22305458499ec97c6e69f1fbf8402e3600aa95c0c4664b00ac3c80d395e8f1d03ad2c81516bdd12cae756794bcf2ee52523378c72870e93d27b18f936d8c9d2d603ac1e78bba47dd06a9bb68e6d66134216aa045ac1b711f6afe078f6456a81b83f5503a3c6c82cf419da07e0efba59a25d753eca8dcb0eec699fcb0aba528b6ebfbdb7c4b5a330bd785848b4310b1933d0f8298eacd968784c6cf109e1dd481bff965c41a2b28b9b03f80a489773ae69ca08581fcb60804f98e240d8470c78fcbc6ba38f0f2e67a84a2de3065e250cf7a1426fc5b59823502e0a52a80a9d04edc3fbd64e57a8429f65098dc62509fd772da21ab6a66db45846b2e2badcefaea1bc6d3a4554c85794ebce4aaf08c6cd70a08264fd58f2a5f32a211682d9b197b4dc947cfbd4f326b575336687352121c3f8a0acff8f40d3a7d4f1838bc008c724371b1f8c98b26f5397cb25b7f6619ea48df9d41d3767b3a79fbe6b4ec97a56a52547116f0acd9da6214b89ba6dd73d427ddcd1781d172c6797a48bcf15dc5b8c70e1b46dd72026c9cab9d8923e8a5839f6fd87f00771e577bbfd3301d2db8e96753e1f329f692e592716e8f97f8e180719c7f291c445dc271d5bb692c90a246aa123af18428333ec08abdc8152344784e307461c14abcbb2225bf6cc754fa6a20bda3d634f9a62441424ab8dcf5310589faddbfd1b3290d6dca8df9e9a197245859e85845c2f2c6cce91a091a4ad0155b4b77e04ca0788c786a0242350610a4f1b8db90a1324b337feb7371dce3f73ecc3d47f2c59c9f11fc0ecd8dbaee883046daf816068fddea5b8e6bd4022cb5707245c78a32f42984762d1186b719734c2a9d37e6e0acf2d9a46bf7ef050acdb604f825458d3bad7616f2e84e74a8bdbeb6ffe2d3c5530e213be10f05bfefa027fc3fd533c7b6bf2a2e2c4f0b15b11605be51576429584425013728ca168e51ea5407998e0e9b05fde39a00c2e640146575c1d6bb85af039f501243ba64d", 0x2, 0xa, 0x2, 0xfb, 0x8001, 0x5, 0xc, 'syz0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000002480)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000024c0)={0x48, 0x1, r6, 0x0, 0x4, 0x3}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000002540)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e20, 0x7, @empty, 0x2c}], 0x3c) prctl$PR_SET_PTRACER(0x59616d61, r1) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002580), 0x880, 0x0) futimesat(r7, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={{}, {0x77359400}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x80301, 0x0) syz_emit_ethernet(0x80, &(0x7f0000002680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@llc={0x4, {@snap={0x1, 0x0, "c9", "a5bd25", 0x88ca, "25f7b5ba6808536b113ac598feae1b831f89d8e18db3c38ccfebee8679ba8036b3245ffef600d418ca87702b91bc1be6a18dc506755b39fee5d22feb351cd2efff6487cfeea309067c8907edde2f96cc2bcce3c3983e09657245ff08ed4d1657f1e54f2c0bc1"}}}}}, &(0x7f0000002700)={0x0, 0x1, [0xc03, 0xfda, 0x626, 0x5b0]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000027c0)={r2, 0x80, &(0x7f0000002740)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0xfff, @private2, 0x3}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x9e, @rand_addr=' \x01\x00', 0x8}, @in6={0xa, 0x4e23, 0x8, @local, 0x10000}]}, &(0x7f0000002800)=0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000002840)={r7, 0x0, {0x0, 0x0, 0x0, 0x125, 0x2, 0x0, 0x1, 0x3, 0x15, "d7bfd73320decb62f2f0e77a1181969f84c943c7ccbd172ddbe921adb66cbc1c6ff72812703636e3c54bbcbfb04bcd735b94437feb6b9510023e1743e8354a82", "2a3f5db28fe8ce41a239e1f341070a48ccdba6a42c851c026d92a98aec3f31a0cfe4e512f964b015a5436af7b7ced17d9c6667b31155b519cebf1ee815916aa0", "4cb86abfc256a4a4beb3efdb19047a2e29bdbc6fddb7df28b66a829204505723", [0x5, 0x6]}}) 6.75421962s ago: executing program 3 (id=1052): ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000300)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) 5.79432789s ago: executing program 4 (id=1053): socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 5.777008091s ago: executing program 1 (id=1054): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x220480dd}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='sys_enter\x00', r0, 0x0, 0x8000000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4000000001f26, 0x40) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980980, 0x81, @value=0x5}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'gretap0\x00', 0x0}) r10 = syz_pidfd_open(r9, 0x0) ioctl$VIDIOC_QBUF(r10, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x5, 0x8, 0xe, 0x9f, 0x0, 0x7b}, 0xabdb, 0x1, {}, 0xbaa, 0x0, r8}) 4.574080263s ago: executing program 0 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="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", 0x219}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r1, 0x1) (fail_nth: 1) 4.561785221s ago: executing program 3 (id=1056): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) capget(0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e2b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004a23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 4.352241165s ago: executing program 0 (id=1057): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fe8000000000000000000000000000bb0200010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000030000000000000000000000000000000000000000000000dd0200004000000004000000000000000000010000000000840105"], 0x23c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001140), r4) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 3.266121492s ago: executing program 4 (id=1058): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x96, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r1, 0x20a228c28c4e77c1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4885}, 0x40000) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000801200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000140081"], 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32=r10, @ANYBLOB="1e00009ccf00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000011000000000000000000"], 0x48) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r11, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x5, 0x9, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.014000371s ago: executing program 1 (id=1059): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r5 = memfd_create(0x0, 0x0) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000009, 0x2012, r5, 0x1000) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="1e", 0x1}], 0x1) sendmmsg$inet(r4, &(0x7f0000000000), 0x0, 0x24040055) shutdown(r4, 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2.829860929s ago: executing program 2 (id=1060): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x48850) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x595a, 0x1ff}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x1) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="f56ed761e9c8219d05f5e35c81ecb8f854", 0x11, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.708188422s ago: executing program 2 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "a48ce447bb2f04f1aaa1a0baeaddd6216d"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "6eee"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}}, 0x0) 598.690518ms ago: executing program 3 (id=1062): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000080), 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 596.610564ms ago: executing program 1 (id=1063): r0 = getpgrp(0x0) r1 = getpid() kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000000), 0x1004) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x5, 0x1, 0x4, 0xfffffffffffffffd, 0x80000000, 0x7, 0x5, 0x8, 0x1, 0x4, 0x9, 0x100, 0x261e, 0x80]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={r2, 0x7}, 0x8) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000300)={{r4}, "fd38eebdeaab926e92497fc6044afcd42553e0aeb54d1c10c1694f6a9f9e5e724d0df1a326ac120808ee33e17ae83d4d1f34772755bff91cc056aaa39cd7a7684642654f257c80f7eb212154fd76b8bae97a1bf8256e958d8b298875a62ce935a65ef51fed8c17faaf4f2c3440c9ea00ce1836194eeb691a63fd2495c839bf9f5eda0903e3b34aa5481c769e82a73e96f825a5c9c78189e5ecb5b0dad388799839d2f3e6a113380166acdeed154bd0f7fb682e9478aa9f18f37b990ea4c9b4df6072a445f8a1af6f5fd538640630a9457b42d64b02f95649df7aa6b7106c16fa02da7ef9f4ff87bfeaddcef2579912e1108631670b31b607a579bc7fe34a338232123c3ee06124cf961ffce01c7234fce6251eb16984e6f5c9cfc2e7e976aeab623476259003aba22627d05069951864d87f16dc51741354acbc1efd0ce8566e93f94872324fb82414466f38969c72bd5f5f2a2ff39828b2d9e90d16ea82d48de8d7d4c6334cef87056cbce646c4860778f004e56093ca1373678555e6643f133e3125064990531749f59939e41426aeda06d532de6e940a1940ad5d486d5e909e9ffb619d157103bc6611834cb50a7fd4d704bdaa0cbe129cd932d52f054ebbfefe142a3ba34765d1af788c4bdcc61fd0fd4884c52a2cd4d4a621fa9fa26684f3bdfbcf4bc675b283e991dd8250554ab1646e62646bff602fe0dfb5fd2fe1ea6808692e9a9398bdb9af9c9e4c2d8cd39d91f327519c10e2aa567bb669f45bbe6dedda034bc82ecaad9e8debceaf207f79fa0fb96e0c0b41e8fccf3b53ae94a24e75727a994131f2172a0495d12590f53eb3b407118faa7e8b64f3992380f870f54d1c15da8606bbfc59b01260e657fae1c9868913505db0f055d75c84a536d41569942a91729cd201a749ff3e24b15f47b5587ac543ac136df39836118b7d6df14055faaf5e65802c3b94aad40127480bb99720cf32a3fc2d45dbb8af35eab1ddc9f6f249c1076d62c80e739f19051dd435176316a4bdaa63f54541c50a7b25f9da012b380fd075f14b44a4a1dd395eaa9886c351d5ab626834c46565fbe98f1ca54a10759d6c650d0ecdf401cd27dc53979de1d83aac8b3853be4067010dec4641d7ebc8010b6fb8e2bb82e71239d7004439ddfda1110d4554559e58e4a9235af8f303b9f6ccf51fb7ee26d5668fa4297fdd7dab5049d66cd4aae7df04a7c3087af19569355e419e8745100c577dde9614ff859ac17bcf8abf4099880e91ba2e57ef168dbef284d8c1a540f29c090e532b46e59ea5c6488e20a455e8949244598f278ac97e68c059dc2c2ed28348dccc1b6f4993d7113f6a3a517e2ca88e0f20df7fcb6dbeb9a869e92b227c363c63a1e1af568613d47ad5e81ef4d7df2d434ef93b61f369bb079ffd2e2955ebb8562bcf0cdf99cd19e9b69fa88d11ff6ed7fda5f924d9c2d968c979b7101a707bbe662162f41d33af083f3fe4fdfa4f8925db68c2d8851fa07d3bb0df091d2e20dde98ec69d16f5d6e015dadc5a244d962c94fc1485a3725395f6d731d8eeae2f5b88c85a576eb957fbd5fe6deb56b650f8ad93ae7711440d02860972f7156bd84455fba1433279180998193eae046715ebcb70174a4ec88b286d17aa0f49a98e0bb43e115d239800db80a7fcf9ef863f5884c5a6e026d098de7392b5757a7889d1f80e97391974fdf3254d764fafcaf43e2ae9314acf99930e991b4cb16584a26fd9a669921bcb6faafe4045b0c7b20a51cd360c41c823e6d6221ee75c18883f74f9a77301a4a07d29fb37333fb5d259a99680cabb3dff4e46254b497c8f39477a9095c6c8567cbf06ada5316645052258875d14acb624a112d04db38317ff6d5d5af3cbd87d43c9047381f2a51399531ab8ebbafeace76bc72b5a7e7d385dab41c41bc0655a4fd5bcc9ba3d97d4d83d4b00d2d9cff4db1f640aa3f36eb97e93a48f4a7486b2bdd04655444adaf822581f852ce76a443de8d1eb539b25c03e3f162f054e14eb5fd5d17dc3b602f4f3cde803a841cb54ef8d1f926eced25f7f2b69d76143513070a604b21d7a957a223c924beaa4006f78b59b7a6a5d82a72da88a52296fcb0b4a681dcddab5d5c0f63ed1c7c8bdf6510d4f476ba381384cd1c15e7d141caae68f6c74f6c674d0f1abcd980320323d7f0c60d606286606c3feaf25c506ca5d934f3eb98076ca76251d49675910603387102428efd9c7ae9c8269c33a37b39ac08a9f77faef428a634443bb579654bf42384b6901a2ab4791cbef7ee9c4ca54ccc6d02166d4e8907da734a9e6be3f992733b79e3680cb57074f96a46c62c7f603a4e35fa4eea1edbe42a36e0d5123faa6523b0cf7354d6708190042ad4bc9fd601a1dfdabc8adc072576ad412448af1873ff4cca9ae9ca5b0234e55b15d00b085abeb631e00592588b077d8fc86d955963e722c0e25148f005367918ded2dd67987814db5b91862eabc1874fb6a74bd939773d63577e9fe7e4e02f30fd826e18f52e9cfef689d70be8c29462423f4437a7f6edf07ac3cee487a7cc6a69a594cb17c0086237c7716d0b83cda0ef65099f6265dd7d4cc282ffac88c220ec3a37cfff6ba226835898e61a7d436fa46787cbea661c195e24b5b13a2b83c63cb98f95fbf6246a035e2601aea7586ffb38008531a0cf56cb05077cac521c53fac869615e73a654368e7115d29a71e02810e7d1aa4b7b4ad5772b9ed2ba0fe62d92aa03d7056ae8de9da61005c33b82d684a76e4cbe248572a46e61e1e982ff0d3a9e4405dfcbe86e645707dee6e4e278a2cf58ba410f607126e13a31b550722710c8b136785c87058000db25972edbd7458721362586da151ded9a12ad34879497e5f1c6868f099eb7addf14c37059b51a47ad01d727b3ebd3afcf0e9f601a7677525b3218421fd8241b711840cc8b04a9bc9c467187bf081ff1e4479428e037dc15be45f432ab189a1e926399954eacbb9f58a4e3d26c6ea6dd65f2305524a16f15f0c2a1b588709b23c07e13abc5d95091806c095686e073ba65eca0f3a8cc911135792d48c6c36267694132d7bd6a0e00ea73a102a3e0a168393c6ede255b61bce07b91cb2a3efe2d5fd30e7f895b6996dd988d9585139316b2df0db1d7df8bc173db5ed491c40bac48d53c77fed2f6cd118f8fb323e523d4dbf1393dbb0ee802f9a6f03b4e4a8ff2c55478a6259466bb3de4e747dfdbebf0827b29b20398772b98d315f04354f1151300cfee58c033b069f1134119f36902a003fa1e8629c012926bc80907b98e3c2ac68c2f28780bd0c64254e92461211420a78169ab6dd21145046b5cd3409e4e9db5cee3ef8783a54f3573679a29b882037282ca82c11ac4847731e2c8e635b2c63886929763f596cdf7a0a2204c4f8fbb783a7e157b7e1bb950646b9e5e61e0c5e9ba41e31dd63083ab56aa8599565213e21363b3e7a1cdf04625d795fc799772b68fce828ce32da75697ab194ef4af677b66d4ac32eb0f82c3bcf7a8d33994c55a277dad1fd010f314aab59fa6db78589af19062b74c681b8525d3f9a25639a776731955cbf6c9ad45223b00c5761ed58f546ec3b83e6a92335fd0267d81fc0645a6bc98883fe57846f7ab72e7c35306fc83befb836e87c639bcfbbf7e5a60d196f8dc9728f918dcd36b387a3eaab86de026fe463940bd074e9eebfea4620c39c7c65d40f0e4f3476a9b3571e13e28514aea5678877d757bc5b48d0641c78796c6e2dc8f9d08b7d65b9ef5ceac8604b16598a1091ec650c8d639b08a4467b0a80c44c572cf280a622ad81373be4056285a12aa89cf23947687ee01b32fb7e8c5bd8752107f86fa62e41882363cd9ef99a30ba47fe1a2e3e0590c102bb462c51d7b273cadfcc47b6b9c2a43e82c9d9f81765dd04a4e21159a206d7189021e44b98b62aefa60c826dbbc87c9c49b1a9f660654a874b788e7454f004c7a0ef2c5f1e3feedca3d4f0bf31fc8d4e3b98434cb03f78e8c1449a3b0d72b997f7e940c3833747291e250700745fce0e0d35336621ac4b3eb8f3bf2cfdd1ea9730a31700ce6964c92ace47e91ee866eb7da94f4776379d9e5b81c8dc66d6ade9a62f6412911394326bc47e7769f16de706f44779b90e579064fbfab13ae64a6bf5cd8b0db4d84b11904ef8c932dbf6e11bb6898582965f03354d07d1ecd87ab6401fcee1bf73df2320d7472c9f9ef782b7ba1bb6b48780a232b441b71a4c6e1687befa01820359318658860eb910b3c6c6b442e3d57f93cb82c087dcbd007c8925a0d53794bc840ee107eb4b0e0cae30adf642226dcff2696ac3ec87cf1841dc64e329d45f5d4d73567e5304ddcea298b6ebe5a4168c89b10a53cd1dfb01771b81d5e599ef271a49e6c254cc86b9cbb305af6ec9729c3e739ee5a6bf52d29e693370d0aace5342a8fe248e937e2181f7ee91906ff61456a04c11776b1e1ceacdc49d69b4a2e10025225ad94c4ce08edc65db60d4dbcd024d685440e21338ac65cdac0260e846d7c91ff689c7e8ed6eed55a0546a0f23bcafa59c1e6cb2209ae0283b7a2502e86a6e1285827d7aa02f99c923a4e29064db689bf82e0388e86e5b9f2f348824e2507a73bd31a77109a959dfe80a105a0c14ea1dec6414715418580c41bec2a822d7bfbd0267aa8a3f37b76d2a035bd9be6420011b4f53c9ee28e12b2c829dfae3f0f962da6a1ac8573ca4aa02dcc4051aa44c8d85bd58949ed15edfe23cbd568956687e510987e09f3ff9e45bcdfcffcc2cbf2cf81bf6d25dd15cd4e9fa07809d8ce58021526188cf6ee81add67311018db8e218d98e28482e822e61bf1aeaee4f0f9753dd0a968ac6a256608e91af41acac16abd95e6be067786c5a59ee30c23f621726f54b542e146b99a0013230c34858fbddf228699d2859e906ca122d373ede77ded853d54190c188a7783f05d9f87c6f0da62e8542889d5c92d3636f52596472c197097f4f5d07550e6a8ed967c72b4766d6f6c8ebc759f276af5bee8a61da43816b597ef6736340e96c7415807250c0cc5d3538305f578d63b0cc2cfb8e285f84847eff2c071df9c47e237257b8522aea3928467376ec363a4045ec85e4b2ba4139376694764971221c6123cea55d929062ec7875c286499ba9362b984db0ec718432902818e7f53170c68d67206f7a96ca8227ac9acd2cc44b2c68e5e8b310c749175b1261b9f0dcbbf073a3796fb4d425bccabdfc7ecfa4ca1d8420e64b184be8a1b9f8ab97c35336f11804b979506192ea788e04a7a296aabe2774edc83b34b73a0a71aca743021db98372a1439f9f558a4593fe7d0b5f42b25d25dc5aa20c926aec8e205efb129021103f872fe9b6dfc83d0a15a9d21524691346d4692abff355759fcaaca3f7bd504e2a555c240578268b78a485e7088bcca2ac37537928e434ef3b39ebe9b7b1d9c26aa217d7e264bd0d7601c100ed0cf071975f6f8e0df4b038e11904dac6db45f6adc496817092705ca819f71d9d1e36f3513a912db90b0b806be13958f9c156c211ea5dc29166b0d182a62b9abd5b5074bc66c68d113877179b66e56d4a808b7e033aa19b6cacd25148285fa824a88169191a0154d57c93b6bead8ac47c849a1a56ece91a99fb45d7971e78e652f3befae0d3017b6587bb676f6c96557909bbbfa52ddfd104c2ef722903db08f21d0897d27248977ca9fc050c3644ed89f0e203f9d1f2f68b6b0e5b53f68ca94500c0e35f919e56df0233e65165af59d357653c6bafd0371cd86ce2ade9b3b"}) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$802154_dgram(r5, &(0x7f0000001340)={0x24, @none={0x0, 0xffff}}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001380), 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000023c0)={r5, r5, 0x3, 0x1000, &(0x7f00000013c0)="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", 0x2, 0xa, 0x2, 0xfb, 0x8001, 0x5, 0xc, 'syz0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000002480)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000024c0)={0x48, 0x1, r6, 0x0, 0x4, 0x3}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000002540)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e20, 0x7, @empty, 0x2c}], 0x3c) prctl$PR_SET_PTRACER(0x59616d61, r1) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002580), 0x880, 0x0) futimesat(r7, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={{}, {0x77359400}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x80301, 0x0) syz_emit_ethernet(0x80, &(0x7f0000002680)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@llc={0x4, {@snap={0x1, 0x0, "c9", "a5bd25", 0x88ca, "25f7b5ba6808536b113ac598feae1b831f89d8e18db3c38ccfebee8679ba8036b3245ffef600d418ca87702b91bc1be6a18dc506755b39fee5d22feb351cd2efff6487cfeea309067c8907edde2f96cc2bcce3c3983e09657245ff08ed4d1657f1e54f2c0bc1"}}}}}, &(0x7f0000002700)={0x0, 0x1, [0xc03, 0xfda, 0x626, 0x5b0]}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000027c0)={r2, 0x80, &(0x7f0000002740)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0xfff, @private2, 0x3}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x9e, @rand_addr=' \x01\x00', 0x8}, @in6={0xa, 0x4e23, 0x8, @local, 0x10000}]}, &(0x7f0000002800)=0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000003) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000002840)={r7, 0x0, {0x0, 0x0, 0x0, 0x125, 0x2, 0x0, 0x1, 0x3, 0x15, "d7bfd73320decb62f2f0e77a1181969f84c943c7ccbd172ddbe921adb66cbc1c6ff72812703636e3c54bbcbfb04bcd735b94437feb6b9510023e1743e8354a82", "2a3f5db28fe8ce41a239e1f341070a48ccdba6a42c851c026d92a98aec3f31a0cfe4e512f964b015a5436af7b7ced17d9c6667b31155b519cebf1ee815916aa0", "4cb86abfc256a4a4beb3efdb19047a2e29bdbc6fddb7df28b66a829204505723", [0x5, 0x6]}}) 472.716488ms ago: executing program 2 (id=1064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4f}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x20010, r0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) 303.000629ms ago: executing program 4 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_dev$vim2m(&(0x7f0000000080), 0x10004, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) semget(0x3, 0x2, 0x441) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 97.033365ms ago: executing program 0 (id=1066): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x70) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x800}, 0x35) write$UHID_INPUT(r2, &(0x7f0000002080)={0x2, {"a2e3ad214fc752f91b450a0787f70e06d038e7ff7fc6e5539b326d078b089b2008385d090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5bb6f5dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f0841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b158b41f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b00005e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a605608057228652010400006c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d82d6734b849304c27b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833c596c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ca4d24ad92f243941ed274f12a29ff962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e029efe0703615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712ea5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9b97474a5966a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185daba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687fd1602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81da8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6687f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741258c5488efeee327415cc19451432c6f14c27693102a5bd848d7cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a941f0000005f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c86310e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13b5c1fa7cfaadba85c7248758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759be0daf60a842b09eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f49013a3a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1271e0400", 0x1000}}, 0x1006) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x80000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001480)={'batadv0\x00', 0x0}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x200, 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r9) r10 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r10) r11 = fcntl$dupfd(r0, 0x406, r0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r12, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xf, 0x23, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000050000000000000001000000181100004efd59c44004ae28aebbf64238d145ac24db39411ebb88aa7eb0232265ad2fc93ea81b0dd66f482c17a7d6978bdc05b32f9a56d8111ef4effcc856579d6bf432c00c3ab960e7df18ea2f8762448c33cd300b475a80ffc71d0d77d72ab691217fe0f83fb39f98a8ceb1697181afeb77e43735346bdc7d8251811a63d056beb84f6192b154a8cffe78bfd4d7563cdac6a3178e3ef874b0", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r5, @ANYBLOB="000000000000000018000000030000000000000000000000850000009c000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x46, '\x00', r7, @cgroup_device, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500)={0x2, 0x9, 0x6, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000001540)=[0xffffffffffffffff, r9, r10, r11, r12], &(0x7f0000001580)=[{0x2, 0x1, 0xa, 0x5}, {0x0, 0x2, 0x0, 0x4}, {0x2, 0x1, 0x10, 0x16}, {0x3, 0x5, 0x7, 0x3a92bbdc809618f1}, {0x0, 0x3, 0xa, 0x8}, {0x0, 0x5, 0x2, 0x2}], 0x10, 0x1f5b}, 0x94) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0x9, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_bpf={0x9c, 0x1, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xab8, 0x74, 0x4, 0x3ff}, {0x4e1, 0x8, 0x0, 0x2}, {0x2, 0x40, 0xc, 0x3}, {0x2, 0x5, 0xf6, 0x5}, {0x80, 0x3, 0x2, 0x1}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006797904021043503bf650000000309021d0001000000000904db0081c0b704024b010202ff", @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0) sendto$inet6(r12, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @private2, 0xfffffffe}, 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xd6fda9fa87d18259, 0x0) 96.346504ms ago: executing program 1 (id=1067): ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000300)) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=1068): socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) kernel console output (not intermixed with test programs): tity: media entity 'dvb-demux' registered. [ 277.940190][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.989259][ T5904] dvb-usb: bulk message failed: -22 (6/0) [ 277.989320][ T5904] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 278.960479][ T5904] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 279.061265][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.099640][ T5904] dvb-usb: schedule remote query interval to 150 msecs. [ 279.099662][ T5904] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 279.270263][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 279.270301][ T6023] dvb-usb: error while querying for an remote control event. [ 279.425934][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 279.425986][ T6023] dvb-usb: error while querying for an remote control event. [ 279.602646][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 279.602673][ T6023] dvb-usb: error while querying for an remote control event. [ 279.766064][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 279.766101][ T6023] dvb-usb: error while querying for an remote control event. [ 279.925992][ T6023] dvb-usb: bulk message failed: -22 (1/0) [ 279.926028][ T6023] dvb-usb: error while querying for an remote control event. [ 280.088186][ T5904] dvb-usb: bulk message failed: -22 (1/0) [ 280.088223][ T5904] dvb-usb: error while querying for an remote control event. [ 280.233236][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.242444][ T5904] usb 1-1: USB disconnect, device number 6 [ 280.837135][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 281.686992][ T31] usb 3-1: USB disconnect, device number 18 [ 282.350380][ T7185] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 283.142529][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.219825][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.395882][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 283.548552][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 283.580827][ T31] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 283.580856][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.580876][ T31] usb 1-1: config 0 has no interface number 0 [ 283.585418][ T31] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 283.585450][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.585472][ T31] usb 1-1: Product: syz [ 283.585487][ T31] usb 1-1: Manufacturer: syz [ 283.585502][ T31] usb 1-1: SerialNumber: syz [ 283.615849][ T6513] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 283.674846][ T31] usb 1-1: config 0 descriptor?? [ 283.687717][ T31] asix 1-1:0.251: probe with driver asix failed with error -22 [ 283.714219][ T37] audit: type=1804 audit(1758392211.454:9): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.330" name="file0" dev="ramfs" ino=13017 res=1 errno=0 [ 283.767656][ T6513] usb 3-1: device descriptor read/64, error -71 [ 284.046036][ T6513] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 284.165961][ T5904] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 284.176014][ T6513] usb 3-1: device descriptor read/64, error -71 [ 284.286581][ T6513] usb usb3-port1: attempt power cycle [ 284.318681][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 284.319973][ T5904] usb 5-1: config 7 has an invalid interface number: 112 but max is 0 [ 284.320002][ T5904] usb 5-1: config 7 has no interface number 0 [ 284.320042][ T5904] usb 5-1: config 7 interface 112 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 284.320061][ T5904] usb 5-1: config 7 interface 112 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 284.322130][ T5904] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=d0.57 [ 284.322150][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.322165][ T5904] usb 5-1: Product: syz [ 284.322176][ T5904] usb 5-1: Manufacturer: syz [ 284.322186][ T5904] usb 5-1: SerialNumber: syz [ 284.340465][ T7193] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 284.353698][ T7193] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 284.666449][ T5904] pn533_usb 5-1:7.112: NFC: Could not find bulk-in or bulk-out endpoint [ 284.707222][ T6513] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 284.727955][ T6513] usb 3-1: device descriptor read/8, error -71 [ 284.772455][ T5904] usb 5-1: USB disconnect, device number 9 [ 285.054898][ T6513] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 285.055515][ T31] usb 1-1: USB disconnect, device number 7 [ 285.079440][ T6513] usb 3-1: device descriptor read/8, error -71 [ 285.196269][ T6513] usb usb3-port1: unable to enumerate USB device [ 285.618461][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.305437][ T7205] Bluetooth: MGMT ver 1.23 [ 286.782743][ T7216] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 286.782760][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 286.782781][ T7216] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 286.782790][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 287.100052][ T7224] FAULT_INJECTION: forcing a failure. [ 287.100052][ T7224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.100090][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.100115][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.100128][ T7224] Call Trace: [ 287.100136][ T7224] [ 287.100145][ T7224] dump_stack_lvl+0x189/0x250 [ 287.100182][ T7224] ? __pfx____ratelimit+0x10/0x10 [ 287.100213][ T7224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.100245][ T7224] ? __pfx__printk+0x10/0x10 [ 287.100270][ T7224] ? __might_fault+0xb0/0x130 [ 287.100316][ T7224] should_fail_ex+0x46c/0x600 [ 287.100353][ T7224] _copy_from_user+0x2d/0xb0 [ 287.100392][ T7224] __sys_bpf+0x1ed/0x870 [ 287.100424][ T7224] ? __pfx___sys_bpf+0x10/0x10 [ 287.100466][ T7224] ? ksys_write+0x230/0x260 [ 287.100498][ T7224] ? __pfx_ksys_write+0x10/0x10 [ 287.100524][ T7224] ? rcu_is_watching+0x15/0xb0 [ 287.100566][ T7224] __x64_sys_bpf+0x7c/0x90 [ 287.100593][ T7224] do_syscall_64+0xfa/0x3b0 [ 287.100614][ T7224] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.100647][ T7224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.100669][ T7224] ? clear_bhb_loop+0x60/0xb0 [ 287.100694][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.100715][ T7224] RIP: 0033:0x7fd54595ec29 [ 287.100735][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.100754][ T7224] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.100778][ T7224] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 287.100794][ T7224] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 0000000000000018 [ 287.100807][ T7224] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.100821][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.100834][ T7224] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 287.100869][ T7224] [ 289.041683][ T37] audit: type=1804 audit(1758392216.784:10): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.342" name="file0" dev="ramfs" ino=14447 res=1 errno=0 [ 289.195889][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 289.371526][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 289.371572][ T31] usb 5-1: can't read configurations, error -61 [ 289.505932][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 289.681721][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 289.681749][ T31] usb 5-1: can't read configurations, error -61 [ 289.682223][ T31] usb usb5-port1: attempt power cycle [ 289.925946][ T6513] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 290.025856][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 290.055655][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 290.063996][ T31] usb 5-1: can't read configurations, error -61 [ 290.080160][ T6513] usb 3-1: config 5 has an invalid interface number: 3 but max is 0 [ 290.080190][ T6513] usb 3-1: config 5 has no interface number 0 [ 290.101430][ T6513] usb 3-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 290.101453][ T6513] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.101467][ T6513] usb 3-1: Product: syz [ 290.101478][ T6513] usb 3-1: Manufacturer: syz [ 290.101489][ T6513] usb 3-1: SerialNumber: syz [ 290.153861][ T6513] ftdi_sio 3-1:5.3: FTDI USB Serial Device converter detected [ 290.170144][ T6513] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 290.195936][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 290.220697][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 290.220726][ T31] usb 5-1: can't read configurations, error -61 [ 290.221034][ T31] usb usb5-port1: unable to enumerate USB device [ 290.406836][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 290.477113][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 290.496645][ T6032] usb 3-1: USB disconnect, device number 23 [ 290.502629][ T6032] ftdi_sio 3-1:5.3: device disconnected [ 291.928688][ T7254] FAULT_INJECTION: forcing a failure. [ 291.928688][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 291.928726][ T7254] CPU: 0 UID: 0 PID: 7254 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 291.928752][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 291.928766][ T7254] Call Trace: [ 291.928775][ T7254] [ 291.928785][ T7254] dump_stack_lvl+0x189/0x250 [ 291.928825][ T7254] ? __pfx____ratelimit+0x10/0x10 [ 291.928861][ T7254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.928894][ T7254] ? __pfx__printk+0x10/0x10 [ 291.928926][ T7254] ? __pfx___might_resched+0x10/0x10 [ 291.928951][ T7254] ? fs_reclaim_acquire+0x7d/0x100 [ 291.928978][ T7254] should_fail_ex+0x46c/0x600 [ 291.929018][ T7254] should_failslab+0xa8/0x100 [ 291.929051][ T7254] __kmalloc_noprof+0xcb/0x430 [ 291.929081][ T7254] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 291.929121][ T7254] tomoyo_realpath_from_path+0xe3/0x5d0 [ 291.929165][ T7254] ? tomoyo_domain+0xda/0x130 [ 291.929204][ T7254] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 291.929230][ T7254] tomoyo_path_number_perm+0x1e8/0x5a0 [ 291.929260][ T7254] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.929291][ T7254] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 291.929326][ T7254] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.929370][ T7254] ? __lock_acquire+0xab9/0xd20 [ 291.929424][ T7254] ? __fget_files+0x2a/0x420 [ 291.929461][ T7254] ? __fget_files+0x2a/0x420 [ 291.929491][ T7254] ? __fget_files+0x3a6/0x420 [ 291.929522][ T7254] ? __fget_files+0x2a/0x420 [ 291.929560][ T7254] security_file_ioctl+0xcb/0x2d0 [ 291.929592][ T7254] __se_sys_ioctl+0x47/0x170 [ 291.929622][ T7254] do_syscall_64+0xfa/0x3b0 [ 291.929642][ T7254] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.929674][ T7254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.929695][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 291.929721][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.929742][ T7254] RIP: 0033:0x7fd91b21ec29 [ 291.929760][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.929778][ T7254] RSP: 002b:00007fd91947e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.929800][ T7254] RAX: ffffffffffffffda RBX: 00007fd91b465fa0 RCX: 00007fd91b21ec29 [ 291.929816][ T7254] RDX: 0000200000000040 RSI: 00000000c0145401 RDI: 0000000000000003 [ 291.929830][ T7254] RBP: 00007fd91947e090 R08: 0000000000000000 R09: 0000000000000000 [ 291.929843][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.929856][ T7254] R13: 00007fd91b466038 R14: 00007fd91b465fa0 R15: 00007ffe89a97848 [ 291.929891][ T7254] [ 291.929900][ T7254] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.156244][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.235341][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.346221][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.347690][ T6023] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.866865][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.948435][ T6023] usb 4-1: config 0 has an invalid interface number: 197 but max is 0 [ 292.948468][ T6023] usb 4-1: config 0 has no interface number 0 [ 292.948519][ T6023] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 292.948547][ T6023] usb 4-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 292.948577][ T6023] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 292.951869][ T6023] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 292.951906][ T6023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.951929][ T6023] usb 4-1: Product: syz [ 292.951944][ T6023] usb 4-1: Manufacturer: syz [ 292.951960][ T6023] usb 4-1: SerialNumber: syz [ 293.041714][ T6023] usb 4-1: config 0 descriptor?? [ 293.043021][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.043506][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.353924][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.372170][ T7256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.393042][ T6023] qmi_wwan 4-1:0.197: probe with driver qmi_wwan failed with error -22 [ 293.589426][ T6023] usb 4-1: USB disconnect, device number 16 [ 293.680008][ T37] audit: type=1804 audit(1758392221.434:11): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.354" name="file0" dev="ramfs" ino=13157 res=1 errno=0 [ 293.689429][ T7270] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 293.891251][ T7275] FAULT_INJECTION: forcing a failure. [ 293.891251][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 293.891288][ T7275] CPU: 0 UID: 0 PID: 7275 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 293.891314][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.891328][ T7275] Call Trace: [ 293.891337][ T7275] [ 293.891346][ T7275] dump_stack_lvl+0x189/0x250 [ 293.891383][ T7275] ? __pfx____ratelimit+0x10/0x10 [ 293.891418][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.891452][ T7275] ? __pfx__printk+0x10/0x10 [ 293.891482][ T7275] ? __pfx___might_resched+0x10/0x10 [ 293.891507][ T7275] ? fs_reclaim_acquire+0x7d/0x100 [ 293.891535][ T7275] should_fail_ex+0x46c/0x600 [ 293.891575][ T7275] should_failslab+0xa8/0x100 [ 293.891609][ T7275] __kmalloc_noprof+0xcb/0x430 [ 293.891638][ T7275] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 293.891678][ T7275] tomoyo_realpath_from_path+0xe3/0x5d0 [ 293.891714][ T7275] ? tomoyo_domain+0xda/0x130 [ 293.891755][ T7275] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 293.891782][ T7275] tomoyo_path_number_perm+0x1e8/0x5a0 [ 293.891820][ T7275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.891853][ T7275] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.891888][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.891933][ T7275] ? __lock_acquire+0xab9/0xd20 [ 293.891986][ T7275] ? __fget_files+0x2a/0x420 [ 293.892023][ T7275] ? __fget_files+0x2a/0x420 [ 293.892053][ T7275] ? __fget_files+0x3a6/0x420 [ 293.892083][ T7275] ? __fget_files+0x2a/0x420 [ 293.892118][ T7275] security_file_ioctl+0xcb/0x2d0 [ 293.892150][ T7275] __se_sys_ioctl+0x47/0x170 [ 293.892179][ T7275] do_syscall_64+0xfa/0x3b0 [ 293.892200][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.892234][ T7275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.892256][ T7275] ? clear_bhb_loop+0x60/0xb0 [ 293.892284][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.892305][ T7275] RIP: 0033:0x7fc65d65ec29 [ 293.892325][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.892344][ T7275] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.892369][ T7275] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 293.892385][ T7275] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 293.892400][ T7275] RBP: 00007fc65b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.892414][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.892428][ T7275] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 293.892464][ T7275] [ 293.892472][ T7275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.464162][ T7284] FAULT_INJECTION: forcing a failure. [ 294.464162][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 294.464198][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.3.359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 294.464223][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.464237][ T7284] Call Trace: [ 294.464246][ T7284] [ 294.464255][ T7284] dump_stack_lvl+0x189/0x250 [ 294.464294][ T7284] ? __pfx____ratelimit+0x10/0x10 [ 294.464328][ T7284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.464361][ T7284] ? __pfx__printk+0x10/0x10 [ 294.464392][ T7284] ? __pfx___might_resched+0x10/0x10 [ 294.464420][ T7284] ? fs_reclaim_acquire+0x7d/0x100 [ 294.464447][ T7284] should_fail_ex+0x46c/0x600 [ 294.464485][ T7284] should_failslab+0xa8/0x100 [ 294.464518][ T7284] __kmalloc_noprof+0xcb/0x430 [ 294.464546][ T7284] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 294.464585][ T7284] tomoyo_realpath_from_path+0xe3/0x5d0 [ 294.464619][ T7284] ? tomoyo_domain+0xda/0x130 [ 294.464658][ T7284] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 294.464685][ T7284] tomoyo_path_number_perm+0x1e8/0x5a0 [ 294.464715][ T7284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.464747][ T7284] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 294.464782][ T7284] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.464823][ T7284] ? __lock_acquire+0xab9/0xd20 [ 294.464876][ T7284] ? __fget_files+0x2a/0x420 [ 294.464912][ T7284] ? __fget_files+0x2a/0x420 [ 294.464942][ T7284] ? __fget_files+0x3a6/0x420 [ 294.464969][ T7284] ? __fget_files+0x2a/0x420 [ 294.465005][ T7284] security_file_ioctl+0xcb/0x2d0 [ 294.465042][ T7284] __se_sys_ioctl+0x47/0x170 [ 294.465071][ T7284] do_syscall_64+0xfa/0x3b0 [ 294.465091][ T7284] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.465125][ T7284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.465147][ T7284] ? clear_bhb_loop+0x60/0xb0 [ 294.465175][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.465197][ T7284] RIP: 0033:0x7fd54595ec29 [ 294.465216][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.465236][ T7284] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.465259][ T7284] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 294.465276][ T7284] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 294.465291][ T7284] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.465305][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.465318][ T7284] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 294.465355][ T7284] [ 294.471450][ T7284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.517907][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.254268][ T7302] overlayfs: failed to resolve './file1': -2 [ 297.000075][ T37] audit: type=1804 audit(1758392224.754:12): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.367" name="file0" dev="ramfs" ino=13235 res=1 errno=0 [ 297.100309][ T7328] FAULT_INJECTION: forcing a failure. [ 297.100309][ T7328] name failslab, interval 1, probability 0, space 0, times 0 [ 297.100347][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.100372][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.100385][ T7328] Call Trace: [ 297.100393][ T7328] [ 297.100402][ T7328] dump_stack_lvl+0x189/0x250 [ 297.100439][ T7328] ? __pfx____ratelimit+0x10/0x10 [ 297.100473][ T7328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.100514][ T7328] ? __pfx__printk+0x10/0x10 [ 297.100546][ T7328] ? __pfx___might_resched+0x10/0x10 [ 297.100570][ T7328] ? fs_reclaim_acquire+0x7d/0x100 [ 297.100596][ T7328] should_fail_ex+0x46c/0x600 [ 297.100634][ T7328] should_failslab+0xa8/0x100 [ 297.100666][ T7328] __kmalloc_noprof+0xcb/0x430 [ 297.100703][ T7328] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 297.100741][ T7328] tomoyo_realpath_from_path+0xe3/0x5d0 [ 297.100775][ T7328] ? tomoyo_domain+0xda/0x130 [ 297.100814][ T7328] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 297.100841][ T7328] tomoyo_path_number_perm+0x1e8/0x5a0 [ 297.100871][ T7328] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.100903][ T7328] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 297.100938][ T7328] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.100980][ T7328] ? __lock_acquire+0xab9/0xd20 [ 297.101033][ T7328] ? __fget_files+0x2a/0x420 [ 297.101069][ T7328] ? __fget_files+0x2a/0x420 [ 297.101097][ T7328] ? __fget_files+0x3a6/0x420 [ 297.101127][ T7328] ? __fget_files+0x2a/0x420 [ 297.101163][ T7328] security_file_ioctl+0xcb/0x2d0 [ 297.101193][ T7328] __se_sys_ioctl+0x47/0x170 [ 297.101221][ T7328] do_syscall_64+0xfa/0x3b0 [ 297.101241][ T7328] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.101280][ T7328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.101302][ T7328] ? clear_bhb_loop+0x60/0xb0 [ 297.101328][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.101350][ T7328] RIP: 0033:0x7fd54595ec29 [ 297.101368][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.101387][ T7328] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.101410][ T7328] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 297.101425][ T7328] RDX: 0000200000000280 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 297.101440][ T7328] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.101454][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.101468][ T7328] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 297.101511][ T7328] [ 297.101520][ T7328] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.879218][ T7342] FAULT_INJECTION: forcing a failure. [ 297.879218][ T7342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.879258][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 297.879284][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.879298][ T7342] Call Trace: [ 297.879307][ T7342] [ 297.879316][ T7342] dump_stack_lvl+0x189/0x250 [ 297.879354][ T7342] ? __pfx____ratelimit+0x10/0x10 [ 297.879388][ T7342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.879423][ T7342] ? __pfx__printk+0x10/0x10 [ 297.879448][ T7342] ? __might_fault+0xb0/0x130 [ 297.879494][ T7342] should_fail_ex+0x46c/0x600 [ 297.879533][ T7342] _copy_from_user+0x2d/0xb0 [ 297.879562][ T7342] __sys_bpf+0x1ed/0x870 [ 297.879593][ T7342] ? __pfx___sys_bpf+0x10/0x10 [ 297.879636][ T7342] ? ksys_write+0x230/0x260 [ 297.879667][ T7342] ? __pfx_ksys_write+0x10/0x10 [ 297.879692][ T7342] ? rcu_is_watching+0x15/0xb0 [ 297.879742][ T7342] __x64_sys_bpf+0x7c/0x90 [ 297.879767][ T7342] do_syscall_64+0xfa/0x3b0 [ 297.879792][ T7342] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.879825][ T7342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.879846][ T7342] ? clear_bhb_loop+0x60/0xb0 [ 297.879874][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.879895][ T7342] RIP: 0033:0x7f48441cec29 [ 297.879915][ T7342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.879935][ T7342] RSP: 002b:00007f4842436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.879960][ T7342] RAX: ffffffffffffffda RBX: 00007f4844415fa0 RCX: 00007f48441cec29 [ 297.879977][ T7342] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 297.879992][ T7342] RBP: 00007f4842436090 R08: 0000000000000000 R09: 0000000000000000 [ 297.880006][ T7342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.880020][ T7342] R13: 00007f4844416038 R14: 00007f4844415fa0 R15: 00007ffe07906168 [ 297.880054][ T7342] [ 298.504084][ T7348] FAULT_INJECTION: forcing a failure. [ 298.504084][ T7348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.504122][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.1.375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 298.504148][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.504161][ T7348] Call Trace: [ 298.504170][ T7348] [ 298.504179][ T7348] dump_stack_lvl+0x189/0x250 [ 298.504216][ T7348] ? __pfx____ratelimit+0x10/0x10 [ 298.504255][ T7348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.504289][ T7348] ? __pfx__printk+0x10/0x10 [ 298.504330][ T7348] should_fail_ex+0x46c/0x600 [ 298.504370][ T7348] _copy_to_user+0x31/0xb0 [ 298.504401][ T7348] simple_read_from_buffer+0xe1/0x170 [ 298.504438][ T7348] proc_fail_nth_read+0x1b6/0x220 [ 298.504465][ T7348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.504491][ T7348] ? rw_verify_area+0x2ac/0x4e0 [ 298.504519][ T7348] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.504544][ T7348] vfs_read+0x206/0xa30 [ 298.504582][ T7348] ? __pfx_vfs_read+0x10/0x10 [ 298.504605][ T7348] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 298.504650][ T7348] ? mutex_lock_nested+0x154/0x1d0 [ 298.504676][ T7348] ? fdget_pos+0x253/0x320 [ 298.504719][ T7348] ksys_read+0x14b/0x260 [ 298.504750][ T7348] ? __pfx_ksys_read+0x10/0x10 [ 298.504777][ T7348] ? rcu_is_watching+0x15/0xb0 [ 298.504810][ T7348] ? trace_sys_enter+0x25/0x100 [ 298.504847][ T7348] do_syscall_64+0xfa/0x3b0 [ 298.504867][ T7348] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.504899][ T7348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.504922][ T7348] ? clear_bhb_loop+0x60/0xb0 [ 298.504948][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.504969][ T7348] RIP: 0033:0x7f48441cd63c [ 298.504987][ T7348] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.505005][ T7348] RSP: 002b:00007f4842436030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.505026][ T7348] RAX: ffffffffffffffda RBX: 00007f4844415fa0 RCX: 00007f48441cd63c [ 298.505041][ T7348] RDX: 000000000000000f RSI: 00007f48424360a0 RDI: 0000000000000005 [ 298.505054][ T7348] RBP: 00007f4842436090 R08: 0000000000000000 R09: 0000000000000000 [ 298.505068][ T7348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.505080][ T7348] R13: 00007f4844416038 R14: 00007f4844415fa0 R15: 00007ffe07906168 [ 298.505114][ T7348] [ 299.013382][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.237843][ T7354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.271535][ T7354] binder: 7353:7354 ioctl c0306201 2000000001c0 returned -22 [ 299.638559][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.766752][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.257828][ T31] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 301.333675][ T7376] FAULT_INJECTION: forcing a failure. [ 301.333675][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 301.333711][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.2.382 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 301.333738][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.333752][ T7376] Call Trace: [ 301.333761][ T7376] [ 301.333770][ T7376] dump_stack_lvl+0x189/0x250 [ 301.333808][ T7376] ? __pfx____ratelimit+0x10/0x10 [ 301.333843][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.333876][ T7376] ? __pfx__printk+0x10/0x10 [ 301.333907][ T7376] ? __pfx___might_resched+0x10/0x10 [ 301.333932][ T7376] ? fs_reclaim_acquire+0x7d/0x100 [ 301.333959][ T7376] should_fail_ex+0x46c/0x600 [ 301.333997][ T7376] should_failslab+0xa8/0x100 [ 301.334030][ T7376] __kmalloc_noprof+0xcb/0x430 [ 301.334059][ T7376] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 301.334098][ T7376] tomoyo_realpath_from_path+0xe3/0x5d0 [ 301.334133][ T7376] ? tomoyo_domain+0xda/0x130 [ 301.334172][ T7376] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 301.334200][ T7376] tomoyo_path_number_perm+0x1e8/0x5a0 [ 301.334230][ T7376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 301.334263][ T7376] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 301.334298][ T7376] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.334340][ T7376] ? __lock_acquire+0xab9/0xd20 [ 301.334394][ T7376] ? __fget_files+0x2a/0x420 [ 301.334438][ T7376] ? __fget_files+0x2a/0x420 [ 301.334468][ T7376] ? __fget_files+0x3a6/0x420 [ 301.334498][ T7376] ? __fget_files+0x2a/0x420 [ 301.334532][ T7376] security_file_ioctl+0xcb/0x2d0 [ 301.334563][ T7376] __se_sys_ioctl+0x47/0x170 [ 301.334590][ T7376] do_syscall_64+0xfa/0x3b0 [ 301.334609][ T7376] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.334642][ T7376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.334664][ T7376] ? clear_bhb_loop+0x60/0xb0 [ 301.334692][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.334713][ T7376] RIP: 0033:0x7fd91b21ec29 [ 301.334732][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.334751][ T7376] RSP: 002b:00007fd91947e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.334774][ T7376] RAX: ffffffffffffffda RBX: 00007fd91b465fa0 RCX: 00007fd91b21ec29 [ 301.334791][ T7376] RDX: 00002000000001c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 301.334805][ T7376] RBP: 00007fd91947e090 R08: 0000000000000000 R09: 0000000000000000 [ 301.334819][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.334833][ T7376] R13: 00007fd91b466038 R14: 00007fd91b465fa0 R15: 00007ffe89a97848 [ 301.334869][ T7376] [ 301.334878][ T7376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.474229][ T7378] 9pnet_fd: Insufficient options for proto=fd [ 301.497542][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.497612][ T31] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 301.497637][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.688557][ T31] usb 5-1: config 0 descriptor?? [ 301.727078][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 301.753555][ T7381] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.384'. [ 301.754923][ T7381] netlink: zone id is out of range [ 301.754958][ T7381] netlink: zone id is out of range [ 301.754984][ T7381] netlink: get zone limit has 8 unknown bytes [ 301.946797][ T6032] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 302.097384][ T6032] usb 4-1: Using ep0 maxpacket: 8 [ 302.101046][ T6032] usb 4-1: config index 0 descriptor too short (expected 1821, got 853) [ 302.101079][ T6032] usb 4-1: config 0 has an invalid interface number: 103 but max is 2 [ 302.101112][ T6032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.101134][ T6032] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 302.101156][ T6032] usb 4-1: config 0 has no interface number 1 [ 302.101220][ T6032] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 302.101251][ T6032] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 302.101286][ T6032] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 302.101378][ T6032] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 302.101406][ T6032] usb 4-1: config 0 interface 103 has no altsetting 0 [ 302.151470][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 302.189019][ T6032] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 302.189057][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.189081][ T6032] usb 4-1: Product: syz [ 302.189100][ T6032] usb 4-1: Manufacturer: syz [ 302.189118][ T6032] usb 4-1: SerialNumber: syz [ 302.208069][ T6032] usb 4-1: config 0 descriptor?? [ 302.336735][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 302.396270][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.426236][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 302.429928][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 302.434358][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 302.459415][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 302.460529][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 302.461461][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 302.467116][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 302.478050][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 302.500270][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 302.708726][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.710217][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.711179][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.718643][ T7378] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 302.735854][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.798528][ T31] pwc: Registered as video103. [ 302.802284][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 302.840944][ T31] usb 5-1: USB disconnect, device number 14 [ 302.842523][ T6032] videodev: could not get a free minor [ 302.842536][ T6032] dsbr100 4-1:0.103: couldn't register video device [ 302.842788][ T6032] dsbr100 4-1:0.103: probe with driver dsbr100 failed with error -23 [ 302.843743][ T7389] Driver unsupported XDP return value 0 on prog (id 95) dev N/A, expect packet loss! [ 303.075880][ T6023] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 303.126069][ T6032] usb 4-1: USB disconnect, device number 17 [ 303.232746][ T6023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 303.244864][ T6023] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 303.244905][ T6023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.244930][ T6023] usb 2-1: Product: syz [ 303.244946][ T6023] usb 2-1: Manufacturer: syz [ 303.244965][ T6023] usb 2-1: SerialNumber: syz [ 303.368833][ T6023] usb 2-1: config 0 descriptor?? [ 304.722317][ T6023] usb 2-1: USB disconnect, device number 5 [ 305.587176][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 305.738115][ T7419] FAULT_INJECTION: forcing a failure. [ 305.738115][ T7419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.738153][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.738180][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.738194][ T7419] Call Trace: [ 305.738202][ T7419] [ 305.738211][ T7419] dump_stack_lvl+0x189/0x250 [ 305.738249][ T7419] ? __pfx____ratelimit+0x10/0x10 [ 305.738283][ T7419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.738316][ T7419] ? __pfx__printk+0x10/0x10 [ 305.738342][ T7419] ? __might_fault+0xb0/0x130 [ 305.738388][ T7419] should_fail_ex+0x46c/0x600 [ 305.738427][ T7419] _copy_from_user+0x2d/0xb0 [ 305.738457][ T7419] __sys_bpf+0x1ed/0x870 [ 305.738487][ T7419] ? __pfx___sys_bpf+0x10/0x10 [ 305.738530][ T7419] ? ksys_write+0x230/0x260 [ 305.738562][ T7419] ? __pfx_ksys_write+0x10/0x10 [ 305.738587][ T7419] ? rcu_is_watching+0x15/0xb0 [ 305.738631][ T7419] __x64_sys_bpf+0x7c/0x90 [ 305.738657][ T7419] do_syscall_64+0xfa/0x3b0 [ 305.738677][ T7419] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.738710][ T7419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.738733][ T7419] ? clear_bhb_loop+0x60/0xb0 [ 305.738760][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.738782][ T7419] RIP: 0033:0x7fd54595ec29 [ 305.738801][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.738821][ T7419] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.738843][ T7419] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 305.738861][ T7419] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 305.738875][ T7419] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.738889][ T7419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.738902][ T7419] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 305.738938][ T7419] [ 307.985406][ T5844] Bluetooth: hci4: unexpected cc 0x203c length: 9 > 1 [ 307.985458][ T5844] Bluetooth: hci4: unexpected event for opcode 0x203c [ 309.889654][ T6032] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 310.132373][ T6032] usb 3-1: Using ep0 maxpacket: 32 [ 310.272087][ T6032] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 310.272446][ T6032] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 310.273782][ T6032] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 310.273873][ T6032] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 310.273934][ T6032] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.558432][ T6032] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 310.558526][ T6032] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 310.558579][ T6032] usb 3-1: Product: syz [ 310.558624][ T6032] usb 3-1: Manufacturer: syz [ 310.558674][ T6032] usb 3-1: SerialNumber: syz [ 310.825610][ T6032] usb 3-1: config 0 descriptor?? [ 310.870725][ T6032] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 310.892414][ T6032] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 311.555918][ T5911] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 311.835882][ T37] audit: type=1326 audit(1758392239.374:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.835944][ T37] audit: type=1326 audit(1758392239.374:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.835993][ T37] audit: type=1326 audit(1758392239.374:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836042][ T37] audit: type=1326 audit(1758392239.374:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836090][ T37] audit: type=1326 audit(1758392239.374:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836138][ T37] audit: type=1326 audit(1758392239.374:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836187][ T37] audit: type=1326 audit(1758392239.374:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836236][ T37] audit: type=1326 audit(1758392239.374:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836284][ T37] audit: type=1326 audit(1758392239.374:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 311.836332][ T37] audit: type=1326 audit(1758392239.374:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.1.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48441cec29 code=0x7ffc0000 [ 312.857730][ T5911] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 312.857762][ T5911] usb 5-1: config 5 has no interface number 0 [ 312.857839][ T5911] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 312.857870][ T5911] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x84 has invalid wMaxPacketSize 0 [ 312.857894][ T5911] usb 5-1: config 5 interface 123 has no altsetting 0 [ 312.861095][ T5911] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 312.861134][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.861156][ T5911] usb 5-1: Product: syz [ 312.861172][ T5911] usb 5-1: Manufacturer: syz [ 312.861187][ T5911] usb 5-1: SerialNumber: syz [ 312.965957][ T10] usb 3-1: USB disconnect, device number 24 [ 312.984342][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 313.153356][ T5911] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 313.229849][ T5911] usb 5-1: USB disconnect, device number 15 [ 315.144026][ T7490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.413'. [ 315.381545][ T7498] FAULT_INJECTION: forcing a failure. [ 315.381545][ T7498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.381583][ T7498] CPU: 0 UID: 0 PID: 7498 Comm: syz.4.416 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 315.381609][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.381622][ T7498] Call Trace: [ 315.381630][ T7498] [ 315.381640][ T7498] dump_stack_lvl+0x189/0x250 [ 315.381679][ T7498] ? __pfx____ratelimit+0x10/0x10 [ 315.381713][ T7498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.381746][ T7498] ? __pfx__printk+0x10/0x10 [ 315.381771][ T7498] ? __might_fault+0xb0/0x130 [ 315.381816][ T7498] should_fail_ex+0x46c/0x600 [ 315.381855][ T7498] _copy_from_user+0x2d/0xb0 [ 315.381883][ T7498] __sys_sendto+0x262/0x520 [ 315.381920][ T7498] ? __pfx___sys_sendto+0x10/0x10 [ 315.381983][ T7498] ? ksys_write+0x230/0x260 [ 315.382013][ T7498] ? __pfx_ksys_write+0x10/0x10 [ 315.382038][ T7498] ? rcu_is_watching+0x15/0xb0 [ 315.382086][ T7498] __x64_sys_sendto+0xde/0x100 [ 315.382124][ T7498] do_syscall_64+0xfa/0x3b0 [ 315.382144][ T7498] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.382177][ T7498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.382199][ T7498] ? clear_bhb_loop+0x60/0xb0 [ 315.382226][ T7498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.382248][ T7498] RIP: 0033:0x7fc65d65ec29 [ 315.382267][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.382285][ T7498] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 315.382308][ T7498] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 315.382324][ T7498] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000003 [ 315.382338][ T7498] RBP: 00007fc65b8c6090 R08: 0000200000000180 R09: 000000000000001c [ 315.382352][ T7498] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 315.382366][ T7498] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 315.382401][ T7498] [ 317.279680][ T7520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.424'. [ 319.164528][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.164965][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.197026][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.197477][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.198915][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.199361][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.200617][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.201064][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.202444][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.202892][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.280422][ T7534] comedi comedi0: pcmda12: I/O port conflict (0x5,16) [ 319.286214][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 319.340895][ T7535] FAULT_INJECTION: forcing a failure. [ 319.340895][ T7535] name failslab, interval 1, probability 0, space 0, times 0 [ 319.340931][ T7535] CPU: 1 UID: 0 PID: 7535 Comm: syz.2.427 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 319.340957][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.340971][ T7535] Call Trace: [ 319.340979][ T7535] [ 319.340989][ T7535] dump_stack_lvl+0x189/0x250 [ 319.341027][ T7535] ? __pfx____ratelimit+0x10/0x10 [ 319.341073][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.341104][ T7535] ? __pfx__printk+0x10/0x10 [ 319.341135][ T7535] ? __pfx___might_resched+0x10/0x10 [ 319.341159][ T7535] ? fs_reclaim_acquire+0x7d/0x100 [ 319.341185][ T7535] should_fail_ex+0x46c/0x600 [ 319.341223][ T7535] should_failslab+0xa8/0x100 [ 319.341254][ T7535] __kmalloc_cache_noprof+0x6e/0x320 [ 319.341284][ T7535] ? do_mq_timedreceive+0x3bf/0xb00 [ 319.341318][ T7535] do_mq_timedreceive+0x3bf/0xb00 [ 319.341358][ T7535] ? __pfx_do_mq_timedreceive+0x10/0x10 [ 319.341384][ T7535] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 319.341414][ T7535] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 319.341459][ T7535] __x64_sys_mq_timedreceive+0x172/0x210 [ 319.341490][ T7535] ? __pfx___x64_sys_mq_timedreceive+0x10/0x10 [ 319.341514][ T7535] ? rcu_is_watching+0x15/0xb0 [ 319.341553][ T7535] ? do_syscall_64+0xbe/0x3b0 [ 319.341578][ T7535] do_syscall_64+0xfa/0x3b0 [ 319.341596][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.341628][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.341650][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 319.341677][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.341698][ T7535] RIP: 0033:0x7fd91b21ec29 [ 319.341717][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.341737][ T7535] RSP: 002b:00007fd91947e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 319.341760][ T7535] RAX: ffffffffffffffda RBX: 00007fd91b465fa0 RCX: 00007fd91b21ec29 [ 319.341777][ T7535] RDX: 000000000000005a RSI: 0000200000000100 RDI: 0000000000000005 [ 319.341791][ T7535] RBP: 00007fd91947e090 R08: 0000000000000000 R09: 0000000000000000 [ 319.341804][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.341814][ T7535] R13: 00007fd91b466038 R14: 00007fd91b465fa0 R15: 00007ffe89a97848 [ 319.341845][ T7535] [ 319.489015][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.489046][ T5911] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 319.489074][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.516426][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 319.516460][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.516483][ T5911] usb 4-1: Product: syz [ 319.516501][ T5911] usb 4-1: Manufacturer: syz [ 319.516519][ T5911] usb 4-1: SerialNumber: syz [ 319.558562][ T5911] hub 4-1:1.0: bad descriptor, ignoring hub [ 319.558612][ T5911] hub 4-1:1.0: probe with driver hub failed with error -5 [ 319.993378][ T5911] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 320.033337][ T5911] usb 4-1: USB disconnect, device number 18 [ 320.041105][ T5911] usblp0: removed [ 320.080234][ T7549] FAULT_INJECTION: forcing a failure. [ 320.080234][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 320.080272][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.0.431 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 320.080298][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.080312][ T7549] Call Trace: [ 320.080320][ T7549] [ 320.080330][ T7549] dump_stack_lvl+0x189/0x250 [ 320.080368][ T7549] ? __pfx____ratelimit+0x10/0x10 [ 320.080403][ T7549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.080436][ T7549] ? __pfx__printk+0x10/0x10 [ 320.080466][ T7549] ? __pfx___might_resched+0x10/0x10 [ 320.080491][ T7549] ? fs_reclaim_acquire+0x7d/0x100 [ 320.080517][ T7549] should_fail_ex+0x46c/0x600 [ 320.080556][ T7549] should_failslab+0xa8/0x100 [ 320.080589][ T7549] __kmalloc_noprof+0xcb/0x430 [ 320.080616][ T7549] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.080655][ T7549] tomoyo_realpath_from_path+0xe3/0x5d0 [ 320.080686][ T7549] ? tomoyo_domain+0xda/0x130 [ 320.080717][ T7549] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 320.080739][ T7549] tomoyo_path_number_perm+0x1e8/0x5a0 [ 320.080770][ T7549] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.080802][ T7549] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 320.080837][ T7549] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.080880][ T7549] ? __lock_acquire+0xab9/0xd20 [ 320.080963][ T7549] ? __fget_files+0x2a/0x420 [ 320.080999][ T7549] ? __fget_files+0x2a/0x420 [ 320.081029][ T7549] ? __fget_files+0x3a6/0x420 [ 320.081058][ T7549] ? __fget_files+0x2a/0x420 [ 320.081095][ T7549] security_file_ioctl+0xcb/0x2d0 [ 320.081127][ T7549] __se_sys_ioctl+0x47/0x170 [ 320.081155][ T7549] do_syscall_64+0xfa/0x3b0 [ 320.081175][ T7549] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.081207][ T7549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.081229][ T7549] ? clear_bhb_loop+0x60/0xb0 [ 320.081256][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.081277][ T7549] RIP: 0033:0x7fc55138ec29 [ 320.081296][ T7549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.081316][ T7549] RSP: 002b:00007fc54f5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.081339][ T7549] RAX: ffffffffffffffda RBX: 00007fc5515d6090 RCX: 00007fc55138ec29 [ 320.081355][ T7549] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 320.081370][ T7549] RBP: 00007fc54f5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 320.081384][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.081397][ T7549] R13: 00007fc5515d6128 R14: 00007fc5515d6090 R15: 00007ffd9c95f0f8 [ 320.081433][ T7549] [ 320.081442][ T7549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.225830][ T5904] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 320.395834][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 320.446616][ T5904] usb 5-1: config index 0 descriptor too short (expected 22052, got 36) [ 320.446648][ T5904] usb 5-1: config 204 has too many interfaces: 244, using maximum allowed: 32 [ 320.446670][ T5904] usb 5-1: config 204 has an invalid descriptor of length 233, skipping remainder of the config [ 320.446692][ T5904] usb 5-1: config 204 has 0 interfaces, different from the descriptor's value: 244 [ 320.451774][ T5904] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 320.451806][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.451827][ T5904] usb 5-1: Product: syz [ 320.451843][ T5904] usb 5-1: Manufacturer: syz [ 320.451860][ T5904] usb 5-1: SerialNumber: syz [ 320.705417][ T7560] FAULT_INJECTION: forcing a failure. [ 320.705417][ T7560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.705454][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 320.705480][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.705494][ T7560] Call Trace: [ 320.705503][ T7560] [ 320.705512][ T7560] dump_stack_lvl+0x189/0x250 [ 320.705551][ T7560] ? __pfx____ratelimit+0x10/0x10 [ 320.705588][ T7560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.705621][ T7560] ? __pfx__printk+0x10/0x10 [ 320.705660][ T7560] should_fail_ex+0x46c/0x600 [ 320.705704][ T7560] _copy_to_user+0x31/0xb0 [ 320.705735][ T7560] simple_read_from_buffer+0xe1/0x170 [ 320.705772][ T7560] proc_fail_nth_read+0x1b6/0x220 [ 320.705800][ T7560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.705825][ T7560] ? rw_verify_area+0x2ac/0x4e0 [ 320.705851][ T7560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.705875][ T7560] vfs_read+0x206/0xa30 [ 320.705921][ T7560] ? __pfx_vfs_read+0x10/0x10 [ 320.705945][ T7560] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 320.705984][ T7560] ? mutex_lock_nested+0x154/0x1d0 [ 320.706009][ T7560] ? fdget_pos+0x253/0x320 [ 320.706053][ T7560] ksys_read+0x14b/0x260 [ 320.706079][ T7560] ? __fget_files+0x3a6/0x420 [ 320.706113][ T7560] ? __pfx_ksys_read+0x10/0x10 [ 320.706148][ T7560] ? do_syscall_64+0xbe/0x3b0 [ 320.706175][ T7560] do_syscall_64+0xfa/0x3b0 [ 320.706195][ T7560] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.706228][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.706250][ T7560] ? clear_bhb_loop+0x60/0xb0 [ 320.706278][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.706299][ T7560] RIP: 0033:0x7fd91b21d63c [ 320.706318][ T7560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 320.706337][ T7560] RSP: 002b:00007fd91945d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.706361][ T7560] RAX: ffffffffffffffda RBX: 00007fd91b466090 RCX: 00007fd91b21d63c [ 320.706378][ T7560] RDX: 000000000000000f RSI: 00007fd91945d0a0 RDI: 0000000000000006 [ 320.706392][ T7560] RBP: 00007fd91945d090 R08: 0000000000000000 R09: 0000000000000000 [ 320.706406][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.706419][ T7560] R13: 00007fd91b466128 R14: 00007fd91b466090 R15: 00007ffe89a97848 [ 320.706456][ T7560] [ 321.048636][ T7546] netlink: 104 bytes leftover after parsing attributes in process `syz.4.430'. [ 321.111163][ T5904] usb 5-1: USB disconnect, device number 16 [ 321.228585][ T7546] team0: Port device vxlan0 added [ 321.231720][ T3198] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.259664][ T3198] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.259721][ T3198] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.259762][ T3198] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.555958][ T6029] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 321.609324][ T7570] Invalid ELF header magic: != ELF [ 321.728923][ T6029] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.730359][ T6029] usb 4-1: config 7 has an invalid interface number: 112 but max is 0 [ 321.730379][ T6029] usb 4-1: config 7 has no interface number 0 [ 321.730417][ T6029] usb 4-1: config 7 interface 112 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 321.730435][ T6029] usb 4-1: config 7 interface 112 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 321.733874][ T6029] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=d0.57 [ 321.733894][ T6029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.733909][ T6029] usb 4-1: Product: syz [ 321.733919][ T6029] usb 4-1: Manufacturer: syz [ 321.733930][ T6029] usb 4-1: SerialNumber: syz [ 321.847895][ T7568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 321.849404][ T7568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 322.001482][ T7577] FAULT_INJECTION: forcing a failure. [ 322.001482][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.001520][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 322.001541][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.001551][ T7577] Call Trace: [ 322.001557][ T7577] [ 322.001567][ T7577] dump_stack_lvl+0x189/0x250 [ 322.001618][ T7577] ? __pfx____ratelimit+0x10/0x10 [ 322.001653][ T7577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.001685][ T7577] ? __pfx__printk+0x10/0x10 [ 322.001707][ T7577] ? __might_fault+0xb0/0x130 [ 322.001743][ T7577] should_fail_ex+0x46c/0x600 [ 322.001780][ T7577] _copy_from_user+0x2d/0xb0 [ 322.001810][ T7577] ___sys_sendmsg+0x158/0x2a0 [ 322.001837][ T7577] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.001897][ T7577] ? __fget_files+0x2a/0x420 [ 322.001919][ T7577] ? __fget_files+0x3a6/0x420 [ 322.001961][ T7577] __x64_sys_sendmsg+0x1a1/0x260 [ 322.001988][ T7577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.002021][ T7577] ? __pfx_ksys_write+0x10/0x10 [ 322.002054][ T7577] ? rcu_is_watching+0x15/0xb0 [ 322.002088][ T7577] ? do_syscall_64+0xbe/0x3b0 [ 322.002106][ T7577] do_syscall_64+0xfa/0x3b0 [ 322.002127][ T7577] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.002159][ T7577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.002182][ T7577] ? clear_bhb_loop+0x60/0xb0 [ 322.002208][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.002228][ T7577] RIP: 0033:0x7fd91b21ec29 [ 322.002248][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.002261][ T7577] RSP: 002b:00007fd91947e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.002277][ T7577] RAX: ffffffffffffffda RBX: 00007fd91b465fa0 RCX: 00007fd91b21ec29 [ 322.002292][ T7577] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 322.002306][ T7577] RBP: 00007fd91947e090 R08: 0000000000000000 R09: 0000000000000000 [ 322.002321][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.002334][ T7577] R13: 00007fd91b466038 R14: 00007fd91b465fa0 R15: 00007ffe89a97848 [ 322.002369][ T7577] [ 322.316646][ T6029] pn533_usb 4-1:7.112: NFC: Could not find bulk-in or bulk-out endpoint [ 322.377131][ T6029] usb 4-1: USB disconnect, device number 19 [ 322.596835][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.442'. [ 322.899774][ T7579] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 322.899799][ T7579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.440'. [ 322.903636][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.903716][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.242856][ T7585] FAULT_INJECTION: forcing a failure. [ 323.242856][ T7585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.242893][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.4.443 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.242919][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.242932][ T7585] Call Trace: [ 323.242940][ T7585] [ 323.242949][ T7585] dump_stack_lvl+0x189/0x250 [ 323.242986][ T7585] ? __pfx____ratelimit+0x10/0x10 [ 323.243019][ T7585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.243048][ T7585] ? __pfx__printk+0x10/0x10 [ 323.243086][ T7585] should_fail_ex+0x46c/0x600 [ 323.243122][ T7585] strncpy_from_user+0x36/0x290 [ 323.243157][ T7585] __se_sys_request_key+0xa2/0x340 [ 323.243183][ T7585] ? ksys_write+0x230/0x260 [ 323.243211][ T7585] ? __pfx___se_sys_request_key+0x10/0x10 [ 323.243247][ T7585] ? do_syscall_64+0xbe/0x3b0 [ 323.243272][ T7585] do_syscall_64+0xfa/0x3b0 [ 323.243292][ T7585] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.243325][ T7585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.243347][ T7585] ? clear_bhb_loop+0x60/0xb0 [ 323.243374][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.243396][ T7585] RIP: 0033:0x7fc65d65ec29 [ 323.243414][ T7585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.243433][ T7585] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 323.243457][ T7585] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 323.243472][ T7585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.243484][ T7585] RBP: 00007fc65b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.243497][ T7585] R10: fffffffffffffffc R11: 0000000000000246 R12: 0000000000000001 [ 323.243510][ T7585] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 323.243545][ T7585] [ 324.181901][ T7600] FAULT_INJECTION: forcing a failure. [ 324.181901][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 324.181940][ T7600] CPU: 0 UID: 0 PID: 7600 Comm: syz.4.448 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 324.181966][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.181979][ T7600] Call Trace: [ 324.181988][ T7600] [ 324.181997][ T7600] dump_stack_lvl+0x189/0x250 [ 324.182037][ T7600] ? __pfx____ratelimit+0x10/0x10 [ 324.182072][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.182105][ T7600] ? __pfx__printk+0x10/0x10 [ 324.182137][ T7600] ? __pfx___might_resched+0x10/0x10 [ 324.182163][ T7600] ? fs_reclaim_acquire+0x7d/0x100 [ 324.182190][ T7600] should_fail_ex+0x46c/0x600 [ 324.182229][ T7600] should_failslab+0xa8/0x100 [ 324.182262][ T7600] __kmalloc_noprof+0xcb/0x430 [ 324.182291][ T7600] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 324.182330][ T7600] tomoyo_realpath_from_path+0xe3/0x5d0 [ 324.182366][ T7600] ? tomoyo_domain+0xda/0x130 [ 324.182405][ T7600] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 324.182433][ T7600] tomoyo_path_number_perm+0x1e8/0x5a0 [ 324.182464][ T7600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.182497][ T7600] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 324.182532][ T7600] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.182565][ T7600] ? __lock_acquire+0xab9/0xd20 [ 324.182601][ T7600] ? __fget_files+0x2a/0x420 [ 324.182626][ T7600] ? __fget_files+0x2a/0x420 [ 324.182647][ T7600] ? __fget_files+0x3a6/0x420 [ 324.182675][ T7600] ? __fget_files+0x2a/0x420 [ 324.182700][ T7600] security_file_ioctl+0xcb/0x2d0 [ 324.182721][ T7600] __se_sys_ioctl+0x47/0x170 [ 324.182742][ T7600] do_syscall_64+0xfa/0x3b0 [ 324.182756][ T7600] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.182779][ T7600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.182794][ T7600] ? clear_bhb_loop+0x60/0xb0 [ 324.182813][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.182828][ T7600] RIP: 0033:0x7fc65d65ec29 [ 324.182842][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.182856][ T7600] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.182872][ T7600] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 324.182883][ T7600] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000005 [ 324.182893][ T7600] RBP: 00007fc65b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.182903][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.182912][ T7600] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 324.182936][ T7600] [ 324.463630][ T7600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.646401][ T7600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.751246][ T7600] bond0: (slave rose0): Enslaving as an active interface with an up link [ 326.367640][ T6513] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 326.530508][ T6513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.530544][ T6513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.530588][ T6513] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 326.530614][ T6513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.732860][ T6513] usb 1-1: config 0 descriptor?? [ 326.957436][ T7639] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7639] [ 327.235902][ T6032] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 327.241539][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 327.298310][ T6513] hid_parser_main: 5 callbacks suppressed [ 327.298337][ T6513] isku 0003:1E7D:319C.0004: unknown main item tag 0x0 [ 327.298370][ T6513] isku 0003:1E7D:319C.0004: unknown main item tag 0x0 [ 327.336754][ T6513] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 327.423234][ T6032] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 327.423265][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.516523][ T6032] usb 2-1: config 0 descriptor?? [ 327.551953][ T6032] cp210x 2-1:0.0: cp210x converter detected [ 328.206649][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.207116][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.208585][ T6032] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 328.446550][ T7642] netlink: 140 bytes leftover after parsing attributes in process `syz.1.457'. [ 328.461836][ T6032] usb 2-1: cp210x converter now attached to ttyUSB0 [ 328.654161][ T6032] usb 2-1: USB disconnect, device number 6 [ 328.669706][ T6032] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 328.991070][ T6032] cp210x 2-1:0.0: device disconnected [ 329.581032][ T6032] usb 1-1: USB disconnect, device number 8 [ 329.986107][ T5924] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 330.135872][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 330.138378][ T5924] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 330.138405][ T5924] usb 5-1: config 0 has no interface number 0 [ 330.141717][ T5924] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 330.141747][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.141769][ T5924] usb 5-1: Product: syz [ 330.141786][ T5924] usb 5-1: Manufacturer: syz [ 330.141802][ T5924] usb 5-1: SerialNumber: syz [ 330.251617][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.345233][ T6513] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 330.495462][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.639714][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.678063][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.315335][ T5924] usb 5-1: config 0 descriptor?? [ 331.344327][ T5924] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 331.490872][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.579397][ T5924] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 331.636587][ T5924] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 331.804857][ T6513] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 331.804888][ T6513] usb 1-1: config 0 has no interface number 0 [ 331.804939][ T6513] usb 1-1: config 0 interface 130 altsetting 0 endpoint 0x5 has invalid maxpacket 1007, setting to 64 [ 331.804987][ T6513] usb 1-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=c7.5f [ 331.805020][ T6513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.874100][ T6513] usb 1-1: config 0 descriptor?? [ 331.985320][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 331.993691][ T5924] usb 5-1: USB disconnect, device number 17 [ 332.022410][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 332.034321][ T6513] keyspan 1-1:0.130: Keyspan 1 port adapter converter detected [ 332.034643][ T6513] keyspan 1-1:0.130: found no endpoint descriptor for endpoint 87 [ 332.034732][ T6513] keyspan 1-1:0.130: found no endpoint descriptor for endpoint 7 [ 332.082048][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 332.082798][ T5924] quatech2 5-1:0.51: device disconnected [ 332.110089][ T6513] keyspan 1-1:0.130: found no endpoint descriptor for endpoint 81 [ 332.110197][ T6513] keyspan 1-1:0.130: found no endpoint descriptor for endpoint 1 [ 332.110286][ T6513] keyspan 1-1:0.130: unsupported endpoint type 0 [ 332.110373][ T6513] keyspan 1-1:0.130: found no endpoint descriptor for endpoint 85 [ 332.110460][ T6513] keyspan 1-1:0.130: unsupported endpoint type 0 [ 332.158519][ T6513] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 332.235115][ T6513] usb 1-1: USB disconnect, device number 9 [ 332.326625][ T6513] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 332.327075][ T6513] keyspan 1-1:0.130: device disconnected [ 332.649883][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.021020][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 333.889873][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.673194][ T7703] comedi comedi0: reset error (fatal) [ 338.392387][ T7732] FAULT_INJECTION: forcing a failure. [ 338.392387][ T7732] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.392536][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 338.392563][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.392577][ T7732] Call Trace: [ 338.392586][ T7732] [ 338.392596][ T7732] dump_stack_lvl+0x189/0x250 [ 338.392635][ T7732] ? __pfx____ratelimit+0x10/0x10 [ 338.392670][ T7732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.392704][ T7732] ? __pfx__printk+0x10/0x10 [ 338.392731][ T7732] ? fs_reclaim_acquire+0x7d/0x100 [ 338.392763][ T7732] should_fail_ex+0x46c/0x600 [ 338.392802][ T7732] prepare_alloc_pages+0x213/0x670 [ 338.392834][ T7732] __alloc_frozen_pages_noprof+0x123/0x370 [ 338.392863][ T7732] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.392897][ T7732] ? policy_nodemask+0x27c/0x720 [ 338.392934][ T7732] alloc_pages_mpol+0xd1/0x380 [ 338.392970][ T7732] vma_alloc_folio_noprof+0xe4/0x280 [ 338.393011][ T7732] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 338.393058][ T7732] folio_prealloc+0x30/0x180 [ 338.393081][ T7732] handle_mm_fault+0x12ee/0x3400 [ 338.393114][ T7732] ? reacquire_held_locks+0x127/0x1d0 [ 338.393158][ T7732] ? handle_mm_fault+0xdb/0x3400 [ 338.393199][ T7732] ? __pfx_handle_mm_fault+0x10/0x10 [ 338.393229][ T7732] ? lock_vma_under_rcu+0x35a/0x3d0 [ 338.393253][ T7732] ? lock_vma_under_rcu+0xdf/0x3d0 [ 338.393294][ T7732] ? do_user_addr_fault+0x1a8/0x1390 [ 338.393327][ T7732] do_user_addr_fault+0xa81/0x1390 [ 338.393363][ T7732] ? rcu_is_watching+0x15/0xb0 [ 338.393397][ T7732] ? trace_page_fault_user+0x84/0x1e0 [ 338.393428][ T7732] exc_page_fault+0x76/0xf0 [ 338.393471][ T7732] asm_exc_page_fault+0x26/0x30 [ 338.393493][ T7732] RIP: 0033:0x7fc65d52a60b [ 338.393513][ T7732] Code: 00 00 00 48 8d 3d dd 39 19 00 48 89 c1 31 c0 e8 4b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 338.393532][ T7732] RSP: 002b:00007fc65b8a3fb0 EFLAGS: 00010202 [ 338.393553][ T7732] RAX: 0000000000000000 RBX: 00007fc65d8a6090 RCX: 0000000000000000 [ 338.393568][ T7732] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000140 [ 338.393582][ T7732] RBP: 00007fc65b8a5090 R08: 0000000000000000 R09: 0000000000000000 [ 338.393596][ T7732] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000001 [ 338.393610][ T7732] R13: 00007fc65d8a6128 R14: 00007fc65d8a6090 R15: 00007ffd1c6ee068 [ 338.393646][ T7732] [ 338.394138][ T7732] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 340.228536][ T7747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 340.455855][ T6032] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 340.576171][ T7754] program syz.0.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.756213][ T6032] usb 4-1: Using ep0 maxpacket: 32 [ 340.875377][ T6032] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 340.875457][ T6032] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 340.875517][ T6032] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.337649][ T6032] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 341.337684][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 341.337707][ T6032] usb 4-1: Product: syz [ 341.337723][ T6032] usb 4-1: Manufacturer: syz [ 341.337737][ T6032] usb 4-1: SerialNumber: syz [ 341.391522][ T7755] IPv6: addrconf: prefix option has invalid lifetime [ 341.444003][ T6032] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 341.918844][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.442985][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.798421][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.016718][ T5911] usb 4-1: USB disconnect, device number 20 [ 343.016819][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 351.662019][ T5911] appletouch 4-1:1.0: input: appletouch disconnected [ 351.862777][ T7774] IPVS: set_ctl: invalid protocol: 255 172.30.1.5:20002 [ 351.875082][ T7776] FAULT_INJECTION: forcing a failure. [ 351.875082][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 351.875229][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.3.495 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 351.875256][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.875271][ T7776] Call Trace: [ 351.875281][ T7776] [ 351.875290][ T7776] dump_stack_lvl+0x189/0x250 [ 351.875329][ T7776] ? __pfx____ratelimit+0x10/0x10 [ 351.875364][ T7776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.875398][ T7776] ? __pfx__printk+0x10/0x10 [ 351.875439][ T7776] ? __pfx___might_resched+0x10/0x10 [ 351.875468][ T7776] ? fs_reclaim_acquire+0x7d/0x100 [ 351.875495][ T7776] should_fail_ex+0x46c/0x600 [ 351.875533][ T7776] ? __alloc_skb+0x112/0x2d0 [ 351.875562][ T7776] should_failslab+0xa8/0x100 [ 351.875594][ T7776] ? __alloc_skb+0x112/0x2d0 [ 351.875624][ T7776] kmem_cache_alloc_node_noprof+0x77/0x330 [ 351.875663][ T7776] __alloc_skb+0x112/0x2d0 [ 351.875698][ T7776] netlink_sendmsg+0x5c6/0xb30 [ 351.875731][ T7776] ? _parse_integer_limit+0x1a9/0x1f0 [ 351.875776][ T7776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.875817][ T7776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.875839][ T7776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.875873][ T7776] __sock_sendmsg+0x219/0x270 [ 351.875906][ T7776] sock_write_iter+0x25e/0x330 [ 351.875936][ T7776] ? __pfx_sock_write_iter+0x10/0x10 [ 351.875988][ T7776] vfs_write+0x5d5/0xb40 [ 351.876023][ T7776] ? __pfx_sock_write_iter+0x10/0x10 [ 351.876049][ T7776] ? __pfx_vfs_write+0x10/0x10 [ 351.876089][ T7776] ? __fget_files+0x2a/0x420 [ 351.876131][ T7776] ksys_write+0x14b/0x260 [ 351.876162][ T7776] ? __pfx_ksys_write+0x10/0x10 [ 351.876188][ T7776] ? rcu_is_watching+0x15/0xb0 [ 351.876227][ T7776] ? do_syscall_64+0xbe/0x3b0 [ 351.876254][ T7776] do_syscall_64+0xfa/0x3b0 [ 351.876277][ T7776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.876299][ T7776] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 351.876321][ T7776] ? clear_bhb_loop+0x60/0xb0 [ 351.876348][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.876371][ T7776] RIP: 0033:0x7fd54595ec29 [ 351.876390][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.876409][ T7776] RSP: 002b:00007fd543ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 351.876444][ T7776] RAX: ffffffffffffffda RBX: 00007fd545ba6090 RCX: 00007fd54595ec29 [ 351.876461][ T7776] RDX: 0000000000000029 RSI: 0000200000000100 RDI: 0000000000000005 [ 351.876476][ T7776] RBP: 00007fd543ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 351.876490][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.876504][ T7776] R13: 00007fd545ba6128 R14: 00007fd545ba6090 R15: 00007fff0c6964c8 [ 351.876539][ T7776] [ 352.631556][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 352.684166][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 352.685758][ T37] audit: type=1326 audit(1758392280.434:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.685814][ T37] audit: type=1326 audit(1758392280.434:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.686563][ T37] audit: type=1326 audit(1758392280.444:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.686613][ T37] audit: type=1326 audit(1758392280.444:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.686667][ T37] audit: type=1326 audit(1758392280.444:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.687667][ T37] audit: type=1326 audit(1758392280.444:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.687724][ T37] audit: type=1326 audit(1758392280.444:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.687778][ T37] audit: type=1326 audit(1758392280.444:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.688605][ T37] audit: type=1326 audit(1758392280.444:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.688660][ T37] audit: type=1326 audit(1758392280.444:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7780 comm="syz.2.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91b21ec29 code=0x7ffc0000 [ 352.747083][ T7775] veth1_macvtap: left promiscuous mode [ 354.135990][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 354.290225][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.500'. [ 354.318592][ T5911] usb 2-1: config index 0 descriptor too short (expected 9087, got 127) [ 354.318624][ T5911] usb 2-1: config 160 has too many interfaces: 181, using maximum allowed: 32 [ 354.318650][ T5911] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 354.318671][ T5911] usb 2-1: config 160 has 2 interfaces, different from the descriptor's value: 181 [ 354.318695][ T5911] usb 2-1: config 160 has no interface number 1 [ 354.318762][ T5911] usb 2-1: config 160 interface 2 altsetting 1 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 354.322302][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.322335][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.322357][ T5911] usb 2-1: Product: syz [ 354.322372][ T5911] usb 2-1: Manufacturer: syz [ 354.322387][ T5911] usb 2-1: SerialNumber: syz [ 354.406052][ T6032] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 354.561236][ T6032] usb 5-1: unable to get BOS descriptor set [ 354.582834][ T6032] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 354.616092][ T6032] usb 5-1: string descriptor 0 read error: -22 [ 354.616266][ T6032] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.616292][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.883491][ T7805] FAULT_INJECTION: forcing a failure. [ 354.883491][ T7805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.883567][ T7805] CPU: 1 UID: 0 PID: 7805 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.883597][ T7805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.883612][ T7805] Call Trace: [ 354.883622][ T7805] [ 354.883632][ T7805] dump_stack_lvl+0x189/0x250 [ 354.883674][ T7805] ? __pfx____ratelimit+0x10/0x10 [ 354.883710][ T7805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.883746][ T7805] ? __pfx__printk+0x10/0x10 [ 354.883787][ T7805] should_fail_ex+0x46c/0x600 [ 354.883828][ T7805] _copy_to_user+0x31/0xb0 [ 354.883858][ T7805] ? __pfx_virtio_read+0x10/0x10 [ 354.883885][ T7805] rng_dev_read+0x3ef/0x770 [ 354.883920][ T7805] ? __pfx_rng_dev_read+0x10/0x10 [ 354.883957][ T7805] ? rw_verify_area+0x2ac/0x4e0 [ 354.884005][ T7805] vfs_readv+0x5b0/0x850 [ 354.884042][ T7805] ? __pfx_rng_dev_read+0x10/0x10 [ 354.884075][ T7805] ? __pfx_vfs_readv+0x10/0x10 [ 354.884129][ T7805] ? __fget_files+0x2a/0x420 [ 354.884169][ T7805] ? __fget_files+0x3a6/0x420 [ 354.884201][ T7805] ? __fget_files+0x2a/0x420 [ 354.884244][ T7805] __x64_sys_preadv+0x19a/0x2a0 [ 354.884277][ T7805] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 354.884312][ T7805] ? __pfx___x64_sys_preadv+0x10/0x10 [ 354.884346][ T7805] ? rcu_is_watching+0x15/0xb0 [ 354.884381][ T7805] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 354.884411][ T7805] ? syscall_user_dispatch+0x4f/0x90 [ 354.884451][ T7805] do_syscall_64+0xfa/0x3b0 [ 354.884473][ T7805] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.884507][ T7805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.884531][ T7805] ? clear_bhb_loop+0x60/0xb0 [ 354.884560][ T7805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.884583][ T7805] RIP: 0033:0x7fc55138ec29 [ 354.884603][ T7805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.884624][ T7805] RSP: 002b:00007fc54f5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 354.884649][ T7805] RAX: ffffffffffffffda RBX: 00007fc5515d6090 RCX: 00007fc55138ec29 [ 354.884666][ T7805] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 354.884682][ T7805] RBP: 00007fc54f5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 354.884697][ T7805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.884711][ T7805] R13: 00007fc5515d6128 R14: 00007fc5515d6090 R15: 00007ffd9c95f0f8 [ 354.884748][ T7805] [ 355.477656][ T6513] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 355.628728][ T7793] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 355.693332][ T6513] usb 4-1: Using ep0 maxpacket: 32 [ 355.735094][ T6032] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 355.918856][ T6513] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 355.918879][ T6513] usb 4-1: config 0 has no interface number 0 [ 355.918915][ T6513] usb 4-1: config 0 interface 89 has no altsetting 0 [ 355.928456][ T6513] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 355.928490][ T6513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.928512][ T6513] usb 4-1: Product: syz [ 355.928527][ T6513] usb 4-1: Manufacturer: syz [ 355.928543][ T6513] usb 4-1: SerialNumber: syz [ 355.931732][ T5911] usb 2-1: unknown interface protocol 0xbc, assuming v1 [ 355.931793][ T5911] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 355.932006][ T5911] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 355.939294][ T6513] usb 4-1: config 0 descriptor?? [ 355.951249][ T6513] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 355.951289][ T6513] em28xx 4-1:0.89: Video interface 89 found: bulk [ 356.114811][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.182319][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.184562][ T1232] usb 5-1: USB disconnect, device number 18 [ 356.315423][ T5911] usb 2-1: USB disconnect, device number 7 [ 356.571952][ T6513] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 358.194305][ T6513] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 358.194340][ T6513] em28xx 4-1:0.89: board has no eeprom [ 358.286360][ T6513] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 358.286404][ T6513] em28xx 4-1:0.89: analog set to bulk mode. [ 358.291980][ T5911] em28xx 4-1:0.89: Registering V4L2 extension [ 358.345931][ T6513] usb 4-1: USB disconnect, device number 21 [ 358.368842][ T6513] em28xx 4-1:0.89: Disconnecting em28xx [ 358.538344][ T5911] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 358.538371][ T5911] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 358.538385][ T5911] em28xx 4-1:0.89: No AC97 audio processor [ 358.623399][ T5911] usb 4-1: Decoder not found [ 358.623421][ T5911] em28xx 4-1:0.89: failed to create media graph [ 358.623469][ T5911] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 358.661129][ T5911] em28xx 4-1:0.89: Registering snapshot button... [ 358.683765][ T5911] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input14 [ 358.721786][ T5911] em28xx 4-1:0.89: Remote control support is not available for this card. [ 358.747322][ T6513] em28xx 4-1:0.89: Closing input extension [ 358.748220][ T6513] em28xx 4-1:0.89: Deregistering snapshot button [ 359.052947][ T7845] FAULT_INJECTION: forcing a failure. [ 359.052947][ T7845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.053052][ T7845] CPU: 0 UID: 0 PID: 7845 Comm: syz.2.511 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 359.053079][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.053094][ T7845] Call Trace: [ 359.053102][ T7845] [ 359.053112][ T7845] dump_stack_lvl+0x189/0x250 [ 359.053150][ T7845] ? __pfx____ratelimit+0x10/0x10 [ 359.053185][ T7845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.053216][ T7845] ? __pfx__printk+0x10/0x10 [ 359.053237][ T7845] ? irqentry_exit+0x74/0x90 [ 359.053286][ T7845] should_fail_ex+0x46c/0x600 [ 359.053324][ T7845] _copy_from_user+0x2d/0xb0 [ 359.053353][ T7845] ___sys_sendmsg+0x158/0x2a0 [ 359.053380][ T7845] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.053399][ T7845] ? preempt_schedule_irq+0xde/0x150 [ 359.053436][ T7845] ? rcu_is_watching+0x15/0xb0 [ 359.053503][ T7845] ? __fget_files+0x2a/0x420 [ 359.053534][ T7845] ? __fget_files+0x3a6/0x420 [ 359.053577][ T7845] __x64_sys_sendmsg+0x1a1/0x260 [ 359.053601][ T7845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.053652][ T7845] do_syscall_64+0xfa/0x3b0 [ 359.053675][ T7845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.053697][ T7845] ? asm_sysvec_call_function_single+0x1a/0x20 [ 359.053719][ T7845] ? clear_bhb_loop+0x60/0xb0 [ 359.053747][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.053768][ T7845] RIP: 0033:0x7fd91b21ec29 [ 359.053787][ T7845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.053806][ T7845] RSP: 002b:00007fd91945d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.053830][ T7845] RAX: ffffffffffffffda RBX: 00007fd91b466090 RCX: 00007fd91b21ec29 [ 359.053847][ T7845] RDX: 00000000000040c0 RSI: 0000200000000280 RDI: 0000000000000005 [ 359.053862][ T7845] RBP: 00007fd91945d090 R08: 0000000000000000 R09: 0000000000000000 [ 359.053876][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.053897][ T7845] R13: 00007fd91b466128 R14: 00007fd91b466090 R15: 00007ffe89a97848 [ 359.053932][ T7845] [ 359.653699][ T6513] em28xx 4-1:0.89: Freeing device [ 359.719971][ T7842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 359.946218][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'. [ 359.987222][ T7842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 359.987245][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 360.063945][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 360.107845][ T7855] vhci_hcd: connection closed [ 360.205856][ T7326] vhci_hcd: stop threads [ 360.206649][ T7326] vhci_hcd: release socket [ 360.209019][ T7326] vhci_hcd: disconnect device [ 360.289817][ T5924] vhci_hcd: vhci_device speed not set [ 361.257152][ T7858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.746433][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.925220][ T7878] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 363.926309][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.391749][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.689572][ T7880] FAULT_INJECTION: forcing a failure. [ 364.689572][ T7880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.689601][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.4.521 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 364.689619][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.689628][ T7880] Call Trace: [ 364.689633][ T7880] [ 364.689640][ T7880] dump_stack_lvl+0x189/0x250 [ 364.689668][ T7880] ? __pfx____ratelimit+0x10/0x10 [ 364.689691][ T7880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.689713][ T7880] ? __pfx__printk+0x10/0x10 [ 364.689729][ T7880] ? __might_fault+0xb0/0x130 [ 364.689760][ T7880] should_fail_ex+0x46c/0x600 [ 364.689787][ T7880] _copy_from_user+0x2d/0xb0 [ 364.689806][ T7880] ___sys_sendmsg+0x158/0x2a0 [ 364.689827][ T7880] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.689885][ T7880] ? __fget_files+0x2a/0x420 [ 364.689915][ T7880] ? __fget_files+0x3a6/0x420 [ 364.689956][ T7880] __x64_sys_sendmsg+0x1a1/0x260 [ 364.689981][ T7880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.690013][ T7880] ? __pfx_ksys_write+0x10/0x10 [ 364.690032][ T7880] ? rcu_is_watching+0x15/0xb0 [ 364.690060][ T7880] ? do_syscall_64+0xbe/0x3b0 [ 364.690096][ T7880] do_syscall_64+0xfa/0x3b0 [ 364.690110][ T7880] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.690137][ T7880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.690155][ T7880] ? clear_bhb_loop+0x60/0xb0 [ 364.690175][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.690190][ T7880] RIP: 0033:0x7fc65d65ec29 [ 364.690204][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.690217][ T7880] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.690234][ T7880] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 364.690245][ T7880] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 364.690255][ T7880] RBP: 00007fc65b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.690264][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.690274][ T7880] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 364.690297][ T7880] [ 365.327552][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.471113][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.515344][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.558975][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.691151][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.780398][ T7890] overlayfs: upper fs does not support file handles, falling back to index=off. [ 365.780418][ T7890] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 365.780435][ T7890] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 365.780733][ T7890] overlayfs: conflicting lowerdir path [ 369.367965][ T7913] syz.3.531 (7913) used greatest stack depth: 15480 bytes left [ 370.040928][ T7928] overlayfs: missing 'lowerdir' [ 371.153618][ T7938] FAULT_INJECTION: forcing a failure. [ 371.153618][ T7938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.153679][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.1.538 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.153705][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.153724][ T7938] Call Trace: [ 371.153733][ T7938] [ 371.153742][ T7938] dump_stack_lvl+0x189/0x250 [ 371.153781][ T7938] ? __pfx____ratelimit+0x10/0x10 [ 371.153815][ T7938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.153848][ T7938] ? __pfx__printk+0x10/0x10 [ 371.153889][ T7938] should_fail_ex+0x46c/0x600 [ 371.153928][ T7938] _copy_to_user+0x31/0xb0 [ 371.153959][ T7938] simple_read_from_buffer+0xe1/0x170 [ 371.153996][ T7938] proc_fail_nth_read+0x1b6/0x220 [ 371.154023][ T7938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.154050][ T7938] ? rw_verify_area+0x2ac/0x4e0 [ 371.154077][ T7938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.154102][ T7938] vfs_read+0x206/0xa30 [ 371.154140][ T7938] ? __pfx_vfs_read+0x10/0x10 [ 371.154164][ T7938] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 371.154202][ T7938] ? mutex_lock_nested+0x154/0x1d0 [ 371.154228][ T7938] ? fdget_pos+0x253/0x320 [ 371.154270][ T7938] ksys_read+0x14b/0x260 [ 371.154300][ T7938] ? __pfx_ksys_read+0x10/0x10 [ 371.154324][ T7938] ? rcu_is_watching+0x15/0xb0 [ 371.154370][ T7938] ? do_syscall_64+0xbe/0x3b0 [ 371.154396][ T7938] do_syscall_64+0xfa/0x3b0 [ 371.154416][ T7938] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.154447][ T7938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.154469][ T7938] ? clear_bhb_loop+0x60/0xb0 [ 371.154496][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.154522][ T7938] RIP: 0033:0x7f48441cd63c [ 371.154542][ T7938] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 371.154562][ T7938] RSP: 002b:00007f4842415030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.154585][ T7938] RAX: ffffffffffffffda RBX: 00007f4844416090 RCX: 00007f48441cd63c [ 371.154601][ T7938] RDX: 000000000000000f RSI: 00007f48424150a0 RDI: 0000000000000004 [ 371.154616][ T7938] RBP: 00007f4842415090 R08: 0000000000000000 R09: 0000000000000000 [ 371.154636][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.154650][ T7938] R13: 00007f4844416128 R14: 00007f4844416090 R15: 00007ffe07906168 [ 371.154686][ T7938] [ 372.275648][ T7948] FAULT_INJECTION: forcing a failure. [ 372.275648][ T7948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.275794][ T7948] CPU: 0 UID: 0 PID: 7948 Comm: syz.1.541 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.275820][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.275834][ T7948] Call Trace: [ 372.275843][ T7948] [ 372.275853][ T7948] dump_stack_lvl+0x189/0x250 [ 372.275889][ T7948] ? __pfx____ratelimit+0x10/0x10 [ 372.275923][ T7948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.275956][ T7948] ? __pfx__printk+0x10/0x10 [ 372.275979][ T7948] ? __might_fault+0xb0/0x130 [ 372.276024][ T7948] should_fail_ex+0x46c/0x600 [ 372.276060][ T7948] _copy_from_user+0x2d/0xb0 [ 372.276087][ T7948] ___sys_sendmsg+0x158/0x2a0 [ 372.276114][ T7948] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.276176][ T7948] ? __fget_files+0x2a/0x420 [ 372.276205][ T7948] ? __fget_files+0x3a6/0x420 [ 372.276245][ T7948] __x64_sys_sendmsg+0x1a1/0x260 [ 372.276271][ T7948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.276304][ T7948] ? __pfx_ksys_write+0x10/0x10 [ 372.276329][ T7948] ? rcu_is_watching+0x15/0xb0 [ 372.276369][ T7948] ? do_syscall_64+0xbe/0x3b0 [ 372.276395][ T7948] do_syscall_64+0xfa/0x3b0 [ 372.276415][ T7948] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.276448][ T7948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.276470][ T7948] ? clear_bhb_loop+0x60/0xb0 [ 372.276505][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.276524][ T7948] RIP: 0033:0x7f48441cec29 [ 372.276540][ T7948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.276555][ T7948] RSP: 002b:00007f4842436038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.276578][ T7948] RAX: ffffffffffffffda RBX: 00007f4844415fa0 RCX: 00007f48441cec29 [ 372.276594][ T7948] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 372.276607][ T7948] RBP: 00007f4842436090 R08: 0000000000000000 R09: 0000000000000000 [ 372.276621][ T7948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.276632][ T7948] R13: 00007f4844416038 R14: 00007f4844415fa0 R15: 00007ffe07906168 [ 372.276657][ T7948] [ 372.281823][ T7945] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 372.281846][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 372.281877][ T7945] netlink: 'syz.0.540': attribute type 1 has an invalid length. [ 372.281891][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 372.716472][ T1232] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 372.869266][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.965877][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.024345][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.054625][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.158918][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.376071][ T1232] usb 4-1: Using ep0 maxpacket: 8 [ 373.381574][ T1232] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 373.381601][ T1232] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 373.381633][ T1232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.406035][ T1232] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.406068][ T1232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.406090][ T1232] usb 4-1: Manufacturer: ೵侻ਙȯﺨ╹沛ꁋ [ 374.383610][ T7947] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[7947] [ 374.478546][ T1232] usb 4-1: 0:2 : does not exist [ 374.520376][ T1232] usb 4-1: USB disconnect, device number 22 [ 374.981386][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.003502][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.079907][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.222316][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.373406][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.415616][ T7976] FAULT_INJECTION: forcing a failure. [ 375.415616][ T7976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.415655][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.4.550 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.415684][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.415698][ T7976] Call Trace: [ 375.415706][ T7976] [ 375.415716][ T7976] dump_stack_lvl+0x189/0x250 [ 375.415754][ T7976] ? __pfx____ratelimit+0x10/0x10 [ 375.415788][ T7976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.415820][ T7976] ? __pfx__printk+0x10/0x10 [ 375.415844][ T7976] ? __might_fault+0xb0/0x130 [ 375.415887][ T7976] should_fail_ex+0x46c/0x600 [ 375.415926][ T7976] _copy_from_user+0x2d/0xb0 [ 375.415955][ T7976] ___sys_sendmsg+0x158/0x2a0 [ 375.415983][ T7976] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.416046][ T7976] ? __fget_files+0x2a/0x420 [ 375.416077][ T7976] ? __fget_files+0x3a6/0x420 [ 375.416117][ T7976] __x64_sys_sendmsg+0x1a1/0x260 [ 375.416141][ T7976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.416172][ T7976] ? __pfx_ksys_write+0x10/0x10 [ 375.416195][ T7976] ? rcu_is_watching+0x15/0xb0 [ 375.416233][ T7976] ? do_syscall_64+0xbe/0x3b0 [ 375.416259][ T7976] do_syscall_64+0xfa/0x3b0 [ 375.416277][ T7976] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.416310][ T7976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.416332][ T7976] ? clear_bhb_loop+0x60/0xb0 [ 375.416359][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.416381][ T7976] RIP: 0033:0x7fc65d65ec29 [ 375.416400][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.416419][ T7976] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.416443][ T7976] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 375.416460][ T7976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 375.416475][ T7976] RBP: 00007fc65b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.416489][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.416502][ T7976] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 375.416544][ T7976] [ 377.769987][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.905717][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.992842][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.096049][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.132710][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 378.360394][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.555'. [ 378.361790][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.555'. [ 378.363593][ T7999] capability: warning: `syz.3.555' uses 32-bit capabilities (legacy support in use) [ 379.552913][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.402388][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.497659][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.912427][ T8024] Bluetooth: MGMT ver 1.23 [ 381.155384][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.496927][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.274869][ T8042] FAULT_INJECTION: forcing a failure. [ 383.274869][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.274905][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.274930][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.274945][ T8042] Call Trace: [ 383.274953][ T8042] [ 383.274962][ T8042] dump_stack_lvl+0x189/0x250 [ 383.275001][ T8042] ? __pfx____ratelimit+0x10/0x10 [ 383.275036][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.275068][ T8042] ? __pfx__printk+0x10/0x10 [ 383.275093][ T8042] ? __might_fault+0xb0/0x130 [ 383.275139][ T8042] should_fail_ex+0x46c/0x600 [ 383.275177][ T8042] _copy_from_user+0x2d/0xb0 [ 383.275206][ T8042] ___sys_sendmsg+0x158/0x2a0 [ 383.275233][ T8042] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.275296][ T8042] ? __fget_files+0x2a/0x420 [ 383.275326][ T8042] ? __fget_files+0x3a6/0x420 [ 383.275370][ T8042] __x64_sys_sendmsg+0x1a1/0x260 [ 383.275395][ T8042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.275429][ T8042] ? __pfx_ksys_write+0x10/0x10 [ 383.275454][ T8042] ? rcu_is_watching+0x15/0xb0 [ 383.275495][ T8042] ? do_syscall_64+0xbe/0x3b0 [ 383.275521][ T8042] do_syscall_64+0xfa/0x3b0 [ 383.275540][ T8042] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.275574][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.275596][ T8042] ? clear_bhb_loop+0x60/0xb0 [ 383.275623][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.275653][ T8042] RIP: 0033:0x7f48441cec29 [ 383.275675][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.275693][ T8042] RSP: 002b:00007f4842436038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.275717][ T8042] RAX: ffffffffffffffda RBX: 00007f4844415fa0 RCX: 00007f48441cec29 [ 383.275733][ T8042] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 383.275748][ T8042] RBP: 00007f4842436090 R08: 0000000000000000 R09: 0000000000000000 [ 383.275762][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.275776][ T8042] R13: 00007f4844416038 R14: 00007f4844415fa0 R15: 00007ffe07906168 [ 383.275811][ T8042] [ 383.817207][ T8049] FAULT_INJECTION: forcing a failure. [ 383.817207][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.817246][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.2.572 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.817272][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.817286][ T8049] Call Trace: [ 383.817295][ T8049] [ 383.817304][ T8049] dump_stack_lvl+0x189/0x250 [ 383.817343][ T8049] ? __pfx____ratelimit+0x10/0x10 [ 383.817379][ T8049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.817412][ T8049] ? __pfx__printk+0x10/0x10 [ 383.817437][ T8049] ? __might_fault+0xb0/0x130 [ 383.817483][ T8049] should_fail_ex+0x46c/0x600 [ 383.817522][ T8049] _copy_from_user+0x2d/0xb0 [ 383.817552][ T8049] __sys_bpf+0x1ed/0x870 [ 383.817582][ T8049] ? __pfx___sys_bpf+0x10/0x10 [ 383.817624][ T8049] ? ksys_write+0x230/0x260 [ 383.817655][ T8049] ? __pfx_ksys_write+0x10/0x10 [ 383.817692][ T8049] __x64_sys_bpf+0x7c/0x90 [ 383.817718][ T8049] do_syscall_64+0xfa/0x3b0 [ 383.817739][ T8049] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.817773][ T8049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.817796][ T8049] ? clear_bhb_loop+0x60/0xb0 [ 383.817823][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.817845][ T8049] RIP: 0033:0x7fd91b21ec29 [ 383.817865][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.817884][ T8049] RSP: 002b:00007fd91947e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.817917][ T8049] RAX: ffffffffffffffda RBX: 00007fd91b465fa0 RCX: 00007fd91b21ec29 [ 383.817933][ T8049] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 383.817947][ T8049] RBP: 00007fd91947e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.817962][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.817975][ T8049] R13: 00007fd91b466038 R14: 00007fd91b465fa0 R15: 00007ffe89a97848 [ 383.818011][ T8049] [ 384.358588][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.358673][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.404115][ T8087] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 388.883205][ T8089] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 389.877216][ T8097] FAULT_INJECTION: forcing a failure. [ 389.877216][ T8097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.877253][ T8097] CPU: 1 UID: 0 PID: 8097 Comm: syz.3.587 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.877280][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.877293][ T8097] Call Trace: [ 389.877302][ T8097] [ 389.877311][ T8097] dump_stack_lvl+0x189/0x250 [ 389.877356][ T8097] ? __pfx____ratelimit+0x10/0x10 [ 389.877391][ T8097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.877420][ T8097] ? __pfx__printk+0x10/0x10 [ 389.877442][ T8097] ? __might_fault+0xb0/0x130 [ 389.877488][ T8097] should_fail_ex+0x46c/0x600 [ 389.877527][ T8097] _copy_from_user+0x2d/0xb0 [ 389.877557][ T8097] ___sys_sendmsg+0x158/0x2a0 [ 389.877583][ T8097] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.877647][ T8097] ? __fget_files+0x2a/0x420 [ 389.877678][ T8097] ? __fget_files+0x3a6/0x420 [ 389.877722][ T8097] __x64_sys_sendmsg+0x1a1/0x260 [ 389.877748][ T8097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.877782][ T8097] ? __pfx_ksys_write+0x10/0x10 [ 389.877808][ T8097] ? rcu_is_watching+0x15/0xb0 [ 389.877848][ T8097] ? do_syscall_64+0xbe/0x3b0 [ 389.877875][ T8097] do_syscall_64+0xfa/0x3b0 [ 389.877894][ T8097] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.877927][ T8097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.877949][ T8097] ? clear_bhb_loop+0x60/0xb0 [ 389.877976][ T8097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.877997][ T8097] RIP: 0033:0x7fd54595ec29 [ 389.878017][ T8097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.878036][ T8097] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.878060][ T8097] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 389.878077][ T8097] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 389.878091][ T8097] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.878105][ T8097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.878117][ T8097] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 389.878150][ T8097] [ 392.008266][ T8124] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 392.993682][ T8128] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 395.183642][ T8152] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 395.183674][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 395.183705][ T8152] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 395.183719][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 395.229173][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.604'. [ 396.675915][ T5904] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 396.835892][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 396.844561][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.845031][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.858612][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.858645][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.858666][ T5904] usb 5-1: Product: syz [ 396.858682][ T5904] usb 5-1: Manufacturer: syz [ 396.858697][ T5904] usb 5-1: SerialNumber: syz [ 398.820042][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.820516][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.837808][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.838322][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.844067][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.844574][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.181428][ T5904] usb 5-1: 0:2 : does not exist [ 399.239687][ T5904] usb 5-1: USB disconnect, device number 19 [ 399.317162][ T8187] FAULT_INJECTION: forcing a failure. [ 399.317162][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.317200][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 399.317225][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.317239][ T8187] Call Trace: [ 399.317248][ T8187] [ 399.317256][ T8187] dump_stack_lvl+0x189/0x250 [ 399.317292][ T8187] ? __pfx____ratelimit+0x10/0x10 [ 399.317327][ T8187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.317360][ T8187] ? __pfx__printk+0x10/0x10 [ 399.317384][ T8187] ? __might_fault+0xb0/0x130 [ 399.317430][ T8187] should_fail_ex+0x46c/0x600 [ 399.317468][ T8187] _copy_from_user+0x2d/0xb0 [ 399.317497][ T8187] ___sys_sendmsg+0x158/0x2a0 [ 399.317524][ T8187] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.317585][ T8187] ? __fget_files+0x2a/0x420 [ 399.317625][ T8187] ? __fget_files+0x3a6/0x420 [ 399.317667][ T8187] __x64_sys_sendmsg+0x1a1/0x260 [ 399.317693][ T8187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.317726][ T8187] ? __pfx_ksys_write+0x10/0x10 [ 399.317751][ T8187] ? rcu_is_watching+0x15/0xb0 [ 399.317791][ T8187] ? do_syscall_64+0xbe/0x3b0 [ 399.317817][ T8187] do_syscall_64+0xfa/0x3b0 [ 399.317836][ T8187] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.317868][ T8187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.317890][ T8187] ? clear_bhb_loop+0x60/0xb0 [ 399.317917][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.317939][ T8187] RIP: 0033:0x7fd54595ec29 [ 399.317958][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.317977][ T8187] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.318001][ T8187] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 399.318017][ T8187] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 399.318031][ T8187] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.318045][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.318059][ T8187] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 399.318094][ T8187] [ 399.425576][ T8190] FAULT_INJECTION: forcing a failure. [ 399.425576][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 399.425624][ T8190] CPU: 1 UID: 0 PID: 8190 Comm: syz.0.614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 399.425659][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.425671][ T8190] Call Trace: [ 399.425679][ T8190] [ 399.425687][ T8190] dump_stack_lvl+0x189/0x250 [ 399.425723][ T8190] ? __pfx____ratelimit+0x10/0x10 [ 399.425761][ T8190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.425797][ T8190] ? __pfx__printk+0x10/0x10 [ 399.425832][ T8190] ? __pfx___might_resched+0x10/0x10 [ 399.425857][ T8190] ? fs_reclaim_acquire+0x7d/0x100 [ 399.425887][ T8190] should_fail_ex+0x46c/0x600 [ 399.425927][ T8190] ? getname_flags+0xb8/0x540 [ 399.425962][ T8190] should_failslab+0xa8/0x100 [ 399.425998][ T8190] ? getname_flags+0xb8/0x540 [ 399.426031][ T8190] kmem_cache_alloc_noprof+0x6e/0x310 [ 399.426071][ T8190] getname_flags+0xb8/0x540 [ 399.426112][ T8190] do_sys_openat2+0xbc/0x1c0 [ 399.426142][ T8190] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.426166][ T8190] ? ksys_write+0x230/0x260 [ 399.426200][ T8190] ? __pfx_ksys_write+0x10/0x10 [ 399.426228][ T8190] ? rcu_is_watching+0x15/0xb0 [ 399.426270][ T8190] __x64_sys_openat+0x138/0x170 [ 399.426301][ T8190] do_syscall_64+0xfa/0x3b0 [ 399.426324][ T8190] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.426358][ T8190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.426383][ T8190] ? clear_bhb_loop+0x60/0xb0 [ 399.426414][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.426438][ T8190] RIP: 0033:0x7fc55138d590 [ 399.426459][ T8190] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 399.426481][ T8190] RSP: 002b:00007fc54f5abf60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 399.426505][ T8190] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc55138d590 [ 399.426521][ T8190] RDX: 0000000000000000 RSI: 00007fc551411f2e RDI: 00000000ffffff9c [ 399.426537][ T8190] RBP: 00007fc551411f2e R08: 0000000000000000 R09: 0000000000000000 [ 399.426552][ T8190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 399.426567][ T8190] R13: 00007fc5515d6218 R14: 00007fc5515d6180 R15: 00007ffd9c95f0f8 [ 399.426611][ T8190] [ 399.924818][ T8190] tty tty2: ldisc open failed (-12), clearing slot 1 [ 401.516966][ T8206] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.764533][ T8212] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 401.764557][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 401.764684][ T8212] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 401.764700][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 401.786053][ T6513] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 402.099657][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.220507][ T6513] usb 5-1: device descriptor read/64, error -71 [ 402.839512][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.262190][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.458883][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.650539][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.698641][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.775834][ T6513] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 403.864507][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.628'. [ 404.037553][ T8244] FAULT_INJECTION: forcing a failure. [ 404.037553][ T8244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.037591][ T8244] CPU: 0 UID: 0 PID: 8244 Comm: syz.3.630 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.037617][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.037631][ T8244] Call Trace: [ 404.037639][ T8244] [ 404.037649][ T8244] dump_stack_lvl+0x189/0x250 [ 404.037687][ T8244] ? __pfx____ratelimit+0x10/0x10 [ 404.037720][ T8244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.037752][ T8244] ? __pfx__printk+0x10/0x10 [ 404.037790][ T8244] should_fail_ex+0x46c/0x600 [ 404.037829][ T8244] _copy_to_user+0x31/0xb0 [ 404.037860][ T8244] simple_read_from_buffer+0xe1/0x170 [ 404.037897][ T8244] proc_fail_nth_read+0x1b6/0x220 [ 404.037934][ T8244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.037960][ T8244] ? rw_verify_area+0x2ac/0x4e0 [ 404.037987][ T8244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.038013][ T8244] vfs_read+0x206/0xa30 [ 404.038050][ T8244] ? __pfx_vfs_read+0x10/0x10 [ 404.038074][ T8244] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 404.038113][ T8244] ? mutex_lock_nested+0x154/0x1d0 [ 404.038138][ T8244] ? fdget_pos+0x253/0x320 [ 404.038180][ T8244] ksys_read+0x14b/0x260 [ 404.038218][ T8244] ? __pfx_ksys_read+0x10/0x10 [ 404.038251][ T8244] ? do_syscall_64+0xbe/0x3b0 [ 404.038278][ T8244] do_syscall_64+0xfa/0x3b0 [ 404.038298][ T8244] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.038332][ T8244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.038354][ T8244] ? clear_bhb_loop+0x60/0xb0 [ 404.038381][ T8244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.038402][ T8244] RIP: 0033:0x7fd54595d63c [ 404.038421][ T8244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.038440][ T8244] RSP: 002b:00007fd543bc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.038464][ T8244] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595d63c [ 404.038487][ T8244] RDX: 000000000000000f RSI: 00007fd543bc60a0 RDI: 0000000000000004 [ 404.038501][ T8244] RBP: 00007fd543bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.038515][ T8244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.038529][ T8244] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 404.038564][ T8244] [ 404.196296][ T6513] usb 5-1: device descriptor read/64, error -71 [ 404.316325][ T6513] usb usb5-port1: attempt power cycle [ 404.417427][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.632187][ T8250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.522284][ T8279] FAULT_INJECTION: forcing a failure. [ 406.522284][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.522320][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.0.643 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 406.522344][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.522357][ T8279] Call Trace: [ 406.522364][ T8279] [ 406.522372][ T8279] dump_stack_lvl+0x189/0x250 [ 406.522407][ T8279] ? __pfx____ratelimit+0x10/0x10 [ 406.522440][ T8279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.522469][ T8279] ? __pfx__printk+0x10/0x10 [ 406.522492][ T8279] ? __might_fault+0xb0/0x130 [ 406.522538][ T8279] should_fail_ex+0x46c/0x600 [ 406.522576][ T8279] _copy_from_user+0x2d/0xb0 [ 406.522604][ T8279] do_sock_getsockopt+0x17d/0x450 [ 406.522629][ T8279] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 406.522648][ T8279] ? do_syscall_64+0x40/0x3b0 [ 406.522670][ T8279] ? ksys_write+0x1e7/0x260 [ 406.522702][ T8279] __x64_sys_getsockopt+0x1ab/0x250 [ 406.522721][ T8279] ? do_syscall_64+0x40/0x3b0 [ 406.522742][ T8279] ? do_syscall_64+0x40/0x3b0 [ 406.522765][ T8279] do_syscall_64+0xfa/0x3b0 [ 406.522783][ T8279] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.522814][ T8279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.522834][ T8279] ? clear_bhb_loop+0x60/0xb0 [ 406.522859][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.522877][ T8279] RIP: 0033:0x7fc55138ec29 [ 406.522896][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.522914][ T8279] RSP: 002b:00007fc54f5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 406.522936][ T8279] RAX: ffffffffffffffda RBX: 00007fc5515d5fa0 RCX: 00007fc55138ec29 [ 406.522951][ T8279] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 406.522962][ T8279] RBP: 00007fc54f5ee090 R08: 0000200000000080 R09: 0000000000000000 [ 406.522973][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.522983][ T8279] R13: 00007fc5515d6038 R14: 00007fc5515d5fa0 R15: 00007ffd9c95f0f8 [ 406.523017][ T8279] [ 407.075318][ T8280] binder: 8277:8280 ioctl ab06 0 returned -22 [ 413.440850][ T8350] syz.2.665 (8350): /proc/8346/oom_adj is deprecated, please use /proc/8346/oom_score_adj instead. [ 418.593201][ T5925] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 418.959405][ T8386] program syz.1.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.383441][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.675'. [ 419.668424][ T5925] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 419.668455][ T5925] usb 4-1: config 0 has no interface number 0 [ 419.668508][ T5925] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 419.668538][ T5925] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.668562][ T5925] usb 4-1: config 0 interface 113 has no altsetting 0 [ 419.800020][ T5925] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 419.800046][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.800060][ T5925] usb 4-1: Product: syz [ 419.800070][ T5925] usb 4-1: Manufacturer: syz [ 419.800081][ T5925] usb 4-1: SerialNumber: syz [ 419.864031][ T5925] usb 4-1: config 0 descriptor?? [ 420.083380][ C1] usb 4-1: NFC: Urb failure (status -71) [ 420.197581][ T8393] FAULT_INJECTION: forcing a failure. [ 420.197581][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 420.197619][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.1.677 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.197646][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.197661][ T8393] Call Trace: [ 420.197669][ T8393] [ 420.197679][ T8393] dump_stack_lvl+0x189/0x250 [ 420.197764][ T8393] ? __pfx____ratelimit+0x10/0x10 [ 420.197800][ T8393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.197834][ T8393] ? __pfx__printk+0x10/0x10 [ 420.197864][ T8393] ? __pfx___might_resched+0x10/0x10 [ 420.197892][ T8393] ? fs_reclaim_acquire+0x7d/0x100 [ 420.197919][ T8393] should_fail_ex+0x46c/0x600 [ 420.197960][ T8393] should_failslab+0xa8/0x100 [ 420.197993][ T8393] __kvmalloc_node_noprof+0x15a/0x550 [ 420.198023][ T8393] ? file_tty_write+0x2e8/0xa30 [ 420.198056][ T8393] ? file_tty_write+0x217/0xa30 [ 420.198096][ T8393] file_tty_write+0x2e8/0xa30 [ 420.198141][ T8393] vfs_write+0x5d5/0xb40 [ 420.198177][ T8393] ? __pfx_tty_write+0x10/0x10 [ 420.198212][ T8393] ? __pfx_vfs_write+0x10/0x10 [ 420.198254][ T8393] ? __fget_files+0x2a/0x420 [ 420.198298][ T8393] ksys_write+0x14b/0x260 [ 420.198330][ T8393] ? __pfx_ksys_write+0x10/0x10 [ 420.198365][ T8393] ? do_syscall_64+0xbe/0x3b0 [ 420.198392][ T8393] do_syscall_64+0xfa/0x3b0 [ 420.198413][ T8393] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.198447][ T8393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.198469][ T8393] ? clear_bhb_loop+0x60/0xb0 [ 420.198497][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.198518][ T8393] RIP: 0033:0x7f48441cec29 [ 420.198538][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.198558][ T8393] RSP: 002b:00007f48423f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.198581][ T8393] RAX: ffffffffffffffda RBX: 00007f4844416180 RCX: 00007f48441cec29 [ 420.198598][ T8393] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000007 [ 420.198612][ T8393] RBP: 00007f48423f4090 R08: 0000000000000000 R09: 0000000000000000 [ 420.198626][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.198640][ T8393] R13: 00007f4844416218 R14: 00007f4844416180 R15: 00007ffe07906168 [ 420.198677][ T8393] [ 420.204645][ T5925] usb 4-1: NFC: Unable to get FW version [ 420.224149][ T5925] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 420.410310][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.410758][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.426802][ T5925] usb 4-1: USB disconnect, device number 23 [ 420.961629][ T8401] FAULT_INJECTION: forcing a failure. [ 420.961629][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 420.961708][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.0.679 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.961734][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.961749][ T8401] Call Trace: [ 420.961758][ T8401] [ 420.961768][ T8401] dump_stack_lvl+0x189/0x250 [ 420.961808][ T8401] ? __pfx____ratelimit+0x10/0x10 [ 420.961842][ T8401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.961876][ T8401] ? __pfx__printk+0x10/0x10 [ 420.961913][ T8401] ? fs_reclaim_acquire+0x7d/0x100 [ 420.961945][ T8401] should_fail_ex+0x46c/0x600 [ 420.961983][ T8401] ? getname_flags+0xb8/0x540 [ 420.962014][ T8401] should_failslab+0xa8/0x100 [ 420.962046][ T8401] ? getname_flags+0xb8/0x540 [ 420.962077][ T8401] kmem_cache_alloc_noprof+0x6e/0x310 [ 420.962115][ T8401] getname_flags+0xb8/0x540 [ 420.962146][ T8401] ? security_capable+0x7e/0x2e0 [ 420.962182][ T8401] user_path_at+0x24/0x60 [ 420.962208][ T8401] __se_sys_fspick+0x10f/0x3d0 [ 420.962234][ T8401] ? __pfx___se_sys_fspick+0x10/0x10 [ 420.962272][ T8401] do_syscall_64+0xfa/0x3b0 [ 420.962295][ T8401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.962317][ T8401] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 420.962339][ T8401] ? clear_bhb_loop+0x60/0xb0 [ 420.962366][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.962388][ T8401] RIP: 0033:0x7fc55138ec29 [ 420.962408][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.962427][ T8401] RSP: 002b:00007fc54f5ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 420.962451][ T8401] RAX: ffffffffffffffda RBX: 00007fc5515d6180 RCX: 00007fc55138ec29 [ 420.962468][ T8401] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffffff [ 420.962483][ T8401] RBP: 00007fc54f5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 420.962497][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.962511][ T8401] R13: 00007fc5515d6218 R14: 00007fc5515d6180 R15: 00007ffd9c95f0f8 [ 420.962546][ T8401] [ 423.615990][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 423.815937][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 423.827049][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 423.828878][ T31] usb 1-1: config 6 has an invalid interface number: 39 but max is 0 [ 423.828909][ T31] usb 1-1: config 6 has no interface number 0 [ 423.828949][ T31] usb 1-1: config 6 interface 39 has no altsetting 0 [ 423.840702][ T31] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=e7.d7 [ 423.840740][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.840765][ T31] usb 1-1: Product: syz [ 423.840783][ T31] usb 1-1: Manufacturer: syz [ 423.840800][ T31] usb 1-1: SerialNumber: syz [ 424.630060][ T31] usbserial_generic 1-1:6.39: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 424.630086][ T31] usbserial_generic 1-1:6.39: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 424.630133][ T31] usbserial_generic 1-1:6.39: device has no bulk endpoints [ 424.631244][ T31] safe_serial 1-1:6.39: safe_serial converter detected [ 424.631435][ T31] safe_serial 1-1:6.39: probe with driver safe_serial failed with error -22 [ 424.701704][ T31] usb 1-1: USB disconnect, device number 10 [ 425.604974][ T8434] overlayfs: missing 'lowerdir' [ 428.667501][ T8226] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 428.819915][ T8226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 428.820015][ T8226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.823430][ T8226] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=a2.bf [ 428.823461][ T8226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.823483][ T8226] usb 3-1: Product: syz [ 428.823499][ T8226] usb 3-1: Manufacturer: syz [ 428.823513][ T8226] usb 3-1: SerialNumber: syz [ 428.904316][ T8226] usb 3-1: config 0 descriptor?? [ 428.930543][ T8226] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 429.191098][ T8226] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 429.273251][ T8226] usb 3-1: USB disconnect, device number 25 [ 433.426643][ T8536] FAULT_INJECTION: forcing a failure. [ 433.426643][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 433.427312][ T8536] CPU: 0 UID: 0 PID: 8536 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 433.427340][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 433.427354][ T8536] Call Trace: [ 433.427363][ T8536] [ 433.427373][ T8536] dump_stack_lvl+0x189/0x250 [ 433.427411][ T8536] ? __pfx____ratelimit+0x10/0x10 [ 433.427447][ T8536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.427481][ T8536] ? __pfx__printk+0x10/0x10 [ 433.427511][ T8536] ? __pfx___might_resched+0x10/0x10 [ 433.427541][ T8536] should_fail_ex+0x46c/0x600 [ 433.427578][ T8536] ? copy_fs_struct+0x4f/0x270 [ 433.427603][ T8536] should_failslab+0xa8/0x100 [ 433.427636][ T8536] ? copy_fs_struct+0x4f/0x270 [ 433.427659][ T8536] kmem_cache_alloc_noprof+0x6e/0x310 [ 433.427697][ T8536] copy_fs_struct+0x4f/0x270 [ 433.427726][ T8536] ksys_unshare+0x3a2/0x8c0 [ 433.427766][ T8536] ? ksys_write+0x230/0x260 [ 433.427793][ T8536] ? __pfx_ksys_unshare+0x10/0x10 [ 433.427827][ T8536] ? __pfx_ksys_write+0x10/0x10 [ 433.427852][ T8536] ? rcu_is_watching+0x15/0xb0 [ 433.427905][ T8536] __x64_sys_unshare+0x38/0x50 [ 433.427930][ T8536] do_syscall_64+0xfa/0x3b0 [ 433.427948][ T8536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.427965][ T8536] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 433.427981][ T8536] ? clear_bhb_loop+0x60/0xb0 [ 433.428001][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.428018][ T8536] RIP: 0033:0x7fc55138ec29 [ 433.428033][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.428048][ T8536] RSP: 002b:00007fc54f5ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 433.428066][ T8536] RAX: ffffffffffffffda RBX: 00007fc5515d6180 RCX: 00007fc55138ec29 [ 433.428079][ T8536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020020080 [ 433.428089][ T8536] RBP: 00007fc54f5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 433.428099][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.428109][ T8536] R13: 00007fc5515d6218 R14: 00007fc5515d6180 R15: 00007ffd9c95f0f8 [ 433.428135][ T8536] [ 435.277022][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 438.296061][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 438.455886][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 438.458556][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30891, setting to 64 [ 438.458591][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 438.458637][ T31] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 438.458662][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.464606][ T31] usb 5-1: config 0 descriptor?? [ 438.538565][ T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 439.020151][ T8597] program syz.0.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.892718][ T8590] FAULT_INJECTION: forcing a failure. [ 439.892718][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 439.892819][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz.2.732 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 439.892847][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.892867][ T8590] Call Trace: [ 439.892876][ T8590] [ 439.892885][ T8590] dump_stack_lvl+0x189/0x250 [ 439.892927][ T8590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.892959][ T8590] ? __pfx__printk+0x10/0x10 [ 439.892998][ T8590] should_fail_ex+0x46c/0x600 [ 439.893035][ T8590] ? __alloc_skb+0x112/0x2d0 [ 439.893066][ T8590] should_failslab+0xa8/0x100 [ 439.893098][ T8590] ? __alloc_skb+0x112/0x2d0 [ 439.893135][ T8590] kmem_cache_alloc_node_noprof+0x77/0x330 [ 439.893175][ T8590] __alloc_skb+0x112/0x2d0 [ 439.893211][ T8590] netlink_sendmsg+0x5c6/0xb30 [ 439.893252][ T8590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.893294][ T8590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.893327][ T8590] __sock_sendmsg+0x219/0x270 [ 439.893358][ T8590] sock_write_iter+0x25e/0x330 [ 439.893388][ T8590] ? __pfx_sock_write_iter+0x10/0x10 [ 439.893440][ T8590] vfs_write+0x5d5/0xb40 [ 439.893473][ T8590] ? __pfx_sock_write_iter+0x10/0x10 [ 439.893499][ T8590] ? __pfx_vfs_write+0x10/0x10 [ 439.893531][ T8590] ? __rcu_read_unlock+0x84/0xe0 [ 439.893563][ T8590] ? __fget_files+0x2a/0x420 [ 439.893603][ T8590] ksys_write+0x14b/0x260 [ 439.893634][ T8590] ? __pfx_ksys_write+0x10/0x10 [ 439.893673][ T8590] do_syscall_64+0xfa/0x3b0 [ 439.893697][ T8590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.893719][ T8590] ? asm_sysvec_call_function_single+0x1a/0x20 [ 439.893741][ T8590] ? clear_bhb_loop+0x60/0xb0 [ 439.893776][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.893798][ T8590] RIP: 0033:0x7fd91b21ec29 [ 439.893818][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.893836][ T8590] RSP: 002b:00007fd91945d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.893859][ T8590] RAX: ffffffffffffffda RBX: 00007fd91b466090 RCX: 00007fd91b21ec29 [ 439.893875][ T8590] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000005 [ 439.893889][ T8590] RBP: 00007fd91945d090 R08: 0000000000000000 R09: 0000000000000000 [ 439.893903][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.893916][ T8590] R13: 00007fd91b466128 R14: 00007fd91b466090 R15: 00007ffe89a97848 [ 439.893951][ T8590] [ 440.433065][ T5904] usb 5-1: USB disconnect, device number 23 [ 440.625846][ T8608] FAULT_INJECTION: forcing a failure. [ 440.625846][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.625884][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.4.739 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.625910][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.625924][ T8608] Call Trace: [ 440.625932][ T8608] [ 440.625941][ T8608] dump_stack_lvl+0x189/0x250 [ 440.625979][ T8608] ? __pfx____ratelimit+0x10/0x10 [ 440.626013][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.626046][ T8608] ? __pfx__printk+0x10/0x10 [ 440.626080][ T8608] ? __might_fault+0xb0/0x130 [ 440.626125][ T8608] should_fail_ex+0x46c/0x600 [ 440.626163][ T8608] _copy_from_user+0x2d/0xb0 [ 440.626193][ T8608] ___sys_recvmsg+0x12e/0x510 [ 440.626224][ T8608] ? __pfx____sys_recvmsg+0x10/0x10 [ 440.626285][ T8608] ? __fget_files+0x3a6/0x420 [ 440.626329][ T8608] do_recvmmsg+0x30d/0x770 [ 440.626362][ T8608] ? __pfx_do_recvmmsg+0x10/0x10 [ 440.626387][ T8608] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 440.626423][ T8608] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 440.626470][ T8608] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 440.626516][ T8608] __x64_sys_recvmmsg+0x190/0x240 [ 440.626544][ T8608] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 440.626565][ T8608] ? rcu_is_watching+0x15/0xb0 [ 440.626602][ T8608] ? do_syscall_64+0xbe/0x3b0 [ 440.626627][ T8608] do_syscall_64+0xfa/0x3b0 [ 440.626646][ T8608] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.626677][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.626699][ T8608] ? clear_bhb_loop+0x60/0xb0 [ 440.626725][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.626747][ T8608] RIP: 0033:0x7fc65d65ec29 [ 440.626766][ T8608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.626784][ T8608] RSP: 002b:00007fc65b8c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 440.626807][ T8608] RAX: ffffffffffffffda RBX: 00007fc65d8a5fa0 RCX: 00007fc65d65ec29 [ 440.626823][ T8608] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 440.626837][ T8608] RBP: 00007fc65b8c6090 R08: 0000000000000000 R09: 0000000000000000 [ 440.626851][ T8608] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 440.626863][ T8608] R13: 00007fc65d8a6038 R14: 00007fc65d8a5fa0 R15: 00007ffd1c6ee068 [ 440.626896][ T8608] [ 444.360138][ T8641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.750'. [ 444.559355][ T8655] program syz.0.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.969110][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.969195][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.136078][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'. [ 447.847655][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 447.847678][ T37] audit: type=1326 audit(1758392631.272:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8676 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d65ec29 code=0x7ffc0000 [ 447.856479][ T37] audit: type=1326 audit(1758392631.602:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8676 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc65d65ec29 code=0x7ffc0000 [ 447.856540][ T37] audit: type=1326 audit(1758392631.612:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8676 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d65ec29 code=0x7ffc0000 [ 447.856589][ T37] audit: type=1326 audit(1758392631.612:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8676 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65d65ec29 code=0x7ffc0000 [ 451.785778][ T8708] program syz.3.768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.135515][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.767'. [ 454.187553][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 455.631241][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 455.631274][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.631295][ T10] usb 2-1: Product: syz [ 455.631309][ T10] usb 2-1: Manufacturer: syz [ 455.631323][ T10] usb 2-1: SerialNumber: syz [ 455.644111][ T10] usb 2-1: config 0 descriptor?? [ 455.669031][ T10] pwc: Logitech/Cisco VT Camera webcam detected. [ 455.914175][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.919007][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.942051][ T10] pwc: Failed to set LED on/off time (-71) [ 455.942554][ T10] pwc: send_video_command error -71 [ 455.942570][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 455.943800][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 455.971630][ T10] usb 2-1: USB disconnect, device number 8 [ 458.837031][ T8748] program syz.1.778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.848918][ T8767] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 467.256476][ T8778] overlayfs: missing 'lowerdir' [ 469.667702][ T8809] ======================================================= [ 469.667702][ T8809] WARNING: The mand mount option has been deprecated and [ 469.667702][ T8809] and is ignored by this kernel. Remove the mand [ 469.667702][ T8809] option from the mount to silence this warning. [ 469.667702][ T8809] ======================================================= [ 469.702105][ T37] audit: type=1800 audit(1758392653.442:52): pid=8808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.799" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 469.748938][ T8808] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 469.748989][ T8808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 469.749011][ T8808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 471.851470][ T8833] program syz.0.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.135070][ T8849] overlayfs: missing 'lowerdir' [ 476.855013][ T8857] overlayfs: missing 'lowerdir' [ 478.553000][ T8876] overlayfs: missing 'lowerdir' [ 480.355365][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.821'. [ 480.964296][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 483.494721][ T37] audit: type=1804 audit(1758392667.242:53): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.827" name="file0" dev="ramfs" ino=21886 res=1 errno=0 [ 483.787076][ T8909] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 485.878694][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'. [ 487.568132][ T37] audit: type=1804 audit(1758392671.302:54): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.842" name="file0" dev="ramfs" ino=22988 res=1 errno=0 [ 489.635846][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.845'. [ 492.365841][ T8985] program syz.2.849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.390767][ T8977] overlayfs: missing 'lowerdir' [ 495.804081][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.819237][ T9019] FAULT_INJECTION: forcing a failure. [ 495.819237][ T9019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.819266][ T9019] CPU: 0 UID: 0 PID: 9019 Comm: syz.4.859 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 495.819284][ T9019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 495.819294][ T9019] Call Trace: [ 495.819300][ T9019] [ 495.819307][ T9019] dump_stack_lvl+0x189/0x250 [ 495.819334][ T9019] ? __pfx____ratelimit+0x10/0x10 [ 495.819359][ T9019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.819382][ T9019] ? __pfx__printk+0x10/0x10 [ 495.819400][ T9019] ? fs_reclaim_acquire+0x7d/0x100 [ 495.819421][ T9019] should_fail_ex+0x46c/0x600 [ 495.819448][ T9019] prepare_alloc_pages+0x213/0x670 [ 495.819469][ T9019] __alloc_frozen_pages_noprof+0x123/0x370 [ 495.819489][ T9019] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 495.819511][ T9019] ? policy_nodemask+0x27c/0x720 [ 495.819541][ T9019] alloc_pages_mpol+0xd1/0x380 [ 495.819576][ T9019] alloc_pages_noprof+0xcf/0x1e0 [ 495.819632][ T9019] folio_alloc_noprof+0x22/0xc0 [ 495.819664][ T9019] filemap_alloc_folio_noprof+0xdf/0x510 [ 495.819696][ T9019] ? filemap_get_entry+0xad/0x2f0 [ 495.819727][ T9019] ? filemap_get_entry+0xad/0x2f0 [ 495.819761][ T9019] ? filemap_get_entry+0x28f/0x2f0 [ 495.819794][ T9019] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 495.819835][ T9019] ? __lock_acquire+0xab9/0xd20 [ 495.819876][ T9019] __filemap_get_folio+0x33d/0xa40 [ 495.819917][ T9019] iomap_write_begin+0x5aa/0x1c40 [ 495.819961][ T9019] ? __lock_acquire+0xab9/0xd20 [ 495.819999][ T9019] ? __pfx_iomap_write_begin+0x10/0x10 [ 495.820028][ T9019] ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0 [ 495.820063][ T9019] ? set_normalized_timespec64+0xf0/0x1a0 [ 495.820098][ T9019] ? rcu_is_watching+0x15/0xb0 [ 495.820134][ T9019] ? iomap_iter+0x819/0xde0 [ 495.820156][ T9019] ? I_BDEV+0xd/0x20 [ 495.820175][ T9019] ? fault_in_readable+0xdd/0x130 [ 495.820210][ T9019] ? fault_in_iov_iter_readable+0x1b4/0x2f0 [ 495.820238][ T9019] iomap_file_buffered_write+0x43b/0x980 [ 495.820276][ T9019] ? __lock_acquire+0xab9/0xd20 [ 495.820310][ T9019] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 495.820365][ T9019] ? __pfx_down_read+0x10/0x10 [ 495.820390][ T9019] ? file_update_time+0x41c/0x490 [ 495.820419][ T9019] blkdev_write_iter+0x527/0x720 [ 495.820459][ T9019] vfs_write+0x5d5/0xb40 [ 495.820492][ T9019] ? __pfx_blkdev_write_iter+0x10/0x10 [ 495.820522][ T9019] ? __pfx_vfs_write+0x10/0x10 [ 495.820562][ T9019] ? __fget_files+0x2a/0x420 [ 495.820605][ T9019] ksys_write+0x14b/0x260 [ 495.820642][ T9019] ? __pfx_ksys_write+0x10/0x10 [ 495.820667][ T9019] ? rcu_is_watching+0x15/0xb0 [ 495.820707][ T9019] ? do_syscall_64+0xbe/0x3b0 [ 495.820733][ T9019] do_syscall_64+0xfa/0x3b0 [ 495.820753][ T9019] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.820786][ T9019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.820808][ T9019] ? clear_bhb_loop+0x60/0xb0 [ 495.820835][ T9019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.820857][ T9019] RIP: 0033:0x7fc65d65ec29 [ 495.820877][ T9019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.820897][ T9019] RSP: 002b:00007fc65b884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.820921][ T9019] RAX: ffffffffffffffda RBX: 00007fc65d8a6180 RCX: 00007fc65d65ec29 [ 495.820938][ T9019] RDX: 00000000fffffd2c RSI: 0000200000000000 RDI: 0000000000000006 [ 495.820953][ T9019] RBP: 00007fc65b884090 R08: 0000000000000000 R09: 0000000000000000 [ 495.820967][ T9019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.820981][ T9019] R13: 00007fc65d8a6218 R14: 00007fc65d8a6180 R15: 00007ffd1c6ee068 [ 495.821017][ T9019] [ 496.755695][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.995874][ T8581] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 498.241114][ C0] vkms_vblank_simulate: vblank timer overrun [ 498.247648][ T8581] usb 4-1: Using ep0 maxpacket: 32 [ 498.421714][ T8581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.421808][ T8581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.422050][ T8581] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 498.422132][ T8581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.156835][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.222024][ T8581] usb 4-1: config 0 descriptor?? [ 499.371537][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.889382][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.920420][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.868'. [ 500.842406][ T9027] hsr0: entered promiscuous mode [ 501.904780][ T37] audit: type=1804 audit(1758392685.652:55): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.871" name="file0" dev="ramfs" ino=22062 res=1 errno=0 [ 501.958247][ T8581] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 501.958604][ T8581] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -71 [ 501.967084][ T8581] usb 4-1: USB disconnect, device number 24 [ 502.436333][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.872'. [ 507.233046][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.233133][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.206528][ T37] audit: type=1804 audit(1758392693.962:56): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.883" name="file0" dev="ramfs" ino=22111 res=1 errno=0 [ 513.149812][ T5925] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 513.461182][ T9128] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 513.605895][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 513.608717][ T5925] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 513.608747][ T5925] usb 3-1: config 0 has no interface number 0 [ 513.608797][ T5925] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.608823][ T5925] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.608846][ T5925] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.608892][ T5925] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 513.608918][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.965308][ T5925] usb 3-1: config 0 descriptor?? [ 513.978428][ T5925] ldusb 3-1:0.55: Interrupt in endpoint not found [ 514.198314][ T5904] usb 3-1: USB disconnect, device number 26 [ 515.627692][ T37] audit: type=1804 audit(1758392699.382:57): pid=9143 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.898" name="file0" dev="ramfs" ino=22180 res=1 errno=0 [ 520.197603][ T9184] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 520.330786][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 520.404175][ T9186] vxlan0: entered promiscuous mode [ 520.449400][ T67] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.455001][ T1114] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.456523][ T158] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.456573][ T158] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.813340][ T37] audit: type=1804 audit(1758392704.562:58): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.913" name="file0" dev="ramfs" ino=23389 res=1 errno=0 [ 525.289429][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 528.181810][ T9239] FAULT_INJECTION: forcing a failure. [ 528.181810][ T9239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.182036][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.0.925 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 528.182062][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.182075][ T9239] Call Trace: [ 528.182084][ T9239] [ 528.182093][ T9239] dump_stack_lvl+0x189/0x250 [ 528.182134][ T9239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.182166][ T9239] ? __pfx__printk+0x10/0x10 [ 528.182202][ T9239] should_fail_ex+0x46c/0x600 [ 528.182239][ T9239] _copy_from_user+0x2d/0xb0 [ 528.182266][ T9239] ___sys_sendmsg+0x158/0x2a0 [ 528.182292][ T9239] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.182357][ T9239] ? __fget_files+0x2a/0x420 [ 528.182387][ T9239] ? __fget_files+0x3a6/0x420 [ 528.182430][ T9239] __sys_sendmmsg+0x22d/0x430 [ 528.182457][ T9239] ? __pfx___sys_sendmmsg+0x10/0x10 [ 528.182490][ T9239] ? preempt_schedule_irq+0xde/0x150 [ 528.182546][ T9239] __x64_sys_sendmmsg+0xa0/0xc0 [ 528.182571][ T9239] do_syscall_64+0xfa/0x3b0 [ 528.182590][ T9239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.182608][ T9239] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 528.182627][ T9239] ? clear_bhb_loop+0x60/0xb0 [ 528.182651][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.182670][ T9239] RIP: 0033:0x7fc55138ec29 [ 528.182689][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.182708][ T9239] RSP: 002b:00007fc54f5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 528.182730][ T9239] RAX: ffffffffffffffda RBX: 00007fc5515d5fa0 RCX: 00007fc55138ec29 [ 528.182746][ T9239] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 528.182760][ T9239] RBP: 00007fc54f5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 528.182774][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.182787][ T9239] R13: 00007fc5515d6038 R14: 00007fc5515d5fa0 R15: 00007ffd9c95f0f8 [ 528.182819][ T9239] [ 528.924195][ T37] audit: type=1804 audit(1758392712.672:59): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.927" name="file0" dev="ramfs" ino=22328 res=1 errno=0 [ 530.112636][ T9256] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 533.157058][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'. [ 534.459868][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.940'. [ 535.320246][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 538.227996][ T9310] FAULT_INJECTION: forcing a failure. [ 538.227996][ T9310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.228034][ T9310] CPU: 1 UID: 0 PID: 9310 Comm: syz.3.946 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 538.228060][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.228073][ T9310] Call Trace: [ 538.228081][ T9310] [ 538.228091][ T9310] dump_stack_lvl+0x189/0x250 [ 538.228128][ T9310] ? __pfx____ratelimit+0x10/0x10 [ 538.228161][ T9310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.228192][ T9310] ? __pfx__printk+0x10/0x10 [ 538.228216][ T9310] ? __might_fault+0xb0/0x130 [ 538.228281][ T9310] should_fail_ex+0x46c/0x600 [ 538.228320][ T9310] _copy_from_user+0x2d/0xb0 [ 538.228349][ T9310] get_timespec64+0x8e/0x1a0 [ 538.228378][ T9310] ? __pfx_get_timespec64+0x10/0x10 [ 538.228420][ T9310] __x64_sys_recvmmsg+0x143/0x240 [ 538.228448][ T9310] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 538.228470][ T9310] ? rcu_is_watching+0x15/0xb0 [ 538.228538][ T9310] ? do_syscall_64+0xbe/0x3b0 [ 538.228564][ T9310] do_syscall_64+0xfa/0x3b0 [ 538.228584][ T9310] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.228617][ T9310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.228640][ T9310] ? clear_bhb_loop+0x60/0xb0 [ 538.228666][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.228688][ T9310] RIP: 0033:0x7fd54595ec29 [ 538.228706][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.228726][ T9310] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 538.228750][ T9310] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 538.228772][ T9310] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 538.228787][ T9310] RBP: 00007fd543bc6090 R08: 0000200000003700 R09: 0000000000000000 [ 538.228802][ T9310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.228816][ T9310] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 538.228852][ T9310] [ 538.507359][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.948'. [ 547.543490][ T9325] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 548.254579][ T9335] program syz.3.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.626007][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 548.775737][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 548.778659][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.778711][ T5925] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 548.778744][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.967287][ T5925] usb 1-1: config 0 descriptor?? [ 549.333715][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.334170][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.198260][ T5925] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 550.352032][ T5925] usb 1-1: USB disconnect, device number 11 [ 557.918415][ T9388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.963'. [ 558.578448][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.525916][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.137618][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.425875][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.738058][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.272773][ T9425] dvmrp0: entered allmulticast mode [ 561.562286][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.625738][ T5904] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 562.006560][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.048248][ T5904] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 562.048278][ T5904] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 562.048298][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.048316][ T5904] usb 3-1: config 0 has no interface number 0 [ 562.048362][ T5904] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 562.048386][ T5904] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 562.048410][ T5904] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 562.048456][ T5904] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 562.048481][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.147354][ T5904] usb 3-1: config 0 descriptor?? [ 562.198096][ T5904] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 562.353364][ T5904] usb 3-1: USB disconnect, device number 27 [ 562.390333][ T12] usb 3-1: Failed to submit usb control message: -71 [ 562.390385][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 562.390403][ T12] usb 3-1: unable to get target info from device [ 562.390430][ T12] usb 3-1: could not get target info (-71) [ 562.390458][ T12] usb 3-1: could not probe fw (-71) [ 562.828614][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.984616][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.015254][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.137218][ T9453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'. [ 564.212612][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'. [ 567.921427][ T9490] program syz.0.995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.656393][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.656478][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.362022][ T9498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.998'. [ 569.529552][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.999'. [ 572.094475][ T6029] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 572.365895][ T6029] usb 5-1: Using ep0 maxpacket: 16 [ 572.375270][ T6029] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 572.380893][ T6029] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 572.380931][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.380957][ T6029] usb 5-1: Product: syz [ 572.380973][ T6029] usb 5-1: Manufacturer: syz [ 572.380991][ T6029] usb 5-1: SerialNumber: syz [ 572.390763][ T6029] usb 5-1: config 0 descriptor?? [ 572.400079][ T6029] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 572.402809][ T6029] usb 5-1: Detected FT232R [ 572.703955][ T9512] netlink: 'syz.4.1002': attribute type 2 has an invalid length. [ 572.704046][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 572.707602][ T6029] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 572.708096][ T6029] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 572.708619][ T6029] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 572.768961][ T6029] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 572.835720][ T6029] usb 5-1: USB disconnect, device number 24 [ 572.854009][ T6029] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 572.854486][ T6029] ftdi_sio 5-1:0.0: device disconnected [ 576.061171][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1013'. [ 577.734529][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1012'. [ 579.134160][ T9567] FAULT_INJECTION: forcing a failure. [ 579.134160][ T9567] name failslab, interval 1, probability 0, space 0, times 0 [ 579.134203][ T9567] CPU: 0 UID: 0 PID: 9567 Comm: syz.3.1019 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 579.134235][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 579.134255][ T9567] Call Trace: [ 579.134264][ T9567] [ 579.134273][ T9567] dump_stack_lvl+0x189/0x250 [ 579.134313][ T9567] ? __pfx____ratelimit+0x10/0x10 [ 579.134349][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.134383][ T9567] ? __pfx__printk+0x10/0x10 [ 579.134414][ T9567] ? __pfx___might_resched+0x10/0x10 [ 579.134437][ T9567] ? fs_reclaim_acquire+0x7d/0x100 [ 579.134465][ T9567] should_fail_ex+0x46c/0x600 [ 579.134505][ T9567] should_failslab+0xa8/0x100 [ 579.134538][ T9567] __kvmalloc_node_noprof+0x15a/0x550 [ 579.134570][ T9567] ? traverse+0xd9/0x570 [ 579.134602][ T9567] traverse+0xd9/0x570 [ 579.134636][ T9567] ? seq_read_iter+0xb8/0xe10 [ 579.134665][ T9567] seq_read_iter+0xcff/0xe10 [ 579.134704][ T9567] ? __asan_memset+0x22/0x50 [ 579.134736][ T9567] seq_read+0x36c/0x480 [ 579.134771][ T9567] ? __pfx_seq_read+0x10/0x10 [ 579.134798][ T9567] ? __debugfs_file_get+0x5dd/0x710 [ 579.134836][ T9567] ? __pfx___debugfs_file_get+0x10/0x10 [ 579.134871][ T9567] ? __import_iovec+0x5d4/0x7f0 [ 579.134910][ T9567] full_proxy_read+0x124/0x1f0 [ 579.134940][ T9567] vfs_readv+0x5b0/0x850 [ 579.134975][ T9567] ? __pfx_full_proxy_read+0x10/0x10 [ 579.135000][ T9567] ? __pfx_vfs_readv+0x10/0x10 [ 579.135052][ T9567] ? __fget_files+0x2a/0x420 [ 579.135090][ T9567] ? __fget_files+0x3a6/0x420 [ 579.135121][ T9567] ? __fget_files+0x2a/0x420 [ 579.135164][ T9567] __x64_sys_preadv+0x19a/0x2a0 [ 579.135198][ T9567] ? __pfx___x64_sys_preadv+0x10/0x10 [ 579.135226][ T9567] ? rcu_is_watching+0x15/0xb0 [ 579.135288][ T9567] ? do_syscall_64+0xbe/0x3b0 [ 579.135315][ T9567] do_syscall_64+0xfa/0x3b0 [ 579.135336][ T9567] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.135369][ T9567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.135391][ T9567] ? clear_bhb_loop+0x60/0xb0 [ 579.135419][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.135441][ T9567] RIP: 0033:0x7fd54595ec29 [ 579.135461][ T9567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.135481][ T9567] RSP: 002b:00007fd543bc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 579.135505][ T9567] RAX: ffffffffffffffda RBX: 00007fd545ba5fa0 RCX: 00007fd54595ec29 [ 579.135522][ T9567] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 579.135536][ T9567] RBP: 00007fd543bc6090 R08: 0000000000000006 R09: 0000000000000000 [ 579.135550][ T9567] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 579.135564][ T9567] R13: 00007fd545ba6038 R14: 00007fd545ba5fa0 R15: 00007fff0c6964c8 [ 579.135597][ T9567] [ 582.196194][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196236][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196263][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196288][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196314][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196339][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196365][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196390][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196417][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.196443][ T8581] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 582.330222][ T8581] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 583.849031][ T9595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1027'. [ 589.424996][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1040'. [ 593.519329][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 596.279183][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 598.482798][ T9703] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 598.482822][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 598.482852][ T9703] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 598.482867][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 603.146930][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 603.490051][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.660023][ C1] vkms_vblank_simulate: vblank timer overrun [ 603.954339][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.195951][ T8226] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 604.346172][ T8226] usb 1-1: device descriptor read/64, error -71 [ 604.625887][ T8226] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 605.343385][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.054153][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.458341][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.701329][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.902470][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.119282][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.370218][ T12] bridge_slave_1: left allmulticast mode [ 608.370393][ T12] bridge_slave_1: left promiscuous mode [ 608.373386][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.477716][ T12] bridge_slave_0: left allmulticast mode [ 608.477753][ T12] bridge_slave_0: left promiscuous mode [ 608.481748][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.591043][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.658289][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.726770][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 610.844180][ T12] bond0 (unregistering): Released all slaves [ 612.027682][ T12] hsr_slave_0: left promiscuous mode [ 612.047587][ T12] hsr_slave_1: left promiscuous mode [ 612.052024][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.052086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.097957][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.097993][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.181925][ T12] veth1_macvtap: left promiscuous mode [ 612.182189][ T12] veth0_macvtap: left promiscuous mode [ 612.182979][ T12] veth1_vlan: left promiscuous mode [ 612.183379][ T12] veth0_vlan: left promiscuous mode