last executing test programs: 7m46.293986971s ago: executing program 0 (id=1): dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x701, 0x0, 0x25dfdbfb, {0x26}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) lstat(&(0x7f0000000240)='./bus/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x9}, 0x2c, {[{@sq={'sq', 0x3d, 0x7}}], [{@seclabel}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, 'user_id'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_user}, {@uid_lt={'uid<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'group_id'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'group_id'}}]}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d3030303030303030301d303030303030303134303030302c757365725f69643dd75308c3abf3336d373ee654f127e58fe46634b7143f93bc9d0698c99e81fd240ca3104eed051635fc8d4dad159ea908f92d8100840c834cba54ac23fd1dcbd0bf10c6f8196794330700e0a6b3cf066250bf7cfdd686957102586ea96982f0be844f7b4e916153e81837af801775a348e49864f9af217d8d95f0c3c23baa13bd290b68e6ea07f29f8147ea7f05164b830838e3ae50c95c1bacf12dd5ef712ce186a3984584d8d6bac46fe0d468d91fae975c0e1b1a140da7d488ede305d16a1b58830624c0", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 7m42.987666858s ago: executing program 0 (id=12): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (fail_nth: 2) 7m42.491280924s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x245}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16=r1, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES8=r3, @ANYRESOCT=r1], 0x80}, 0x1, 0x0, 0x0, 0x4048041}, 0x24000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r4, 0x5) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r8, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 7m25.54700589s ago: executing program 32 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x245}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES16=r1, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES8=r3, @ANYRESOCT=r1], 0x80}, 0x1, 0x0, 0x0, 0x4048041}, 0x24000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r4, 0x5) accept4(r4, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r8, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) 6m46.216436955s ago: executing program 3 (id=127): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @local, 0xe}, 0x1c) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 6m45.028196305s ago: executing program 3 (id=132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2}, 0x40000100) 6m44.98911615s ago: executing program 3 (id=133): r0 = fsopen(&(0x7f00000003c0)='qnx6\x00', 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x57, 0x7, r3, 0x0, 0x10000, 0x0, 0x5, 0x2324fa, 0x159d6a}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m39.133680882s ago: executing program 3 (id=137): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="706e6bbf2170d332b6656612a9f17d1566e9eed633d029776af4a4aa728a514fef4bf4e46a07700d60555de8d7aae203a83354f6997c312e73", 0x39}, {&(0x7f0000000180)="ec46016b127d878c0e578043f8f655b249f3089c01abe45338bb016a8f16f40c9102c1a99499229c919ee5fa81e5cbd7126aebce33df1c3b1cd635240b9a61318ea9eb23238205f936321176b3d35d67e0d89692cc2ab9e09cacff423b896d6f7da001dc5c94844bf1e80783ccc5a3f039058bace58161116e391e89796ea9f5ea4415d32e4cfdc25974c3000ceb1b48f1466da45bb9a9e9fcf36f2a8f235c428065f2ffdcbc", 0xa6}, {&(0x7f0000000340)="95539037e9b939ff5ee6430e2aaa53f99e00b6aaaff66c977d55ebfecf653c3c846e16fdaf55fc224b6cb52b6567a616779f4a4e68240c329c8deaa2e32a96285c89712866e82c5fee0fbe504bd0a3c376c003c679a1d7d930f667ff43196ddabc2cdf379c458b8bde796e57ab5a5e1c8a911d97a1a6aea02489187b0316d38265", 0x81}, {&(0x7f0000000580)="06199bb3a9a6ba4a1afb9e6261226629254f97a0b2f556f9f650a450b476f95c2ea00f3a8b7614b5dcd4e13f136f4c0ffc2482c609a9a425b212a4b58c69a3ce9547b2ad341cced2c4288529e370ae8b895c961ba893730ad25e8fe1ac21d4e337de99338c0850296f85220f152992ae204394a2c35af67bd0d4301aeda4edbdfd3cfcc41e90b40b1f4116b6", 0x8c}, {&(0x7f0000000640)="629b065912bd5a8bb025c19081b34184d24a7c985eb4828661dd6708332e023e9ea91e125707dd8ed09212e335ae5750e4bb68e284eeefbf4b9c686c1e513a0da42f27d77ad4d3390e31477dfdd1c52ba46a3790dd9211213ce17b8830ae2e5d73814f39977118e9ddc26a7ccfefbc4783fdb3509f1d3aef0169da49a4acdcbe8630b08b2604f896053fff65a5d36f82bb860d264183b59e894eece92082e3e9df60d48d563cf789913d69e338bf57674264ae6e75cea5ab5009064a60b6f6f9bac2a2d9b46fddb067f461b9240fdef19357616e010776c652270e", 0xdb}, {&(0x7f0000000240)="d12d6f45686d431eaf2cd22f69bc54218bdd660b8823", 0x16}], 0x6, 0xc, 0xba0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb080001000000000008000100020000000800010000000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d7000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) 6m38.904649056s ago: executing program 3 (id=141): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x12f, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x5, 0x6, 0x0, 0x6, 0x0, 0x7, 0x0, 0x290, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x104}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831110203010902240001000000000904000002ff47d000090509e70000800004090507"], 0x0) 6m35.929725534s ago: executing program 2 (id=147): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt(r0, 0x200140c1, 0x108, 0x0, 0x0) 6m35.460744431s ago: executing program 2 (id=149): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x42303159, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x1}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0xfffffffd, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e43728545115509e1c34daab9", "2219e60d", "0004294f7cd62406"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9309006e00"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000100)={0xa, 0x4e23, 0x7, @mcast2, 0x7fff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="61b93fcb8a3d5d7e8b8a08386faf4870682b6708585fecc899d02ee290898cc689e251184aafd43cc4cc0f7db7e77062d6575b94d7c1bdc976db5ddd0274a86b8746b3e7871199d525c8", 0x4a}, {&(0x7f0000000240)="2ccdc337c2e8cd4b0cf3ce07b73ea66e5dcfc81c458c49ebf7c2c02446c44551002b918740c7c33d26558a0b9aaff715ebb615eebd7e685606fa63ae3312286c98613de92c5f631789063f5bb7ff6b32eaa9da5a191126cd13149300", 0x5c}, {&(0x7f00000002c0)="cd9972306ed7a7c19fe96f28bb0b77b4a6c1a98031563e4df64fccbdc3bbd2522f20205dbe7e2de699fad9664eee8208032046cefe92ac973c87bcd002a86f38b76cefe0e7f70a78b5fdbec67ec99d342343f8183a8b33552b5127c983b1711a6ef3d8441a2370f85e2b989d084bd7da5ed16cbea6511df9af86321eabee4fed3aac2320766ea427a82ae17728b32430447c4531577fd2ad2f8f7fd1371b344e7c6d5edd5b60a287a5864e2368c388a29b8c85ccef6121ee4c821d55d43eedc60dfcc8f1a3d8a5dbafecf4436ccd5e4e116c3e2891bd02f259caa170fee61e5f8009d627b1f8a32600639f466c3b700a7d16a3bf26b1", 0xf6}, {&(0x7f00000001c0)="af9bcc26467c5e8be9dcfbd2ffc1fadb60488fec88c1cf", 0x17}, {&(0x7f00000003c0)="d04ace584ea1f3230bc4b1198a73e74812aa9845ff48f54b167d32fd92232a1ce6b34a869d329e4395bb1abbfd4bd95bf2cd3331707b10be96187c92728f6d7ca3238f01f5958e735d9d0e24df225b9862637f4f7cfced5efc6f579d66914e72b6b4b9065f81f0ee4b1bd535afc755ff0d618bcea66e523fd7756b802bd56c34a56f85e6525c6e9ac46469acce3704c917", 0x91}, {&(0x7f0000000480)="140997090494b43a0c54e7b8c0969a2c2dc50305daae70fcf852e3fceef8566a794d394ab62503217e5099c252d4f5f0ef8a8328b80f7c4b153582ce147fed51dab41794184c5bc321d429755d6d65e02b389a38c50e3f18cc364bd9db810e7ffcb20a7ea28465edeabb5ab1f9415e48adf19e206cd5b1cd12cfb073191011929575f77e2fa673a82f762afd37cf28009b064358fa498f5a692b8467051313ae9d2738dd9f4cbb85ede7f5b3b60bdf59ff848fa3be1238735f0c019deb7aca51a0de04b62e6814c3cba1ccdccab8a1cd45cbc8aa21b742a9cc87b2ac3135", 0xde}], 0x6, &(0x7f0000000600)=[@rthdrdstopts={{0xe0, 0x29, 0x37, {0x0, 0x18, '\x00', [@generic={0x1, 0xe, "220a2e2b23427fe4a33798c44c1b"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfd, 0xa3, "ef760a6531618db605cfa9ff2d2cd3e406938a595da10e25854a5bc9bfa2a240155019ff8057f5a575f15c2b73b938c0791c99196cfb506c33ad8f927bb42593529a816a33e8cb3380aa408f3306d0bd10ec86b287bda18997e1b458bc17c93ca3fdcc7ed06053e1722bfae7844c54d2e63af799e5e18d3a33ffdf7e0dd805d61304ec6017677c15c4d228384c51ae2f734f00fea589c535ba99d77fce438db7c4b9c5"}]}}}], 0xe0}, 0x40800) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005740), 0x4000, 0x0) write$char_usb(r1, &(0x7f0000005780)="5e19ef07cbcf671a407f337b70c9771a2a90e216ab908fe4c6415e385c1e81e6346e40dc303788edee0c3036930d2753c9be06d5c07d4c98459e1dd884ee15332dacd03ced", 0x45) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 6m34.736750326s ago: executing program 3 (id=151): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x4, 0xfdfd, &(0x7f0000001540)="09ab6ef2"}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000000)) 6m34.162612588s ago: executing program 2 (id=152): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) 6m34.073989331s ago: executing program 2 (id=153): r0 = userfaultfd(0x803) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) io_uring_setup(0x5f4a, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x20000002, 0x64}) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6m33.80980905s ago: executing program 2 (id=154): socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffda8, 0x0, 0x0, 0x10, 0x42}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r4 = getpid() syz_pidfd_open(r4, 0x0) read$FUSE(r3, &(0x7f00000076c0)={0x2020}, 0x2020) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x2090) syz_usb_connect(0x2, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d0102030109021200dfff0000000904"], 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000772904202404019957c203020301090224000100001000090443eb01317d552009050202000202000009055c49fee55c3434a11de38ab482020002008000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 6m30.70964891s ago: executing program 2 (id=161): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x42303159, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x1}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0xfffffffd, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e43728545115509e1c34daab9", "2219e60d", "0004294f7cd62406"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9309006e00"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000100)={0xa, 0x4e23, 0x7, @mcast2, 0x7fff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="61b93fcb8a3d5d7e8b8a08386faf4870682b6708585fecc899d02ee290898cc689e251184aafd43cc4cc0f7db7e77062d6575b94d7c1bdc976db5ddd0274a86b8746b3e7871199d525c8", 0x4a}, {&(0x7f0000000240)="2ccdc337c2e8cd4b0cf3ce07b73ea66e5dcfc81c458c49ebf7c2c02446c44551002b918740c7c33d26558a0b9aaff715ebb615eebd7e685606fa63ae3312286c98613de92c5f631789063f5bb7ff6b32eaa9da5a191126cd13149300", 0x5c}, {&(0x7f00000002c0)="cd9972306ed7a7c19fe96f28bb0b77b4a6c1a98031563e4df64fccbdc3bbd2522f20205dbe7e2de699fad9664eee8208032046cefe92ac973c87bcd002a86f38b76cefe0e7f70a78b5fdbec67ec99d342343f8183a8b33552b5127c983b1711a6ef3d8441a2370f85e2b989d084bd7da5ed16cbea6511df9af86321eabee4fed3aac2320766ea427a82ae17728b32430447c4531577fd2ad2f8f7fd1371b344e7c6d5edd5b60a287a5864e2368c388a29b8c85ccef6121ee4c821d55d43eedc60dfcc8f1a3d8a5dbafecf4436ccd5e4e116c3e2891bd02f259caa170fee61e5f8009d627b1f8a32600639f466c3b700a7d16a3bf26b1", 0xf6}, {&(0x7f00000001c0)="af9bcc26467c5e8be9dcfbd2ffc1fadb60488fec88c1cf", 0x17}, {&(0x7f00000003c0)="d04ace584ea1f3230bc4b1198a73e74812aa9845ff48f54b167d32fd92232a1ce6b34a869d329e4395bb1abbfd4bd95bf2cd3331707b10be96187c92728f6d7ca3238f01f5958e735d9d0e24df225b9862637f4f7cfced5efc6f579d66914e72b6b4b9065f81f0ee4b1bd535afc755ff0d618bcea66e523fd7756b802bd56c34a56f85e6525c6e9ac46469acce3704c917", 0x91}, {&(0x7f0000000480)="140997090494b43a0c54e7b8c0969a2c2dc50305daae70fcf852e3fceef8566a794d394ab62503217e5099c252d4f5f0ef8a8328b80f7c4b153582ce147fed51dab41794184c5bc321d429755d6d65e02b389a38c50e3f18cc364bd9db810e7ffcb20a7ea28465edeabb5ab1f9415e48adf19e206cd5b1cd12cfb073191011929575f77e2fa673a82f762afd37cf28009b064358fa498f5a692b8467051313ae9d2738dd9f4cbb85ede7f5b3b60bdf59ff848fa3be1238735f0c019deb7aca51a0de04b62e6814c3cba1ccdccab8a1cd45cbc8aa21b742a9cc87b2ac3135", 0xde}], 0x6, &(0x7f0000000600)=[@rthdrdstopts={{0xe0, 0x29, 0x37, {0x0, 0x18, '\x00', [@generic={0x1, 0xe, "220a2e2b23427fe4a33798c44c1b"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfd, 0xa3, "ef760a6531618db605cfa9ff2d2cd3e406938a595da10e25854a5bc9bfa2a240155019ff8057f5a575f15c2b73b938c0791c99196cfb506c33ad8f927bb42593529a816a33e8cb3380aa408f3306d0bd10ec86b287bda18997e1b458bc17c93ca3fdcc7ed06053e1722bfae7844c54d2e63af799e5e18d3a33ffdf7e0dd805d61304ec6017677c15c4d228384c51ae2f734f00fea589c535ba99d77fce438db7c4b9c5"}]}}}], 0xe0}, 0x40800) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005740), 0x4000, 0x0) write$char_usb(r1, &(0x7f0000005780)="5e19ef07cbcf671a407f337b70c9771a2a90e216ab908fe4c6415e385c1e81e6346e40dc303788edee0c3036930d2753c9be06d5c07d4c98459e1dd884ee15332dacd03ced", 0x45) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 6m18.622065939s ago: executing program 33 (id=151): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x4, 0xfdfd, &(0x7f0000001540)="09ab6ef2"}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000000)) 6m14.919195318s ago: executing program 34 (id=161): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x0, 0x0, 0x42303159, 0x0, 0x0, [], 0x0, 0x0, 0x0, 0x1}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0xfffffffd, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e43728545115509e1c34daab9", "2219e60d", "0004294f7cd62406"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9309006e00"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000100)={0xa, 0x4e23, 0x7, @mcast2, 0x7fff}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="61b93fcb8a3d5d7e8b8a08386faf4870682b6708585fecc899d02ee290898cc689e251184aafd43cc4cc0f7db7e77062d6575b94d7c1bdc976db5ddd0274a86b8746b3e7871199d525c8", 0x4a}, {&(0x7f0000000240)="2ccdc337c2e8cd4b0cf3ce07b73ea66e5dcfc81c458c49ebf7c2c02446c44551002b918740c7c33d26558a0b9aaff715ebb615eebd7e685606fa63ae3312286c98613de92c5f631789063f5bb7ff6b32eaa9da5a191126cd13149300", 0x5c}, {&(0x7f00000002c0)="cd9972306ed7a7c19fe96f28bb0b77b4a6c1a98031563e4df64fccbdc3bbd2522f20205dbe7e2de699fad9664eee8208032046cefe92ac973c87bcd002a86f38b76cefe0e7f70a78b5fdbec67ec99d342343f8183a8b33552b5127c983b1711a6ef3d8441a2370f85e2b989d084bd7da5ed16cbea6511df9af86321eabee4fed3aac2320766ea427a82ae17728b32430447c4531577fd2ad2f8f7fd1371b344e7c6d5edd5b60a287a5864e2368c388a29b8c85ccef6121ee4c821d55d43eedc60dfcc8f1a3d8a5dbafecf4436ccd5e4e116c3e2891bd02f259caa170fee61e5f8009d627b1f8a32600639f466c3b700a7d16a3bf26b1", 0xf6}, {&(0x7f00000001c0)="af9bcc26467c5e8be9dcfbd2ffc1fadb60488fec88c1cf", 0x17}, {&(0x7f00000003c0)="d04ace584ea1f3230bc4b1198a73e74812aa9845ff48f54b167d32fd92232a1ce6b34a869d329e4395bb1abbfd4bd95bf2cd3331707b10be96187c92728f6d7ca3238f01f5958e735d9d0e24df225b9862637f4f7cfced5efc6f579d66914e72b6b4b9065f81f0ee4b1bd535afc755ff0d618bcea66e523fd7756b802bd56c34a56f85e6525c6e9ac46469acce3704c917", 0x91}, {&(0x7f0000000480)="140997090494b43a0c54e7b8c0969a2c2dc50305daae70fcf852e3fceef8566a794d394ab62503217e5099c252d4f5f0ef8a8328b80f7c4b153582ce147fed51dab41794184c5bc321d429755d6d65e02b389a38c50e3f18cc364bd9db810e7ffcb20a7ea28465edeabb5ab1f9415e48adf19e206cd5b1cd12cfb073191011929575f77e2fa673a82f762afd37cf28009b064358fa498f5a692b8467051313ae9d2738dd9f4cbb85ede7f5b3b60bdf59ff848fa3be1238735f0c019deb7aca51a0de04b62e6814c3cba1ccdccab8a1cd45cbc8aa21b742a9cc87b2ac3135", 0xde}], 0x6, &(0x7f0000000600)=[@rthdrdstopts={{0xe0, 0x29, 0x37, {0x0, 0x18, '\x00', [@generic={0x1, 0xe, "220a2e2b23427fe4a33798c44c1b"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xfd, 0xa3, "ef760a6531618db605cfa9ff2d2cd3e406938a595da10e25854a5bc9bfa2a240155019ff8057f5a575f15c2b73b938c0791c99196cfb506c33ad8f927bb42593529a816a33e8cb3380aa408f3306d0bd10ec86b287bda18997e1b458bc17c93ca3fdcc7ed06053e1722bfae7844c54d2e63af799e5e18d3a33ffdf7e0dd805d61304ec6017677c15c4d228384c51ae2f734f00fea589c535ba99d77fce438db7c4b9c5"}]}}}], 0xe0}, 0x40800) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000005740), 0x4000, 0x0) write$char_usb(r1, &(0x7f0000005780)="5e19ef07cbcf671a407f337b70c9771a2a90e216ab908fe4c6415e385c1e81e6346e40dc303788edee0c3036930d2753c9be06d5c07d4c98459e1dd884ee15332dacd03ced", 0x45) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 2m14.158687419s ago: executing program 5 (id=673): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 2m14.039912957s ago: executing program 5 (id=675): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000180)={0x0, 0x2, 0x102, 0x100000002}) setsockopt(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040)="c04bfa0a", 0xa) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m13.820959108s ago: executing program 5 (id=677): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, 0x0, 0x0, 0x7) 2m13.132040111s ago: executing program 5 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000340012800c0001006d6163766c616e0024000280080003001697b5904358970926030000000800010010000000040005800a000400aaaaaa", @ANYRES32=r2, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x408, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x6, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @ptr={0xc, 0x0, 0x0, 0x2, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x5}}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x7e}, @volatile={0x4}, @fwd={0x9}, @datasec={0x2, 0xa, 0x0, 0xf, 0x1, [{0x4, 0x3a08, 0x3}, {0x1, 0x5, 0x8}, {0x3, 0xb, 0xb12}, {0x3, 0x1}, {0x1, 0x81, 0x2}, {0x3, 0xfffffffc, 0x5}, {0x3, 0xa, 0xfffffffb}, {0x4, 0x7, 0x5}, {0x2, 0xa8, 0xfff}, {0x1, 0xfffffffb}], "f3"}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0]}}, &(0x7f0000000540)=""/151, 0x10a, 0x97, 0x0, 0x5}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1802000002000000000000000a0000808500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="5f1747b6c340ec1050d04760d167", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x54, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x40, 0x1, [@m_tunnel_key={0x3c, 0x1, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x4, 0x2, 0x0, 0x4, 0x1, 0x1, [{0x5, 0x3, 0x2}, {0x3, 0x3, 0x1}]}]}, {0x0, [0x2e, 0x2e, 0x6f, 0x5f, 0x2e]}}, 0x0, 0x43, 0x0, 0x1, 0x3fb1}, 0x28) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m12.47145842s ago: executing program 5 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019792e20b4070a0102010102030109022b0001000000440904bd00023467c3000905000000000000000705e37e1b82e609050b02"], 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="8145bf08", 0x4}], 0x1, &(0x7f0000000580)=[{0x10, 0x10c, 0x7}, {0x10, 0x109, 0xcf2}], 0x20}}], 0x1, 0xfdff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000600)={0x84, @empty, 0x4e26, 0x3, 'fo\x00', 0x20, 0x8, 0x8}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) setuid(0xee01) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x2c, @private=0xa010102, 0x4e21, 0x1, 'lblc\x00', 0xa, 0x9, 0x4f}, 0x2c) mremap(&(0x7f0000bfc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2m8.986279213s ago: executing program 5 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000007a00)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000580)="e2df5ddaec42b0119407a9a05950b32e32313d2980d9b42e880717ba57cf6c80b5d31eefe8516f96c8a10eddcbaf9bec4150c671cf9114be1c3c7f6b9e57296c84ff76b1fef429dc8b2d434300c288efd3421949b033ce6d84984293ffe7e56f0c5a2a8613db23f70050eab9752af8db35c057628621299386555a1b1d857f3132cdcb4bf6d3860ec3843adecd813cb2724c390c0ef33ba6d55fb8916d4707e80b104c428961fac1a898789ec669c5", 0xaf}, {&(0x7f0000000640)="2e36702e466bf82dd233379f872b368078a56100412c937c338aca9927c64aa6bc638f8f962d7a42567cc4f820913ce5afb42b99f5f728ae0864760371e0185c9fa3019ac77eef565fb17f4051d2ed21c8c1010070081406c2b94b48ecd033d9ce9e548eadcdc002dd8c12ffc7dfad67bdbebee6437d1eb663d66cb64323a9d051df0e18060a802c64cea4c37c9285a0970854ff54bb791b56ae05", 0x9b}, {&(0x7f00000004c0)="1e455c44b3e13fa93948eb4f782f894d4b8647d0a4d214b97e8ebbe81cec890d0648f4a186149b86daef2f6d911695557b3cb487f5fbf3ebdd2a6fb440fdfcd9ea6e8d773797", 0x46}], 0x3, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x58, 0x204c8d0}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000800)="8db521aba087530e5a2d5d39321b3dc59a6110260c7604e9a312cdf4c41b964ca6907cf45ae69cf10d32871b7b5bdd30f543d5cdab8f20ee392553d2b5c67d8fea1ebff2c1b227962e9bddb2dd3a32c4193e7e96df17d850fa58294f83a6cad5b0b4dea98096d4ab2ed417395558d34a6fe8513cb56e8f17ee65ffa5773f1d951a88ed35e2b9addcb2d1ab39041a91c69d42de5d49d89f50e571e35ba3160401b59affe2844eccd4c86cbcc22cda1b5e5e1133ed3f5693713b0b1fbb4cf3b85e332888bcb082bfd51cf3499ac6", 0xcd}, {&(0x7f0000000900)="a2d04091bdf7360722ac90820ec302b57964e91270d6391081e38658df7478d9d8a1fd1eb411dd2ba7284ddba45a36f4bd680a6909a37047463961343e52428b20b58b507b0ae15fe8b97f32739eea6e8ac7d211d9b5f8d1a7a8896205992af49eb9b10d3d5a506c4999dd46d101701b295297bc2eb44f264a9dfbff994437a9126e0d75a303e8742374dab01c73eda255629792a3b5977b7aee04ab5d59511d559764c878615d8b2c360acda8ac50b758370c321dfd48e5c02957d95bca440b0e0edee9a78ae4ba289d3edeeeacb15bb900e6f9f1229401", 0xd8}, {&(0x7f0000000240)="871b8cd16e24d1f8182c1c9498", 0xd}, {&(0x7f0000000a00)="08fb27fbfeb43c8c8b5334fa589e86b91eea09ad7f58528493f16885a0411b36c2942d42c2fc924dc1758d34638fdc9d3b7e243adebac7caf78fe82a86e4097d4e51f3de5e4e7af351712e6c23970619222bb768de2ba0e8c694fc26213733fc94e296e767ed802163e4cb570bf69f39c04db3bc14ebbebccc96ec888a734e095df680c4dc0b6502f7f59a33a74ee0406c5c96041fe1cc7cb8d1d716e94011bced", 0xa1}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000006280)="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", 0x1000}, {&(0x7f0000000ac0)="81440e9e7713b3bd68c27da67728b3d42a783be69fbc0c4026ecce9411e8f89f57b4e6fa91609643b66ef366249c583637dc02d074f43cfdc168265383cef8e8a3240546f2feb79303eb259f20bbcfe71306765b02734f58c1f2a93810bd615220bdff64fa09019a0b08594882f96a99d187fea532f194bcade8fba828dfa24bad0c43ff14ec0c75e19aae93bf77d2a22bed13a988d3c0d1e6e160cbd6a513f29d6a0577ad5424917b74466f4c235154c51701d31e543347bcf7b05becf65a285f3e218535a0c1a0861cdf2849e6aa2afb8d65c9bd2f1fac236d28e861fbc809", 0xe0}, {&(0x7f0000000bc0)="6f8a45b818639c532bb82c1c15b3d2cccc57f69b65f8180b86c4a094a078689b0e561689e2bbf64e2114ab7d5f406b0a71df272e25a56741616521d9177962ab2519cdf692dbdbce9b971b0f62a07c200b4a8f6c29565930a0b3760a8da6e2df6758cee4276c82ae6ba22217700d", 0x6e}], 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000300000000010b971696f0dc6b3000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x48004}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000007480)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128, 0x4}}], 0x3, 0x0) 2m7.809998725s ago: executing program 35 (id=700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000007a00)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000580)="e2df5ddaec42b0119407a9a05950b32e32313d2980d9b42e880717ba57cf6c80b5d31eefe8516f96c8a10eddcbaf9bec4150c671cf9114be1c3c7f6b9e57296c84ff76b1fef429dc8b2d434300c288efd3421949b033ce6d84984293ffe7e56f0c5a2a8613db23f70050eab9752af8db35c057628621299386555a1b1d857f3132cdcb4bf6d3860ec3843adecd813cb2724c390c0ef33ba6d55fb8916d4707e80b104c428961fac1a898789ec669c5", 0xaf}, {&(0x7f0000000640)="2e36702e466bf82dd233379f872b368078a56100412c937c338aca9927c64aa6bc638f8f962d7a42567cc4f820913ce5afb42b99f5f728ae0864760371e0185c9fa3019ac77eef565fb17f4051d2ed21c8c1010070081406c2b94b48ecd033d9ce9e548eadcdc002dd8c12ffc7dfad67bdbebee6437d1eb663d66cb64323a9d051df0e18060a802c64cea4c37c9285a0970854ff54bb791b56ae05", 0x9b}, {&(0x7f00000004c0)="1e455c44b3e13fa93948eb4f782f894d4b8647d0a4d214b97e8ebbe81cec890d0648f4a186149b86daef2f6d911695557b3cb487f5fbf3ebdd2a6fb440fdfcd9ea6e8d773797", 0x46}], 0x3, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x58, 0x204c8d0}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000800)="8db521aba087530e5a2d5d39321b3dc59a6110260c7604e9a312cdf4c41b964ca6907cf45ae69cf10d32871b7b5bdd30f543d5cdab8f20ee392553d2b5c67d8fea1ebff2c1b227962e9bddb2dd3a32c4193e7e96df17d850fa58294f83a6cad5b0b4dea98096d4ab2ed417395558d34a6fe8513cb56e8f17ee65ffa5773f1d951a88ed35e2b9addcb2d1ab39041a91c69d42de5d49d89f50e571e35ba3160401b59affe2844eccd4c86cbcc22cda1b5e5e1133ed3f5693713b0b1fbb4cf3b85e332888bcb082bfd51cf3499ac6", 0xcd}, {&(0x7f0000000900)="a2d04091bdf7360722ac90820ec302b57964e91270d6391081e38658df7478d9d8a1fd1eb411dd2ba7284ddba45a36f4bd680a6909a37047463961343e52428b20b58b507b0ae15fe8b97f32739eea6e8ac7d211d9b5f8d1a7a8896205992af49eb9b10d3d5a506c4999dd46d101701b295297bc2eb44f264a9dfbff994437a9126e0d75a303e8742374dab01c73eda255629792a3b5977b7aee04ab5d59511d559764c878615d8b2c360acda8ac50b758370c321dfd48e5c02957d95bca440b0e0edee9a78ae4ba289d3edeeeacb15bb900e6f9f1229401", 0xd8}, {&(0x7f0000000240)="871b8cd16e24d1f8182c1c9498", 0xd}, {&(0x7f0000000a00)="08fb27fbfeb43c8c8b5334fa589e86b91eea09ad7f58528493f16885a0411b36c2942d42c2fc924dc1758d34638fdc9d3b7e243adebac7caf78fe82a86e4097d4e51f3de5e4e7af351712e6c23970619222bb768de2ba0e8c694fc26213733fc94e296e767ed802163e4cb570bf69f39c04db3bc14ebbebccc96ec888a734e095df680c4dc0b6502f7f59a33a74ee0406c5c96041fe1cc7cb8d1d716e94011bced", 0xa1}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000006280)="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", 0x1000}, {&(0x7f0000000ac0)="81440e9e7713b3bd68c27da67728b3d42a783be69fbc0c4026ecce9411e8f89f57b4e6fa91609643b66ef366249c583637dc02d074f43cfdc168265383cef8e8a3240546f2feb79303eb259f20bbcfe71306765b02734f58c1f2a93810bd615220bdff64fa09019a0b08594882f96a99d187fea532f194bcade8fba828dfa24bad0c43ff14ec0c75e19aae93bf77d2a22bed13a988d3c0d1e6e160cbd6a513f29d6a0577ad5424917b74466f4c235154c51701d31e543347bcf7b05becf65a285f3e218535a0c1a0861cdf2849e6aa2afb8d65c9bd2f1fac236d28e861fbc809", 0xe0}, {&(0x7f0000000bc0)="6f8a45b818639c532bb82c1c15b3d2cccc57f69b65f8180b86c4a094a078689b0e561689e2bbf64e2114ab7d5f406b0a71df272e25a56741616521d9177962ab2519cdf692dbdbce9b971b0f62a07c200b4a8f6c29565930a0b3760a8da6e2df6758cee4276c82ae6ba22217700d", 0x6e}], 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000300000000010b971696f0dc6b3000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x48004}}, {{&(0x7f0000001f80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000007480)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128, 0x4}}], 0x3, 0x0) 26.679347386s ago: executing program 8 (id=998): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b2440102030109021200010002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000055c0)={0xfcb2, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x2cf9}}, 0x0, 0x0}, 0x0) 23.976334626s ago: executing program 8 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 21.372229901s ago: executing program 8 (id=1012): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a"], 0xa8}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 13.283856548s ago: executing program 8 (id=1031): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.896425184s ago: executing program 6 (id=1039): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.812347944s ago: executing program 6 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) syz_open_dev$usbfs(0x0, 0x70, 0x103301) sched_setscheduler(0x0, 0x2, 0x0) 8.133214743s ago: executing program 7 (id=1042): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b0658, [{{0x9, 0x2, 0x6b}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x40, 0x2b}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.965484794s ago: executing program 6 (id=1043): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x0, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f0000000280)={0x80000001, 0x1, 0x6, 0x800, &(0x7f0000000080)=[{}]}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) 7.965167547s ago: executing program 8 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.841862328s ago: executing program 8 (id=1045): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x101080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/tty/ldiscs\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) r2 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0xc721, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 7.622628106s ago: executing program 1 (id=1047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) 7.6223666s ago: executing program 1 (id=1048): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x02\x00\x00\x00\x00', &(0x7f0000000140)='\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0x5, 0x7, 0x6, 0x4, 0xa, 0x0, 0x1, 0xde, 0x0, 0x10}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r2, 0x3, 0x100}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001ffe0f000600050088a80000060001000000000008000500", @ANYRES32=r5], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 7.476513186s ago: executing program 1 (id=1049): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 6.581506211s ago: executing program 6 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 2) 6.151141593s ago: executing program 1 (id=1052): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 5.804283331s ago: executing program 6 (id=1054): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0xffff, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 5.74543361s ago: executing program 4 (id=1055): mmap(&(0x7f0000134000/0x3000)=nil, 0x3000, 0x8, 0x810, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000)=[{0x2, 0x6, 0x1}, {0x3, 0x2, 0x80}], 0x2, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 5.528224367s ago: executing program 1 (id=1056): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$phonet(0x23, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000036000701040000000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) 4.680580242s ago: executing program 6 (id=1057): socket(0xa, 0x3, 0x3a) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.659269502s ago: executing program 4 (id=1058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000007fc0)={0x2020}, 0x2020) 4.278121272s ago: executing program 4 (id=1059): r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1) r5 = socket$inet(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 3.353279753s ago: executing program 1 (id=1060): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x0, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x8, 0xa}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x3, 0xb}], 0x10, 0x3}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000280)={0x80000001, 0x1, 0x6, 0x800, &(0x7f0000000080)=[{}]}) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) 2.934050012s ago: executing program 7 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) 2.93086478s ago: executing program 4 (id=1062): socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) eventfd(0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1.896262351s ago: executing program 7 (id=1063): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 1.640701349s ago: executing program 7 (id=1064): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000080000000000000067000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffbffb702000008000000b703000000000000850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0xd, 0xfe1, &(0x7f0000001e00)=""/4065}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlinkprop={0x44, 0x6c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc012, 0x48}, [@IFLA_MAP={0x24, 0xe, {0x0, 0x1, 0x6, 0x1ff, 0xa7, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4484}, 0x4040004) sendmmsg(r0, &(0x7f00000045c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000003540)=[{&(0x7f0000000200)="4061942d9cdfc5c72e9e0f6ef602d8ee721d57f0b8ed6c14d07afaa9fd630dbd3d9e20b69b27eb7247b814bf4bd6702fd306d565bf08cfeadf0612f64ca59e85046f81e170d815704d607fa2e345ac0255bff5fe1439ea05f66b3a60410836d2c92b26d1e48babad826ae1c657c893ae83f8c649a60f29e429ffc12e58fc33fcfe824bcd00b7dedcf7216ef0cb33f87043", 0x91}, {&(0x7f00000002c0)="fc95914fbe4e59db7c9bb8862a3fd04dc8bf0b09fdca6774ac97df552d9ecdec52b1a6addb44a0bcb40151c02eec478a49ed0324d8dda808fc172f720880fea3dda69417e7446edfc557fc74f45332170429f2d2a6e8b0f195922bb15c7fe901a66f5e4a46de9bec77fff1d9175b8f220af1dadca724858369f1285046d697a9901fad", 0x83}, {&(0x7f0000000380)="9cc649c3c8fdb012171807b99bdcd05389882d3c5c3990bf3dfdf6e6a2fe85bf2b2c9d0569e77db854c3d994ac86ec1f4ee8166d422dbc1ab11cb23f799f80d12ca6579a74b9da02", 0x48}, {&(0x7f0000000400)="4f023d780b60dcb516733eaa03f41d29071d099de625678e7ba3638db75afb5c399924cf9e3435e707649c4bbc9a51d8433c4f1fee511c8b8c3884b100003c8cb38ad4a84344352270a35ac96308fb6f17cdec13ef6e6d6674edaac75286efb97cb6b5391289d033b2f59612dea837822451e9387121a70c775aad20c072e94c2785e606a37b26b8fb", 0x89}, {&(0x7f00000004c0)="ed79e7ff13dba1ec34f1ffe11c487e25cd99d67bc3d3eeb2cbc7b6a3417f224d6b3d1b4c8a94a9f1ad9a620991798b88179dbd570d09f044ba94b2f7616fc9835eda64ea0a264e9038605f330cb9735971f3c43d9444ffc834c807f4c6c498dd984715e88c1f17ddb3cffb39acfe838e51474efb7706a83e8f3f23a83088e6d732f25b14f564d2b873b45e3fc2d3b0dccab99045157964c2b2a5713dfeaa776a621c1a032b23782be29481da858d680ccd9e0b29edb489af9e903462378e8e43a6fe147577b98140e3a3853e58426c86ef34ed871bc44f57f4b5c636f92270a38e9c2dffe260dfb4fb41e1cc66aff4195daba8ee6101490aa662ecdb04e89d6915446f7fdd7644345f7ef7c27082182e603b41a70a1cd96b53a99d96c172761df3baeb882171ae3353887cb7f501ad0e95f587094faf6c8799b596793803820c86bb7b64ec25f135b3995909f4d6631cb676df8edddccd364129f6f15fbd15f242729a339cde8bdd64214006e5a0dbf36cba5207c369c63b623639ec62fc445926fad86da9b69af1db5689e6712e39f9ee4afa14afd2342541fce29a9bfc647019c8b076e813ff24edde4376a6e6272fbe26f6aeafb2109879caaaee1db24982bee9504ba38d345bdc45e8ced6f16990e6cd876377b5328da1bf599bb196ed6f7b0d5ef4a42462357c5c4441da5cb028fd89f8669807307de93028e93003fbb0b4ae83ec2ab121375bc3ed791488999d6951d12209b21f877895a06765ca4b7c375caa5974f730c8dac10f11836b39c9a3e273673ed7abc1bc23bb2fad8b138cb6cc78ac5b38e7dea841c20ed3e524427f7007a3e9d22c95b0d95254f7e36651969d75f26a7ec90227410b133adde3e38b19ee5e068b9156a51ac4818507ed47318806dd9b6c5a74d5c43fca65ee845cf7e352e67799fb54858d4eeb553bb197d45234043bfe636c86a02fee530f56d664de0544bbe8dc33edf4d20a3b3ec4c077d40f83cdc68fc367740456eda1409bca0ce4c8524ccbc49a00ee1857bdc89b8341e17dc74a6da542ffff1c6f6273b8290b52746d09e614dbed9943eb51c61245178c238a113212116a0bad76990fc84ec0d770a0b461bfc890252508a2cb409b7dc749dc8bf3022bfdd3f9aad2513ab124e3c51ec34e257ea0f80833f40fc765d0e156c81e8ba6029ef021dea1a570375fbadaada4438d40941dc6f6714f3a87eeefe5192e078c13a89bc2d61012c68cd744800f43ea1cabc5d7cc85b0fad69d77a10fcfb5bee5df21d2b9833316833db891568c07f3f3296c3e77cee7fb0b1772483e0b69cfaeeedf9642c1b958680eb3e112e10834a4967c928fac69029849fe11a22346c540552dfbb7aa1632317acadbd2ec9402f1faa061665232fa6795a3798d7fec3da61b24e65f4690b7b6e67e56904ffc70aea1249a9a18d4d28c80d9813b886c2ed4f31e64402a138185393cc63cd59ba9acddbc582960c01ccdb29f0b7bfdd50f3e05b05ffc167133b10d23e13ffe0e1994c18499858f9741cc47101888ea80f9cb81c2e2d265e41d0d515d367a5df89b75d62b872125da52591fbb4be58ccedc9e512e0d314f900eb88c5811f99839b67f21b310018d218d49223731b9773f0bc4debbd65b38be799eb910dee0e67b767b089a507f4596bfcd4fb664ed8f73e59c35eb7b125df22a7a7b1f15311038fe7f8840338e26270aee0584a54b90aa0b5ce5a18fcc6c8f4c8eb1375d182db59d6b5b19af81bf975d63b980a7763f4608d8b6396bc755d78ef24ae789f1277a40c333690f3c9bf8288b091b83918eb269f64fd113eeaa6faa366a861e3c2364a01bc8c528a07feed3f85949bf9303645e1121e11246caa15be7d997675ec7c999a93ef3c9b6badf0db7f3efa0a9896bb35b94c0a009e702506ad79a848691d195d4b91b06ce232cf76225de81c18b900baddfe2d9febb34a3a11af72cec99ee8ea42f775315d41bd1aa3653a2ed848b3ce17df4adbad3de5c3f6d06fd4f7cc6648a65d6c30a4f4786df6e9a67a6fe72217919f9bc2f21ea07f72c0a901191d201253152b27283ac2cb2686a042f6017c4112824020a9f38ee97c64a04b58f7ac7b722bd6d157d6766ea0553462dceeb9a7c8d2dd332b4d51b9b1b4bd7337d333a3244f5b139ae50e3a6649225955af6292ea2caacd0f5f360363feb2d649ac357ff73e160c057ac08f3357c284283e9a5f648c37dd3b6b11f4ec3341bac27055658b282486578c508f08b5324e64a046fb4cd25530f467295f3364980f0a5f91a55802e5bb9ddba8fd04459d50cf3bfa588f31e5b30e1a4b2309eeb1b565c353ce969380c39bed802554125722ac1a82d94548e746a8708cddfcd1793a0fb9e20fe6617793c5215aaa34f868ee8d07691e64c47a829ee6c55d83da515c59f9ae7f8a4a11ae10a744427b278f01de06e7152543f8401029165b80b79639c681697e6c538258f2c2d8211cef7037cf49a3fa572f818a5d4f7051ffae3332da84467a316dead18c974a26b517f3866a762d0701ebf070e2bd9ca5fc679c436cd5976b26fd659d2f800e166bae536bd0fa6203da103aecd4fa43aba2a939555f72054010ff7453c6a1414d9cf6aab5bf32fdd0d921d499e3d07b753d814444c618bc7a31edd62ee086efd9f0eb9db0fa20ff06926941c062888f1fa566296f97194da6e4d1cbeda1eb59d0b795e7e1ebbbb465eca7c7ed7da19c0dbeca88439f35b526b871d452e4a95c0c0ce6dc01c0caefab4be0720613fa37f823dd40c20b9664a4b015215cc56e5cf7ab6be66a056aa47c6da7d9fd515ad165e1ede648a0b6f12a0c9a855581dd33b9b0cad67e828a4f815da72f3f86d886cef17cc4780425925a47b360268ed5ad673b9628a319fc9bd819dd20dce03d06bcf75e191ca38a88801c3d0318bbb588b33cacaa8244e926b9ed671e0f90be698a7b1be9ac638d65d42fa0e182b34b68e3f0d71c06341929ce22ee329fa1186af3024a69e288e2e6122024356f8ee20ad1ce5fea99f438bba6a6ecaae58e268a53d8a3b1d76d2fa0f634b875474b2307b27777fa419e2178a2332cbef748c3e036040950ba6241213f8e013e1f69ce20a4b2e118fce3e63102091db2d8ca0e088f60a4e5d661626047ae31ac1fe1ccf73c4db13e1ffe05fee3d695c82f77108166e66d115c3d59293b1fee6b75eae17035784910826323803672f3e12dd60eab209b29f4d628749a25e2c54af460e182cbb75a5b417f6d43f71ec245ff1d543321319cf2829cc87c16223b7b3184347f71e4866ff7238aafbdc4047d2341d201196ad2d67113be67831d6fc010d268df7679fb53a8f61777ccf3b13b4ec223ad58923419e68a8a936b3c0dcfbf26eb4f100b05d0c458b5e9e7fe20a5282d2b97f7496aa3577f9b93d2940c89da659c3cf5f22c1f92c1cf338b067f954a419edeba6bb0cd49c3a3718991a77075a89a117d2cbebf0fed50220a5152ab21efd5436e25f735ef05a06062efdf3c935fb9e7f97afe65d007506902a0f0021e9860ec9ca26710c5293bbce3c5a2737a1ad0e1490cce5f0d17e1cf15e2d7dbd92776ef3f0ff08cbfc8185a48a85756d5d7220aa817673bc5a1181fe61654db6efe98d9a6a8f81c56e7d411f40c402f1b5d7a5bde9d2806f7ed3134e9ce0c38dc9c559a616fcadf00be14b4bc58496a0ef0858bb1d44141690b633fb53a4c9f56f96927d0f33e6357de8861cf8053d7ca247f9ad8fecad733e32652ad385ceabffc3da8466e2412845ee1360625014960eda5eed493f3ecf83096458139b21c1a88df16b801ebd873103793633bf8024895aa72cf8177b6f162fd719477c447118e039d13c796a147f2c372523e96c22a13fab711ce10913a17c157075f8ab4bab9ea0dc0ad2cc5c30fb846adbb16475d31a02364049cb8bee6a1dde0107499cc4e0b06f5525d88b14e39215d2720f735a7581b922028fd7095f91a63665b2010e3dfa17b5cfd4dad28015fce17c264bd2be5c52757d7081a6ce6c7f889d47f962beed1324bbe743451167c54d8398213be1c9b02aa705d32344e4b27b03977301d9ba616ebd91779dd9599127a8540f0387c24ef3b4e7fe2c5128f7091c652f52e57a0dc65e14d63fc5f3c84d8b39e6ee46bbf8cccde1b460f0e9f0a1a92349b32eebf49a77a6500b6981952e0f9c2ee83684580a35594ce9a97f487146746c47c32f314f39b6e417bf668ad9237837e0cdd139829986b09fdecbb7072d3beef45abe1f07c616800c5ab93eb03d9652a56f6e00feccccf978243335d2d406088ec005a8f14d1e68c52682b7f9790ea32665f7833a4016d6611704372afc242d70afab6419956080311066c0a42a2fe8fdacbd91c69b2dd54fd910400be29d10d1e1872679e789c314619ca9d9afd5e9a670d27ee009abb8c26202c6f3ca412a98a9d4b9b033720155a8e86f37f070f5e522843cd8e279eb891fd8bbf7745e43f991222cde747a567c6e7069bc0b0d1b06f7a364df47cd92aa531390a9101803ab47edd2f479bded95ac3bae75374912510cea0838af8e37073e64d53af8050cc57bb3948cf16bd7356fc6774eafc316b44171bf1dfdadf5167dea3a10a8ce77fbba51381cc4c1cb9eb33e2d081cc449c85348085e4696998a70b2cddad1ff3edf96daef1fbb54fefcf25a66f452f98f6336edfec06cbc34989c3fca343eeb27845f3733fda4559603993c2721961fc56c1b20c74522a901fc4780dbb95076db879d88c76492f75ed0d444ecf26f57712bd318c8704573782d323f9db0234c99c957df27a4b894c09c5477d438023d9b9f1a62f6bb3f0a7c61e74e1fd4eaf27e32e0393a0badbc4c6c9e1bb9381ec0310155e398a94ff62024e8edf80603046fd9f40bc81fc68a13a312186113413154e474f81779fa4de031795eb6b10dab4aec0c6d58c6ca262c1160d08c7d8e08089387c9a64874ef98285d67cf94b3de15fc2e4e371d31d3ecba0a4638c54a8ebcbeb7b21e05fe7822bb87a3e0d72b657778b348e2800596a1030b06e1dd7700e77464efe52478083da77c3bcbad68bf405293673d387651d4f4ff2719edad75cbf55598b9cd8355f475cf5043555c8514202b3b288d5ba3b55cb58631194fa21b4af69d8794308c7082030917c0f878e532317c09158ead399eb0e93916bfc672fec0db1a68bb8ff6d7a08ca2d05d30ae4b4a7e7b8c1bbf3c8cc7a7f34904d2ef2bef72ffd539820c267ddf269bd52f9113897c5c7f33120b81c191c7a8dbecabe0ac73ebd1cb7e4c75a5d80b2b546bcafeb92ea94aebfba28919e895a62202906c7148463b3fb6b04be91bc801dbd10199b5b4a81bc3ca6c0698c723daa2cee50da0922d7eebc37e3fce9aef48de4d3904ab89a798c2eb0dcef7361917203eb68362bc80920f3c9de067e141dae283c56228f87cd7904f3dac6df3897a707f7381c352853ae56c6752df3937c1bb247185468db57d8e4ef3a8b4fd596019a64d676834996e24f52d260f836003188e81b125e5bd43e82e8963dc69fe69b988db1b1f303c76d2c346d5dd7a1e7701e74ad135f4d8bfbe51938f13c7ad38f0239cca6c11c49e351dbb830ca36143bfdf5a8cb4b7d692cd9752e16b69d195f3475b652b51eca1f3ab403dc15f42eaf574b603c0d417a3668c1ba0ec79100d68f00ae461afe9e855685d8ad739bd8098a03471a5ab54f3f78c234f67a353e7c10dd3577c4d5ef711e4ef54f491cd27df11a7d91868b2f309fe6790582fae307a3332aefdc302a1", 0xcad}, {&(0x7f00000014c0)="872dade826c26b2ac2f1bb824bb83b4dfeb0f45ecfe2ea164d2cce41", 0x1c}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="575dd63bf19ccad78d6115136f5a8d1416c400db85610136172880315948498a1d154470a960b351c4de8777bea335066a35d0", 0x33}, {&(0x7f0000002540)="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", 0x1000}], 0x9}}, {{&(0x7f0000003600)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003680)="1bd7332b78be7af4eda646668beee3345401c5991afcd33fb24e8f3665431489e8e4a2a12d1d8a1c1f1719ef7747624e7f45633803d18111177ca9ebfff00e733f6548709620d91fc07442313a4aeee92f9499b8ba8b60e60e450c7ad74f3f4f2aa4b402186e18481e84a77a19e96b167347c07fadbb48b5f88e8d80035197609cf3d19e0924b2af1b499461f84ccb4d157829d1ddf008dc896b81a30377aa538f0309d8211f21a87260bfa3ecabf6f9e8eef48c9d9cf9d8cfcf0f340fc825", 0xbf}, {&(0x7f0000003740)="5460520e440580afa6989ff29c629f871f362bc3c1d127a29ecd875d8c713650c6af4e013e3eac3a0724abedcff98b9a426b18423ad1cfc5dfa55ff19239e92a4056ec005b0260122ee538a1d84651fa5cbb58c24c358578576b3a1db111761f3c70246581315799deff546a39c6b275546ff578de844895f0cba18dcad963f1a7a7a428aba1c0382fc9f42c8f1035c71a2045bdb9b42ce6ebf7fd66658d0cdc37062bc74f47268728bb8eac876f5533ea97d5861f154e27d915fef3d7d9eb0e1cc584c45c", 0xc5}, {&(0x7f0000003840)="6dee9afe5425e69956746656c93647a62d81e12b857cf95d6693e68184127d0128c636c722c8cea49ef641109c3ed9a251c19a0081118028c9b0eb4ae372bf56d47a73655f260466683ef1bb2b865cbbbe3a66b632f09f329a31698b5c45f13d54d5d039edc6e9fbaa051ae5dbd2b5c6f9eea1f2808de228b8a27d6f04045bb362223f72814747121a3bf323289b8d350b38c06d9c1b3d52b17c75a7177db0fb34384de1743b77f0eaba113deff372d593b84fcc6a44fec1f5fda478074293c8c9593eba227ad18a5c140ec0c5f1e7e832c23eefecaae768f292dfbfb2a75b724d77e5e19ab98ed276", 0xe9}, {&(0x7f0000003940)="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", 0xff}], 0x4, &(0x7f0000003a80)=[{0xe0, 0x116, 0x6, "439ab884305e9b74b513f83969e8e6a866c99094e4ebd51d33b9df273aa448c7f6eb4842a795ac37ffc8996eb8a75ba54f4fab4ef4a1709681d6ce305d2292499a41e96f8e8e1a80460aac9ee46c80571a7c3d846fa7e39d971b5e82df030475062c3bc8c18cc46e3c70d62130ac946f4a6bc82ddab3edfd72fee20caefca5d05ceaf9a585e4e7d93917206f435b2168e815dbc17a67f0853604e61baa6c914587a09f22e90829a8e55bd74a8a13a775db642876be85630a6e34615c4e6f6e3d8df1679b7c6b7c752499"}, {0x38, 0x10d, 0x2f47, "679b3126aca81e96e2aa7d44e3a68a6a95ac9ccd183b1fbf4dd56d3c064f5b0e4d8ed8ff32729056"}], 0x118}}, {{&(0x7f0000003bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x4, 0x3, 0x4, {0xa, 0x4ea3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}}, 0x80, &(0x7f0000004200), 0x9, &(0x7f00000042c0)=[{0x48, 0x10a, 0x0, "ec386f9116687de07cdd30c26610d1bb0037d5b653223ce9f12e5c2137ed4c2c7d356bf3935351d1b7bb4ed7f35789a24c9b69bb"}, {0xf0, 0x109, 0x9, "a332384b9fe7826827c7ce2d96aacdcb5e9911f8753f12efabaf4243950a690917b886be6c5ea18ac33b8cada1fa2e3fa4568c945aa8c16e5f46f829b1bc028d8df9362a70e275c6765f68fa726ea9046367b3d853677e7f9e8d10afcc20dca95787f8b17c6e8546df37b2b53f12b8a13b022525b946181713d179b3e1b37fb3870e493a9a7e14c5a2d12c2a38eb09d973daebcc66f1194cf5b64f7a73d5d92f37dbae3092ff33d9ce77fb34481d8e6f13f43ecc416645fe8b92ed8e1669df5fe14ed30dc21c9833786f47362b6f1d0602ca1044a6121c0676d4484205989b53"}, {0xc8, 0x112, 0x2, "6da4b6b01521f2d1909101fec205021032218d21713194aab604c07dcd26ffbd468c291cdafe03d806d5e154cbcc3825197efde223255f0ad4073bd994916c22ebd0897cb0fac2feafffc382738a16c1ab7cd56eda04a19453f850a8cdc466a4ad54b44a7eb5a03a36f92f69b75f55a926eba858d85cd07261e77b20b95b01bdfe9e0f6eb27bd43120cf903889f43c7f2bbe2f0dc468c60a435ba14352b1eb4f6550e546ce2966587c414ce7be4aa729d9e13164e4"}, {0xc8, 0x10b, 0xc, "3f1cd2c356581478ae301570e75df0c645c9e4999d4cf15f03afbb2fae49296a41d6c3e834ff836b36a34f37d0f974b7125474efd9c153b77e28dfb88e352dabd1d7d5c2f75688418d14a5bb319b4dd04e3e1087399297dfb2cafddcce40fe2bf8413b41bd80be95be48d313a0c0c880adc411ca5f33ef107666f7bc48acb5024a4063f2f4e15f42aabd8ffbd17a5d5047f1c16afc2640331af356d5c45ccd7dfa53c8c664a6ed2fbcb33f925dab6ce1afffda2a21e7"}], 0x2c8}}], 0x3, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009520000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="110000000000000000000097"], 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.518104108s ago: executing program 7 (id=1065): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 1.409291274s ago: executing program 4 (id=1066): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 1.115974464s ago: executing program 7 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 0s ago: executing program 4 (id=1068): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x400, 0x0) pipe2$9p(0x0, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000004c0)={0x18, 0xd, 0x2, {{0x2, 0x1, 0x7}, 0x1000000}}, 0x18) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESHEX=r2]) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) kernel console output (not intermixed with test programs): T8269] Call Trace: [ 418.507196][ T8269] [ 418.507202][ T8269] dump_stack_lvl+0x189/0x250 [ 418.507223][ T8269] ? __pfx____ratelimit+0x10/0x10 [ 418.507241][ T8269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.507256][ T8269] ? __pfx__printk+0x10/0x10 [ 418.507273][ T8269] ? __pfx___might_resched+0x10/0x10 [ 418.507289][ T8269] should_fail_ex+0x46c/0x600 [ 418.507315][ T8269] ? __alloc_skb+0x255/0x430 [ 418.507328][ T8269] should_failslab+0xa8/0x100 [ 418.507346][ T8269] ? __alloc_skb+0x255/0x430 [ 418.507356][ T8269] kmem_cache_alloc_node_noprof+0x78/0x700 [ 418.507378][ T8269] __alloc_skb+0x255/0x430 [ 418.507392][ T8269] ? __pfx___alloc_skb+0x10/0x10 [ 418.507406][ T8269] ? netlink_autobind+0xdb/0x300 [ 418.507422][ T8269] ? netlink_autobind+0x2c2/0x300 [ 418.507441][ T8269] netlink_sendmsg+0x5c6/0xb30 [ 418.507463][ T8269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.507485][ T8269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.507502][ T8269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.507518][ T8269] __sock_sendmsg+0x21c/0x270 [ 418.507540][ T8269] ____sys_sendmsg+0x508/0x810 [ 418.507561][ T8269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.507582][ T8269] ? import_iovec+0x74/0xa0 [ 418.507605][ T8269] ___sys_sendmsg+0x21f/0x2a0 [ 418.507621][ T8269] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.507663][ T8269] ? __fget_files+0x2a/0x420 [ 418.507681][ T8269] ? __fget_files+0x3a6/0x420 [ 418.507705][ T8269] __x64_sys_sendmsg+0x1a1/0x260 [ 418.507722][ T8269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.507744][ T8269] ? __pfx_ksys_write+0x10/0x10 [ 418.507762][ T8269] ? do_syscall_64+0xbe/0xf80 [ 418.507784][ T8269] do_syscall_64+0xfa/0xf80 [ 418.507802][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.507816][ T8269] ? clear_bhb_loop+0x60/0xb0 [ 418.507844][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.507857][ T8269] RIP: 0033:0x7fb50052f749 [ 418.507872][ T8269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.507884][ T8269] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.507900][ T8269] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 418.507911][ T8269] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000003 [ 418.507921][ T8269] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 418.507931][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.507939][ T8269] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 418.507965][ T8269] [ 418.596219][ T6013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.640658][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.641267][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.642078][ T8259] binder: 8256:8259 ioctl 4008af30 200000000200 returned -22 [ 418.657055][ T5159] bcm5974 2-1:0.217: could not read from device [ 418.713902][ T5159] bcm5974 2-1:0.217: could not read from device [ 418.715031][ T5950] usb 2-1: USB disconnect, device number 32 [ 418.837052][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.619'. [ 419.128267][ T6013] DVB: Unable to find symbol mt352_attach() [ 419.195055][ T6013] DVB: Unable to find symbol nxt6000_attach() [ 419.195128][ T6013] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 419.205930][ T6013] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 419.214059][ T6013] dvb-usb: schedule remote query interval to 1000 msecs. [ 419.214081][ T6013] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 419.214096][ T6013] dvb-usb: bulk message failed: -22 (7/0) [ 419.214111][ T6013] dvb-usb: bulk message failed: -22 (7/0) [ 419.222854][ T6013] usb 5-1: USB disconnect, device number 21 [ 419.476430][ T6013] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 419.677421][ T8280] fuse: Bad value for 'fd' [ 420.753761][ T8286] veth2: entered promiscuous mode [ 420.753787][ T8286] veth2: entered allmulticast mode [ 421.264602][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.5.624'. [ 421.842549][ T5123] Bluetooth: hci5: command 0x0406 tx timeout [ 422.012121][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 422.162049][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 422.166855][ T31] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 422.166885][ T31] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 422.166906][ T31] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.166921][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 422.219631][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 422.219649][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.219659][ T31] usb 7-1: Product: syz [ 422.219666][ T31] usb 7-1: Manufacturer: syz [ 422.219672][ T31] usb 7-1: SerialNumber: syz [ 422.273299][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 422.322146][ T5900] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 422.455301][ T50] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 422.455331][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.455349][ T50] usb 8-1: Product: syz [ 422.455439][ T50] usb 8-1: Manufacturer: syz [ 422.455452][ T50] usb 8-1: SerialNumber: syz [ 422.465823][ T50] usb 8-1: config 0 descriptor?? [ 422.467572][ T31] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 422.482027][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 422.503878][ T50] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 422.511586][ T50] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 422.514950][ T50] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 422.515006][ T50] usb 8-1: media controller created [ 422.526640][ T5900] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 422.526665][ T5900] usb 5-1: config 0 has no interface number 0 [ 422.564644][ T5900] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=bf.ea [ 422.564672][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.564689][ T5900] usb 5-1: Product: syz [ 422.564702][ T5900] usb 5-1: Manufacturer: syz [ 422.564714][ T5900] usb 5-1: SerialNumber: syz [ 422.570087][ T5900] usb 5-1: config 0 descriptor?? [ 422.574841][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.630362][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.217/input/input26 [ 422.695858][ T50] DVB: Unable to find symbol mt352_attach() [ 422.745924][ T50] DVB: Unable to find symbol nxt6000_attach() [ 422.745939][ T50] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 422.751230][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27 [ 422.756903][ T50] dvb-usb: schedule remote query interval to 1000 msecs. [ 422.756923][ T50] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 422.756939][ T50] dvb-usb: bulk message failed: -22 (7/0) [ 422.756953][ T50] dvb-usb: bulk message failed: -22 (7/0) [ 422.766357][ T50] usb 8-1: USB disconnect, device number 6 [ 422.797795][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.798302][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.798768][ T8309] binder: 8308:8309 ioctl 4008af30 200000000200 returned -22 [ 422.805333][ T31] usb 5-1: USB disconnect, device number 22 [ 422.822031][ T5159] bcm5974 5-1:0.217: could not read from device [ 422.924461][ T8314] FAULT_INJECTION: forcing a failure. [ 422.924461][ T8314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.924484][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.5.632 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 422.924495][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.924502][ T8314] Call Trace: [ 422.924506][ T8314] [ 422.924511][ T8314] dump_stack_lvl+0x189/0x250 [ 422.924529][ T8314] ? __pfx____ratelimit+0x10/0x10 [ 422.924543][ T8314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.924555][ T8314] ? __pfx__printk+0x10/0x10 [ 422.924565][ T8314] ? __might_fault+0xb0/0x130 [ 422.924584][ T8314] should_fail_ex+0x46c/0x600 [ 422.924600][ T8314] _copy_from_iter+0x1cd/0x1630 [ 422.924620][ T8314] ? __pfx__copy_from_iter+0x10/0x10 [ 422.924634][ T8314] ? rcu_is_watching+0x15/0xb0 [ 422.924645][ T8314] ? trace_kmalloc+0x1f/0xb0 [ 422.924656][ T8314] ? __kmalloc_noprof+0x254/0x7e0 [ 422.924666][ T8314] ? rcu_read_lock_any_held+0xb3/0x120 [ 422.924677][ T8314] ? kernfs_fop_write_iter+0x159/0x540 [ 422.924691][ T8314] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 422.924703][ T8314] kernfs_fop_write_iter+0x19c/0x540 [ 422.924721][ T8314] vfs_write+0x5d5/0xb40 [ 422.924735][ T8314] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 422.924750][ T8314] ? __pfx_vfs_write+0x10/0x10 [ 422.924759][ T8314] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 422.924776][ T8314] ? mutex_lock_nested+0x154/0x1d0 [ 422.924786][ T8314] ? fdget_pos+0x253/0x320 [ 422.924804][ T8314] ksys_write+0x14b/0x260 [ 422.924817][ T8314] ? __pfx_ksys_write+0x10/0x10 [ 422.924830][ T8314] ? do_syscall_64+0xbe/0xf80 [ 422.924849][ T8314] do_syscall_64+0xfa/0xf80 [ 422.924870][ T8314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.924886][ T8314] ? clear_bhb_loop+0x60/0xb0 [ 422.924906][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.924922][ T8314] RIP: 0033:0x7fdb2d63f749 [ 422.924938][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.924952][ T8314] RSP: 002b:00007fdb2b8a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.924970][ T8314] RAX: ffffffffffffffda RBX: 00007fdb2d895fa0 RCX: 00007fdb2d63f749 [ 422.924983][ T8314] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000005 [ 422.924992][ T8314] RBP: 00007fdb2b8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.924998][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.925004][ T8314] R13: 00007fdb2d896038 R14: 00007fdb2d895fa0 R15: 00007ffe933b2058 [ 422.925022][ T8314] [ 423.164556][ T50] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 423.278291][ T8317] fuse: Unknown parameter 'user_i00000000000000000000' [ 423.464169][ T8325] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.457921][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.639'. [ 424.868770][ T50] usb 7-1: USB disconnect, device number 6 [ 424.912845][ T50] usblp0: removed [ 424.956192][ T37] audit: type=1326 audit(1764939427.038:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03569b65e7 code=0x7ffc0000 [ 424.956414][ T37] audit: type=1326 audit(1764939427.038:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035695b829 code=0x7ffc0000 [ 424.956674][ T37] audit: type=1326 audit(1764939427.038:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03569bf749 code=0x7ffc0000 [ 424.957089][ T37] audit: type=1326 audit(1764939427.038:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f03569bf749 code=0x7ffc0000 [ 424.957355][ T37] audit: type=1326 audit(1764939427.038:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03569bf749 code=0x7ffc0000 [ 424.958710][ T37] audit: type=1326 audit(1764939427.038:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f03569bf749 code=0x7ffc0000 [ 424.958929][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.7.641'. [ 425.207432][ T8348] fuse: Unknown parameter 'user_id00000000000000000000' [ 425.257228][ T37] audit: type=1326 audit(1764939427.338:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03569bf749 code=0x7ffc0000 [ 425.257391][ T37] audit: type=1326 audit(1764939427.338:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f03569b65e7 code=0x7ffc0000 [ 425.257627][ T37] audit: type=1326 audit(1764939427.338:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f035695b829 code=0x7ffc0000 [ 425.257895][ T37] audit: type=1326 audit(1764939427.338:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8341 comm="syz.7.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03569bf749 code=0x7ffc0000 [ 425.362996][ T8353] FAULT_INJECTION: forcing a failure. [ 425.362996][ T8353] name failslab, interval 1, probability 0, space 0, times 0 [ 425.363030][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.7.648 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.363050][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.363061][ T8353] Call Trace: [ 425.363068][ T8353] [ 425.363076][ T8353] dump_stack_lvl+0x189/0x250 [ 425.363102][ T8353] ? __pfx____ratelimit+0x10/0x10 [ 425.363132][ T8353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.363153][ T8353] ? __pfx__printk+0x10/0x10 [ 425.363178][ T8353] ? __pfx___might_resched+0x10/0x10 [ 425.363202][ T8353] should_fail_ex+0x46c/0x600 [ 425.363227][ T8353] ? __alloc_skb+0x255/0x430 [ 425.363243][ T8353] should_failslab+0xa8/0x100 [ 425.363266][ T8353] ? __alloc_skb+0x255/0x430 [ 425.363281][ T8353] kmem_cache_alloc_node_noprof+0x78/0x700 [ 425.363311][ T8353] __alloc_skb+0x255/0x430 [ 425.363331][ T8353] ? __pfx___alloc_skb+0x10/0x10 [ 425.363351][ T8353] ? netlink_autobind+0xdb/0x300 [ 425.363370][ T8353] ? netlink_autobind+0x2c2/0x300 [ 425.363394][ T8353] netlink_sendmsg+0x5c6/0xb30 [ 425.363424][ T8353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.363453][ T8353] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.363474][ T8353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.363494][ T8353] __sock_sendmsg+0x21c/0x270 [ 425.363520][ T8353] ____sys_sendmsg+0x508/0x810 [ 425.363546][ T8353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.363575][ T8353] ? import_iovec+0x74/0xa0 [ 425.363602][ T8353] ___sys_sendmsg+0x21f/0x2a0 [ 425.363624][ T8353] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.363681][ T8353] ? __fget_files+0x2a/0x420 [ 425.363702][ T8353] ? __fget_files+0x3a6/0x420 [ 425.363734][ T8353] __x64_sys_sendmsg+0x1a1/0x260 [ 425.363756][ T8353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.363786][ T8353] ? __pfx_ksys_write+0x10/0x10 [ 425.363810][ T8353] ? do_syscall_64+0xbe/0xf80 [ 425.363836][ T8353] do_syscall_64+0xfa/0xf80 [ 425.363858][ T8353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.363874][ T8353] ? clear_bhb_loop+0x60/0xb0 [ 425.363890][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.363904][ T8353] RIP: 0033:0x7f03569bf749 [ 425.363921][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.363935][ T8353] RSP: 002b:00007f0354c26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.363955][ T8353] RAX: ffffffffffffffda RBX: 00007f0356c15fa0 RCX: 00007f03569bf749 [ 425.363967][ T8353] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 425.363985][ T8353] RBP: 00007f0354c26090 R08: 0000000000000000 R09: 0000000000000000 [ 425.363996][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.364007][ T8353] R13: 00007f0356c16038 R14: 00007f0356c15fa0 R15: 00007ffe0508f428 [ 425.364038][ T8353] [ 425.562286][ T6012] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 425.722798][ T6012] usb 6-1: Using ep0 maxpacket: 32 [ 425.725472][ T6012] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 425.725497][ T6012] usb 6-1: config 0 has no interface number 0 [ 425.733288][ T6012] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=bf.ea [ 425.733315][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.733333][ T6012] usb 6-1: Product: syz [ 425.733345][ T6012] usb 6-1: Manufacturer: syz [ 425.733358][ T6012] usb 6-1: SerialNumber: syz [ 425.752401][ T6012] usb 6-1: config 0 descriptor?? [ 425.789341][ T6012] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.217/input/input28 [ 425.866034][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 425.866988][ T8367] netlink: 'syz.1.654': attribute type 6 has an invalid length. [ 425.867004][ T8367] netlink: 104 bytes leftover after parsing attributes in process `syz.1.654'. [ 425.882603][ T8365] FAULT_INJECTION: forcing a failure. [ 425.882603][ T8365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.882636][ T8365] CPU: 0 UID: 0 PID: 8365 Comm: syz.6.652 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.882656][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.882667][ T8365] Call Trace: [ 425.882674][ T8365] [ 425.882683][ T8365] dump_stack_lvl+0x189/0x250 [ 425.882708][ T8365] ? __pfx____ratelimit+0x10/0x10 [ 425.882731][ T8365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.882752][ T8365] ? __pfx__printk+0x10/0x10 [ 425.882770][ T8365] ? __might_fault+0xb0/0x130 [ 425.882809][ T8365] should_fail_ex+0x46c/0x600 [ 425.882836][ T8365] _copy_to_iter+0x404/0x1790 [ 425.882874][ T8365] ? __pfx__copy_to_iter+0x10/0x10 [ 425.882896][ T8365] ? m_stop+0x125/0x2d0 [ 425.882911][ T8365] ? mmput+0xe/0x70 [ 425.882934][ T8365] ? m_stop+0x24e/0x2d0 [ 425.882955][ T8365] seq_read_iter+0xbf6/0xe20 [ 425.882997][ T8365] seq_read+0x36c/0x480 [ 425.883025][ T8365] ? __pfx_seq_read+0x10/0x10 [ 425.883058][ T8365] ? rw_verify_area+0x2ac/0x4e0 [ 425.883076][ T8365] ? __pfx_seq_read+0x10/0x10 [ 425.883096][ T8365] vfs_read+0x206/0xa30 [ 425.883123][ T8365] ? __pfx_vfs_read+0x10/0x10 [ 425.883139][ T8365] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 425.883167][ T8365] ? mutex_lock_nested+0x154/0x1d0 [ 425.883184][ T8365] ? fdget_pos+0x253/0x320 [ 425.883216][ T8365] ksys_read+0x14b/0x260 [ 425.883238][ T8365] ? __pfx_ksys_read+0x10/0x10 [ 425.883261][ T8365] ? do_syscall_64+0xbe/0xf80 [ 425.883286][ T8365] do_syscall_64+0xfa/0xf80 [ 425.883308][ T8365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.883325][ T8365] ? clear_bhb_loop+0x60/0xb0 [ 425.883345][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.883362][ T8365] RIP: 0033:0x7fb50052f749 [ 425.883379][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.883394][ T8365] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.883412][ T8365] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 425.883425][ T8365] RDX: 0000000000002020 RSI: 00002000000005c0 RDI: 0000000000000003 [ 425.883437][ T8365] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 425.883448][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.883458][ T8365] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 425.883490][ T8365] [ 426.015999][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.016556][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.082056][ T5159] bcm5974 6-1:0.217: could not read from device [ 426.152059][ T6339] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 426.505907][ T8380] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 426.656293][ T6012] usb 6-1: USB disconnect, device number 3 [ 426.662048][ T6339] usb 8-1: Using ep0 maxpacket: 16 [ 426.664416][ T6339] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 426.664445][ T6339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.667720][ T6339] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.667746][ T6339] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.667764][ T6339] usb 8-1: Product: syz [ 426.667776][ T6339] usb 8-1: Manufacturer: syz [ 426.667789][ T6339] usb 8-1: SerialNumber: syz [ 426.682889][ T6339] usb 8-1: config 0 descriptor?? [ 426.685003][ T6339] usb 8-1: can't set config #0, error -71 [ 426.688576][ T6339] usb 8-1: USB disconnect, device number 7 [ 427.462642][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.663'. [ 427.462977][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.663'. [ 428.084432][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.667'. [ 428.840063][ T8418] FAULT_INJECTION: forcing a failure. [ 428.840063][ T8418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.840097][ T8418] CPU: 1 UID: 0 PID: 8418 Comm: syz.6.671 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 428.840118][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.840128][ T8418] Call Trace: [ 428.840136][ T8418] [ 428.840144][ T8418] dump_stack_lvl+0x189/0x250 [ 428.840171][ T8418] ? __pfx____ratelimit+0x10/0x10 [ 428.840193][ T8418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.840217][ T8418] ? __pfx__printk+0x10/0x10 [ 428.840235][ T8418] ? __might_fault+0xb0/0x130 [ 428.840267][ T8418] should_fail_ex+0x46c/0x600 [ 428.840294][ T8418] _copy_from_user+0x2d/0xb0 [ 428.840318][ T8418] ___sys_recvmsg+0x12e/0x510 [ 428.840345][ T8418] ? __pfx____sys_recvmsg+0x10/0x10 [ 428.840389][ T8418] ? __fget_files+0x3a6/0x420 [ 428.840423][ T8418] do_recvmmsg+0x30d/0x770 [ 428.840452][ T8418] ? __pfx_do_recvmmsg+0x10/0x10 [ 428.840469][ T8418] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 428.840493][ T8418] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 428.840526][ T8418] ? arch_do_signal_or_restart+0x2e7/0x7a0 [ 428.840576][ T8418] __x64_sys_recvmmsg+0x190/0x240 [ 428.840600][ T8418] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 428.840624][ T8418] ? do_syscall_64+0xbe/0xf80 [ 428.840650][ T8418] do_syscall_64+0xfa/0xf80 [ 428.840673][ T8418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.840690][ T8418] ? clear_bhb_loop+0x60/0xb0 [ 428.840711][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.840728][ T8418] RIP: 0033:0x7fb50052f749 [ 428.840745][ T8418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.840760][ T8418] RSP: 002b:00007fb4fe775038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 428.840779][ T8418] RAX: ffffffffffffffda RBX: 00007fb500786090 RCX: 00007fb50052f749 [ 428.840791][ T8418] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000007 [ 428.840803][ T8418] RBP: 00007fb4fe775090 R08: 0000000000000000 R09: 0000000000000000 [ 428.840814][ T8418] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 428.840825][ T8418] R13: 00007fb500786128 R14: 00007fb500786090 R15: 00007ffef9f90d98 [ 428.840855][ T8418] [ 429.282721][ T8426] Bluetooth: MGMT ver 1.23 [ 429.579200][ T8430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.676'. [ 429.631129][ T8434] 9pnet_fd: Insufficient options for proto=fd [ 429.701293][ T8437] FAULT_INJECTION: forcing a failure. [ 429.701293][ T8437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.701327][ T8437] CPU: 0 UID: 0 PID: 8437 Comm: syz.6.678 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 429.701347][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.701357][ T8437] Call Trace: [ 429.701365][ T8437] [ 429.701372][ T8437] dump_stack_lvl+0x189/0x250 [ 429.701397][ T8437] ? __pfx____ratelimit+0x10/0x10 [ 429.701419][ T8437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.701434][ T8437] ? __pfx__printk+0x10/0x10 [ 429.701444][ T8437] ? __might_fault+0xb0/0x130 [ 429.701465][ T8437] should_fail_ex+0x46c/0x600 [ 429.701481][ T8437] copy_fpstate_to_sigframe+0xa60/0xcc0 [ 429.701496][ T8437] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 429.701510][ T8437] ? exit_to_user_mode_loop+0x87/0x4f0 [ 429.701530][ T8437] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 429.701548][ T8437] ? do_raw_spin_lock+0x121/0x290 [ 429.701566][ T8437] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 429.701581][ T8437] ? fpu__alloc_mathframe+0xad/0x130 [ 429.701596][ T8437] get_sigframe+0x58d/0x7d0 [ 429.701613][ T8437] ? __pfx_get_sigframe+0x10/0x10 [ 429.701627][ T8437] ? rt_mutex_slowunlock+0x493/0x8a0 [ 429.701637][ T8437] ? rt_spin_lock+0x1c1/0x3e0 [ 429.701652][ T8437] x64_setup_rt_frame+0x15c/0xd40 [ 429.701665][ T8437] ? rt_spin_unlock+0x150/0x200 [ 429.701678][ T8437] ? rt_spin_unlock+0x161/0x200 [ 429.701689][ T8437] ? get_signal+0x1121/0x1310 [ 429.701722][ T8437] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 429.701756][ T8437] arch_do_signal_or_restart+0x3d6/0x7a0 [ 429.701782][ T8437] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 429.701813][ T8437] ? exit_to_user_mode_loop+0x55/0x4f0 [ 429.701828][ T8437] exit_to_user_mode_loop+0x87/0x4f0 [ 429.701841][ T8437] ? rcu_is_watching+0x15/0xb0 [ 429.701854][ T8437] do_syscall_64+0x2e3/0xf80 [ 429.701871][ T8437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.701887][ T8437] ? clear_bhb_loop+0x60/0xb0 [ 429.701906][ T8437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.701921][ T8437] RIP: 0033:0x7fb50052f749 [ 429.701936][ T8437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.701951][ T8437] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 429.701969][ T8437] RAX: 0000000000000000 RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 429.701981][ T8437] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000003 [ 429.701992][ T8437] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 429.702003][ T8437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.702010][ T8437] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 429.702027][ T8437] [ 430.173021][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.681'. [ 430.197225][ T37] kauditd_printk_skb: 56 callbacks suppressed [ 430.197243][ T37] audit: type=1326 audit(1764939432.278:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba66d0f749 code=0x7ffc0000 [ 430.197695][ T37] audit: type=1326 audit(1764939432.278:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba66d065e7 code=0x7ffc0000 [ 430.197751][ T37] audit: type=1326 audit(1764939432.278:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba66cab829 code=0x7ffc0000 [ 430.197789][ T37] audit: type=1326 audit(1764939432.278:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8429 comm="syz.4.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba66d0f749 code=0x7ffc0000 [ 430.985663][ T8456] FAULT_INJECTION: forcing a failure. [ 430.985663][ T8456] name failslab, interval 1, probability 0, space 0, times 0 [ 430.985696][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.985718][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.985729][ T8456] Call Trace: [ 430.985737][ T8456] [ 430.985744][ T8456] dump_stack_lvl+0x189/0x250 [ 430.985771][ T8456] ? __pfx____ratelimit+0x10/0x10 [ 430.985793][ T8456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.985814][ T8456] ? __pfx__printk+0x10/0x10 [ 430.985838][ T8456] ? __pfx___might_resched+0x10/0x10 [ 430.985862][ T8456] ? fs_reclaim_acquire+0x7d/0x100 [ 430.985889][ T8456] should_fail_ex+0x46c/0x600 [ 430.985914][ T8456] ? mas_alloc_nodes+0x291/0x350 [ 430.985934][ T8456] should_failslab+0xa8/0x100 [ 430.985957][ T8456] ? mas_alloc_nodes+0x291/0x350 [ 430.985975][ T8456] kmem_cache_alloc_noprof+0x6f/0x6d0 [ 430.986007][ T8456] mas_alloc_nodes+0x291/0x350 [ 430.986033][ T8456] mas_preallocate+0x2e0/0x670 [ 430.986060][ T8456] ? __pfx_mas_preallocate+0x10/0x10 [ 430.986093][ T8456] ? __mas_set_range+0x12f/0x3c0 [ 430.986117][ T8456] __split_vma+0x2fd/0x9e0 [ 430.986145][ T8456] ? __pfx___split_vma+0x10/0x10 [ 430.986185][ T8456] vms_gather_munmap_vmas+0x2e2/0x12e0 [ 430.986230][ T8456] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 430.986260][ T8456] ? __lock_acquire+0x6b6/0x2cf0 [ 430.986295][ T8456] do_vmi_align_munmap+0x276/0x450 [ 430.986345][ T8456] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 430.986366][ T8456] ? do_raw_spin_lock+0x121/0x290 [ 430.986401][ T8456] ? mtree_range_walk+0x6aa/0x840 [ 430.986450][ T8456] do_vmi_munmap+0x253/0x2e0 [ 430.986481][ T8456] __vm_munmap+0x207/0x380 [ 430.986502][ T8456] ? __pfx___vm_munmap+0x10/0x10 [ 430.986533][ T8456] ? __pfx_ksys_write+0x10/0x10 [ 430.986561][ T8456] __x64_sys_munmap+0x60/0x70 [ 430.986583][ T8456] do_syscall_64+0xfa/0xf80 [ 430.986606][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.986623][ T8456] ? clear_bhb_loop+0x60/0xb0 [ 430.986645][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.986662][ T8456] RIP: 0033:0x7f6f1d86f749 [ 430.986678][ T8456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.986693][ T8456] RSP: 002b:00007f6f1bad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 430.986713][ T8456] RAX: ffffffffffffffda RBX: 00007f6f1dac5fa0 RCX: 00007f6f1d86f749 [ 430.986726][ T8456] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 430.986738][ T8456] RBP: 00007f6f1bad6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.986749][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.986761][ T8456] R13: 00007f6f1dac6038 R14: 00007f6f1dac5fa0 R15: 00007fff8fb18dc8 [ 430.986794][ T8456] [ 431.462788][ T8467] 9pnet_fd: Insufficient options for proto=fd [ 432.656491][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 434.925148][ T8499] 9pnet_fd: Insufficient options for proto=fd [ 435.455955][ T980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.015504][ T8506] FAULT_INJECTION: forcing a failure. [ 436.015504][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 436.015561][ T8506] CPU: 1 UID: 0 PID: 8506 Comm: syz.6.704 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.015583][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.015594][ T8506] Call Trace: [ 436.015602][ T8506] [ 436.015610][ T8506] dump_stack_lvl+0x189/0x250 [ 436.015636][ T8506] ? __pfx____ratelimit+0x10/0x10 [ 436.015659][ T8506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.015680][ T8506] ? __pfx__printk+0x10/0x10 [ 436.015704][ T8506] ? __pfx___might_resched+0x10/0x10 [ 436.015722][ T8506] ? fs_reclaim_acquire+0x7d/0x100 [ 436.015748][ T8506] should_fail_ex+0x46c/0x600 [ 436.015775][ T8506] should_failslab+0xa8/0x100 [ 436.015799][ T8506] __kmalloc_noprof+0xcc/0x7e0 [ 436.015820][ T8506] ? tomoyo_encode+0x28b/0x550 [ 436.015847][ T8506] tomoyo_encode+0x28b/0x550 [ 436.015876][ T8506] tomoyo_realpath_from_path+0x58d/0x5d0 [ 436.015901][ T8506] ? tomoyo_domain+0xd9/0x130 [ 436.015934][ T8506] tomoyo_path_perm+0x213/0x4b0 [ 436.015955][ T8506] ? tomoyo_path_perm+0x1e3/0x4b0 [ 436.015974][ T8506] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 436.016000][ T8506] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 436.016055][ T8506] ? security_file_truncate+0x10/0x270 [ 436.016091][ T8506] security_file_truncate+0xb1/0x270 [ 436.016113][ T8506] do_ftruncate+0x27c/0x570 [ 436.016132][ T8506] ? __fget_files+0x2a/0x420 [ 436.016159][ T8506] ? __pfx_do_ftruncate+0x10/0x10 [ 436.016177][ T8506] ? __fget_files+0x2a/0x420 [ 436.016209][ T8506] __x64_sys_ftruncate+0x92/0xf0 [ 436.016229][ T8506] do_syscall_64+0xfa/0xf80 [ 436.016251][ T8506] ? rcu_is_watching+0x15/0xb0 [ 436.016267][ T8506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.016285][ T8506] ? clear_bhb_loop+0x60/0xb0 [ 436.016307][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.016323][ T8506] RIP: 0033:0x7fb50052f749 [ 436.016340][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.016355][ T8506] RSP: 002b:00007fb4fe754038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 436.016376][ T8506] RAX: ffffffffffffffda RBX: 00007fb500786180 RCX: 00007fb50052f749 [ 436.016389][ T8506] RDX: 0000000000000000 RSI: 00000000051a9497 RDI: 0000000000000004 [ 436.016400][ T8506] RBP: 00007fb4fe754090 R08: 0000000000000000 R09: 0000000000000000 [ 436.016412][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.016423][ T8506] R13: 00007fb500786218 R14: 00007fb500786180 R15: 00007ffef9f90d98 [ 436.016455][ T8506] [ 436.016591][ T8506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 436.846637][ T8516] FAULT_INJECTION: forcing a failure. [ 436.846637][ T8516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.846667][ T8516] CPU: 0 UID: 0 PID: 8516 Comm: syz.6.706 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.846686][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.846695][ T8516] Call Trace: [ 436.846702][ T8516] [ 436.846710][ T8516] dump_stack_lvl+0x189/0x250 [ 436.846734][ T8516] ? __pfx____ratelimit+0x10/0x10 [ 436.846755][ T8516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.846774][ T8516] ? __pfx__printk+0x10/0x10 [ 436.846803][ T8516] should_fail_ex+0x46c/0x600 [ 436.846829][ T8516] _copy_to_user+0x31/0xb0 [ 436.846852][ T8516] simple_read_from_buffer+0xe1/0x170 [ 436.846878][ T8516] proc_fail_nth_read+0x1b6/0x220 [ 436.846900][ T8516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.846921][ T8516] ? rw_verify_area+0x2ac/0x4e0 [ 436.846938][ T8516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.846965][ T8516] vfs_read+0x206/0xa30 [ 436.846990][ T8516] ? __pfx_vfs_read+0x10/0x10 [ 436.847004][ T8516] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 436.847031][ T8516] ? mutex_lock_nested+0x154/0x1d0 [ 436.847046][ T8516] ? fdget_pos+0x253/0x320 [ 436.847075][ T8516] ksys_read+0x14b/0x260 [ 436.847095][ T8516] ? __pfx_ksys_read+0x10/0x10 [ 436.847115][ T8516] ? do_syscall_64+0xbe/0xf80 [ 436.847139][ T8516] do_syscall_64+0xfa/0xf80 [ 436.847159][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.847174][ T8516] ? clear_bhb_loop+0x60/0xb0 [ 436.847194][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.847209][ T8516] RIP: 0033:0x7fb50052e15c [ 436.847224][ T8516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.847243][ T8516] RSP: 002b:00007fb4fe796030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.847265][ T8516] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052e15c [ 436.847276][ T8516] RDX: 000000000000000f RSI: 00007fb4fe7960a0 RDI: 0000000000000003 [ 436.847286][ T8516] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 436.847296][ T8516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.847305][ T8516] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 436.847335][ T8516] [ 437.072057][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 437.126739][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.139762][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.141230][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.143691][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.154185][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.212594][ T980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.302113][ T959] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 437.475802][ T959] usb 7-1: Using ep0 maxpacket: 8 [ 437.481296][ T959] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 437.481321][ T959] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.481340][ T959] usb 7-1: config 0 has no interface number 0 [ 437.486358][ T959] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 437.486385][ T959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.486402][ T959] usb 7-1: Product: syz [ 437.486414][ T959] usb 7-1: Manufacturer: syz [ 437.486426][ T959] usb 7-1: SerialNumber: syz [ 437.496685][ T959] usb 7-1: config 0 descriptor?? [ 437.700020][ T959] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 437.700052][ T959] uvcvideo 7-1:0.31: No valid video chain found. [ 437.890007][ T980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.232068][ T5823] Bluetooth: hci3: command tx timeout [ 439.402027][ T5948] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 439.535504][ T5948] usb 5-1: device descriptor read/64, error -71 [ 439.717571][ T980] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.783419][ T5948] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 439.953928][ T5948] usb 5-1: device descriptor read/64, error -71 [ 439.969284][ T8539] 9pnet_fd: Insufficient options for proto=fd [ 440.062485][ T5948] usb usb5-port1: attempt power cycle [ 440.127972][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.128042][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.415275][ T5948] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 440.432713][ T5948] usb 5-1: device descriptor read/8, error -71 [ 440.517100][ T8549] binder_alloc: 8548: binder_alloc_buf, no vma [ 440.744154][ T980] bridge_slave_1: left allmulticast mode [ 440.744181][ T980] bridge_slave_1: left promiscuous mode [ 440.744946][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.830429][ T980] bridge_slave_0: left allmulticast mode [ 440.830459][ T980] bridge_slave_0: left promiscuous mode [ 440.830715][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.197248][ T5948] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 441.212046][ T807] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 441.225033][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 441.225756][ T5948] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 441.227003][ T5948] usb 5-1: config index 0 descriptor too short (expected 65535, got 18) [ 441.227025][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.227043][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.227060][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.233394][ T5948] usb 5-1: config index 1 descriptor too short (expected 65535, got 18) [ 441.233417][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.233435][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.233454][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.259519][ T5948] usb 5-1: config index 2 descriptor too short (expected 65535, got 18) [ 441.259545][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.259564][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.259582][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.300871][ T5948] usb 5-1: config index 3 descriptor too short (expected 65535, got 18) [ 441.300896][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.300915][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.300933][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.312259][ T5823] Bluetooth: hci3: command tx timeout [ 441.319334][ T5948] usb 5-1: config index 4 descriptor too short (expected 65535, got 18) [ 441.319365][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.319383][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.319399][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.371990][ T807] usb 8-1: Using ep0 maxpacket: 8 [ 441.374217][ T807] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 441.374241][ T807] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.374262][ T807] usb 8-1: config 0 has no interface number 0 [ 441.376834][ T807] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 441.376858][ T807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.376876][ T807] usb 8-1: Product: syz [ 441.376888][ T807] usb 8-1: Manufacturer: syz [ 441.376900][ T807] usb 8-1: SerialNumber: syz [ 441.389417][ T807] usb 8-1: config 0 descriptor?? [ 441.438723][ T50] usb 7-1: USB disconnect, device number 7 [ 441.536175][ T5948] usb 5-1: config index 5 descriptor too short (expected 65535, got 18) [ 441.536201][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.536220][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.536237][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.537381][ T5948] usb 5-1: config index 6 descriptor too short (expected 65535, got 18) [ 441.537403][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.537420][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.537437][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.590540][ T5948] usb 5-1: config index 7 descriptor too short (expected 65535, got 18) [ 441.590566][ T5948] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 441.590584][ T5948] usb 5-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 441.590602][ T5948] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 441.757596][ T8562] FAULT_INJECTION: forcing a failure. [ 441.757596][ T8562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.757630][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.1.719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 441.757651][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.757661][ T8562] Call Trace: [ 441.757672][ T8562] [ 441.757679][ T8562] dump_stack_lvl+0x189/0x250 [ 441.757706][ T8562] ? __pfx____ratelimit+0x10/0x10 [ 441.757729][ T8562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.757749][ T8562] ? __pfx__printk+0x10/0x10 [ 441.757766][ T8562] ? __might_fault+0xb0/0x130 [ 441.757799][ T8562] should_fail_ex+0x46c/0x600 [ 441.757826][ T8562] _copy_from_user+0x2d/0xb0 [ 441.757851][ T8562] ___sys_sendmsg+0x158/0x2a0 [ 441.757874][ T8562] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.757929][ T8562] ? __fget_files+0x2a/0x420 [ 441.757951][ T8562] ? __fget_files+0x3a6/0x420 [ 441.757984][ T8562] __x64_sys_sendmsg+0x1a1/0x260 [ 441.758006][ T8562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.758043][ T8562] ? do_syscall_64+0xbe/0xf80 [ 441.758069][ T8562] do_syscall_64+0xfa/0xf80 [ 441.758091][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.758108][ T8562] ? clear_bhb_loop+0x60/0xb0 [ 441.758130][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.758146][ T8562] RIP: 0033:0x7f6f1d86f749 [ 441.758163][ T8562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.758178][ T8562] RSP: 002b:00007f6f1bad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.758198][ T8562] RAX: ffffffffffffffda RBX: 00007f6f1dac5fa0 RCX: 00007f6f1d86f749 [ 441.758219][ T8562] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 441.758230][ T8562] RBP: 00007f6f1bad6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.758241][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.758252][ T8562] R13: 00007f6f1dac6038 R14: 00007f6f1dac5fa0 R15: 00007fff8fb18dc8 [ 441.758284][ T8562] [ 441.761651][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.716'. [ 443.392043][ T5823] Bluetooth: hci3: command tx timeout [ 443.818904][ T5948] usb 5-1: string descriptor 0 read error: -71 [ 443.822565][ T5948] usb 5-1: New USB device found, idVendor=1708, idProduct=000e, bcdDevice=ad.b1 [ 443.822591][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 443.838097][ T5948] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 443.853153][ T5948] usb 5-1: no configuration chosen from 8 choices [ 443.891539][ T5948] usb 5-1: USB disconnect, device number 26 [ 444.613566][ T8585] 9pnet_fd: Insufficient options for proto=fd [ 445.472045][ T5823] Bluetooth: hci3: command tx timeout [ 445.539965][ T8592] FAULT_INJECTION: forcing a failure. [ 445.539965][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 445.539997][ T8592] CPU: 1 UID: 0 PID: 8592 Comm: syz.6.728 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.540017][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.540028][ T8592] Call Trace: [ 445.540036][ T8592] [ 445.540044][ T8592] dump_stack_lvl+0x189/0x250 [ 445.540074][ T8592] ? __pfx____ratelimit+0x10/0x10 [ 445.540097][ T8592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.540117][ T8592] ? __pfx__printk+0x10/0x10 [ 445.540140][ T8592] ? __pfx___might_resched+0x10/0x10 [ 445.540158][ T8592] ? fs_reclaim_acquire+0x7d/0x100 [ 445.540184][ T8592] should_fail_ex+0x46c/0x600 [ 445.540210][ T8592] should_failslab+0xa8/0x100 [ 445.540234][ T8592] __kmalloc_noprof+0xcc/0x7e0 [ 445.540254][ T8592] ? tomoyo_encode+0x28b/0x550 [ 445.540283][ T8592] tomoyo_encode+0x28b/0x550 [ 445.540311][ T8592] tomoyo_realpath_from_path+0x58d/0x5d0 [ 445.540336][ T8592] ? tomoyo_domain+0xd9/0x130 [ 445.540364][ T8592] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 445.540385][ T8592] tomoyo_path_number_perm+0x1e8/0x5a0 [ 445.540408][ T8592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 445.540432][ T8592] ? sb_end_write+0xe9/0x1c0 [ 445.540456][ T8592] ? vfs_write+0x965/0xb40 [ 445.540512][ T8592] ? ksys_write+0x1e7/0x260 [ 445.540538][ T8592] security_file_ioctl+0xcb/0x2d0 [ 445.540561][ T8592] __se_sys_ioctl+0x47/0x170 [ 445.540584][ T8592] do_syscall_64+0xfa/0xf80 [ 445.540607][ T8592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.540625][ T8592] ? clear_bhb_loop+0x60/0xb0 [ 445.540645][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.540662][ T8592] RIP: 0033:0x7fb50052f749 [ 445.540679][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.540693][ T8592] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.540712][ T8592] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 445.540725][ T8592] RDX: 0000200000000500 RSI: 00000000c018aa3f RDI: 0000000000000003 [ 445.540737][ T8592] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 445.540748][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.540759][ T8592] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 445.540792][ T8592] [ 445.540865][ T8592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.638423][ T807] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 446.638456][ T807] uvcvideo 8-1:0.31: No valid video chain found. [ 447.032794][ T6012] usb 8-1: USB disconnect, device number 8 [ 447.071186][ T8600] 9pnet_fd: Insufficient options for proto=fd [ 449.853186][ T8621] FAULT_INJECTION: forcing a failure. [ 449.853186][ T8621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.853218][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.6.736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 449.853236][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.853246][ T8621] Call Trace: [ 449.853253][ T8621] [ 449.853260][ T8621] dump_stack_lvl+0x189/0x250 [ 449.853284][ T8621] ? __pfx____ratelimit+0x10/0x10 [ 449.853304][ T8621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.853323][ T8621] ? __pfx__printk+0x10/0x10 [ 449.853351][ T8621] should_fail_ex+0x46c/0x600 [ 449.853376][ T8621] strncpy_from_user+0x36/0x2c0 [ 449.853396][ T8621] getname_flags+0xf3/0x540 [ 449.853421][ T8621] user_path_at+0x24/0x60 [ 449.853437][ T8621] do_fchownat+0x105/0x270 [ 449.853459][ T8621] ? __pfx_do_fchownat+0x10/0x10 [ 449.853477][ T8621] ? ksys_write+0x230/0x260 [ 449.853496][ T8621] ? __pfx_ksys_write+0x10/0x10 [ 449.853517][ T8621] __x64_sys_fchownat+0xb5/0xd0 [ 449.853539][ T8621] do_syscall_64+0xfa/0xf80 [ 449.853560][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.853575][ T8621] ? clear_bhb_loop+0x60/0xb0 [ 449.853594][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.853608][ T8621] RIP: 0033:0x7fb50052f749 [ 449.853622][ T8621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.853636][ T8621] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 449.853653][ T8621] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 449.853664][ T8621] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 449.853675][ T8621] RBP: 00007fb4fe796090 R08: 0000000000000100 R09: 0000000000000000 [ 449.853685][ T8621] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 449.853695][ T8621] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 449.853723][ T8621] [ 450.335920][ T6013] IPVS: starting estimator thread 0... [ 450.670267][ T8629] IPVS: using max 8 ests per chain, 19200 per kthread [ 451.885636][ T8642] FAULT_INJECTION: forcing a failure. [ 451.885636][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 451.885657][ T8642] CPU: 0 UID: 0 PID: 8642 Comm: syz.7.743 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.885669][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.885675][ T8642] Call Trace: [ 451.885680][ T8642] [ 451.885684][ T8642] dump_stack_lvl+0x189/0x250 [ 451.885702][ T8642] ? __pfx____ratelimit+0x10/0x10 [ 451.885716][ T8642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.885728][ T8642] ? __pfx__printk+0x10/0x10 [ 451.885741][ T8642] ? __pfx___might_resched+0x10/0x10 [ 451.885754][ T8642] should_fail_ex+0x46c/0x600 [ 451.885769][ T8642] ? __alloc_skb+0x255/0x430 [ 451.885779][ T8642] should_failslab+0xa8/0x100 [ 451.885794][ T8642] ? __alloc_skb+0x255/0x430 [ 451.885802][ T8642] kmem_cache_alloc_node_noprof+0x78/0x700 [ 451.885819][ T8642] __alloc_skb+0x255/0x430 [ 451.885830][ T8642] ? __pfx___alloc_skb+0x10/0x10 [ 451.885844][ T8642] pfkey_sendmsg+0x1dd/0x1090 [ 451.885861][ T8642] ? smack_socket_sendmsg+0x1a7/0x520 [ 451.885876][ T8642] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 451.885890][ T8642] ? __lock_acquire+0x6b6/0x2cf0 [ 451.885907][ T8642] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 451.885927][ T8642] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.885939][ T8642] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 451.885949][ T8642] __sock_sendmsg+0x21c/0x270 [ 451.885965][ T8642] ____sys_sendmsg+0x508/0x810 [ 451.885980][ T8642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.885995][ T8642] ? import_iovec+0x74/0xa0 [ 451.886011][ T8642] ___sys_sendmsg+0x21f/0x2a0 [ 451.886024][ T8642] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.886053][ T8642] ? __fget_files+0x2a/0x420 [ 451.886066][ T8642] ? __fget_files+0x3a6/0x420 [ 451.886084][ T8642] __x64_sys_sendmsg+0x1a1/0x260 [ 451.886097][ T8642] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.886113][ T8642] ? __pfx_ksys_write+0x10/0x10 [ 451.886127][ T8642] ? do_syscall_64+0xbe/0xf80 [ 451.886143][ T8642] do_syscall_64+0xfa/0xf80 [ 451.886156][ T8642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.886166][ T8642] ? clear_bhb_loop+0x60/0xb0 [ 451.886178][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.886194][ T8642] RIP: 0033:0x7f03569bf749 [ 451.886205][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.886213][ T8642] RSP: 002b:00007f0354c26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.886225][ T8642] RAX: ffffffffffffffda RBX: 00007f0356c15fa0 RCX: 00007f03569bf749 [ 451.886232][ T8642] RDX: 0000000024048000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 451.886239][ T8642] RBP: 00007f0354c26090 R08: 0000000000000000 R09: 0000000000000000 [ 451.886245][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.886251][ T8642] R13: 00007f0356c16038 R14: 00007f0356c15fa0 R15: 00007ffe0508f428 [ 451.886268][ T8642] [ 451.982009][ T6012] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 452.232746][ T980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.272059][ T6012] usb 7-1: Using ep0 maxpacket: 8 [ 452.279087][ T6012] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 452.279112][ T6012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.279128][ T6012] usb 7-1: config 0 has no interface number 0 [ 452.281631][ T6012] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 452.281655][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.281673][ T6012] usb 7-1: Product: syz [ 452.281685][ T6012] usb 7-1: Manufacturer: syz [ 452.281698][ T6012] usb 7-1: SerialNumber: syz [ 452.344832][ T6012] usb 7-1: config 0 descriptor?? [ 452.366122][ T980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.404537][ T980] bond0 (unregistering): Released all slaves [ 453.167962][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.7.745'. [ 453.739887][ T8658] 9pnet_fd: Insufficient options for proto=fd [ 456.804344][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 456.879968][ T8674] binder_alloc: 8673: binder_alloc_buf, no vma [ 457.494041][ T6012] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 457.494072][ T6012] uvcvideo 7-1:0.31: No valid video chain found. [ 457.738675][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.754'. [ 458.098179][ T8693] 9pnet_fd: Insufficient options for proto=fd [ 459.533980][ T8703] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.553254][ T50] usb 7-1: USB disconnect, device number 8 [ 460.364874][ T8702] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 460.364918][ T8702] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 460.364934][ T8702] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 460.412113][ T37] audit: type=1800 audit(1764939462.438:161): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.760" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 462.582186][ T37] audit: type=1326 audit(1764939464.658:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8725 comm="syz.4.766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba66d0f749 code=0xffff0000 [ 462.620119][ T8730] netlink: 'syz.6.767': attribute type 32 has an invalid length. [ 462.620577][ T8730] block nbd6: Unsupported socket: should be TCP or UNIX. [ 462.644209][ T980] hsr_slave_0: left promiscuous mode [ 462.647642][ T8730] netlink: 'syz.6.767': attribute type 32 has an invalid length. [ 462.647847][ T8730] block nbd6: Unsupported socket: should be TCP or UNIX. [ 462.716225][ T980] hsr_slave_1: left promiscuous mode [ 462.716875][ T980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.716892][ T980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.775834][ T980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.775862][ T980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.793908][ T8728] fuse: root generation should be zero [ 462.953844][ T980] veth1_macvtap: left promiscuous mode [ 462.953913][ T980] veth0_macvtap: left promiscuous mode [ 462.954095][ T980] veth1_vlan: left promiscuous mode [ 462.954198][ T980] veth0_vlan: left promiscuous mode [ 462.974289][ T8735] 9pnet_fd: Insufficient options for proto=fd [ 464.482149][ T807] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 464.632062][ T807] usb 7-1: Using ep0 maxpacket: 8 [ 464.634352][ T807] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 464.634376][ T807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.634393][ T807] usb 7-1: config 0 has no interface number 0 [ 464.639881][ T807] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 464.639907][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.639926][ T807] usb 7-1: Product: syz [ 464.639938][ T807] usb 7-1: Manufacturer: syz [ 464.639950][ T807] usb 7-1: SerialNumber: syz [ 464.733380][ T807] usb 7-1: config 0 descriptor?? [ 464.922966][ T37] audit: type=1326 audit(1764939467.008:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d86f749 code=0x7ffc0000 [ 464.924598][ T37] audit: type=1326 audit(1764939467.008:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6f1d86f749 code=0x7ffc0000 [ 464.924643][ T37] audit: type=1326 audit(1764939467.008:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d86f749 code=0x7ffc0000 [ 464.924683][ T37] audit: type=1326 audit(1764939467.008:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1d86f749 code=0x7ffc0000 [ 464.924722][ T37] audit: type=1326 audit(1764939467.008:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1d86f749 code=0x7ffc0000 [ 464.925030][ T37] audit: type=1326 audit(1764939467.008:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1d86f749 code=0x7ffc0000 [ 467.260031][ T8782] 9pnet_fd: Insufficient options for proto=fd [ 468.827245][ T8788] netlink: 'syz.7.782': attribute type 10 has an invalid length. [ 468.849632][ T807] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 468.849664][ T807] uvcvideo 7-1:0.31: No valid video chain found. [ 468.853003][ T807] usb 7-1: USB disconnect, device number 9 [ 469.225868][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.785'. [ 469.225893][ T8796] netlink: 'syz.6.785': attribute type 7 has an invalid length. [ 469.225901][ T8796] netlink: 'syz.6.785': attribute type 8 has an invalid length. [ 469.225908][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.785'. [ 470.252672][ T980] team0 (unregistering): Port device team_slave_1 removed [ 470.516684][ T980] team0 (unregistering): Port device team_slave_0 removed [ 473.229293][ T8789] team0: Port device vlan2 added [ 473.259874][ T8788] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 473.288543][ T8796] ip6gretap0: entered promiscuous mode [ 473.292618][ T8796] syz_tun: entered promiscuous mode [ 473.293573][ T8796] gretap0: entered promiscuous mode [ 473.514768][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.521568][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.523863][ T8522] bridge_slave_0: entered allmulticast mode [ 473.532123][ T8522] bridge_slave_0: entered promiscuous mode [ 473.591467][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.591626][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.591861][ T8522] bridge_slave_1: entered allmulticast mode [ 473.605255][ T8522] bridge_slave_1: entered promiscuous mode [ 474.028955][ T8808] tipc: Started in network mode [ 474.029000][ T8808] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 474.029320][ T8808] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 474.029665][ T8808] tipc: Enabled bearer , priority 10 [ 474.037123][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.041231][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.154170][ T8813] 9pnet_fd: Insufficient options for proto=fd [ 474.515908][ T8522] team0: Port device team_slave_0 added [ 474.533722][ T8522] team0: Port device team_slave_1 added [ 474.554597][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'. [ 474.554629][ T8825] netlink: 36 bytes leftover after parsing attributes in process `syz.6.796'. [ 474.562084][ T50] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 474.636024][ T8828] FAULT_INJECTION: forcing a failure. [ 474.636024][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 474.636058][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.1.797 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.636079][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.636090][ T8828] Call Trace: [ 474.636098][ T8828] [ 474.636105][ T8828] dump_stack_lvl+0x189/0x250 [ 474.636133][ T8828] ? __pfx____ratelimit+0x10/0x10 [ 474.636156][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.636177][ T8828] ? __pfx__printk+0x10/0x10 [ 474.636201][ T8828] ? __pfx___might_resched+0x10/0x10 [ 474.636219][ T8828] ? fs_reclaim_acquire+0x7d/0x100 [ 474.636245][ T8828] should_fail_ex+0x46c/0x600 [ 474.636272][ T8828] should_failslab+0xa8/0x100 [ 474.636297][ T8828] __kmalloc_noprof+0xcc/0x7e0 [ 474.636317][ T8828] ? tomoyo_encode+0x28b/0x550 [ 474.636345][ T8828] tomoyo_encode+0x28b/0x550 [ 474.636374][ T8828] tomoyo_realpath_from_path+0x58d/0x5d0 [ 474.636400][ T8828] ? tomoyo_domain+0xd9/0x130 [ 474.636429][ T8828] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 474.636450][ T8828] tomoyo_path_number_perm+0x1e8/0x5a0 [ 474.636474][ T8828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 474.636499][ T8828] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 474.636522][ T8828] ? lockdep_hardirqs_on+0x98/0x140 [ 474.636576][ T8828] ? __fget_files+0x2a/0x420 [ 474.636603][ T8828] ? __fget_files+0x3a6/0x420 [ 474.636623][ T8828] ? __fget_files+0x2a/0x420 [ 474.636649][ T8828] security_file_ioctl+0xcb/0x2d0 [ 474.636673][ T8828] __se_sys_ioctl+0x47/0x170 [ 474.636695][ T8828] do_syscall_64+0xfa/0xf80 [ 474.636718][ T8828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.636736][ T8828] ? clear_bhb_loop+0x60/0xb0 [ 474.636757][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.636773][ T8828] RIP: 0033:0x7f6f1d86f749 [ 474.636790][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.636806][ T8828] RSP: 002b:00007f6f1bab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.636826][ T8828] RAX: ffffffffffffffda RBX: 00007f6f1dac6090 RCX: 00007f6f1d86f749 [ 474.636839][ T8828] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 474.636850][ T8828] RBP: 00007f6f1bab5090 R08: 0000000000000000 R09: 0000000000000000 [ 474.636862][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.636873][ T8828] R13: 00007f6f1dac6128 R14: 00007f6f1dac6090 R15: 00007fff8fb18dc8 [ 474.636905][ T8828] [ 474.636928][ T8828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.711975][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 475.535921][ T50] usb 8-1: device descriptor read/all, error -71 [ 475.566919][ T5900] tipc: Node number set to 1 [ 475.702005][ T8836] FAULT_INJECTION: forcing a failure. [ 475.702005][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.702036][ T8836] CPU: 1 UID: 0 PID: 8836 Comm: syz.6.801 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 475.702055][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.702065][ T8836] Call Trace: [ 475.702072][ T8836] [ 475.702080][ T8836] dump_stack_lvl+0x189/0x250 [ 475.702104][ T8836] ? __pfx____ratelimit+0x10/0x10 [ 475.702125][ T8836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.702145][ T8836] ? __pfx__printk+0x10/0x10 [ 475.702175][ T8836] should_fail_ex+0x46c/0x600 [ 475.702201][ T8836] _copy_to_user+0x31/0xb0 [ 475.702225][ T8836] simple_read_from_buffer+0xe1/0x170 [ 475.702252][ T8836] proc_fail_nth_read+0x1b6/0x220 [ 475.702275][ T8836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.702297][ T8836] ? rw_verify_area+0x2ac/0x4e0 [ 475.702317][ T8836] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.702337][ T8836] vfs_read+0x206/0xa30 [ 475.702366][ T8836] ? __pfx_vfs_read+0x10/0x10 [ 475.702381][ T8836] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 475.702411][ T8836] ? mutex_lock_nested+0x154/0x1d0 [ 475.702428][ T8836] ? fdget_pos+0x253/0x320 [ 475.702459][ T8836] ksys_read+0x14b/0x260 [ 475.702480][ T8836] ? __pfx_ksys_read+0x10/0x10 [ 475.702503][ T8836] ? do_syscall_64+0xbe/0xf80 [ 475.702529][ T8836] do_syscall_64+0xfa/0xf80 [ 475.702552][ T8836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.702568][ T8836] ? clear_bhb_loop+0x60/0xb0 [ 475.702589][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.702605][ T8836] RIP: 0033:0x7fb50052e15c [ 475.702621][ T8836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 475.702637][ T8836] RSP: 002b:00007fb4fe796030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.702656][ T8836] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052e15c [ 475.702670][ T8836] RDX: 000000000000000f RSI: 00007fb4fe7960a0 RDI: 0000000000000004 [ 475.702682][ T8836] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 475.702693][ T8836] R10: 0000000040002042 R11: 0000000000000246 R12: 0000000000000001 [ 475.702704][ T8836] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 475.702736][ T8836] [ 475.743938][ T8834] veth2: entered promiscuous mode [ 475.743961][ T8834] veth2: entered allmulticast mode [ 475.998404][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.998420][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.998445][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.999070][ T8838] tipc: Enabling of bearer rejected, already enabled [ 476.007065][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.007082][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.007107][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.062735][ T8846] 9pnet_fd: Insufficient options for proto=fd [ 476.196334][ T8848] 9pnet_fd: Insufficient options for proto=fd [ 476.481229][ T8522] hsr_slave_0: entered promiscuous mode [ 476.483530][ T8522] hsr_slave_1: entered promiscuous mode [ 476.484713][ T8522] debugfs: 'hsr0' already exists in 'hsr' [ 476.484736][ T8522] Cannot create hsr debugfs directory [ 477.192104][ T5900] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 477.252037][ T6404] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 477.343988][ T5900] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 477.344044][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.344069][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.344090][ T5900] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 477.344124][ T5900] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 477.344143][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.350521][ T5900] usb 7-1: config 0 descriptor?? [ 477.421964][ T6404] usb 5-1: Using ep0 maxpacket: 32 [ 477.436195][ T6404] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 477.436228][ T6404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 477.466495][ T6404] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 477.466523][ T6404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.466540][ T6404] usb 5-1: Product: syz [ 477.466552][ T6404] usb 5-1: Manufacturer: syz [ 477.466571][ T6404] usb 5-1: SerialNumber: syz [ 477.505174][ T6404] usb 5-1: config 0 descriptor?? [ 477.580449][ T6404] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 477.787561][ T5900] hid-picolcd 0003:04D8:C002.0004: item fetching failed at offset 0/7 [ 477.790822][ T5900] hid-picolcd 0003:04D8:C002.0004: device report parse failed [ 477.791306][ T5900] hid-picolcd 0003:04D8:C002.0004: probe with driver hid-picolcd failed with error -22 [ 477.826075][ T8522] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.895266][ T8522] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.927670][ T6404] usb 5-1: USB disconnect, device number 27 [ 477.939189][ T980] usb 5-1: Failed to read usb control message: -71 [ 477.939222][ T980] usb 5-1: Unable to read the bmi data from the device: -71 [ 477.939232][ T980] usb 5-1: unable to get target info from device [ 477.939249][ T980] usb 5-1: could not get target info (-71) [ 477.939380][ T980] usb 5-1: could not probe fw (-71) [ 478.013313][ T8522] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.034945][ T6012] usb 7-1: USB disconnect, device number 10 [ 478.070697][ T8522] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.341510][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.376264][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.390132][ T2237] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.390351][ T2237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.425488][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.425747][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.635057][ T8886] 9pnet_fd: Insufficient options for proto=fd [ 479.109510][ T6104] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 479.302047][ T6104] usb 7-1: Using ep0 maxpacket: 8 [ 479.304774][ T6104] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 479.304799][ T6104] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.304816][ T6104] usb 7-1: config 0 has no interface number 0 [ 479.307539][ T6104] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 479.307564][ T6104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.307580][ T6104] usb 7-1: Product: syz [ 479.307593][ T6104] usb 7-1: Manufacturer: syz [ 479.307604][ T6104] usb 7-1: SerialNumber: syz [ 479.322607][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.386309][ T6104] usb 7-1: config 0 descriptor?? [ 482.105244][ T8917] veth4: entered promiscuous mode [ 482.105270][ T8917] veth4: entered allmulticast mode [ 484.110605][ T8522] veth0_vlan: entered promiscuous mode [ 484.161348][ T8522] veth1_vlan: entered promiscuous mode [ 484.182152][ T5900] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 484.327632][ T8933] zonefs (nullb0) ERROR: Not a zoned block device [ 484.362991][ T5900] usb 8-1: Using ep0 maxpacket: 32 [ 484.365579][ T5900] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 484.365605][ T5900] usb 8-1: config 0 has no interface number 0 [ 484.370515][ T5900] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 484.370532][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.370545][ T5900] usb 8-1: Product: syz [ 484.370557][ T5900] usb 8-1: Manufacturer: syz [ 484.370569][ T5900] usb 8-1: SerialNumber: syz [ 484.431696][ T5900] usb 8-1: config 0 descriptor?? [ 484.444977][ T6104] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 484.445010][ T6104] uvcvideo 7-1:0.31: No valid video chain found. [ 484.479092][ T5900] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 484.538199][ T8522] veth0_macvtap: entered promiscuous mode [ 484.580089][ T8522] veth1_macvtap: entered promiscuous mode [ 484.622620][ T6339] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 484.679525][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.717831][ T5900] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 484.760262][ T5900] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 484.809997][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.846884][ T6339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.846905][ T6339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.847284][ T6339] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 484.847298][ T6339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.891305][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.891354][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.891388][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.891422][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.957013][ T6339] usb 2-1: config 0 descriptor?? [ 484.990539][ T6339] usbhid 2-1:0.0: can't add hid device: -22 [ 484.990999][ T6339] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 485.111254][ T6104] usb 7-1: USB disconnect, device number 11 [ 485.183189][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.183596][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.571070][ T2237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.571115][ T2237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.659801][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 485.664767][ T6104] usb 8-1: USB disconnect, device number 11 [ 485.685124][ T6104] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 485.706471][ T8938] FAULT_INJECTION: forcing a failure. [ 485.706471][ T8938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.706504][ T8938] CPU: 0 UID: 0 PID: 8938 Comm: syz.4.828 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 485.706523][ T8938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.706533][ T8938] Call Trace: [ 485.706540][ T8938] [ 485.706547][ T8938] dump_stack_lvl+0x189/0x250 [ 485.706571][ T8938] ? __pfx____ratelimit+0x10/0x10 [ 485.706590][ T8938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.706607][ T8938] ? __pfx__printk+0x10/0x10 [ 485.706633][ T8938] should_fail_ex+0x46c/0x600 [ 485.706655][ T8938] _copy_to_user+0x31/0xb0 [ 485.706678][ T8938] simple_read_from_buffer+0xe1/0x170 [ 485.706701][ T8938] proc_fail_nth_read+0x1b6/0x220 [ 485.706719][ T8938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.706736][ T8938] ? rw_verify_area+0x2ac/0x4e0 [ 485.706749][ T8938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.706763][ T8938] vfs_read+0x206/0xa30 [ 485.706785][ T8938] ? __pfx_vfs_read+0x10/0x10 [ 485.706798][ T8938] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 485.706825][ T8938] ? mutex_lock_nested+0x154/0x1d0 [ 485.706841][ T8938] ? fdget_pos+0x253/0x320 [ 485.706864][ T8938] ksys_read+0x14b/0x260 [ 485.706884][ T8938] ? __pfx_ksys_read+0x10/0x10 [ 485.706902][ T8938] ? do_syscall_64+0xbe/0xf80 [ 485.706921][ T8938] do_syscall_64+0xfa/0xf80 [ 485.706937][ T8938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.706950][ T8938] ? clear_bhb_loop+0x60/0xb0 [ 485.706964][ T8938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.706979][ T8938] RIP: 0033:0x7fba66d0e15c [ 485.706992][ T8938] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.707003][ T8938] RSP: 002b:00007fba64f76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.707018][ T8938] RAX: ffffffffffffffda RBX: 00007fba66f65fa0 RCX: 00007fba66d0e15c [ 485.707028][ T8938] RDX: 000000000000000f RSI: 00007fba64f760a0 RDI: 0000000000000003 [ 485.707036][ T8938] RBP: 00007fba64f76090 R08: 0000000000000000 R09: 0000000000000000 [ 485.707044][ T8938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.707051][ T8938] R13: 00007fba66f66038 R14: 00007fba66f65fa0 R15: 00007ffeeef77328 [ 485.707075][ T8938] [ 485.773964][ T6104] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 485.774611][ T6104] quatech2 8-1:0.51: device disconnected [ 486.124659][ T7703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.124679][ T7703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.092286][ T6104] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 487.352829][ T6104] usb 7-1: Using ep0 maxpacket: 8 [ 487.355389][ T6104] usb 7-1: config 0 has no interfaces? [ 487.355423][ T6104] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.355443][ T6104] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.356096][ T6339] usb 2-1: USB disconnect, device number 33 [ 487.637743][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.834'. [ 488.279053][ T6104] usb 7-1: config 0 descriptor?? [ 488.393372][ T8968] IPv6: NLM_F_CREATE should be specified when creating new route [ 488.682621][ T6339] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 488.702109][ T5964] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 488.752217][ T6104] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 488.833430][ T6339] usb 2-1: Using ep0 maxpacket: 8 [ 488.844095][ T6339] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 488.844122][ T6339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.844137][ T6339] usb 2-1: config 0 has no interface number 0 [ 488.848773][ T6339] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 488.848799][ T6339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.848816][ T6339] usb 2-1: Product: syz [ 488.848828][ T6339] usb 2-1: Manufacturer: syz [ 488.848840][ T6339] usb 2-1: SerialNumber: syz [ 488.852099][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 488.859260][ T5964] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 488.859283][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.859299][ T5964] usb 5-1: config 0 has no interface number 0 [ 488.866569][ T5964] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 488.866594][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.866611][ T5964] usb 5-1: Product: syz [ 488.866624][ T5964] usb 5-1: Manufacturer: syz [ 488.866635][ T5964] usb 5-1: SerialNumber: syz [ 488.871469][ T6339] usb 2-1: config 0 descriptor?? [ 488.879998][ T5964] usb 5-1: config 0 descriptor?? [ 488.922002][ T6104] usb 9-1: Using ep0 maxpacket: 8 [ 488.982061][ T6104] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 488.982085][ T6104] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.982101][ T6104] usb 9-1: config 0 has no interface number 0 [ 488.984509][ T6104] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 488.984542][ T6104] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.984560][ T6104] usb 9-1: Product: syz [ 488.984572][ T6104] usb 9-1: Manufacturer: syz [ 488.984584][ T6104] usb 9-1: SerialNumber: syz [ 488.994035][ T6104] usb 9-1: config 0 descriptor?? [ 489.079718][ T6339] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 489.079759][ T6339] uvcvideo 2-1:0.31: No valid video chain found. [ 489.201987][ T6104] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 489.202022][ T6104] uvcvideo 9-1:0.31: No valid video chain found. [ 489.618800][ T6104] usb 7-1: USB disconnect, device number 12 [ 493.674877][ T807] usb 2-1: USB disconnect, device number 34 [ 494.154840][ T5964] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 494.154872][ T5964] uvcvideo 5-1:0.31: No valid video chain found. [ 494.159732][ T5964] usb 5-1: USB disconnect, device number 28 [ 494.422427][ T5809] usb 9-1: USB disconnect, device number 2 [ 495.781400][ T8994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 496.225584][ T8990] syz.7.841 (8990) used greatest stack depth: 14224 bytes left [ 496.238258][ T5939] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 496.698518][ T5939] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.698554][ T5939] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 496.698591][ T5939] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.698612][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.794559][ T8984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 496.813837][ T5939] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.059412][ T959] usb 2-1: USB disconnect, device number 35 [ 498.689056][ T9031] FAULT_INJECTION: forcing a failure. [ 498.689056][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 498.689092][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.8.854 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.689114][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.689124][ T9031] Call Trace: [ 498.689133][ T9031] [ 498.689141][ T9031] dump_stack_lvl+0x189/0x250 [ 498.689168][ T9031] ? __pfx____ratelimit+0x10/0x10 [ 498.689191][ T9031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.689212][ T9031] ? __pfx__printk+0x10/0x10 [ 498.689237][ T9031] ? __pfx___might_resched+0x10/0x10 [ 498.689254][ T9031] ? fs_reclaim_acquire+0x7d/0x100 [ 498.689281][ T9031] should_fail_ex+0x46c/0x600 [ 498.689308][ T9031] should_failslab+0xa8/0x100 [ 498.689333][ T9031] __kmalloc_node_track_caller_noprof+0xcf/0x800 [ 498.689355][ T9031] ? rxrpc_setsockopt+0x541/0x9a0 [ 498.689382][ T9031] rxrpc_request_key+0xba/0x250 [ 498.689407][ T9031] rxrpc_setsockopt+0x541/0x9a0 [ 498.689430][ T9031] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 498.689457][ T9031] ? __fget_files+0x2a/0x420 [ 498.689479][ T9031] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 498.689499][ T9031] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 498.689534][ T9031] do_sock_setsockopt+0x17c/0x1b0 [ 498.689560][ T9031] __x64_sys_setsockopt+0x145/0x1b0 [ 498.689584][ T9031] do_syscall_64+0xfa/0xf80 [ 498.689608][ T9031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.689626][ T9031] ? clear_bhb_loop+0x60/0xb0 [ 498.689647][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.689664][ T9031] RIP: 0033:0x7fd86776f749 [ 498.689682][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.689697][ T9031] RSP: 002b:00007fd865994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 498.689717][ T9031] RAX: ffffffffffffffda RBX: 00007fd8679c6180 RCX: 00007fd86776f749 [ 498.689731][ T9031] RDX: 0000000000000001 RSI: 0000000000000110 RDI: 000000000000000a [ 498.689742][ T9031] RBP: 00007fd865994090 R08: 0000000000000011 R09: 0000000000000000 [ 498.689753][ T9031] R10: 9999999999999999 R11: 0000000000000246 R12: 0000000000000001 [ 498.689765][ T9031] R13: 00007fd8679c6218 R14: 00007fd8679c6180 R15: 00007ffd14806ea8 [ 498.689797][ T9031] [ 499.371412][ T9043] FAULT_INJECTION: forcing a failure. [ 499.371412][ T9043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.371433][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.8.859 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 499.371445][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.371460][ T9043] Call Trace: [ 499.371465][ T9043] [ 499.371470][ T9043] dump_stack_lvl+0x189/0x250 [ 499.371487][ T9043] ? __pfx____ratelimit+0x10/0x10 [ 499.371502][ T9043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.371514][ T9043] ? __pfx__printk+0x10/0x10 [ 499.371524][ T9043] ? __might_fault+0xb0/0x130 [ 499.371543][ T9043] should_fail_ex+0x46c/0x600 [ 499.371559][ T9043] _copy_from_user+0x2d/0xb0 [ 499.371574][ T9043] ___sys_sendmsg+0x158/0x2a0 [ 499.371587][ T9043] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.371617][ T9043] ? __fget_files+0x2a/0x420 [ 499.371631][ T9043] ? __fget_files+0x3a6/0x420 [ 499.371649][ T9043] __x64_sys_sendmsg+0x1a1/0x260 [ 499.371662][ T9043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.371678][ T9043] ? __pfx_ksys_write+0x10/0x10 [ 499.371692][ T9043] ? do_syscall_64+0xbe/0xf80 [ 499.371711][ T9043] do_syscall_64+0xfa/0xf80 [ 499.371725][ T9043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.371734][ T9043] ? clear_bhb_loop+0x60/0xb0 [ 499.371747][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.371755][ T9043] RIP: 0033:0x7fd86776f749 [ 499.371765][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.371774][ T9043] RSP: 002b:00007fd8659d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.371785][ T9043] RAX: ffffffffffffffda RBX: 00007fd8679c5fa0 RCX: 00007fd86776f749 [ 499.371793][ T9043] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 499.371799][ T9043] RBP: 00007fd8659d6090 R08: 0000000000000000 R09: 0000000000000000 [ 499.371805][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.371811][ T9043] R13: 00007fd8679c6038 R14: 00007fd8679c5fa0 R15: 00007ffd14806ea8 [ 499.371827][ T9043] [ 499.711961][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'. [ 499.736861][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.860'. [ 499.954016][ T9058] netlink: 'syz.8.866': attribute type 83 has an invalid length. [ 499.973797][ T9059] FAULT_INJECTION: forcing a failure. [ 499.973797][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 499.973830][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.7.865 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 499.973850][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.973860][ T9059] Call Trace: [ 499.973868][ T9059] [ 499.973875][ T9059] dump_stack_lvl+0x189/0x250 [ 499.973902][ T9059] ? __pfx____ratelimit+0x10/0x10 [ 499.973924][ T9059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.973946][ T9059] ? __pfx__printk+0x10/0x10 [ 499.973970][ T9059] ? __pfx___might_resched+0x10/0x10 [ 499.973987][ T9059] ? fs_reclaim_acquire+0x7d/0x100 [ 499.974014][ T9059] should_fail_ex+0x46c/0x600 [ 499.974041][ T9059] should_failslab+0xa8/0x100 [ 499.974066][ T9059] __kmalloc_noprof+0xcc/0x7e0 [ 499.974086][ T9059] ? tomoyo_encode+0x28b/0x550 [ 499.974115][ T9059] tomoyo_encode+0x28b/0x550 [ 499.974143][ T9059] tomoyo_realpath_from_path+0x58d/0x5d0 [ 499.974168][ T9059] ? tomoyo_domain+0xd9/0x130 [ 499.974197][ T9059] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 499.974218][ T9059] tomoyo_path_number_perm+0x1e8/0x5a0 [ 499.974241][ T9059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 499.974267][ T9059] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 499.974291][ T9059] ? lockdep_hardirqs_on+0x98/0x140 [ 499.974345][ T9059] ? __fget_files+0x2a/0x420 [ 499.974372][ T9059] ? __fget_files+0x3a6/0x420 [ 499.974392][ T9059] ? __fget_files+0x2a/0x420 [ 499.974418][ T9059] security_file_ioctl+0xcb/0x2d0 [ 499.974442][ T9059] __se_sys_ioctl+0x47/0x170 [ 499.974465][ T9059] do_syscall_64+0xfa/0xf80 [ 499.974487][ T9059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.974504][ T9059] ? clear_bhb_loop+0x60/0xb0 [ 499.974526][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.974543][ T9059] RIP: 0033:0x7f03569bf749 [ 499.974559][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.974575][ T9059] RSP: 002b:00007f0354c05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.974594][ T9059] RAX: ffffffffffffffda RBX: 00007f0356c16090 RCX: 00007f03569bf749 [ 499.974608][ T9059] RDX: 0000200000000080 RSI: 000000008048ae66 RDI: 0000000000000004 [ 499.974620][ T9059] RBP: 00007f0354c05090 R08: 0000000000000000 R09: 0000000000000000 [ 499.974632][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.974649][ T9059] R13: 00007f0356c16128 R14: 00007f0356c16090 R15: 00007ffe0508f428 [ 499.974682][ T9059] [ 499.974702][ T9059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.092853][ T9069] FAULT_INJECTION: forcing a failure. [ 501.092853][ T9069] name failslab, interval 1, probability 0, space 0, times 0 [ 501.092886][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.6.869 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 501.092907][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.092918][ T9069] Call Trace: [ 501.092925][ T9069] [ 501.092933][ T9069] dump_stack_lvl+0x189/0x250 [ 501.092956][ T9069] ? __pfx____ratelimit+0x10/0x10 [ 501.092977][ T9069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.092997][ T9069] ? __pfx__printk+0x10/0x10 [ 501.093019][ T9069] ? __pfx___might_resched+0x10/0x10 [ 501.093040][ T9069] should_fail_ex+0x46c/0x600 [ 501.093062][ T9069] ? __alloc_skb+0x255/0x430 [ 501.093077][ T9069] should_failslab+0xa8/0x100 [ 501.093097][ T9069] ? __alloc_skb+0x255/0x430 [ 501.093110][ T9069] kmem_cache_alloc_node_noprof+0x78/0x700 [ 501.093138][ T9069] __alloc_skb+0x255/0x430 [ 501.093156][ T9069] ? __pfx___alloc_skb+0x10/0x10 [ 501.093174][ T9069] ? netlink_autobind+0xdb/0x300 [ 501.093193][ T9069] ? netlink_autobind+0x2c2/0x300 [ 501.093217][ T9069] netlink_sendmsg+0x5c6/0xb30 [ 501.093246][ T9069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.093273][ T9069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.093293][ T9069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.093314][ T9069] __sock_sendmsg+0x21c/0x270 [ 501.093339][ T9069] ____sys_sendmsg+0x534/0x810 [ 501.093372][ T9069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.093400][ T9069] ? import_iovec+0x74/0xa0 [ 501.093425][ T9069] ___sys_sendmsg+0x21f/0x2a0 [ 501.093445][ T9069] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.093499][ T9069] ? __fget_files+0x2a/0x420 [ 501.093520][ T9069] ? __fget_files+0x3a6/0x420 [ 501.093550][ T9069] __sys_sendmmsg+0x22d/0x430 [ 501.093572][ T9069] ? __pfx___sys_sendmmsg+0x10/0x10 [ 501.093602][ T9069] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 501.093638][ T9069] ? ksys_write+0x230/0x260 [ 501.093661][ T9069] ? __pfx_ksys_write+0x10/0x10 [ 501.093685][ T9069] __x64_sys_sendmmsg+0xa0/0xc0 [ 501.093716][ T9069] do_syscall_64+0xfa/0xf80 [ 501.093740][ T9069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.093756][ T9069] ? clear_bhb_loop+0x60/0xb0 [ 501.093777][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.093793][ T9069] RIP: 0033:0x7fb50052f749 [ 501.093809][ T9069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.093823][ T9069] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 501.093840][ T9069] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 501.093852][ T9069] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 501.093864][ T9069] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 501.093875][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.093885][ T9069] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 501.093914][ T9069] [ 502.726044][ T9074] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 503.170753][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.170852][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.472228][ T8979] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 503.636678][ T8979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.636733][ T8979] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 503.636754][ T8979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.677556][ T8979] usb 2-1: config 0 descriptor?? [ 503.690773][ T959] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 503.757354][ T8979] pwc: Askey VC010 type 2 USB webcam detected. [ 503.914172][ T959] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 503.914234][ T959] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.914260][ T959] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.914297][ T959] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.914319][ T959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.927189][ T959] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.928258][ T959] usb 8-1: invalid MIDI out EP 0 [ 504.978323][ T8979] pwc: recv_control_msg error -32 req 02 val 2b00 [ 504.981434][ T8979] pwc: recv_control_msg error -32 req 02 val 2700 [ 505.183891][ T8979] pwc: recv_control_msg error -32 req 04 val 1000 [ 505.192102][ T8979] pwc: recv_control_msg error -32 req 04 val 1300 [ 505.205548][ T8979] pwc: recv_control_msg error -32 req 04 val 1400 [ 505.228367][ T959] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 505.256368][ T959] usb 8-1: USB disconnect, device number 12 [ 505.286352][ T9112] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input29 [ 505.409028][ T8979] pwc: recv_control_msg error -71 req 02 val 2100 [ 505.411513][ T8979] pwc: recv_control_msg error -71 req 04 val 1500 [ 505.418557][ T8979] pwc: recv_control_msg error -71 req 02 val 2500 [ 505.433340][ T8979] pwc: recv_control_msg error -71 req 02 val 2400 [ 505.433859][ T8979] pwc: recv_control_msg error -71 req 02 val 2600 [ 505.434330][ T8979] pwc: recv_control_msg error -71 req 02 val 2900 [ 505.436231][ T8979] pwc: recv_control_msg error -71 req 02 val 2800 [ 505.436898][ T8979] pwc: recv_control_msg error -71 req 04 val 1100 [ 505.437411][ T8979] pwc: recv_control_msg error -71 req 04 val 1200 [ 505.441485][ T8979] pwc: Registered as video103. [ 505.489535][ T8979] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 505.549997][ T8979] usb 2-1: USB disconnect, device number 36 [ 505.563064][ T5964] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 505.614204][ T959] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 505.712075][ T5964] usb 7-1: Using ep0 maxpacket: 16 [ 505.714094][ T5964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 505.716595][ T5964] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 505.716614][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.716624][ T5964] usb 7-1: Product: syz [ 505.716631][ T5964] usb 7-1: Manufacturer: syz [ 505.716638][ T5964] usb 7-1: SerialNumber: syz [ 505.719847][ T5964] usb 7-1: config 0 descriptor?? [ 505.721717][ T5964] hub 7-1:0.0: bad descriptor, ignoring hub [ 505.721736][ T5964] hub 7-1:0.0: probe with driver hub failed with error -5 [ 505.733018][ T5964] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input31 [ 505.789996][ T959] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 505.790059][ T959] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.790084][ T959] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.790122][ T959] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.790141][ T959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.806031][ T959] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.807028][ T959] usb 9-1: invalid MIDI out EP 0 [ 505.884860][ T5900] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 505.929116][ T959] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 506.012234][ T5900] usb 5-1: device descriptor read/64, error -71 [ 506.021558][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.883'. [ 506.031378][ T9125] netlink: 'syz.6.883': attribute type 3 has an invalid length. [ 506.031399][ T9125] netlink: 46 bytes leftover after parsing attributes in process `syz.6.883'. [ 506.254971][ T959] usb 9-1: USB disconnect, device number 3 [ 506.302509][ T5900] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 506.432234][ T5900] usb 5-1: device descriptor read/64, error -71 [ 506.542524][ T5900] usb usb5-port1: attempt power cycle [ 506.892044][ T5900] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 506.918624][ T5900] usb 5-1: device descriptor read/8, error -71 [ 507.153417][ T5900] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 507.183920][ T5900] usb 5-1: device descriptor read/8, error -71 [ 507.292405][ T5900] usb usb5-port1: unable to enumerate USB device [ 508.082485][ T5900] usb 7-1: USB disconnect, device number 13 [ 508.112265][ T807] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 508.272188][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 508.275443][ T807] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 508.275468][ T807] usb 2-1: config 0 has no interface number 0 [ 508.278562][ T807] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 508.278588][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.278612][ T807] usb 2-1: Product: syz [ 508.278625][ T807] usb 2-1: Manufacturer: syz [ 508.278637][ T807] usb 2-1: SerialNumber: syz [ 508.286620][ T807] usb 2-1: config 0 descriptor?? [ 508.349181][ T807] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 509.138743][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.7.899'. [ 509.138788][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.7.899'. [ 509.324573][ T807] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 509.361030][ T807] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 509.712864][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.900'. [ 509.733197][ T9176] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 509.733229][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 509.733467][ T9175] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 509.733482][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 509.801139][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 509.810991][ T807] usb 2-1: USB disconnect, device number 37 [ 509.828402][ T807] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 509.844698][ T807] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 509.845397][ T807] quatech2 2-1:0.51: device disconnected [ 509.873426][ T959] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 509.885601][ T9179] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 511.029695][ T9205] FAULT_INJECTION: forcing a failure. [ 511.029695][ T9205] name failslab, interval 1, probability 0, space 0, times 0 [ 511.029717][ T9205] CPU: 1 UID: 0 PID: 9205 Comm: syz.6.911 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 511.029729][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.029735][ T9205] Call Trace: [ 511.029740][ T9205] [ 511.029744][ T9205] dump_stack_lvl+0x189/0x250 [ 511.029761][ T9205] ? __pfx____ratelimit+0x10/0x10 [ 511.029775][ T9205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.029787][ T9205] ? __pfx__printk+0x10/0x10 [ 511.029799][ T9205] ? __pfx___might_resched+0x10/0x10 [ 511.029810][ T9205] ? fs_reclaim_acquire+0x7d/0x100 [ 511.029826][ T9205] should_fail_ex+0x46c/0x600 [ 511.029847][ T9205] should_failslab+0xa8/0x100 [ 511.029861][ T9205] __kmalloc_noprof+0xcc/0x7e0 [ 511.029873][ T9205] ? io_cache_alloc_new+0x40/0x100 [ 511.029890][ T9205] io_cache_alloc_new+0x40/0x100 [ 511.029905][ T9205] __io_prep_rw+0x23f/0xe00 [ 511.029920][ T9205] ? __pfx___io_prep_rw+0x10/0x10 [ 511.029929][ T9205] ? percpu_ref_get_many+0x21/0x1e0 [ 511.029945][ T9205] ? percpu_ref_get_many+0x21/0x1e0 [ 511.029964][ T9205] io_prep_rwv+0x91/0x3e0 [ 511.029974][ T9205] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 511.029988][ T9205] ? __pfx_io_prep_rwv+0x10/0x10 [ 511.030002][ T9205] ? blk_start_plug_nr_ios+0x7f/0x1c0 [ 511.030016][ T9205] io_submit_sqes+0xad3/0x2140 [ 511.030043][ T9205] __se_sys_io_uring_enter+0x2df/0x2b00 [ 511.030059][ T9205] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 511.030076][ T9205] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 511.030089][ T9205] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.030112][ T9205] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 511.030122][ T9205] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 511.030134][ T9205] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 511.030145][ T9205] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 511.030161][ T9205] ? fput+0xa0/0xd0 [ 511.030176][ T9205] ? ksys_write+0x230/0x260 [ 511.030188][ T9205] ? __pfx_ksys_write+0x10/0x10 [ 511.030201][ T9205] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 511.030213][ T9205] do_syscall_64+0xfa/0xf80 [ 511.030228][ T9205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.030238][ T9205] ? clear_bhb_loop+0x60/0xb0 [ 511.030250][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.030259][ T9205] RIP: 0033:0x7fb50052f749 [ 511.030269][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.030284][ T9205] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 511.030295][ T9205] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 511.030302][ T9205] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 511.030309][ T9205] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 511.030317][ T9205] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 511.030326][ T9205] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 511.030353][ T9205] [ 511.448850][ T9207] fuse: Bad value for 'user_id' [ 511.448868][ T9207] fuse: Bad value for 'user_id' [ 511.982063][ T5900] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 512.013847][ T9221] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 512.132004][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 512.134324][ T5900] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 512.134348][ T5900] usb 2-1: config 0 has no interface number 0 [ 512.137783][ T5900] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 512.137809][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.137827][ T5900] usb 2-1: Product: syz [ 512.137840][ T5900] usb 2-1: Manufacturer: syz [ 512.137852][ T5900] usb 2-1: SerialNumber: syz [ 512.144888][ T5900] usb 2-1: config 0 descriptor?? [ 512.151737][ T5900] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 512.427829][ T5900] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 512.479155][ T5900] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 512.777189][ T8979] usb 2-1: USB disconnect, device number 38 [ 512.870142][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 513.179387][ T8979] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 513.307780][ T8979] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 513.308618][ T8979] quatech2 2-1:0.51: device disconnected [ 514.398586][ T9243] fuse: Bad value for 'fd' [ 515.636227][ T9252] overlayfs: missing 'workdir' [ 517.735510][ T6104] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 517.882184][ T6104] usb 9-1: Using ep0 maxpacket: 32 [ 517.887835][ T6104] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 517.887859][ T6104] usb 9-1: config 0 has no interface number 0 [ 517.890711][ T6104] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 517.890735][ T6104] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.890753][ T6104] usb 9-1: Product: syz [ 517.890766][ T6104] usb 9-1: Manufacturer: syz [ 517.890779][ T6104] usb 9-1: SerialNumber: syz [ 517.948674][ T6104] usb 9-1: config 0 descriptor?? [ 517.975648][ T6104] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 518.233731][ T6012] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 518.283704][ T6104] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 518.294304][ T6104] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 519.218705][ T6012] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 519.218788][ T6012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.218813][ T6012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.218832][ T6012] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 519.218871][ T6012] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 519.218891][ T6012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.227077][ T6012] usb 2-1: config 0 descriptor?? [ 519.386293][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 519.386963][ T959] usb 9-1: USB disconnect, device number 5 [ 519.406842][ T959] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 519.447824][ T959] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 519.456146][ T959] quatech2 9-1:0.51: device disconnected [ 519.809362][ T9310] 9pnet_virtio: no channels available for device 127.0.0.1 [ 520.281413][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.946'. [ 520.301242][ T6012] usbhid 2-1:0.0: can't add hid device: -71 [ 520.301365][ T6012] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 520.416502][ T6012] usb 2-1: USB disconnect, device number 39 [ 521.422421][ T6104] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 521.584233][ T6104] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 521.584262][ T6104] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 521.584279][ T6104] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 521.584298][ T6104] usb 8-1: config 220 has no interface number 2 [ 521.584374][ T6104] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 521.584396][ T6104] usb 8-1: config 220 interface 0 has no altsetting 0 [ 521.584411][ T6104] usb 8-1: config 220 interface 76 has no altsetting 0 [ 521.584427][ T6104] usb 8-1: config 220 interface 1 has no altsetting 0 [ 521.587211][ T6104] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 521.587237][ T6104] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.587254][ T6104] usb 8-1: Product: syz [ 521.587266][ T6104] usb 8-1: Manufacturer: syz [ 521.587279][ T6104] usb 8-1: SerialNumber: syz [ 522.066491][ T6104] usb 8-1: selecting invalid altsetting 0 [ 522.093885][ T6104] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 522.093915][ T6104] uvcvideo 8-1:220.0: No valid video chain found. [ 522.701752][ T6104] usb 8-1: selecting invalid altsetting 0 [ 522.701791][ T6104] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 522.732104][ T6104] usb 8-1: USB disconnect, device number 13 [ 522.752082][ T8979] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 522.922000][ T8979] usb 9-1: Using ep0 maxpacket: 8 [ 522.928825][ T8979] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 522.928851][ T8979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.928868][ T8979] usb 9-1: Product: syz [ 522.928881][ T8979] usb 9-1: Manufacturer: syz [ 522.928893][ T8979] usb 9-1: SerialNumber: syz [ 522.938640][ T8979] usb 9-1: config 0 descriptor?? [ 523.169652][ T8979] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 524.891730][ T8979] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 525.262644][ T5950] usb 9-1: USB disconnect, device number 6 [ 526.939230][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.8.968'. [ 526.974647][ T9362] netlink: 16 bytes leftover after parsing attributes in process `syz.8.968'. [ 528.312066][ T5950] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 528.481981][ T5950] usb 9-1: Using ep0 maxpacket: 32 [ 528.487071][ T5950] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 528.487097][ T5950] usb 9-1: config 0 has no interface number 0 [ 528.489585][ T5950] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 528.489609][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.489627][ T5950] usb 9-1: Product: syz [ 528.489638][ T5950] usb 9-1: Manufacturer: syz [ 528.489651][ T5950] usb 9-1: SerialNumber: syz [ 528.582337][ T5950] usb 9-1: config 0 descriptor?? [ 528.587911][ T5950] smsc95xx v2.0.0 [ 528.701078][ T5897] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 529.109565][ T5897] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.123830][ T5950] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 529.123859][ T5950] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 530.667939][ T9395] vivid-003: disconnect [ 530.682248][ T9395] vivid-003: reconnect [ 531.869194][ T9400] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 531.881057][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 531.881080][ T9400] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 533.123311][ T9410] IPVS: Scheduler module ip_vs_sip not found [ 533.212721][ T5950] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 533.213030][ T5950] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 533.218823][ T5950] usb 9-1: USB disconnect, device number 7 [ 534.650344][ T9419] netlink: 112 bytes leftover after parsing attributes in process `syz.8.986'. [ 534.828069][ T9425] can: request_module (can-proto-3) failed. [ 535.625216][ T9437] veth0: entered promiscuous mode [ 535.627877][ T9437] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 536.982034][ T5950] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 537.017432][ T8980] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 537.183825][ T5950] usb 9-1: Using ep0 maxpacket: 8 [ 538.002472][ T5900] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 538.074723][ T5950] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.074749][ T5950] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.077985][ T8980] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 538.116717][ T8980] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 538.116741][ T8980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.116752][ T8980] usb 7-1: Product: syz [ 538.116759][ T8980] usb 7-1: Manufacturer: syz [ 538.116766][ T8980] usb 7-1: SerialNumber: syz [ 538.158388][ T8980] usb 7-1: config 0 descriptor?? [ 538.162594][ T5950] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 538.162621][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.162640][ T5950] usb 9-1: Product: syz [ 538.162654][ T5950] usb 9-1: Manufacturer: syz [ 538.162667][ T5950] usb 9-1: SerialNumber: syz [ 538.192000][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 538.194623][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.194664][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.194700][ T5900] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 538.194721][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.269632][ T5950] usb 9-1: config 0 descriptor?? [ 538.279496][ T8980] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 538.279549][ T8980] usb 7-1: setting power ON [ 538.281170][ T8980] dvb-usb: bulk message failed: -22 (2/0) [ 538.306880][ T8980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 538.322871][ T5900] usb 2-1: config 0 descriptor?? [ 538.348522][ T8980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 538.363902][ T8980] dvb_usb_cxusb 7-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 538.488735][ T5979] usb 7-1: USB disconnect, device number 14 [ 538.725498][ T5950] usb 9-1: USB disconnect, device number 8 [ 538.743914][ T5900] corsair 0003:1B1C:1B3E.0006: unknown main item tag 0x5 [ 538.744573][ T5900] corsair 0003:1B1C:1B3E.0006: failed to start in urb: -90 [ 538.784167][ T5900] corsair 0003:1B1C:1B3E.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 538.937451][ T5950] usb 2-1: USB disconnect, device number 40 [ 539.334179][ T9471] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 539.878286][ T5823] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 542.115007][ T9497] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 542.408997][ T9506] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1015'. [ 543.963856][ T5823] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 543.964145][ T5823] Bluetooth: hci2: Injecting HCI hardware error event [ 543.970093][ T5823] Bluetooth: hci2: hardware error 0x00 [ 546.117206][ T5823] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 550.342214][ T8979] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 550.492063][ T8979] usb 9-1: Using ep0 maxpacket: 32 [ 551.763495][ T8979] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 551.763521][ T8979] usb 9-1: config 0 has no interface number 0 [ 551.763568][ T8979] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 551.763591][ T8979] usb 9-1: config 0 interface 196 has no altsetting 0 [ 551.999725][ T8979] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 551.999755][ T8979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.999774][ T8979] usb 9-1: Product: syz [ 551.999786][ T8979] usb 9-1: Manufacturer: syz [ 551.999799][ T8979] usb 9-1: SerialNumber: syz [ 552.044490][ T8979] usb 9-1: config 0 descriptor?? [ 552.045997][ T9565] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 552.829986][ T8979] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 552.830580][ T8979] ipheth 9-1:0.196: probe with driver ipheth failed with error -22 [ 555.210425][ T9546] usb 9-1: USB disconnect, device number 9 [ 555.680713][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 555.681336][ T9611] 8021q: VLANs not supported on ip6_vti0 [ 555.811730][ T5964] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 556.741342][ T5964] usb 8-1: too many configurations: 88, using maximum allowed: 8 [ 556.750579][ T5964] usb 8-1: config index 0 descriptor too short (expected 107, got 45) [ 556.752127][ T5964] usb 8-1: config index 1 descriptor too short (expected 107, got 45) [ 556.781071][ T5964] usb 8-1: config index 2 descriptor too short (expected 107, got 45) [ 556.809689][ T5964] usb 8-1: config index 3 descriptor too short (expected 107, got 45) [ 556.830729][ T5964] usb 8-1: config index 4 descriptor too short (expected 107, got 45) [ 556.832729][ T5964] usb 8-1: config index 5 descriptor too short (expected 107, got 45) [ 556.837347][ T5964] usb 8-1: config index 6 descriptor too short (expected 107, got 45) [ 556.932986][ T5964] usb 8-1: config index 7 descriptor too short (expected 107, got 45) [ 556.938679][ T5964] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 556.938706][ T5964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.938724][ T5964] usb 8-1: Product: syz [ 556.938736][ T5964] usb 8-1: Manufacturer: syz [ 556.938749][ T5964] usb 8-1: SerialNumber: syz [ 557.121838][ T9623] FAULT_INJECTION: forcing a failure. [ 557.121838][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 557.121865][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.6.1050 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 557.121884][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.121893][ T9623] Call Trace: [ 557.121900][ T9623] [ 557.121908][ T9623] dump_stack_lvl+0x189/0x250 [ 557.121933][ T9623] ? __pfx____ratelimit+0x10/0x10 [ 557.121956][ T9623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.121976][ T9623] ? __pfx__printk+0x10/0x10 [ 557.121999][ T9623] ? __pfx___might_resched+0x10/0x10 [ 557.122016][ T9623] should_fail_ex+0x46c/0x600 [ 557.122031][ T9623] ? __alloc_skb+0x255/0x430 [ 557.122041][ T9623] should_failslab+0xa8/0x100 [ 557.122057][ T9623] ? __alloc_skb+0x255/0x430 [ 557.122070][ T9623] kmem_cache_alloc_node_noprof+0x78/0x700 [ 557.122099][ T9623] __alloc_skb+0x255/0x430 [ 557.122119][ T9623] ? __pfx___alloc_skb+0x10/0x10 [ 557.122138][ T9623] ? netlink_autobind+0xdb/0x300 [ 557.122157][ T9623] ? netlink_autobind+0x2c2/0x300 [ 557.122177][ T9623] netlink_sendmsg+0x5c6/0xb30 [ 557.122194][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.122210][ T9623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.122224][ T9623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.122245][ T9623] __sock_sendmsg+0x21c/0x270 [ 557.122271][ T9623] ____sys_sendmsg+0x508/0x810 [ 557.122297][ T9623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.122326][ T9623] ? import_iovec+0x74/0xa0 [ 557.122345][ T9623] ___sys_sendmsg+0x21f/0x2a0 [ 557.122358][ T9623] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.122389][ T9623] ? __fget_files+0x2a/0x420 [ 557.122411][ T9623] ? __fget_files+0x3a6/0x420 [ 557.122443][ T9623] __x64_sys_sendmsg+0x1a1/0x260 [ 557.122465][ T9623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.122494][ T9623] ? __pfx_ksys_write+0x10/0x10 [ 557.122510][ T9623] ? do_syscall_64+0xbe/0xf80 [ 557.122526][ T9623] do_syscall_64+0xfa/0xf80 [ 557.122540][ T9623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.122550][ T9623] ? clear_bhb_loop+0x60/0xb0 [ 557.122571][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.122587][ T9623] RIP: 0033:0x7fb50052f749 [ 557.122604][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.122619][ T9623] RSP: 002b:00007fb4fe796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.122638][ T9623] RAX: ffffffffffffffda RBX: 00007fb500785fa0 RCX: 00007fb50052f749 [ 557.122652][ T9623] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 557.122663][ T9623] RBP: 00007fb4fe796090 R08: 0000000000000000 R09: 0000000000000000 [ 557.122676][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.122682][ T9623] R13: 00007fb500786038 R14: 00007fb500785fa0 R15: 00007ffef9f90d98 [ 557.122698][ T9623] [ 557.452174][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 557.452234][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 559.111204][ T9645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 559.118457][ T9645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 559.783132][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 560.014379][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 560.199594][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 560.199660][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 560.201316][ T5964] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 560.598963][ T5964] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 560.627883][ T5964] usb 8-1: USB disconnect, device number 14 [ 563.504132][ T9675] 9pnet_fd: Insufficient options for proto=fd [ 563.504614][ T9675] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 563.504627][ T9675] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 563.504639][ T9675] CPU: 1 UID: 0 PID: 9675 Comm: syz.4.1068 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 563.504655][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.504663][ T9675] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 563.504683][ T9675] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 e5 eb f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 e5 eb f9 4d 8b 24 24 48 83 c3 [ 563.504693][ T9675] RSP: 0018:ffffc90003fa7a40 EFLAGS: 00010206 [ 563.504704][ T9675] RAX: 0000000000000005 RBX: ffff8880558cd900 RCX: 0000000000080000 [ 563.504711][ T9675] RDX: ffffc9000e345000 RSI: 00000000000003c4 RDI: 00000000000003c5 [ 563.504718][ T9675] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 563.504724][ T9675] R10: dffffc0000000000 R11: ffffffff88360aa0 R12: 0000000000000028 [ 563.504731][ T9675] R13: dffffc0000000000 R14: ffff88802f28f000 R15: dffffc0000000000 [ 563.504739][ T9675] FS: 00007fba64f766c0(0000) GS:ffff888126e5e000(0000) knlGS:0000000000000000 [ 563.504747][ T9675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.504754][ T9675] CR2: 0000001b2f822ff8 CR3: 00000000565f0000 CR4: 00000000003526f0 [ 563.504763][ T9675] Call Trace: [ 563.504768][ T9675] [ 563.504773][ T9675] pcl818_detach+0x66/0xd0 [ 563.504787][ T9675] comedi_device_detach_locked+0x178/0x750 [ 563.504801][ T9675] comedi_unlocked_ioctl+0xce4/0x1020 [ 563.504811][ T9675] ? kasan_quarantine_put+0xdd/0x220 [ 563.504823][ T9675] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 563.504835][ T9675] ? smack_log+0xef/0x3f0 [ 563.504845][ T9675] ? __pfx_smack_log+0x10/0x10 [ 563.504853][ T9675] ? smk_access+0x14c/0x4e0 [ 563.504862][ T9675] ? smk_tskacc+0x2fc/0x370 [ 563.504870][ T9675] ? smack_file_ioctl+0x24d/0x340 [ 563.504881][ T9675] ? __pfx_smack_file_ioctl+0x10/0x10 [ 563.504892][ T9675] ? __fget_files+0x3a6/0x420 [ 563.504905][ T9675] ? __fget_files+0x2a/0x420 [ 563.504917][ T9675] ? bpf_lsm_file_ioctl+0x9/0x20 [ 563.504930][ T9675] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 563.504940][ T9675] __se_sys_ioctl+0xff/0x170 [ 563.504950][ T9675] do_syscall_64+0xfa/0xf80 [ 563.504963][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.504973][ T9675] ? clear_bhb_loop+0x60/0xb0 [ 563.504984][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.504993][ T9675] RIP: 0033:0x7fba66d0f749 [ 563.505003][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.505017][ T9675] RSP: 002b:00007fba64f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.505028][ T9675] RAX: ffffffffffffffda RBX: 00007fba66f65fa0 RCX: 00007fba66d0f749 [ 563.505036][ T9675] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 563.505042][ T9675] RBP: 00007fba66d93f91 R08: 0000000000000000 R09: 0000000000000000 [ 563.505049][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.505054][ T9675] R13: 00007fba66f66038 R14: 00007fba66f65fa0 R15: 00007ffeeef77328 [ 563.505066][ T9675] [ 563.505073][ T9675] Modules linked in: [ 563.505086][ T9675] ---[ end trace 0000000000000000 ]--- [ 563.505095][ T9675] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 563.505109][ T9675] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 e5 eb f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 e5 eb f9 4d 8b 24 24 48 83 c3 [ 563.505117][ T9675] RSP: 0018:ffffc90003fa7a40 EFLAGS: 00010206 [ 563.505125][ T9675] RAX: 0000000000000005 RBX: ffff8880558cd900 RCX: 0000000000080000 [ 563.505133][ T9675] RDX: ffffc9000e345000 RSI: 00000000000003c4 RDI: 00000000000003c5 [ 563.505139][ T9675] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 563.505145][ T9675] R10: dffffc0000000000 R11: ffffffff88360aa0 R12: 0000000000000028 [ 563.505152][ T9675] R13: dffffc0000000000 R14: ffff88802f28f000 R15: dffffc0000000000 [ 563.505177][ T9675] FS: 00007fba64f766c0(0000) GS:ffff888126e5e000(0000) knlGS:0000000000000000 [ 563.505185][ T9675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.505192][ T9675] CR2: 0000001b2f822ff8 CR3: 00000000565f0000 CR4: 00000000003526f0 [ 563.505207][ T9675] Kernel panic - not syncing: Fatal exception [ 563.505590][ T9675] Kernel Offset: disabled