last executing test programs: 18m29.322451458s ago: executing program 3 (id=16): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) fcntl$setown(r0, 0x8, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a5167cb75000000010902240001000000000904010002ffffff000905ff000000000000090501"], 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000100)={0x7, 0x3, 0x1}) ptrace$getregs(0xc, 0xffffffffffffffff, 0x4, &(0x7f0000000040)=""/20) r5 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) syz_open_procfs(r5, &(0x7f0000000140)='net/mcfilter6\x00') r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 18m23.950202063s ago: executing program 3 (id=25): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x140e, 0x8, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1ff}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) r4 = socket(0x1e, 0x805, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000460000006500000085000000071255ce865c114900000000a293d0b882409f441cfb7dfec1320d71937441560d2123fb9ee7"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000125c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 18m22.60199747s ago: executing program 3 (id=26): syz_open_dev$radio(0x0, 0x1, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x2400c808) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) setresuid(0x0, 0xee00, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="5488fa25ba61", 0x0, 0x100004, 0x10026, 0xffffffffffffffff, 0x0}) 18m20.188373874s ago: executing program 3 (id=30): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$x25(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x10000, 0x8, 0x4, {0xb, @raw_data="e19f9753b68204d8a9cb54a2f1525cd97a77aa87994fd7fc519331d37860ab699f407b7829874e6c88a54472893680ad673634ff124b144d24c0668aaea5aba0b96ebbf3b3d210173c0438380441488a600c9363cd7204075ea8d9137a86e3257418e84274190f8575b4cb4fa44d5f20d3fd2689ff93ef2fcf28db825ff209f9156ee928e63dc9760208d6d8d2911762be5baeaef07d8853728915598bd06e9436afc187ecb5741c6680232b3c6643970c80a6e87882d230c52b8bee772f49f5417c56c927448dcb"}, 0xf2b9}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x20000000}) 18m18.289433161s ago: executing program 3 (id=34): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18m15.892309967s ago: executing program 3 (id=37): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18m0.261643739s ago: executing program 32 (id=37): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffa, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m52.056017363s ago: executing program 0 (id=2749): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8788e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x7, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0xd4) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)=""/61, &(0x7f00000001c0)=0x3d) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000280)={@mcast1, r7}, 0x14) dup2(r5, r6) 2m51.058186359s ago: executing program 0 (id=2756): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1, 0x4}, 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x2a, 0x4, 0x0, {0x1, 0x7fffffffffffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x9, 0x70bd24, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x61]}}, 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00', @ANYRES16=r3, @ANYBLOB="07000000000000000400050000001c000380080004005a0a00000800020020000000080005007183bbda180001801400020073797a5f74756e000000000000000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m49.812751693s ago: executing program 0 (id=2758): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m49.358162042s ago: executing program 0 (id=2761): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1735c48291a13441110d9e074ad8d8d891cc61d30bd34a4d3ae42f513f0fc7c410a8c0b5d44adb0595"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x30020, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffd, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) r6 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000003c0)="7d12f57d50c71f44941da14a4273f17203cb2d7329d3c00748da8694a83e3b46896619337894fdc0c7bf49ab45f4a08cab91118524acf304898eefbfad8fdecf24b6a6d4"}], 0x47}, 0x4008084) ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000300)=0x6) 2m43.973983415s ago: executing program 0 (id=2783): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000000900028000000000edab0000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000002000000b96004420080000009000000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400"], 0x90}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 4) 2m43.446766877s ago: executing program 0 (id=2785): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10044081) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x4880) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000680)="47f8d97a1a440db605c832b4b0246c87805fbeaaf5fd835d3e8688470c3b6801ad6d6728f5faf75b38e2ded408a2a1adc3937bee50260936da31e31fe8f7dae3f6fd293a1c2ffe7bc4a88cb16d3e4a2d42d0bb5f65363ae858502185d3dd784c5ae30331420166cddcd07d1930687fbef32283c4414665f94908ffb202534defc7fd29c5540150af3748a2153daa7e76aa9fd97a649da1f7badf1a793e1840b753f56f2d89062d855e2b7169cf237906c7f6edec451c372eb42a825668dad7ea2091aef3d942a91ffb62a201f18c25d2e72dd8edc9e4a9ea46f7aa19c1d99abfb21426c38c02d1cdd331a3e87d616d8b1f372a783b7c80288f52ea8d770f336c0c7eef5fddfbdb5a536d64806c90531524b8ba90cb91e0f65a72c61898865755502f07a83c0b9eec823968c6730607ff3bbc5511b1a63e377fbb8c313290f59235d551394739204417a7058e658a7cd3286c1d7ab3e7d0ce77c461ebc88cfd5542cc8162f68039721f937bc95ee59b5901a2847a6ce277a135e29f1930bf0f38936c34312a23de987ab407e5656eeef93dcc4055d464f882871bfed9cc1d9fac2a4aa879d85b8f66493bb7fe157be44bb9e31f874d100bb27b97be07c0ab0cd0fc32174664b5267cb305e2e9c0f17ebcff27b9fac98d4c22751edec3e9ac3b59c2b50b55e6aeb328a48fc4a186bd54c8e14a788f5a1f6148cb22e0d592d60005e65b43d2ed928ae42a1b6e544800f65dbd1c8b6dee2c937c511a506dba4ce4331b5b72bc11f37785db0b61a7398e71f0b1861c3698b1f26e6b30351702c1bfdebcc5bec4a28573f68118bc83a337d95a0c9d0effbef57c947f0f435202944ec3cc01e638bfc19dd596aa78121035147db40077766079de78f8a7db8705c6e749c769ca7974633eaf8414b7a8bbd16cd2cb0f5a8557335ab9c95dd4f0dc3f51e4f767065c84d3e0bc2a14cd6c18164be17ce6a90eaf1344e8b76bc08bdc8dc83f2ebd156189b4dee882f9b0ee6f406900f380f7598ccaae7084b3b8e43d0ee046b928ed0dfc193c836b18331c6d6722e6f99b2f70f288a66e07be0902bac775a7bd5078019687a5c0733d8cb0f90cdcc7fcd44888ee25c03e0eac71d72f1fea16ee6c0f65af984c8edef41c41f9e01fcb61f3493ba0badebd7d85252281d44d2305d84aa9386a7fc5a00f19b379704dde15e73efa4022ad03496ca63493d7a4e6d9fbfdebfa9a50d001e490b0e256a9737b8692b2c99fb7f7485dc21099678a65adbba9b382fe6660b1606d4e8e0cc622061c7a7b20b39bbd6b1045e939b164a2a71d48a1be77787261ceeb397a59137a5015e2b94354a157808cff96f8156b8daefe48a08ee985637b32351e7178e7cae1b3388144005613ca2213e1ad7f78fd6c27b1217c6b6229258c981d532b081d12fa7ec271f49bc39f6af1ff3a0c134c30a11408cb82efefa9bfbd1e7d9e122e8bddd7c612a23a215731444c5b05dcd9fa131aac3e15a27444f09632c8aedcea3ea866d8f2fbbbc2acbdb705ee3539e2806c482fea54e2824d4127abe0d59c2f6e7d68a4c99ab24ae881e5ac897975343a58ba2b8ccb06d71eb8c0ee358a3461036469eb188e16a2ea52514afcc689c4ceee42a4a540259303a905fc9f0a583cecc9f14165746dd191e77870104dea83e7c5e01c0093aa1dd52894e920130b7040b61c07973b0bf782a421eecec91cdf7c374da17ae12a3801f89e0fcb0d92208e2575a9196c617d0a56ba3be558c2af33ab2dace582afda2782cbcfb31a51440cc7ad0955d7242b86f97c755ca510ff851857029551b0c6d76cd6091686ee9032daafc41c106aa65b694a99ab46dd41eca03f607af08abd1b0820b48dc505d059f16ca677ec862728fcd5d340a9f496132bb563f22e7f27dae0d9256d101b327db0dd3bb890c2ea415643e172567d5a7fe67fff2c6e5b26887431deb86540710882e1a8514d0a1584908ff00e1fa023ce12ca1884641cf59606944a2a1c92eab8182ae25e84fea21928cc86d0ed2e5d1436732aabe43a0de1ab9af1e05d2b006a25bf213fad97f4897b5c28c1c4f9e46c3da217a2e80b0ddb12540444773c98650ee9164032d97295c409377755723fdc38d8f7a77fcd13de78a54847ab7ac8cbae274d60803f1beb6d6b048017bdf96255696b80cd4985fa7233f7ce701f611467d29b5737a93152d702ce1e81139d8f7b7a3eaea173e5d99088bb129310bff424218360d00355e02eeace3306c372f80b12e911da15abb3c01928ff48c6069191ee27578ef21e91cbe01432815d4cd492b9a9bda7806caafe75c17f8584083857ac91a16690b258cdc18de4953f3b85222e1fbdf3c14e061ac3589eeb0adecb35ebbc144026c9b24e0c828064fe13570047143641064ce340d3ad5c6c1c9cdb7dda3dc55e2f228ec657246a5691655924514ced4685b5ac4a6a91b2f526fc49d529bba5b98af6602d5d51cbcd3c0b86a8b38f5765c5dc1c9bc0a842cf915e09ce793e6c15515efa57e9b595322e618daccb28e10a9d154380568c188b88fdb07e5c01a78cc5cb291c6001c0eb4f9b9861084d7c826fab2af1e7cedbb1a2a2c2042594ab0f1f7e3c93cc6d14d442436b22d1060610ab2bd7abfd9de9854bd039a51467c136059ca5303676ce0f484c1fe89484790855ca8b67d5f69a211290268356d5b9274ddbd6f49820075dc671a877b727812b24abbb79814e53e966992cf2c9a60c431aea4adbee030193821d0a8198deea936701a98c747a939c977cc3343b00a5f92c48a327214603d9c79b825a7c07ab2084b797c0a50f8aabc89ae83acda299f75b09463c3a79b15319f50f13edad1fc2ae21fdf478876d5db8f423b08b11135607de04e8219096702da6957df92522a72232099548c913c13399874dce0ad578fe2791a0a817511270f43a5296ffe9b299a0dd7e20a479fc83b5aa8278497f55f4057034295e234ef07eda9bfccd147822fef6e2db13198e9d0ef2926f3287452b969942b07db5a67fad25a21095340abb000ed82705e6ed705cb3f184ecbb233aa7a18e36f377aebea10ca1c105772c0d276c5eb0abb4171cbb96cafb18f8858104d9a647b554165b5ea43fdcdb8022efceab6404ed4cc89913aef8a8f06dddb1f8cc89a0a6fbf1e86b0e7dddf9a72565d64718e8a1cc88e1fff22fec1e6e3cd3dc84584d89a5c9e64dbc165a8b955b4562230994d965bb31e52afbd002ed468b616f0977f8ec6c710ff56bc5c2531aa2eb1fd8957efdb20d082470babe8351cab1f961b9b220a5278cbdd89abb505b2eab71fb325b0d780fbaca630e3bb874a9f9cd3bcfeb72b6070a5e5d11cfae453211a031dd6b2eb5adfa4d54d969e265d71d55df97714647f02bbabdba513c255b6f17efcfc8093da32f2c82a4b821f9d5e51c6edae7f0368908bebc3e006e2bce6499895c12a51a5080a631356c1496aa4aba38ccc47ff65b87dd67d10129a3b158b0d743313b9fe79503b9a69d1186be94fee1dad2fc9515b9fc437c21f8c2a73d60a27f3ac70e810fee65529621f5003bcbdf39f0fe93f98a76aa566e4a92e78f5506a6a0720b62124085bd67cfb045903d120d966ce8d93c66c3dabb95554734ede3830a9483e83444316b6abb7f634512401e9957c44e9063a17766df070961719e71435ee83f0fc78a7b33b2ac6475e7ac75e4ae276d1eceb8112efe6695a6ee46c23d482aab2bbae96f2525b62436fac2c173dc5b5b42774679fb100598e0b29da9ab3279e0777888c890c93b4cec0fc00720da7a32de82c2818d6bbb9ab3643c1354e473ec348a3605be5663313f99c2e7806096982b1ca2fe49e53795a12c964ce5531c044d1a4d995847553a4a9b6055f9d7bb4d0c37144edba8cd86cc6c26e6c1c06df2c8aa802f3844326a49cb9796f7e886b08db0b06ac9c32e1c6d9a7b8aed081b4e8f5572c34ff3cb97c1359dbcfbb7ce6907511c603d89be7ef0f542ff5a5f06fb87340eb34798474e14be8d8a7ffb7deef6b2222a128f2155aa5efbe2eb2139c341bf4fbfe6a2b3e48eb9be27160c4435fc262115118ff80e887f7c86db9fe00c981a9fbafe7489c705af653eafa9ba3aa09780abc23fc8a2430e9041bf26e96480b23205fc4ddab691416c50c9505a069e50124319ebf8e7bee7421b1598e935fd4190fe3a0114b568ee3428850aec7d4a919c06b3038974d270762e16350e90e680f60be0afbc54ea80c407932d4347bf0bd59ed67da2c4513a6a295f377aea798fdbcc6fd57eb3a33b470dd6f74975b084e9819e64139703d227a93b11390756bfe51d7f606d79d7a666400ae463a32cf72674edf2a524479879cef89a9f636dc1f8ba71c347527cd2cf14fcef74bff8cbb130ab0a4084aeb63dc8528e7d8cdd5c04b94b08905d208997ebe07e1bc43aec16bd0978894239945f5f9a226f577681e389e4c1d4894c9a8c13f2c3781c735cf55a4f53bcbeb5e83370d33291ef7fd102ea6741a20eb4832d299884747ac8212a98e404563b2730b2afaeb19069cd29cb46f6c5506dcf6a5d26ca3c060804b653bffca096baa3aeb17271b0b517383301c12c6a27bf6e9432e90a729150082cf9f21ce5479d07882a6f3a0d0dbac048d3666812ca8ed411418a04d96a596d3b1169382b703117e04e9bf14ae37d00e78aa7d801955330c5baa70ad1aa6523f9bd2f02b6f50ea56df34c9327e9b1bd79917fbb422defbfa8ee73a5b3e7ab9b820fd4623f4a14bfa2b890d469e13c6a79fae975de748a4f454c35b1d83e0a3c8dc6ce7c7a25fef79c1485f4fccdaa19acaf66b1d5104b78d7515a17688c77a993e22012a33fc57e8e9ae772f9bf0051810f3df297a1d17c4273b36b502188a1a1fc157a89974d6cb066184ad248b53918e0103a98e8e4f5e657c9bcf3e78c90ef3edcd5efd4d8ec4bf138c6ab499e23a370513386689b6a09ed611b2bea55aeb8dfc401f40c6bceffd6f110f4d711033a31f63ff69cd9de73d8f4c09413ab0bd38ced5260fa8876162d5723ee0f679bfe394b6a4ce0d9204c08d4a5dec72d0f9cee3eab617667c3a6f3d1dd186190e61a059edebe0be08f6a748679d76fa9bd931868fc5e077f292ad14daa209e613b774e7fa9e0f2ed5007b08f881edf92c153fb984d8975775c76ef8747ebdf95ca22aa452ee9f3fca45edc1f6a589ff9a23f209c5856f957e4f2a54af5b6ccf938a24d54e45af5bc974ea396d6e6b8b7cb02b2bb47331b5087ba0bc542e9dcfee4a55a471d0be6b7d6049c4697659782a150d6ea89c4db22795546f2eb2c4b5e0d7378239daa782173795ee4fc3fc7bcfb19fdc0a5f0441d849e79c093ad1a6a27b1a34706a402c1effc286f75846e9f322ed215fa9532c40a912387a551fee0d5d61a82b3a2cec9f3d43df79429f7141eeebd36ec01078387d2be79845bf5ff61105e1aa8d321e5fcf590fe436e696abddf0c2184265b1368badaaf93869230f191f9817bc7eddb906bb5d627147a0c9c4ce086aa1a120acd9ea2a2d96b9bdf7a4cfbd39ae3dca53d171ef959f251038e8752adfc24f8996997aa7046540a5d7334bfdcdf8646b9ffd2654bfddd62687b4776b0932e6fb55f50df7800b8232331c6ec279abbbd6a96d4f0bc9e80f4198bab74d7c24209de54eb8990436410b12f51b687bf990f53f9cbaf5e5b77a3f5f1f0948ac7dd6ff7b00d60d1ddbb3f193e0a56f05747c1c160f752e510b536bb0b24c61ed09df16e7155157241bd3aa8b7133f0dade37a28aa615be07b8ddd8ecf", 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) syz_init_net_socket$ax25(0x3, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x205, 0x5c1) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0x3fdd, 0x4, &(0x7f00000002c0)="b7cf02f1d85a72ab92e14de773cfbd61d2666f6205b19ed3c26ba6d5640a18615b2188c549f9b310d543e5b559f785566a2d3d8e50291a4218ce3ee069910cb66697478fd54783d2876b94c34debf6feed7cf76bc45002455e6483114d8f47d84f406cbed9462ed315ff1f062dc995a2094499a3efbb0a75aced917b689909dba0f1", 0x82, 0x5, 0x800, 0x0, 0x8, 0x273, &(0x7f0000000380)="19ee47e3d71b9649b2594e0a32083998f6c4cc19e4a45e4fd4d2723effabdd5822f83aedbe2069877d6a1949e71dadffe73ea10dd247e9f2ec7fa6b0de40cd20f2499626207d297af0434dd40eb9d0883219944e02695041ed64423888d91381cf3976010d8377af607e5ba34a87fda7561c5519a8d707cae308bc5ed9f62993f330e78fb2081e825c49b278e4a554d0a44305cc79a8b6289529c74d391566cadb730b7a8392ccf0844d4c66443a70d401"}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x65) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff73) 2m28.089196153s ago: executing program 33 (id=2785): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10044081) r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x4880) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_MKDIRAT={0x25, 0x44, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000680)="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", 0x1000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)) syz_init_net_socket$ax25(0x3, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x205, 0x5c1) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0x3fdd, 0x4, &(0x7f00000002c0)="b7cf02f1d85a72ab92e14de773cfbd61d2666f6205b19ed3c26ba6d5640a18615b2188c549f9b310d543e5b559f785566a2d3d8e50291a4218ce3ee069910cb66697478fd54783d2876b94c34debf6feed7cf76bc45002455e6483114d8f47d84f406cbed9462ed315ff1f062dc995a2094499a3efbb0a75aced917b689909dba0f1", 0x82, 0x5, 0x800, 0x0, 0x8, 0x273, &(0x7f0000000380)="19ee47e3d71b9649b2594e0a32083998f6c4cc19e4a45e4fd4d2723effabdd5822f83aedbe2069877d6a1949e71dadffe73ea10dd247e9f2ec7fa6b0de40cd20f2499626207d297af0434dd40eb9d0883219944e02695041ed64423888d91381cf3976010d8377af607e5ba34a87fda7561c5519a8d707cae308bc5ed9f62993f330e78fb2081e825c49b278e4a554d0a44305cc79a8b6289529c74d391566cadb730b7a8392ccf0844d4c66443a70d401"}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x65) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff73) 13.765498287s ago: executing program 5 (id=3258): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000300)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000e1408a06d3a80443301000200000008003c00040000000800035758abb5864e118800050000000800030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) r4 = socket(0x1e, 0x805, 0x0) r5 = socket(0x10, 0x803, 0x0) unshare(0x8000000) r6 = semget$private(0x0, 0x4000, 0x0) semtimedop(r6, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000460000006500000085000000071255ce865c114900000000a293d0b882409f441cfb7dfec1320d71937441560d2123fb9ee7"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000125c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r10 = dup2(r9, r9) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 12.779294633s ago: executing program 5 (id=3259): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.963369251s ago: executing program 1 (id=3262): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (fail_nth: 1) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x6, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.178056996s ago: executing program 1 (id=3265): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000300)=ANY=[], 0x0) 11.04383127s ago: executing program 4 (id=3268): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000003bc0)=0x6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = eventfd(0xfffffff9) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000600)={{r1}, "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"}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x160, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x130, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_CGROUP_EMATCHES={0x11c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x81, 0x2, 0x2}, {0xa, 0x2, 0x2, "4883"}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x3ff, 0x4, 0x7f}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x2, 0x4}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8, 0x8, 0x8}, {0xffffffffffffffff, 0x0, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x152, 0x7, 0x3000}, {{0x0, 0x1, 0x1, 0x1}, {0x3}}}}, @TCF_EM_META={0x8c, 0x3, 0x0, 0x0, {{0x8000, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="862a00", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="dfc5", @TCF_META_TYPE_VAR="a0b6f466b6e8"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="495749db57", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a0af604e", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="011882f674c75fd496", @TCF_META_TYPE_VAR="7f6a0d99621511dd", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2}, {0x3, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="feee7eb94e", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9c2, 0x3, 0x3}, {0x7ff, 0x0, 0x4, 0x9}}}, @TCF_EM_NBYTE={0x1c, 0x11a, 0x0, 0x0, {{0x1, 0x2, 0x7}, {0x7, 0x9, 0x1, "e09616263de11d6511"}}}]}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) r12 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r12, 0x5404, &(0x7f0000000000)={0x0, 0x346f, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) 10.959073765s ago: executing program 1 (id=3269): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x1416, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x1000084, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x8d, 0x7fff, 0x101}) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000cc0)=""/240) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x1, 0x10, 0x1, 0x2, 0x7ff, 0x3ff, 0x5, 0x2, 0x7fff, 0x0, 0x8, 0x4, 0x200, 0x4, 0x2, 0x2c, {0x8, 0x10000}, 0x3, 0x2}}) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000a80)) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000180)={0x0, @ctrl}) 10.519577011s ago: executing program 5 (id=3270): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) 10.44307394s ago: executing program 4 (id=3271): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x2e2}], 0x1, &(0x7f0000000340)=ANY=[], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10.198676752s ago: executing program 2 (id=3272): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (fail_nth: 1) 10.142581574s ago: executing program 4 (id=3273): open(&(0x7f0000000000)='./bus\x00', 0x143942, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$dupfd(r0, 0x406, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000200)=ANY=[], 0x2a, 0x0) get_robust_list(0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) dup3(0xffffffffffffffff, r2, 0x80000) keyctl$read(0xb, r3, 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x0, 0x0, 0x0}) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000f25000/0x2000)=nil) socket(0xa, 0x1, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x200c, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x101, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x83, 0x0, 0x7d, 0x402, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x100003b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x9, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0x7, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) 9.691490654s ago: executing program 2 (id=3274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x9c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 7.757152085s ago: executing program 2 (id=3275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000506010100000000000000000a00000805000100070000000900030073797a30000a00000900030073797a32000000000900020073797a32000000000900020073797a3100"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (fail_nth: 1) 7.626422063s ago: executing program 4 (id=3276): pipe(0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_io_uring_setup(0xed0, &(0x7f00000002c0)={0x0, 0x1fe4, 0x10300, 0x2, 0x2000002}, &(0x7f0000000100), 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47f0"], 0x0) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x64, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESHEX=0x0], 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400048c6b012f5cdeddf80000000000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="ff0646bdd00000000965d7af8736776c18b2a27b0957bf6cf64c2007d3e9ae18d2b3a33b2297b3f6010a", @ANYRES32=r6, @ANYBLOB="8000e20114000100000000000000000000000000000000000a000200aaaaaaaaaa180000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20025094) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x10001}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x8, &(0x7f0000000280)=[{0x3, 0x2, 0x4, 0xb}, {0xff7f, 0x7, 0x10, 0x5}, {0xfffd, 0xf9, 0x7, 0x5}, {0xb7, 0x3, 0x6, 0x2}, {0x7, 0x0, 0xc, 0xe}, {0x5, 0x0, 0x1, 0x6}, {0x7, 0x3, 0xec, 0x1}, {0xbf, 0x0, 0x3, 0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 7.246551502s ago: executing program 5 (id=3278): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009404, &(0x7f0000000140)) 6.992533489s ago: executing program 6 (id=3280): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x8, 0x7ffc, 0x0, 0x2, 0x8, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) syz_io_uring_setup(0x20005862, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe23, 0x1, @empty}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000100)="080f890d057913", 0x7}, {&(0x7f0000000380)="8f3c913ae4d56ae1756d47ca25de1c3d0aca5ba1f0236057122f923c799a9bdc8461dc9bea2b7ddda6448643b438fe4b4995a09bb9ac5863b1f639fe03a948e580b802c58308b00d3df6299ae5578174455d545b94e18b420fbf7dbb168e9977e71eb174a57122b3558f289fb9d9d4b9b4f4c1fb76f0b4fdcc89d597b73d9a0d847c5ecb309354e4b3ae6f3e140e562e726b563dd7e9a3d5327afe97803036e2062e083a717955af7696dd89bfe331f44c7143c24ce950514180ec95e6305e7aeb27965d3f61b01780b03ffa", 0xcc}, {&(0x7f0000000180)="afd61fd334cab96c643fd59c3e9f0a65ec50319612a1b4a7b1daeae098", 0x1d}, {0xfffffffffffffffd}, {&(0x7f00000001c0)}], 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe6, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1886dd60000000003011000000000000000000000000000000000000000140000e220030907803e6c6c583de1ef674b8de5bbd577f4ec0da1d9c807e7b38047930020000000001000000329913f3"], 0x0) 6.934514469s ago: executing program 5 (id=3281): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_wait(r2, 0x0, 0x0, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) tkill(0x0, 0x13) tkill(0x0, 0x12) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 6.295148484s ago: executing program 1 (id=3282): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="959271f6da6f6b567df2dcf82e17ac3e91a775987ea26135f96aab7b88ade6f3ad930d740684609321635a50a11e85bd2400000000000000007ac38e6c33998f6460b3cb45e6", 0x46) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) setresuid(0xee00, 0x0, 0xee00) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5}, 0x8) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000100000000000086dd60000000004d3afffe880000000000000000000000000001ff0200000000000000000000000000018800907807000000fe8000000000000000000000000000bb030675946af53deb55858270ce4ec6ac86770b2176420d856904d4709f03da00853c23b99afaaec87c4f85df6544d9d553531a338f6248c9bed261339da90032b3303c2f804398a64c32a1e2960fbe9373c1f54c9e5653b47a545a0bfc5ac7808ba3ff46d8c9ca7c837815e2a33005a35ac957bd335133b54d93bf21652c08e56272051ebb58ec5e9abd597791ffc39f0f0200"/239], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 5.38214166s ago: executing program 2 (id=3283): socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x24020400) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x17) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x106) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r4, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 5.22820112s ago: executing program 6 (id=3284): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x0, r5}) 4.729759325s ago: executing program 1 (id=3285): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224000100000000090400"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000001000)={{@hyper, 0x6}, {@hyper, 0x800000}, 0x400, "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"}, 0x418, 0x9}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0xc0c0128e, &(0x7f0000000240)={0x2000, 0x1000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xd3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000001e005f5b25bd7000fcdbdf250a010101000000000000000000000000000004d502003c00"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbf8, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf25020000000800080046"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000013906c08e90f59db"], 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r8, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000200)={0x18, 0x0, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 4.30684167s ago: executing program 2 (id=3286): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x28, 0x3a, 0x0, @remote, @loopback, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x5000000, @local, 0x7ff}}}, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1423, 0x484a600b, 0xfffffe0000000001, 0x1ff, 0xffffffff}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c47", 0xc}], 0x1}}], 0x1, 0x4000841) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c007f0006000000000000000c000200000000000000000061c6a7570f1fe48ffb702486af76cc67a33eb022386593a350560f7a24d9ba1ebe96d62441d82b245d8343d9fb3b58a74ced78afa6b6b5e2dbc52176d9d5c49131146a45b49da6d1a7aeb44f12902c060000000000000021330a7754bf091b278aa470ea2d7299d96afe4d"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000380)={0x300a, r4}, 0x0) (async) landlock_restrict_self(r5, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.87145067s ago: executing program 4 (id=3287): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 2.669263768s ago: executing program 6 (id=3288): r0 = syz_io_uring_setup(0x1251, &(0x7f0000000100)={0x0, 0x100577, 0x10, 0x2, 0x42}, &(0x7f0000000340), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x8114, 0x0, 0x0, 0x0}, 0xfffffffffffffd22) (fail_nth: 1) 2.594504474s ago: executing program 5 (id=3289): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="130000004e007f049e", 0x9}, {&(0x7f0000000180)="78cabf89254400111bb8", 0xa}], 0x2}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x5}}) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x1, 0x12, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x54, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "56b84ee2870337224fe5d036a094da4c1790758f4477eb94"}]]}, 0x54}}, 0x40048a4) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100)=0x7d7, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000208010300000000000000000300000309c76610ebd02b5662000100"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 1.130865264s ago: executing program 6 (id=3290): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2b, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='net\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000300)=ANY=[], 0x0) 962.089029ms ago: executing program 4 (id=3291): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="82", 0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r2], 0x5c}, 0x1, 0xf000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24, &(0x7f0000000100), 0x0}) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 942.11974ms ago: executing program 2 (id=3292): userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000980)={0x1, 0xef, 0x8, &(0x7f0000000040)={0x19, "78b8142115db2c05f171f5306c7efb569a761ca9f5de0b77a007aae98e00"}}) 923.484525ms ago: executing program 6 (id=3293): r0 = socket$caif_stream(0x25, 0x1, 0x5) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xffff) (async) readlinkat(r1, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) (async) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffea2, 0x0}}], 0x4000000000000c3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x2, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x6, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0x3, 0xf, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x2, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0x77], 0xa}}, 0x40004}) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x67) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) (async) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}}, 0x20000000) 606.40668ms ago: executing program 6 (id=3294): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=3295): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x800, 0x2, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x3) fanotify_init(0x202, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$unix(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x8010}, 0x80) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x4c, 0x1402, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x23}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x1}, 0x1, 0x0, 0x0, 0x42081}, 0x40884) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0xf23, 0x0, 0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): 40:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.1.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31f59c799 code=0x7fc00000 [ 1090.624590][ T29] audit: type=1326 audit(2000000233.740:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.1.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31f59c799 code=0x7fc00000 [ 1090.891138][ T29] audit: type=1326 audit(2000000233.740:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.1.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31f59c799 code=0x7fc00000 [ 1090.927049][ T29] audit: type=1326 audit(2000000233.740:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17767 comm="syz.1.3032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31f59c799 code=0x7fc00000 [ 1090.966714][T17757] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.141447][T10419] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1091.291112][T16664] Bluetooth: hci3: command tx timeout [ 1091.385842][T17757] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.503088][T17757] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.801068][T10419] usb 7-1: Using ep0 maxpacket: 32 [ 1091.812467][T10419] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1091.825682][T10419] usb 7-1: config 0 has an invalid interface number: 90 but max is 0 [ 1091.841252][T10419] usb 7-1: config 0 has no interface number 0 [ 1091.857329][T10419] usb 7-1: config 0 interface 90 has no altsetting 0 [ 1091.873940][T10419] usb 7-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=c8.64 [ 1091.905196][T10419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.926266][T10419] usb 7-1: Product: syz [ 1091.932833][T17757] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1091.942979][T10419] usb 7-1: Manufacturer: syz [ 1091.948762][T10419] usb 7-1: SerialNumber: syz [ 1091.958368][T10419] usb 7-1: config 0 descriptor?? [ 1091.988706][T17757] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.691282][ T5825] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1092.698661][T16664] Bluetooth: hci4: command 0x1003 tx timeout [ 1093.168852][T17792] 9p: Bad value for 'rfdno' [ 1093.391148][T16664] Bluetooth: hci3: command tx timeout [ 1093.431903][T17757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1093.471640][T17757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1093.500898][T17757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1093.524005][T17757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1093.606754][T10419] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1093.615666][T10419] usb 7-1: selecting invalid altsetting 0 [ 1093.624174][ T2335] pvrusb2: control-write URB failure, status=-71 [ 1093.630625][ T2335] pvrusb2: Device being rendered inoperable [ 1093.646752][T10419] usb 7-1: USB disconnect, device number 8 [ 1093.704113][T17823] FAULT_INJECTION: forcing a failure. [ 1093.704113][T17823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.717405][T17823] CPU: 0 UID: 0 PID: 17823 Comm: syz.5.3046 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.717433][T17823] Tainted: [L]=SOFTLOCKUP [ 1093.717440][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1093.717450][T17823] Call Trace: [ 1093.717457][T17823] [ 1093.717464][T17823] dump_stack_lvl+0x100/0x190 [ 1093.717497][T17823] should_fail_ex.cold+0x5/0xa [ 1093.717522][T17823] _copy_to_user+0x32/0xd0 [ 1093.717553][T17823] put_itimerspec64+0xbd/0x1e0 [ 1093.717579][T17823] ? __pfx_put_itimerspec64+0x10/0x10 [ 1093.717603][T17823] ? rcu_is_watching+0x12/0xc0 [ 1093.717625][T17823] ? _raw_spin_unlock_irq+0x23/0x50 [ 1093.717646][T17823] ? lockdep_hardirqs_on+0x78/0x100 [ 1093.717672][T17823] __x64_sys_timer_gettime+0x14a/0x180 [ 1093.717692][T17823] ? __pfx___x64_sys_timer_gettime+0x10/0x10 [ 1093.717711][T17823] ? ksys_write+0x1ac/0x250 [ 1093.717745][T17823] do_syscall_64+0x106/0xf80 [ 1093.717766][T17823] ? clear_bhb_loop+0x40/0x90 [ 1093.717789][T17823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.717806][T17823] RIP: 0033:0x7f5c4139c799 [ 1093.717823][T17823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.717840][T17823] RSP: 002b:00007f5c3f5b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 1093.717857][T17823] RAX: ffffffffffffffda RBX: 00007f5c41616180 RCX: 00007f5c4139c799 [ 1093.717869][T17823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1093.717880][T17823] RBP: 00007f5c3f5b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.717891][T17823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.717902][T17823] R13: 00007f5c41616218 R14: 00007f5c41616180 R15: 00007ffd363c7be8 [ 1093.717926][T17823] [ 1093.900520][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1093.914996][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1093.949324][T17757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.965597][T17757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.975619][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.982763][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.997086][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.004217][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.051166][T10429] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1094.130676][T17757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.162280][T17757] veth0_vlan: entered promiscuous mode [ 1094.172551][T17757] veth1_vlan: entered promiscuous mode [ 1094.193775][T17757] veth0_macvtap: entered promiscuous mode [ 1094.204055][T17757] veth1_macvtap: entered promiscuous mode [ 1094.222502][T10429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1094.239030][T17757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.246347][T10429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1094.259328][T10429] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1094.271999][ T6046] block nbd0: Possible stuck request ffff888027c58000: control (read@0,1024B). Runtime 90 seconds [ 1094.272685][T17757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.282797][ T6046] block nbd0: Possible stuck request ffff888027c58200: control (read@1024,1024B). Runtime 90 seconds [ 1094.290429][T10429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1094.302920][ T6046] block nbd0: Possible stuck request ffff888027c58400: control (read@2048,1024B). Runtime 90 seconds [ 1094.320881][ T6046] block nbd0: Possible stuck request ffff888027c58600: control (read@3072,1024B). Runtime 90 seconds [ 1094.445241][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.454770][T10429] usb 5-1: SerialNumber: syz [ 1094.474248][T10429] usb 5-1: bad CDC descriptors [ 1094.492682][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.502184][T10429] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1094.513564][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.543576][T10429] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1094.558641][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.597304][T10429] scsi host1: usb-storage 5-1:1.0 [ 1094.718463][T10429] usb 5-1: USB disconnect, device number 59 [ 1094.874548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.889127][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.355103][T15258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.370884][T15258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.494224][T16664] Bluetooth: hci3: command tx timeout [ 1095.734559][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1095.734574][ T29] audit: type=1400 audit(2000000239.210:1551): avc: denied { create } for pid=17851 comm="syz.4.3052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1095.826598][T17852] fuse: Bad value for 'user_id' [ 1095.865968][T17852] fuse: Bad value for 'user_id' [ 1095.907297][ T29] audit: type=1326 audit(2000000239.380:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.4.3052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabb259c799 code=0x0 [ 1097.729411][T16664] Bluetooth: hci3: command tx timeout [ 1097.762421][ T29] audit: type=1400 audit(2000000241.240:1553): avc: denied { setopt } for pid=17868 comm="syz.4.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1098.003692][T17871] syzkaller1: entered promiscuous mode [ 1098.009234][T17871] syzkaller1: entered allmulticast mode [ 1098.021180][ T29] audit: type=1400 audit(2000000241.460:1554): avc: denied { write } for pid=17868 comm="syz.4.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1098.351462][T17880] FAULT_INJECTION: forcing a failure. [ 1098.351462][T17880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.364589][T17880] CPU: 1 UID: 0 PID: 17880 Comm: syz.5.3060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.364620][T17880] Tainted: [L]=SOFTLOCKUP [ 1098.364624][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1098.364632][T17880] Call Trace: [ 1098.364636][T17880] [ 1098.364640][T17880] dump_stack_lvl+0x100/0x190 [ 1098.364664][T17880] should_fail_ex.cold+0x5/0xa [ 1098.364679][T17880] _copy_from_user+0x2e/0xd0 [ 1098.364698][T17880] copy_msghdr_from_user+0x9f/0x4f0 [ 1098.364717][T17880] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1098.364737][T17880] ? __pfx__kstrtoull+0x10/0x10 [ 1098.364753][T17880] ___sys_sendmsg+0x106/0x1e0 [ 1098.364772][T17880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1098.364796][T17880] ? find_held_lock+0x2b/0x80 [ 1098.364819][T17880] __sys_sendmmsg+0x205/0x430 [ 1098.364834][T17880] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1098.364852][T17880] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1098.364873][T17880] ? fput+0x79/0x100 [ 1098.364887][T17880] ? ksys_write+0x1ac/0x250 [ 1098.364903][T17880] ? __pfx_ksys_write+0x10/0x10 [ 1098.364922][T17880] __x64_sys_sendmmsg+0x9c/0x100 [ 1098.364936][T17880] ? lockdep_hardirqs_on+0x78/0x100 [ 1098.364950][T17880] do_syscall_64+0x106/0xf80 [ 1098.364964][T17880] ? clear_bhb_loop+0x40/0x90 [ 1098.364977][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.364989][T17880] RIP: 0033:0x7f5c4139c799 [ 1098.364999][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.365011][T17880] RSP: 002b:00007f5c3f5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1098.365022][T17880] RAX: ffffffffffffffda RBX: 00007f5c41616090 RCX: 00007f5c4139c799 [ 1098.365029][T17880] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1098.365036][T17880] RBP: 00007f5c3f5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.365043][T17880] R10: 000000000000ff14 R11: 0000000000000246 R12: 0000000000000001 [ 1098.365049][T17880] R13: 00007f5c41616128 R14: 00007f5c41616090 R15: 00007ffd363c7be8 [ 1098.365063][T17880] [ 1099.268615][ T29] audit: type=1400 audit(2000000242.520:1555): avc: denied { map } for pid=17875 comm="syz.6.3059" path="socket:[84393]" dev="sockfs" ino=84393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1100.211064][ T29] audit: type=1800 audit(2000000243.670:1556): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3064" name="bus" dev="overlay" ino=3185 res=0 errno=0 [ 1101.831228][T10430] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1102.224468][T10430] usb 2-1: Using ep0 maxpacket: 32 [ 1102.240016][T10430] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1102.263043][T10430] usb 2-1: config 0 has no interface number 0 [ 1102.297330][T10430] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1102.324697][T10430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.354035][T10430] usb 2-1: Product: syz [ 1102.378679][T10430] usb 2-1: Manufacturer: syz [ 1102.476316][T10430] usb 2-1: SerialNumber: syz [ 1102.513524][T10430] usb 2-1: config 0 descriptor?? [ 1102.546986][T10430] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1102.757836][T17918] netlink: 'syz.1.3070': attribute type 15 has an invalid length. [ 1102.841493][T17918] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3070'. [ 1102.958783][T10430] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1102.991914][T10430] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1103.271377][T17926] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 1103.279121][T17926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3072'. [ 1103.330045][T17926] NCSI netlink: No device for ifindex 0 [ 1103.367805][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1103.368693][T10419] usb 2-1: USB disconnect, device number 58 [ 1103.437467][T10419] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1103.520606][T10419] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1103.572064][T10419] quatech2 2-1:0.51: device disconnected [ 1104.388372][T16664] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1104.667747][T17939] autofs4:pid:17939:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189374) [ 1104.749016][T17939] autofs4:pid:17939:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1104.967211][ T29] audit: type=1400 audit(2000000248.430:1557): avc: denied { mount } for pid=17940 comm="syz.5.3077" name="/" dev="rpc_pipefs" ino=84497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1106.577644][T17959] warning: `syz.2.3082' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1107.491122][T10428] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1107.673563][T10428] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.698883][T10428] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1107.804981][T10428] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1107.937237][T10428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.107485][T10428] usb 2-1: config 0 descriptor?? [ 1108.146141][T10428] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1108.165567][T10428] dvb-usb: bulk message failed: -22 (3/0) [ 1108.199143][T10428] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1108.231750][T10428] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1108.242014][T10428] usb 2-1: media controller created [ 1108.255820][T10428] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1108.281523][T10428] dvb-usb: bulk message failed: -22 (6/0) [ 1108.334155][T10428] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1108.361247][T10428] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 1108.389349][T10428] dvb-usb: schedule remote query interval to 150 msecs. [ 1108.417767][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'. [ 1108.451789][T10428] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1108.547039][T17981] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1108.556351][T17981] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1109.008404][T10429] dvb-usb: bulk message failed: -22 (1/0) [ 1109.014528][T10429] dvb-usb: error while querying for an remote control event. [ 1109.027939][T17969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.186156][T10429] dvb-usb: bulk message failed: -22 (1/0) [ 1109.206064][T10429] dvb-usb: error while querying for an remote control event. [ 1109.254874][T17986] xt_CT: No such helper "snmp_trap" [ 1109.379890][ T29] audit: type=1400 audit(2000000252.850:1558): avc: denied { set_context_mgr } for pid=17990 comm="syz.5.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1109.412195][T10429] dvb-usb: bulk message failed: -22 (1/0) [ 1109.417954][T10429] dvb-usb: error while querying for an remote control event. [ 1109.434083][T10430] usb 2-1: USB disconnect, device number 59 [ 1109.438711][T17991] FAULT_INJECTION: forcing a failure. [ 1109.438711][T17991] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.469529][T10430] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1109.482040][ T29] audit: type=1400 audit(2000000252.910:1559): avc: denied { write } for pid=17990 comm="syz.5.3089" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1109.541216][T17991] CPU: 0 UID: 0 PID: 17991 Comm: syz.5.3089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.541239][T17991] Tainted: [L]=SOFTLOCKUP [ 1109.541244][T17991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.541250][T17991] Call Trace: [ 1109.541255][T17991] [ 1109.541259][T17991] dump_stack_lvl+0x100/0x190 [ 1109.541283][T17991] should_fail_ex.cold+0x5/0xa [ 1109.541297][T17991] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1109.541314][T17991] should_failslab+0xc2/0x120 [ 1109.541326][T17991] __kmalloc_noprof+0xe0/0x850 [ 1109.541345][T17991] tomoyo_realpath_from_path+0xb6/0x690 [ 1109.541365][T17991] tomoyo_path_number_perm+0x23c/0x580 [ 1109.541378][T17991] ? tomoyo_path_number_perm+0x22e/0x580 [ 1109.541392][T17991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1109.541420][T17991] ? find_held_lock+0x2b/0x80 [ 1109.541434][T17991] ? __fget_files+0x215/0x3d0 [ 1109.541445][T17991] ? hook_file_ioctl_common+0x146/0x410 [ 1109.541466][T17991] ? __fget_files+0x21f/0x3d0 [ 1109.541480][T17991] security_file_ioctl+0xd3/0x230 [ 1109.541495][T17991] __x64_sys_ioctl+0xb7/0x210 [ 1109.541513][T17991] do_syscall_64+0x106/0xf80 [ 1109.541528][T17991] ? clear_bhb_loop+0x40/0x90 [ 1109.541542][T17991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.541557][T17991] RIP: 0033:0x7f5c4139c799 [ 1109.541572][T17991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.541588][T17991] RSP: 002b:00007f5c3f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.541604][T17991] RAX: ffffffffffffffda RBX: 00007f5c41615fa0 RCX: 00007f5c4139c799 [ 1109.541614][T17991] RDX: 00002000000002c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1109.541625][T17991] RBP: 00007f5c3f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.541634][T17991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.541644][T17991] R13: 00007f5c41616038 R14: 00007f5c41615fa0 R15: 00007ffd363c7be8 [ 1109.541669][T17991] [ 1109.541692][T17991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1109.782501][T17991] binder_alloc: 17990: binder_alloc_buf, no vma [ 1109.791857][ T29] audit: type=1400 audit(2000000253.260:1560): avc: denied { call } for pid=17990 comm="syz.5.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1110.407022][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.413429][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.933087][T16664] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 1112.933303][T16664] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1113.313900][T18032] fuse: Bad value for 'fd' [ 1113.939032][T10430] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1114.129148][T18048] netlink: 'syz.1.3104': attribute type 3 has an invalid length. [ 1114.196495][T18048] netlink: 'syz.1.3104': attribute type 3 has an invalid length. [ 1114.230111][T18050] netlink: 'syz.1.3104': attribute type 10 has an invalid length. [ 1114.241139][T10418] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1114.265694][T18050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.283321][T18050] team0: entered promiscuous mode [ 1114.389074][T18050] team_slave_0: entered promiscuous mode [ 1114.403855][T10430] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.431511][T18050] team_slave_1: entered promiscuous mode [ 1114.438216][T18050] bond0: (slave team0): Enslaving as an active interface with an up link [ 1114.446725][T10430] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1114.522667][T10418] usb 5-1: Using ep0 maxpacket: 8 [ 1114.582447][T15209] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1114.751977][T10430] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1114.766676][T10418] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1114.775828][T10418] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1114.796968][T10430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.796969][T10418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1114.796996][T10418] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1114.871945][T10418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1114.883357][T10418] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1114.892088][T10430] usb 7-1: config 0 descriptor?? [ 1114.921074][T15209] usb 2-1: Using ep0 maxpacket: 16 [ 1114.923772][T10418] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1114.928232][T10430] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1114.969754][T15209] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1114.996814][T15209] usb 2-1: config 0 has no interface number 0 [ 1114.997558][T10418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.041089][T10430] dvb-usb: bulk message failed: -22 (3/0) [ 1115.051484][T15209] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1115.067978][T10430] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1115.092417][T10430] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1115.100008][T15209] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1115.132665][T10430] usb 7-1: media controller created [ 1115.146744][T15209] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1115.160376][T10430] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1115.162430][T18037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.187779][T15209] usb 2-1: Product: syz [ 1115.202108][T15209] usb 2-1: SerialNumber: syz [ 1115.218459][T10430] dvb-usb: bulk message failed: -22 (6/0) [ 1115.251430][T10430] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1115.261540][T15209] usb 2-1: config 0 descriptor?? [ 1115.279148][T10430] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input61 [ 1115.355295][T15209] cm109 2-1:0.8: invalid payload size 256, expected 4 [ 1115.362436][T10430] dvb-usb: schedule remote query interval to 150 msecs. [ 1115.369378][T10430] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1115.392449][T15209] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input62 [ 1115.498487][T10418] usb 5-1: GET_CAPABILITIES returned 0 [ 1115.513356][T10418] usbtmc 5-1:16.0: can't read capabilities [ 1115.521187][T10429] dvb-usb: bulk message failed: -22 (1/0) [ 1115.526932][T10429] dvb-usb: error while querying for an remote control event. [ 1115.726741][T15209] dvb-usb: bulk message failed: -22 (1/0) [ 1115.732878][T15209] dvb-usb: error while querying for an remote control event. [ 1115.773815][T10418] usb 7-1: USB disconnect, device number 9 [ 1115.817514][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1115.817700][T16079] usb 2-1: USB disconnect, device number 60 [ 1115.824477][ C0] cm109 2-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 1115.969771][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1115.979459][T18063] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1116.072863][T18064] binder: 18043:18064 ioctl 4018620d 0 returned -22 [ 1116.086331][ T29] audit: type=1400 audit(2000000259.540:1561): avc: denied { create } for pid=18043 comm="syz.4.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1116.287104][ T29] audit: type=1400 audit(2000000259.550:1562): avc: denied { ioctl } for pid=18043 comm="syz.4.3102" path="socket:[85728]" dev="sockfs" ino=85728 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1116.371444][T16079] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1116.384001][T10418] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1116.460315][T10419] usb 5-1: USB disconnect, device number 60 [ 1119.406087][ T29] audit: type=1400 audit(2000000262.850:1563): avc: denied { append } for pid=18086 comm="syz.4.3113" name="event3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1119.643630][ T29] audit: type=1400 audit(2000000263.120:1564): avc: denied { ioctl } for pid=18090 comm="syz.1.3115" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1119.911108][T18100] macvtap0: entered allmulticast mode [ 1119.953580][T18103] netlink: 'syz.2.3119': attribute type 3 has an invalid length. [ 1119.989400][T18100] veth0_macvtap: entered allmulticast mode [ 1120.028919][T18105] netlink: 'syz.2.3119': attribute type 10 has an invalid length. [ 1120.065492][T18103] netlink: 'syz.2.3119': attribute type 3 has an invalid length. [ 1120.148450][T18105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.391205][T16053] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1120.779714][T18105] bond0: (slave team0): Enslaving as an active interface with an up link [ 1120.866563][T18110] xt_CT: No such helper "snmp_trap" [ 1120.991738][T16053] usb 3-1: Using ep0 maxpacket: 16 [ 1121.086185][T16053] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1121.115416][T16053] usb 3-1: config 0 has no interface number 0 [ 1121.135653][T16053] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1121.184308][T16053] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1121.247125][T16053] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1121.581563][T16053] usb 3-1: Product: syz [ 1121.585756][T16053] usb 3-1: SerialNumber: syz [ 1121.653469][ T29] audit: type=1400 audit(2000000265.130:1565): avc: denied { write } for pid=18113 comm="syz.1.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1121.673390][T16053] usb 3-1: config 0 descriptor?? [ 1121.682799][T16053] cm109 3-1:0.8: invalid payload size 256, expected 4 [ 1121.725820][T16053] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input63 [ 1122.116653][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1122.123910][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.131112][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.138451][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.145554][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.152628][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.159695][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.166785][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.173867][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.180965][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.188070][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1122.195195][T16053] usb 3-1: USB disconnect, device number 59 [ 1122.201166][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1122.250398][T16053] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1123.422587][T18140] FAULT_INJECTION: forcing a failure. [ 1123.422587][T18140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.435710][ T29] audit: type=1400 audit(2000000266.900:1566): avc: denied { ioctl } for pid=18129 comm="syz.6.3127" path="socket:[86232]" dev="sockfs" ino=86232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1123.470127][T10419] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1123.479035][T18140] CPU: 1 UID: 0 PID: 18140 Comm: syz.6.3127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.479054][T18140] Tainted: [L]=SOFTLOCKUP [ 1123.479058][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1123.479065][T18140] Call Trace: [ 1123.479069][T18140] [ 1123.479074][T18140] dump_stack_lvl+0x100/0x190 [ 1123.479097][T18140] should_fail_ex.cold+0x5/0xa [ 1123.479112][T18140] _copy_from_user+0x2e/0xd0 [ 1123.479131][T18140] copy_msghdr_from_user+0x9f/0x4f0 [ 1123.479150][T18140] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1123.479174][T18140] ___sys_sendmsg+0x106/0x1e0 [ 1123.479192][T18140] ? __pfx____sys_sendmsg+0x10/0x10 [ 1123.479225][T18140] __sys_sendmsg+0x170/0x220 [ 1123.479240][T18140] ? __pfx___sys_sendmsg+0x10/0x10 [ 1123.479261][T18140] do_syscall_64+0x106/0xf80 [ 1123.479276][T18140] ? clear_bhb_loop+0x40/0x90 [ 1123.479290][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.479301][T18140] RIP: 0033:0x7fc65eb9c799 [ 1123.479311][T18140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.479321][T18140] RSP: 002b:00007fc65cdb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1123.479332][T18140] RAX: ffffffffffffffda RBX: 00007fc65ee16180 RCX: 00007fc65eb9c799 [ 1123.479340][T18140] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1123.479346][T18140] RBP: 00007fc65cdb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.479353][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.479359][T18140] R13: 00007fc65ee16218 R14: 00007fc65ee16180 R15: 00007ffcadd56e38 [ 1123.479373][T18140] [ 1123.960134][T10419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.982929][T10419] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1124.011069][T10419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.159847][T10419] usb 3-1: config 0 descriptor?? [ 1124.209805][T10419] dvb-usb: found a 'TeVii S662' in warm state. [ 1124.241183][T10419] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1124.247249][T10419] dvb-usb: bulk message failed: -22 (2/0) [ 1124.310520][T10419] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1124.351747][T10418] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1124.370084][ T6046] block nbd0: Possible stuck request ffff888027c58000: control (read@0,1024B). Runtime 120 seconds [ 1124.380904][ T6046] block nbd0: Possible stuck request ffff888027c58200: control (read@1024,1024B). Runtime 120 seconds [ 1124.392389][ T6046] block nbd0: Possible stuck request ffff888027c58400: control (read@2048,1024B). Runtime 120 seconds [ 1124.403610][ T6046] block nbd0: Possible stuck request ffff888027c58600: control (read@3072,1024B). Runtime 120 seconds [ 1124.417692][T10419] dvb-usb: TeVii S662 error while loading driver (-19) [ 1124.514353][T10418] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.525265][T10418] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1124.553431][T10418] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1124.562570][T10418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.572815][T10418] usb 6-1: config 0 descriptor?? [ 1124.595009][T10418] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1124.617514][T10418] dvb-usb: bulk message failed: -22 (3/0) [ 1124.647115][T10418] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1124.666965][T10418] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1124.698745][T10418] usb 6-1: media controller created [ 1124.725603][T10418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1124.783047][T10418] dvb-usb: bulk message failed: -22 (6/0) [ 1124.809276][T10418] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1124.857840][T18146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.871475][T10418] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input64 [ 1124.928464][T10418] dvb-usb: schedule remote query interval to 150 msecs. [ 1124.958289][T10418] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1125.112792][T10418] dvb-usb: bulk message failed: -22 (1/0) [ 1125.118771][T10418] dvb-usb: error while querying for an remote control event. [ 1125.342641][T10418] dvb-usb: bulk message failed: -22 (1/0) [ 1125.389082][T10418] dvb-usb: error while querying for an remote control event. [ 1125.393842][T10430] usb 3-1: USB disconnect, device number 60 [ 1125.678790][T10418] dvb-usb: bulk message failed: -22 (1/0) [ 1125.686779][T10418] dvb-usb: error while querying for an remote control event. [ 1125.862779][T16079] dvb-usb: bulk message failed: -22 (1/0) [ 1125.868530][T16079] dvb-usb: error while querying for an remote control event. [ 1125.935105][T10418] usb 6-1: USB disconnect, device number 70 [ 1126.060578][T10418] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1126.212570][ T29] audit: type=1400 audit(2000000269.690:1567): avc: denied { ioctl } for pid=18166 comm="syz.4.3135" path="socket:[86412]" dev="sockfs" ino=86412 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1126.257013][ T29] audit: type=1400 audit(2000000269.730:1568): avc: denied { append } for pid=18169 comm="syz.2.3136" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1126.701285][T16664] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1127.051623][T18187] xt_hashlimit: size too large, truncated to 1048576 [ 1127.056566][T18190] xt_hashlimit: size too large, truncated to 1048576 [ 1128.011166][T10418] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1128.246646][T10418] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1128.265528][ T29] audit: type=1400 audit(2000000271.740:1569): avc: denied { read } for pid=18200 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1128.271381][T16079] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1128.310232][T10418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.351425][ T29] audit: type=1400 audit(2000000271.740:1570): avc: denied { write } for pid=18200 comm="syz.6.3142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1128.353600][T10418] usb 3-1: Product: syz [ 1128.382931][T18204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.397521][T18204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.406384][T10418] usb 3-1: Manufacturer: syz [ 1128.422553][T10418] usb 3-1: SerialNumber: syz [ 1128.445878][T10418] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1128.481703][T10419] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1128.516498][T18204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.524790][T18204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.607365][T16079] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1128.619518][T16079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.637032][T16079] usb 5-1: Product: syz [ 1128.647909][T16079] usb 5-1: Manufacturer: syz [ 1128.667357][T16079] usb 5-1: SerialNumber: syz [ 1128.693013][T16079] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1128.718989][T10418] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1130.964464][T10419] usb 3-1: Service connection timeout for: 256 [ 1130.971062][T10418] usb 5-1: Service connection timeout for: 256 [ 1130.991116][T10418] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1130.999057][T10419] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1131.009688][T15209] usb 5-1: USB disconnect, device number 61 [ 1131.014044][T10418] ath9k_htc: Failed to initialize the device [ 1131.053863][T10419] ath9k_htc: Failed to initialize the device [ 1131.082377][T10419] usb 3-1: ath9k_htc: USB layer deinitialized [ 1131.093920][T15209] usb 5-1: ath9k_htc: USB layer deinitialized [ 1131.421094][T15209] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1131.461007][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3148'. [ 1131.537429][T18220] FAULT_INJECTION: forcing a failure. [ 1131.537429][T18220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.551675][T18220] CPU: 1 UID: 0 PID: 18220 Comm: syz.5.3148 Tainted: G L syzkaller #0 PREEMPT(full) [ 1131.551695][T18220] Tainted: [L]=SOFTLOCKUP [ 1131.551700][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1131.551707][T18220] Call Trace: [ 1131.551711][T18220] [ 1131.551716][T18220] dump_stack_lvl+0x100/0x190 [ 1131.551739][T18220] should_fail_ex.cold+0x5/0xa [ 1131.551754][T18220] _copy_from_user+0x2e/0xd0 [ 1131.551773][T18220] __sys_bpf+0x243/0x4b90 [ 1131.551788][T18220] ? __pfx___sys_bpf+0x10/0x10 [ 1131.551798][T18220] ? proc_fail_nth_write+0x9f/0x220 [ 1131.551814][T18220] ? find_held_lock+0x2b/0x80 [ 1131.551832][T18220] ? find_held_lock+0x2b/0x80 [ 1131.551846][T18220] ? ksys_write+0x190/0x250 [ 1131.551866][T18220] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1131.551882][T18220] ? __fget_files+0x215/0x3d0 [ 1131.551900][T18220] ? fput+0x79/0x100 [ 1131.551912][T18220] ? ksys_write+0x1ac/0x250 [ 1131.551929][T18220] ? __pfx_ksys_write+0x10/0x10 [ 1131.551949][T18220] __x64_sys_bpf+0x7b/0xc0 [ 1131.551961][T18220] ? lockdep_hardirqs_on+0x78/0x100 [ 1131.551976][T18220] do_syscall_64+0x106/0xf80 [ 1131.551990][T18220] ? clear_bhb_loop+0x40/0x90 [ 1131.552003][T18220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.552015][T18220] RIP: 0033:0x7f5c4139c799 [ 1131.552025][T18220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.552037][T18220] RSP: 002b:00007f5c3f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.552048][T18220] RAX: ffffffffffffffda RBX: 00007f5c41615fa0 RCX: 00007f5c4139c799 [ 1131.552055][T18220] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1131.552064][T18220] RBP: 00007f5c3f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.552070][T18220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.552077][T18220] R13: 00007f5c41616038 R14: 00007f5c41615fa0 R15: 00007ffd363c7be8 [ 1131.552091][T18220] [ 1131.632247][T15209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.179006][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3149'. [ 1132.428901][T15209] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1132.449595][T15209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.454836][T16079] usb 3-1: USB disconnect, device number 61 [ 1132.521986][T15209] usb 5-1: config 0 descriptor?? [ 1132.547112][T18230] FAULT_INJECTION: forcing a failure. [ 1132.547112][T18230] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.571888][T18230] CPU: 1 UID: 0 PID: 18230 Comm: syz.1.3151 Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.571923][T18230] Tainted: [L]=SOFTLOCKUP [ 1132.571930][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.571940][T18230] Call Trace: [ 1132.571946][T18230] [ 1132.571953][T18230] dump_stack_lvl+0x100/0x190 [ 1132.571987][T18230] should_fail_ex.cold+0x5/0xa [ 1132.572011][T18230] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1132.572037][T18230] should_failslab+0xc2/0x120 [ 1132.572055][T18230] __kmalloc_noprof+0xe0/0x850 [ 1132.572086][T18230] tomoyo_realpath_from_path+0xb6/0x690 [ 1132.572117][T18230] tomoyo_path_number_perm+0x23c/0x580 [ 1132.572138][T18230] ? tomoyo_path_number_perm+0x22e/0x580 [ 1132.572161][T18230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1132.572208][T18230] ? find_held_lock+0x2b/0x80 [ 1132.572232][T18230] ? __fget_files+0x215/0x3d0 [ 1132.572249][T18230] ? hook_file_ioctl_common+0x146/0x410 [ 1132.572283][T18230] ? __fget_files+0x21f/0x3d0 [ 1132.572306][T18230] security_file_ioctl+0xd3/0x230 [ 1132.572332][T18230] __x64_sys_ioctl+0xb7/0x210 [ 1132.572360][T18230] do_syscall_64+0x106/0xf80 [ 1132.572383][T18230] ? clear_bhb_loop+0x40/0x90 [ 1132.572405][T18230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.572423][T18230] RIP: 0033:0x7fc31f59c799 [ 1132.572439][T18230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.572454][T18230] RSP: 002b:00007fc31d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1132.572472][T18230] RAX: ffffffffffffffda RBX: 00007fc31f815fa0 RCX: 00007fc31f59c799 [ 1132.572483][T18230] RDX: 0000200000000800 RSI: 0000000000004b66 RDI: 0000000000000003 [ 1132.572494][T18230] RBP: 00007fc31d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.572505][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.572515][T18230] R13: 00007fc31f816038 R14: 00007fc31f815fa0 R15: 00007ffeb7c1f388 [ 1132.572541][T18230] [ 1132.572765][T18230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1132.942487][T18215] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1132.942640][T18234] FAULT_INJECTION: forcing a failure. [ 1132.942640][T18234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1132.981115][T18234] CPU: 1 UID: 0 PID: 18234 Comm: syz.6.3152 Tainted: G L syzkaller #0 PREEMPT(full) [ 1132.981146][T18234] Tainted: [L]=SOFTLOCKUP [ 1132.981153][T18234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1132.981163][T18234] Call Trace: [ 1132.981169][T18234] [ 1132.981174][T18234] dump_stack_lvl+0x100/0x190 [ 1132.981204][T18234] should_fail_ex.cold+0x5/0xa [ 1132.981223][T18234] _copy_from_user+0x2e/0xd0 [ 1132.981248][T18234] copy_msghdr_from_user+0x9f/0x4f0 [ 1132.981271][T18234] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1132.981302][T18234] ___sys_sendmsg+0x106/0x1e0 [ 1132.981325][T18234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1132.981369][T18234] __sys_sendmsg+0x170/0x220 [ 1132.981388][T18234] ? __pfx___sys_sendmsg+0x10/0x10 [ 1132.981416][T18234] do_syscall_64+0x106/0xf80 [ 1132.981435][T18234] ? clear_bhb_loop+0x40/0x90 [ 1132.981454][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.981469][T18234] RIP: 0033:0x7fc65eb9c799 [ 1132.981482][T18234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.981496][T18234] RSP: 002b:00007fc65cdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.981511][T18234] RAX: ffffffffffffffda RBX: 00007fc65ee15fa0 RCX: 00007fc65eb9c799 [ 1132.981520][T18234] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1132.981529][T18234] RBP: 00007fc65cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.981538][T18234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.981546][T18234] R13: 00007fc65ee16038 R14: 00007fc65ee15fa0 R15: 00007ffcadd56e38 [ 1132.981565][T18234] [ 1133.218950][T18241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3146'. [ 1133.303088][T16079] usb 5-1: USB disconnect, device number 62 [ 1133.367133][T18246] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1133.378794][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1133.387897][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 1133.415024][T16053] IPVS: starting estimator thread 0... [ 1133.557083][T18247] IPVS: using max 39 ests per chain, 93600 per kthread [ 1133.839149][T18253] FAULT_INJECTION: forcing a failure. [ 1133.839149][T18253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.891493][T16079] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1133.912210][T18253] CPU: 1 UID: 0 PID: 18253 Comm: syz.1.3158 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.912242][T18253] Tainted: [L]=SOFTLOCKUP [ 1133.912249][T18253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.912259][T18253] Call Trace: [ 1133.912265][T18253] [ 1133.912272][T18253] dump_stack_lvl+0x100/0x190 [ 1133.912303][T18253] should_fail_ex.cold+0x5/0xa [ 1133.912320][T18253] _copy_from_user+0x2e/0xd0 [ 1133.912340][T18253] copy_msghdr_from_user+0x9f/0x4f0 [ 1133.912359][T18253] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1133.912384][T18253] ___sys_sendmsg+0x106/0x1e0 [ 1133.912402][T18253] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.912436][T18253] __sys_sendmsg+0x170/0x220 [ 1133.912451][T18253] ? __pfx___sys_sendmsg+0x10/0x10 [ 1133.912473][T18253] do_syscall_64+0x106/0xf80 [ 1133.912488][T18253] ? clear_bhb_loop+0x40/0x90 [ 1133.912501][T18253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.912515][T18253] RIP: 0033:0x7fc31f59c799 [ 1133.912525][T18253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.912536][T18253] RSP: 002b:00007fc31d7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.912548][T18253] RAX: ffffffffffffffda RBX: 00007fc31f815fa0 RCX: 00007fc31f59c799 [ 1133.912555][T18253] RDX: 0000000004000080 RSI: 0000200000000f80 RDI: 0000000000000003 [ 1133.912561][T18253] RBP: 00007fc31d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.912568][T18253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.912574][T18253] R13: 00007fc31f816038 R14: 00007fc31f815fa0 R15: 00007ffeb7c1f388 [ 1133.912593][T18253] [ 1134.221091][T16079] usb 5-1: Using ep0 maxpacket: 8 [ 1134.229455][T16079] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.239848][T16079] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 1134.250316][T16079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.307278][T16079] usb 5-1: config 0 descriptor?? [ 1134.598081][T16079] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 1134.675350][T18241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.722541][T16079] dvb-usb: bulk message failed: -22 (2/0) [ 1134.820440][T16079] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1134.925464][T16079] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 1135.024463][T16079] usb 5-1: media controller created [ 1135.741689][T10418] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1135.884655][T16079] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1135.931304][T10418] usb 7-1: Using ep0 maxpacket: 16 [ 1135.955741][T10418] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1136.058202][T10418] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.139357][T16079] cxusb: set interface failed [ 1136.171510][T10418] usb 7-1: config 0 descriptor?? [ 1136.176567][T16079] dvb-usb: bulk message failed: -22 (1/0) [ 1136.203166][T10418] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1136.264230][T16079] DVB: Unable to find symbol mt352_attach() [ 1136.284842][T16079] dvb-usb: bulk message failed: -22 (5/0) [ 1136.287889][ T29] audit: type=1400 audit(2000000279.760:1571): avc: denied { write } for pid=18268 comm="syz.4.3163" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1136.311771][T16079] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1136.349395][T16079] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 1137.203242][T16664] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1137.241316][T16079] rc_core: IR keymap rc-dvico-mce not found [ 1137.272174][T16079] Registered IR keymap rc-empty [ 1137.308834][T16079] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1137.420773][T16079] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input65 [ 1137.458743][T16079] dvb-usb: schedule remote query interval to 100 msecs. [ 1137.482107][T16079] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 1137.521761][T16079] usb 5-1: USB disconnect, device number 63 [ 1137.531120][T10419] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1137.576928][T16079] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 1137.684263][T10419] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1137.741373][T10419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.749440][T10419] usb 6-1: Product: syz [ 1137.765832][T10419] usb 6-1: Manufacturer: syz [ 1137.771819][T10419] usb 6-1: SerialNumber: syz [ 1138.943773][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1138.956505][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1139.765399][T18314] FAULT_INJECTION: forcing a failure. [ 1139.765399][T18314] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.851154][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.4.3175 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.851185][T18314] Tainted: [L]=SOFTLOCKUP [ 1139.851192][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1139.851201][T18314] Call Trace: [ 1139.851208][T18314] [ 1139.851215][T18314] dump_stack_lvl+0x100/0x190 [ 1139.851246][T18314] should_fail_ex.cold+0x5/0xa [ 1139.851261][T18314] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1139.851278][T18314] should_failslab+0xc2/0x120 [ 1139.851295][T18314] __kmalloc_noprof+0xe0/0x850 [ 1139.851324][T18314] tomoyo_realpath_from_path+0xb6/0x690 [ 1139.851353][T18314] tomoyo_path_number_perm+0x23c/0x580 [ 1139.851373][T18314] ? tomoyo_path_number_perm+0x22e/0x580 [ 1139.851388][T18314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1139.851415][T18314] ? find_held_lock+0x2b/0x80 [ 1139.851431][T18314] ? __fget_files+0x215/0x3d0 [ 1139.851448][T18314] ? hook_file_ioctl_common+0x146/0x410 [ 1139.851479][T18314] ? __fget_files+0x21f/0x3d0 [ 1139.851501][T18314] security_file_ioctl+0xd3/0x230 [ 1139.851522][T18314] __x64_sys_ioctl+0xb7/0x210 [ 1139.851541][T18314] do_syscall_64+0x106/0xf80 [ 1139.851555][T18314] ? clear_bhb_loop+0x40/0x90 [ 1139.851569][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.851584][T18314] RIP: 0033:0x7fabb259c799 [ 1139.851600][T18314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1139.851616][T18314] RSP: 002b:00007fabb3479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.851633][T18314] RAX: ffffffffffffffda RBX: 00007fabb2815fa0 RCX: 00007fabb259c799 [ 1139.851643][T18314] RDX: 0000200000000040 RSI: 00000000c0605345 RDI: 0000000000000003 [ 1139.851653][T18314] RBP: 00007fabb3479090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.851663][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.851670][T18314] R13: 00007fabb2816038 R14: 00007fabb2815fa0 R15: 00007ffc9f53b138 [ 1139.851684][T18314] [ 1139.851690][T18314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1140.077048][T10418] gspca_sonixj: reg_w err -110 [ 1140.081933][T10418] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1140.202508][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1140.223344][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1140.253230][T10418] usb 7-1: USB disconnect, device number 10 [ 1140.414697][T18319] FAULT_INJECTION: forcing a failure. [ 1140.414697][T18319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.431145][T18319] CPU: 1 UID: 0 PID: 18319 Comm: syz.4.3177 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.431174][T18319] Tainted: [L]=SOFTLOCKUP [ 1140.431180][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1140.431191][T18319] Call Trace: [ 1140.431197][T18319] [ 1140.431204][T18319] dump_stack_lvl+0x100/0x190 [ 1140.431237][T18319] should_fail_ex.cold+0x5/0xa [ 1140.431264][T18319] _copy_from_user+0x2e/0xd0 [ 1140.431291][T18319] copy_msghdr_from_user+0x9f/0x4f0 [ 1140.431319][T18319] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1140.431358][T18319] ___sys_sendmsg+0x106/0x1e0 [ 1140.431387][T18319] ? __pfx____sys_sendmsg+0x10/0x10 [ 1140.431449][T18319] __sys_sendmsg+0x170/0x220 [ 1140.431473][T18319] ? __pfx___sys_sendmsg+0x10/0x10 [ 1140.431509][T18319] do_syscall_64+0x106/0xf80 [ 1140.431532][T18319] ? clear_bhb_loop+0x40/0x90 [ 1140.431555][T18319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.431573][T18319] RIP: 0033:0x7fabb259c799 [ 1140.431589][T18319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.431606][T18319] RSP: 002b:00007fabb3479028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.431623][T18319] RAX: ffffffffffffffda RBX: 00007fabb2815fa0 RCX: 00007fabb259c799 [ 1140.431635][T18319] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1140.431646][T18319] RBP: 00007fabb3479090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.431657][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.431667][T18319] R13: 00007fabb2816038 R14: 00007fabb2815fa0 R15: 00007ffc9f53b138 [ 1140.431692][T18319] [ 1141.627379][ T29] audit: type=1400 audit(2000000285.080:1572): avc: denied { map } for pid=18325 comm="syz.4.3180" path="pipe:[87279]" dev="pipefs" ino=87279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1142.181308][T18336] syzkaller1: entered promiscuous mode [ 1142.186871][T18336] syzkaller1: entered allmulticast mode [ 1142.300457][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1142.332090][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1142.344955][T10419] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1142.506501][T10419] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1142.625963][T10419] usb 6-1: USB disconnect, device number 71 [ 1143.851054][T15209] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1143.901102][T10419] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1144.092645][T10419] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.309417][T18361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1144.402449][T10419] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1144.418134][T10419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.448372][T15209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1144.452860][T10419] usb 6-1: config 0 descriptor?? [ 1144.471664][T15209] usb 5-1: not running at top speed; connect to a high speed hub [ 1144.500839][T15209] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1144.521165][T15209] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1144.540506][T15209] usb 5-1: string descriptor 0 read error: -22 [ 1144.545528][T18367] fuse: Bad value for 'fd' [ 1144.557072][T15209] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 1144.607238][T15209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.625634][T18357] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1144.677935][T18367] vivid-000: ================= START STATUS ================= [ 1144.701050][T18367] vivid-000: Generate PTS: true [ 1144.706330][T18367] vivid-000: Generate SCR: true [ 1144.763462][T18367] tpg source WxH: 320x240 (Y'CbCr) [ 1145.381472][T18367] tpg field: 1 [ 1145.385113][T18367] tpg crop: (0,0)/320x240 [ 1145.389449][T18367] tpg compose: (0,0)/320x240 [ 1145.394688][T18367] tpg colorspace: 8 [ 1145.398497][T18367] tpg transfer function: 0/0 [ 1145.417900][T18367] tpg Y'CbCr encoding: 0/0 [ 1145.426208][T18345] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1145.453633][T18367] tpg quantization: 0/0 [ 1145.495895][T18371] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3184'. [ 1145.564167][T18367] tpg RGB range: 0/2 [ 1145.626924][T18367] vivid-000: ================== END STATUS ================== [ 1145.688937][T10430] usb 6-1: USB disconnect, device number 72 [ 1145.870737][ T29] audit: type=1400 audit(2000000289.300:1573): avc: denied { ioctl } for pid=18356 comm="syz.4.3188" path="socket:[87446]" dev="sockfs" ino=87446 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1146.091813][ T29] audit: type=1400 audit(2000000289.380:1574): avc: denied { getopt } for pid=18356 comm="syz.4.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1146.381208][T10410] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1147.202763][T15209] usbhid 5-1:1.0: can't add hid device: -71 [ 1147.208725][T15209] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1147.301294][T15209] usb 5-1: USB disconnect, device number 64 [ 1147.306441][T18380] binder: 18379:18380 ioctl c0306201 200000000040 returned -22 [ 1147.321064][ T29] audit: type=1400 audit(2000000290.790:1575): avc: denied { connect } for pid=18379 comm="syz.4.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1147.436928][ T29] audit: type=1400 audit(2000000290.790:1576): avc: denied { write } for pid=18379 comm="syz.4.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1147.881140][T15209] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1148.411046][T15209] usb 5-1: Using ep0 maxpacket: 16 [ 1148.688912][T16664] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1148.997679][T15209] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.023656][T15209] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.062567][T15209] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1149.077993][T15209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.520841][T15209] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1149.665215][T18413] comedi comedi1: adq12b: I/O port conflict (0x40000007,16) [ 1149.672875][T10410] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1149.727257][T15209] usb 5-1: USB disconnect, device number 65 [ 1149.754766][T18415] FAULT_INJECTION: forcing a failure. [ 1149.754766][T18415] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.801437][T18415] CPU: 1 UID: 0 PID: 18415 Comm: syz.1.3205 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.801468][T18415] Tainted: [L]=SOFTLOCKUP [ 1149.801474][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1149.801485][T18415] Call Trace: [ 1149.801491][T18415] [ 1149.801499][T18415] dump_stack_lvl+0x100/0x190 [ 1149.801531][T18415] should_fail_ex.cold+0x5/0xa [ 1149.801553][T18415] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1149.801578][T18415] should_failslab+0xc2/0x120 [ 1149.801596][T18415] __kmalloc_noprof+0xe0/0x850 [ 1149.801625][T18415] tomoyo_realpath_from_path+0xb6/0x690 [ 1149.801656][T18415] tomoyo_path_number_perm+0x23c/0x580 [ 1149.801677][T18415] ? tomoyo_path_number_perm+0x22e/0x580 [ 1149.801699][T18415] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1149.801745][T18415] ? find_held_lock+0x2b/0x80 [ 1149.801767][T18415] ? __fget_files+0x215/0x3d0 [ 1149.801785][T18415] ? hook_file_ioctl_common+0x146/0x410 [ 1149.801816][T18415] ? __fget_files+0x21f/0x3d0 [ 1149.801838][T18415] security_file_ioctl+0xd3/0x230 [ 1149.801863][T18415] __x64_sys_ioctl+0xb7/0x210 [ 1149.801890][T18415] do_syscall_64+0x106/0xf80 [ 1149.801911][T18415] ? clear_bhb_loop+0x40/0x90 [ 1149.801932][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.801951][T18415] RIP: 0033:0x7fc31f59c799 [ 1149.801967][T18415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.801983][T18415] RSP: 002b:00007fc31d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1149.802000][T18415] RAX: ffffffffffffffda RBX: 00007fc31f815fa0 RCX: 00007fc31f59c799 [ 1149.802011][T18415] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003 [ 1149.802022][T18415] RBP: 00007fc31d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.802032][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.802042][T18415] R13: 00007fc31f816038 R14: 00007fc31f815fa0 R15: 00007ffeb7c1f388 [ 1149.802067][T18415] [ 1149.802074][T18415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1149.841065][T10410] usb 7-1: Using ep0 maxpacket: 16 [ 1150.051251][T18415] comedi comedi1: adq12b: I/O port conflict (0x40000007,16) [ 1150.299055][T10410] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1150.307672][T10410] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.319684][T10410] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1150.338876][T10410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.354237][T10410] usb 7-1: Product: syz [ 1150.358397][T10410] usb 7-1: Manufacturer: syz [ 1150.381044][T10410] usb 7-1: SerialNumber: syz [ 1150.421083][T10430] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1150.571102][T10430] usb 2-1: Using ep0 maxpacket: 8 [ 1150.582104][T10430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.594049][T18422] netlink: 'syz.4.3207': attribute type 3 has an invalid length. [ 1150.631351][T10410] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1150.640803][T10410] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1150.651411][T10430] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1150.661241][T18424] netlink: 'syz.4.3207': attribute type 10 has an invalid length. [ 1150.693896][T10410] usb 7-1: unknown interface protocol 0x2, assuming v1 [ 1150.708012][T18422] netlink: 'syz.4.3207': attribute type 3 has an invalid length. [ 1150.708279][T10410] usb 7-1: cannot find UAC_HEADER [ 1150.727769][T10430] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1150.747154][T10430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.761426][T10418] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1150.762160][T10410] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1150.778822][T18427] netlink: 'syz.5.3208': attribute type 3 has an invalid length. [ 1150.787762][T10430] usb 2-1: Product: syz [ 1150.790744][T18424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.792127][T10430] usb 2-1: Manufacturer: syz [ 1150.792146][T10430] usb 2-1: SerialNumber: syz [ 1150.833183][T18429] netlink: 'syz.5.3208': attribute type 10 has an invalid length. [ 1150.849583][T18424] bond0: (slave team0): Enslaving as an active interface with an up link [ 1150.861053][T10410] usb 7-1: USB disconnect, device number 11 [ 1150.868365][T18427] netlink: 'syz.5.3208': attribute type 3 has an invalid length. [ 1150.924079][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.966564][T18429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.983365][T18429] bond0: (slave team0): Enslaving as an active interface with an up link [ 1151.011443][T10419] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1151.024724][T18418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.035429][T18418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.053663][T10430] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1151.073181][T10430] usb 2-1: MIDIStreaming interface descriptor not found [ 1151.121098][T10417] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1151.133974][T10430] usb 2-1: USB disconnect, device number 61 [ 1151.191280][T10419] usb 5-1: Using ep0 maxpacket: 16 [ 1151.197931][T10419] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1151.206832][T10419] usb 5-1: config 0 has no interface number 0 [ 1151.226291][T10419] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1151.293165][T10417] usb 6-1: Using ep0 maxpacket: 16 [ 1151.305652][T10419] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1151.319254][T10417] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1151.328881][T10417] usb 6-1: config 0 has no interface number 0 [ 1151.376524][T10419] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1151.390587][T10417] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1151.448397][ T29] audit: type=1400 audit(2000000294.920:1577): avc: denied { associate } for pid=18434 comm="syz.6.3210" name="229" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1151.456203][T10419] usb 5-1: Product: syz [ 1151.502508][T10417] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1151.518856][T10417] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1151.531411][T10419] usb 5-1: SerialNumber: syz [ 1151.542012][T10417] usb 6-1: Product: syz [ 1151.701108][T10417] usb 6-1: SerialNumber: syz [ 1151.772430][T10419] usb 5-1: config 0 descriptor?? [ 1151.791932][T10417] usb 6-1: config 0 descriptor?? [ 1151.809315][T10419] cm109 5-1:0.8: invalid payload size 256, expected 4 [ 1151.827834][T10417] cm109 6-1:0.8: invalid payload size 256, expected 4 [ 1151.856418][T10419] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input66 [ 1151.867373][T10417] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input67 [ 1151.915304][T18438] FAULT_INJECTION: forcing a failure. [ 1151.915304][T18438] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.998467][T18438] CPU: 1 UID: 0 PID: 18438 Comm: syz.1.3211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1151.998487][T18438] Tainted: [L]=SOFTLOCKUP [ 1151.998491][T18438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1151.998497][T18438] Call Trace: [ 1151.998502][T18438] [ 1151.998506][T18438] dump_stack_lvl+0x100/0x190 [ 1151.998529][T18438] should_fail_ex.cold+0x5/0xa [ 1151.998546][T18438] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1151.998563][T18438] should_failslab+0xc2/0x120 [ 1151.998575][T18438] __kmalloc_noprof+0xe0/0x850 [ 1151.998593][T18438] tomoyo_realpath_from_path+0xb6/0x690 [ 1151.998613][T18438] tomoyo_path_number_perm+0x23c/0x580 [ 1151.998626][T18438] ? tomoyo_path_number_perm+0x22e/0x580 [ 1151.998640][T18438] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1151.998668][T18438] ? find_held_lock+0x2b/0x80 [ 1151.998682][T18438] ? __fget_files+0x215/0x3d0 [ 1151.998693][T18438] ? hook_file_ioctl_common+0x146/0x410 [ 1151.998713][T18438] ? __fget_files+0x21f/0x3d0 [ 1151.998727][T18438] security_file_ioctl+0xd3/0x230 [ 1151.998742][T18438] __x64_sys_ioctl+0xb7/0x210 [ 1151.998760][T18438] do_syscall_64+0x106/0xf80 [ 1151.998775][T18438] ? clear_bhb_loop+0x40/0x90 [ 1151.998789][T18438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.998800][T18438] RIP: 0033:0x7fc31f59c799 [ 1151.998811][T18438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.998821][T18438] RSP: 002b:00007fc31d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.998833][T18438] RAX: ffffffffffffffda RBX: 00007fc31f815fa0 RCX: 00007fc31f59c799 [ 1151.998840][T18438] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1151.998846][T18438] RBP: 00007fc31d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.998853][T18438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.998859][T18438] R13: 00007fc31f816038 R14: 00007fc31f815fa0 R15: 00007ffeb7c1f388 [ 1151.998874][T18438] [ 1151.998894][T18438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1152.280794][ C1] cm109_urb_ctl_callback: 2 callbacks suppressed [ 1152.280819][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.281223][T10410] usb 6-1: USB disconnect, device number 74 [ 1152.287181][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1152.341732][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.349025][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.356256][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.363369][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.370549][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.377712][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.386500][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.393666][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.400775][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1152.421548][T10417] usb 5-1: USB disconnect, device number 66 [ 1152.427516][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1152.445340][T10410] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1152.583607][T10417] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1152.961065][T16053] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1153.189342][ T29] audit: type=1400 audit(2000000296.660:1578): avc: denied { write } for pid=18454 comm="syz.2.3216" path="socket:[87796]" dev="sockfs" ino=87796 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1153.391704][T16053] usb 7-1: Using ep0 maxpacket: 32 [ 1153.400683][T16053] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1153.409677][T16053] usb 7-1: config 0 has no interface number 0 [ 1153.421255][T16053] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1153.441015][T16053] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1153.452927][T16053] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1153.471044][T16053] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.501271][T16053] usb 7-1: Product: syz [ 1153.501301][T16053] usb 7-1: Manufacturer: syz [ 1153.501317][T16053] usb 7-1: SerialNumber: syz [ 1153.504859][T16053] usb 7-1: config 0 descriptor?? [ 1153.508537][T16053] appletouch 7-1:0.85: Could not find int-in endpoint [ 1153.508559][T16053] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1153.509099][T16053] usbhid 7-1:0.85: couldn't find an input interrupt endpoint [ 1153.581115][T10417] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1153.642271][T18467] openvswitch: netlink: Flow key attr not present in new flow. [ 1153.731587][T10417] usb 6-1: Using ep0 maxpacket: 16 [ 1153.738275][T10417] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.738382][T10417] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.738554][T10417] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1153.738618][T10417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.978645][T18471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input68 [ 1154.180504][T10417] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1154.498101][T18487] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1154.506939][T18487] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1154.516324][T18487] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1154.826855][ T29] audit: type=1400 audit(2000000298.060:1579): avc: denied { mount } for pid=18480 comm="syz.4.3224" name="/" dev="hugetlbfs" ino=87929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1154.856979][T10417] usb 6-1: USB disconnect, device number 75 [ 1154.865531][ T6046] block nbd0: Possible stuck request ffff888027c58000: control (read@0,1024B). Runtime 150 seconds [ 1154.877219][ T6046] block nbd0: Possible stuck request ffff888027c58200: control (read@1024,1024B). Runtime 150 seconds [ 1154.890606][ T6046] block nbd0: Possible stuck request ffff888027c58400: control (read@2048,1024B). Runtime 150 seconds [ 1154.902330][ T6046] block nbd0: Possible stuck request ffff888027c58600: control (read@3072,1024B). Runtime 150 seconds [ 1155.035821][ T29] audit: type=1400 audit(2000000298.510:1580): avc: denied { unmount } for pid=17462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1155.561069][T10410] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1156.760218][T10429] usb 7-1: USB disconnect, device number 12 [ 1157.142830][T10410] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.153733][T10410] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1157.163286][T10410] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1157.181415][T10410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.252027][T10410] usb 2-1: config 0 descriptor?? [ 1157.264094][ T29] audit: type=1400 audit(2000000300.730:1581): avc: denied { listen } for pid=18499 comm="syz.5.3231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1157.272676][T10410] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1157.330761][T10410] dvb-usb: bulk message failed: -22 (3/0) [ 1157.358354][T10410] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1157.391653][T10410] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1157.435941][T10410] usb 2-1: media controller created [ 1157.446662][T10410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.478662][T18490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1157.512054][T10410] dvb-usb: bulk message failed: -22 (6/0) [ 1157.517803][T10410] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1157.551141][T10418] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1157.558543][T10410] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 1157.620586][T10410] dvb-usb: schedule remote query interval to 150 msecs. [ 1157.627653][T10410] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1157.666984][T10410] usb 2-1: USB disconnect, device number 62 [ 1157.714912][T10410] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1157.731110][T10418] usb 5-1: Using ep0 maxpacket: 8 [ 1157.774074][T10418] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1157.831123][T10418] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1157.861885][T18508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1157.866108][T10418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1157.884413][T18508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1157.893845][T18508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1157.931236][T10418] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1157.931389][T18508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1157.960458][T18508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1157.970475][T10418] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1158.022928][T10418] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.061179][T10418] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1158.070275][T10418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.298378][T10418] usb 5-1: GET_CAPABILITIES returned 0 [ 1158.313035][T10418] usbtmc 5-1:16.0: can't read capabilities [ 1158.446543][T18506] chnl_net:caif_netlink_parms(): no params data found [ 1158.514330][T17759] Bluetooth: hci2: command 0x0406 tx timeout [ 1158.520428][T17759] Bluetooth: hci0: command 0x2016 tx timeout [ 1158.626737][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1158.636473][T18523] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1158.798670][T10410] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1158.905732][T18506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.932204][T10430] usb 5-1: USB disconnect, device number 67 [ 1158.949601][T18506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.957324][T18506] bridge_slave_0: entered allmulticast mode [ 1158.963338][T10410] usb 2-1: Using ep0 maxpacket: 8 [ 1158.973801][T18506] bridge_slave_0: entered promiscuous mode [ 1158.987183][T10410] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.000691][T18506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.008402][T10410] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1159.020076][T18506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.027764][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1159.044587][T18506] bridge_slave_1: entered allmulticast mode [ 1159.051797][T18506] bridge_slave_1: entered promiscuous mode [ 1159.061290][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1159.083619][T10410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1159.097404][T18506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.108894][T10410] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.124772][T18506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.135710][T10410] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1159.147947][T10410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.161200][T10429] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1159.179430][T10410] usb 2-1: Product: syz [ 1159.186048][T18506] team0: Port device team_slave_0 added [ 1159.191662][T10410] usb 2-1: Manufacturer: syz [ 1159.197015][T10410] usb 2-1: SerialNumber: syz [ 1159.202940][T18506] team0: Port device team_slave_1 added [ 1159.211757][T10410] usb 2-1: config 0 descriptor?? [ 1159.242509][T18519] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1159.309735][T18506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.317632][T18506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.343765][T18506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.355464][T10429] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.366607][T18506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.371460][T10418] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1159.373842][T10429] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1159.390228][T18506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.417259][T10429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.441993][T10429] usb 7-1: config 0 descriptor?? [ 1159.461046][T18506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.515340][T18506] hsr_slave_0: entered promiscuous mode [ 1159.541377][T18506] hsr_slave_1: entered promiscuous mode [ 1159.547565][T18506] debugfs: 'hsr0' already exists in 'hsr' [ 1159.580148][T18506] Cannot create hsr debugfs directory [ 1159.584998][T18529] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1159.592814][T10418] usb 3-1: Using ep0 maxpacket: 8 [ 1159.600398][T18529] PKCS7: Only support pkcs7_signedData type [ 1159.610568][T10418] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1159.620691][T10418] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1159.643248][T10418] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1159.662025][T10418] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1159.671451][ T29] audit: type=1400 audit(2000000303.120:1582): avc: denied { mount } for pid=18528 comm="syz.4.3237" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1159.674089][T10418] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1159.705833][T10418] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.729823][T10418] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1159.759827][T18525] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1159.789649][ T29] audit: type=1400 audit(2000000303.150:1583): avc: denied { unmount } for pid=18528 comm="syz.4.3237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1159.836436][T18531] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1159.972200][T10429] usb 7-1: USB disconnect, device number 13 [ 1160.031065][T16664] Bluetooth: hci4: command tx timeout [ 1160.508908][T18535] FAULT_INJECTION: forcing a failure. [ 1160.508908][T18535] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.575016][T18535] CPU: 0 UID: 0 PID: 18535 Comm: syz.4.3238 Tainted: G L syzkaller #0 PREEMPT(full) [ 1160.575047][T18535] Tainted: [L]=SOFTLOCKUP [ 1160.575054][T18535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1160.575065][T18535] Call Trace: [ 1160.575071][T18535] [ 1160.575078][T18535] dump_stack_lvl+0x100/0x190 [ 1160.575112][T18535] should_fail_ex.cold+0x5/0xa [ 1160.575136][T18535] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1160.575162][T18535] should_failslab+0xc2/0x120 [ 1160.575181][T18535] __kmalloc_noprof+0xe0/0x850 [ 1160.575211][T18535] tomoyo_realpath_from_path+0xb6/0x690 [ 1160.575242][T18535] tomoyo_path_number_perm+0x23c/0x580 [ 1160.575263][T18535] ? tomoyo_path_number_perm+0x22e/0x580 [ 1160.575286][T18535] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1160.575309][T18535] ? finish_task_switch.isra.0+0x200/0xb80 [ 1160.575357][T18535] ? find_held_lock+0x2b/0x80 [ 1160.575381][T18535] ? __fget_files+0x215/0x3d0 [ 1160.575398][T18535] ? hook_file_ioctl_common+0x146/0x410 [ 1160.575431][T18535] ? __fget_files+0x21f/0x3d0 [ 1160.575459][T18535] security_file_ioctl+0xd3/0x230 [ 1160.575485][T18535] __x64_sys_ioctl+0xb7/0x210 [ 1160.575513][T18535] do_syscall_64+0x106/0xf80 [ 1160.575536][T18535] ? clear_bhb_loop+0x40/0x90 [ 1160.575559][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.575578][T18535] RIP: 0033:0x7fabb259c799 [ 1160.575593][T18535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1160.575610][T18535] RSP: 002b:00007fabb3479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1160.575627][T18535] RAX: ffffffffffffffda RBX: 00007fabb2815fa0 RCX: 00007fabb259c799 [ 1160.575639][T18535] RDX: 0000200000000080 RSI: 00000000c008561c RDI: 0000000000000003 [ 1160.575650][T18535] RBP: 00007fabb3479090 R08: 0000000000000000 R09: 0000000000000000 [ 1160.575660][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1160.575670][T18535] R13: 00007fabb2816038 R14: 00007fabb2815fa0 R15: 00007ffc9f53b138 [ 1160.575694][T18535] [ 1160.575743][T18535] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1160.793150][T10429] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1161.029830][T18537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.058716][T18537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.092401][T10429] usb 7-1: Using ep0 maxpacket: 8 [ 1161.141881][T10429] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.192628][T10410] rc_core: IR keymap rc-snapstream-firefly not found [ 1161.205191][T10429] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 1161.240057][T10410] Registered IR keymap rc-empty [ 1161.264591][T10429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.283421][T10410] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1161.358901][T10429] usb 7-1: config 0 descriptor?? [ 1161.392879][T10410] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input70 [ 1161.451953][T10429] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 1161.538416][T10429] dvb-usb: bulk message failed: -22 (2/0) [ 1161.638616][T18531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.683242][T10410] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input71 [ 1161.755002][T10418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.757087][T10429] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1161.889931][T10429] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 1161.919494][T10429] usb 7-1: media controller created [ 1161.994214][T10429] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.081006][T10418] usb 3-1: GET_CAPABILITIES returned 0 [ 1162.086681][T10418] usbtmc 3-1:16.0: can't read capabilities [ 1162.106572][T10429] cxusb: set interface failed [ 1162.111964][T16664] Bluetooth: hci4: command tx timeout [ 1162.125339][T18506] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1162.137129][T10429] dvb-usb: bulk message failed: -22 (1/0) [ 1162.206772][T10429] DVB: Unable to find symbol mt352_attach() [ 1162.215010][T10429] dvb-usb: bulk message failed: -22 (5/0) [ 1162.220845][T10429] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1162.231924][T10429] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 1162.503520][T15209] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1162.511415][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1162.544187][T18544] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1162.618588][T18506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1162.645540][T18506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1162.676231][T10410] usb 3-1: USB disconnect, device number 63 [ 1162.697877][T10429] rc_core: IR keymap rc-dvico-mce not found [ 1162.699062][T18506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1162.708979][T10429] Registered IR keymap rc-empty [ 1162.723561][T10429] rc rc1: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc1 [ 1162.738168][T10429] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc1/input72 [ 1162.756071][T18506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1162.765865][T10429] dvb-usb: schedule remote query interval to 100 msecs. [ 1162.782066][T15209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.799273][T10429] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 1162.830101][T15209] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1162.845965][T10429] usb 7-1: USB disconnect, device number 14 [ 1162.852502][T15209] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1162.865384][T15209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.866499][T10418] usb 2-1: USB disconnect, device number 63 [ 1162.873556][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1162.918692][T15209] usb 5-1: config 0 descriptor?? [ 1162.993053][T15209] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1163.015126][T18506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.035142][T15209] dvb-usb: bulk message failed: -22 (3/0) [ 1163.040442][T18506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.043277][T10429] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 1163.060105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.067270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.089504][T15209] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1163.110420][T18553] loop6: detected capacity change from 0 to 2640 [ 1163.110815][T15209] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1163.120390][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.125112][T15209] usb 5-1: media controller created [ 1163.131036][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.137231][T15209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.149083][T18558] buffer_io_error: 10 callbacks suppressed [ 1163.149096][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.167556][T18560] FAULT_INJECTION: forcing a failure. [ 1163.167556][T18560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.187841][T15209] dvb-usb: bulk message failed: -22 (6/0) [ 1163.195936][T15209] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1163.207790][T18541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1163.213086][T18559] loop6: detected capacity change from 2640 to 524288000 [ 1163.228258][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.229507][T18560] CPU: 0 UID: 0 PID: 18560 Comm: syz.1.3242 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.229532][T18560] Tainted: [L]=SOFTLOCKUP [ 1163.229537][T18560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1163.229547][T18560] Call Trace: [ 1163.229552][T18560] [ 1163.229558][T18560] dump_stack_lvl+0x100/0x190 [ 1163.229588][T18560] should_fail_ex.cold+0x5/0xa [ 1163.229613][T18560] _copy_to_user+0x32/0xd0 [ 1163.229640][T18560] simple_read_from_buffer+0xcb/0x170 [ 1163.229667][T18560] proc_fail_nth_read+0x1af/0x230 [ 1163.229688][T18560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1163.229712][T18560] ? rw_verify_area+0xce/0x6d0 [ 1163.229732][T18560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1163.229753][T18560] vfs_read+0x1e4/0xb30 [ 1163.229778][T18560] ? __pfx_vfs_read+0x10/0x10 [ 1163.229800][T18560] ? __fget_files+0x215/0x3d0 [ 1163.229821][T18560] ? __fget_files+0x21f/0x3d0 [ 1163.229843][T18560] ksys_read+0x12a/0x250 [ 1163.229865][T18560] ? __pfx_ksys_read+0x10/0x10 [ 1163.229894][T18560] do_syscall_64+0x106/0xf80 [ 1163.229914][T18560] ? clear_bhb_loop+0x40/0x90 [ 1163.229933][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.229949][T18560] RIP: 0033:0x7fc31f55cfce [ 1163.229963][T18560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1163.229978][T18560] RSP: 002b:00007fc31d7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1163.229993][T18560] RAX: ffffffffffffffda RBX: 00007fc31d7d56c0 RCX: 00007fc31f55cfce [ 1163.230004][T18560] RDX: 000000000000000f RSI: 00007fc31d7d50a0 RDI: 0000000000000007 [ 1163.230013][T18560] RBP: 00007fc31d7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1163.230022][T18560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1163.230031][T18560] R13: 00007fc31f816128 R14: 00007fc31f816090 R15: 00007ffeb7c1f388 [ 1163.230053][T18560] [ 1163.234129][T15209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73 [ 1163.400435][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.462098][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.462519][T15209] dvb-usb: schedule remote query interval to 150 msecs. [ 1163.475511][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.498578][T15209] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1163.504978][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.538019][T15209] usb 5-1: USB disconnect, device number 68 [ 1163.548262][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.569231][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.581042][T18558] ldm_validate_partition_table(): Disk read failed. [ 1163.588214][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.613639][T15209] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1163.618066][T18558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1163.650333][T18558] Dev loop6: unable to read RDB block 0 [ 1163.663793][T18558] loop6: unable to read partition table [ 1163.670278][T18553] ldm_validate_partition_table(): Disk read failed. [ 1163.677164][T18553] Dev loop6: unable to read RDB block 0 [ 1163.682955][T18553] loop6: unable to read partition table [ 1163.724255][T18553] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 1163.863722][T18506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.888182][T18577] FAULT_INJECTION: forcing a failure. [ 1163.888182][T18577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.015997][T18577] CPU: 0 UID: 0 PID: 18577 Comm: syz.1.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 1164.016026][T18577] Tainted: [L]=SOFTLOCKUP [ 1164.016033][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1164.016043][T18577] Call Trace: [ 1164.016049][T18577] [ 1164.016057][T18577] dump_stack_lvl+0x100/0x190 [ 1164.016091][T18577] should_fail_ex.cold+0x5/0xa [ 1164.016115][T18577] _copy_from_user+0x2e/0xd0 [ 1164.016144][T18577] copy_msghdr_from_user+0x9f/0x4f0 [ 1164.016174][T18577] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1164.016206][T18577] ? __pfx__kstrtoull+0x10/0x10 [ 1164.016233][T18577] ___sys_sendmsg+0x106/0x1e0 [ 1164.016269][T18577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1164.016309][T18577] ? find_held_lock+0x2b/0x80 [ 1164.016347][T18577] __sys_sendmmsg+0x205/0x430 [ 1164.016373][T18577] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1164.016403][T18577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1164.016438][T18577] ? fput+0x79/0x100 [ 1164.016459][T18577] ? ksys_write+0x1ac/0x250 [ 1164.016485][T18577] ? __pfx_ksys_write+0x10/0x10 [ 1164.016515][T18577] __x64_sys_sendmmsg+0x9c/0x100 [ 1164.016537][T18577] ? lockdep_hardirqs_on+0x78/0x100 [ 1164.016559][T18577] do_syscall_64+0x106/0xf80 [ 1164.016580][T18577] ? clear_bhb_loop+0x40/0x90 [ 1164.016602][T18577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.016620][T18577] RIP: 0033:0x7fc31f59c799 [ 1164.016636][T18577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.016652][T18577] RSP: 002b:00007fc31d7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1164.016670][T18577] RAX: ffffffffffffffda RBX: 00007fc31f816090 RCX: 00007fc31f59c799 [ 1164.016682][T18577] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 1164.016693][T18577] RBP: 00007fc31d7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.016703][T18577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.016714][T18577] R13: 00007fc31f816128 R14: 00007fc31f816090 R15: 00007ffeb7c1f388 [ 1164.016738][T18577] [ 1164.266647][T16664] Bluetooth: hci4: command tx timeout [ 1164.920059][ T29] audit: type=1400 audit(2000000308.380:1584): avc: denied { create } for pid=18590 comm="syz.4.3249" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 1165.261601][T10419] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1165.373539][T18506] veth0_vlan: entered promiscuous mode [ 1165.394549][T18506] veth1_vlan: entered promiscuous mode [ 1165.417489][T18506] veth0_macvtap: entered promiscuous mode [ 1165.428637][T18506] veth1_macvtap: entered promiscuous mode [ 1165.431252][T10419] usb 7-1: Using ep0 maxpacket: 8 [ 1165.460311][T18506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.480582][T18506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.506117][T10419] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.537789][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.549903][T10419] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1165.574278][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.583295][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.593613][T10419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1165.606144][T10419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1165.620431][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.632349][T10419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1165.646509][T10419] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.665553][T10419] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1165.712925][T10419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.722085][T10419] usb 7-1: Product: syz [ 1165.726246][T10419] usb 7-1: Manufacturer: syz [ 1165.730873][T10419] usb 7-1: SerialNumber: syz [ 1165.731445][T10429] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1165.773897][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.786911][T10419] usb 7-1: config 0 descriptor?? [ 1165.801075][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.810337][T18593] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1165.866352][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.878338][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.952276][T10429] usb 3-1: Using ep0 maxpacket: 8 [ 1165.974158][T10429] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1165.983090][T10429] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1165.998568][T18611] openvswitch: netlink: Flow key attr not present in new flow. [ 1166.008720][T10429] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1166.093491][T10429] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1166.173299][T10429] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1166.290518][T10429] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1166.351836][T16664] Bluetooth: hci4: command tx timeout [ 1166.388642][T10429] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1166.430095][T10429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.482356][T10418] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1166.514119][T10417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1166.532381][T10417] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1166.558109][T10417] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1166.645023][T10418] usb 5-1: Using ep0 maxpacket: 32 [ 1166.659691][T16079] hid-generic 0000:0000:0000.001A: item fetching failed at offset 0/2 [ 1166.664011][T10429] usb 3-1: GET_CAPABILITIES returned 0 [ 1166.677704][T16079] hid-generic 0000:0000:0000.001A: probe with driver hid-generic failed with error -22 [ 1166.688894][T10418] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1166.705595][T10429] usbtmc 3-1:16.0: can't read capabilities [ 1166.713274][T10418] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1166.731297][T10418] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1166.739511][T10418] usb 5-1: Product: syz [ 1166.744532][T10418] usb 5-1: Manufacturer: syz [ 1166.749389][T10418] usb 5-1: SerialNumber: syz [ 1166.979856][T10418] usb 5-1: config 0 descriptor?? [ 1166.990569][T18614] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1167.171332][T18630] blktrace: Concurrent blktraces are not allowed on loop10 [ 1167.413845][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1167.423388][T18628] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1167.704403][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.751381][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.812265][T10429] usb 3-1: USB disconnect, device number 64 [ 1167.833860][T18614] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1167.891280][T10419] rc_core: IR keymap rc-snapstream-firefly not found [ 1167.901896][T18638] netlink: 'syz.1.3260': attribute type 3 has an invalid length. [ 1167.909830][T10419] Registered IR keymap rc-empty [ 1167.916820][T18638] netlink: 'syz.1.3260': attribute type 3 has an invalid length. [ 1167.932807][T10419] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1167.956817][T18640] netlink: 'syz.1.3260': attribute type 10 has an invalid length. [ 1167.966642][T10419] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input74 [ 1167.995179][T10419] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input75 [ 1168.103498][T10429] usb 5-1: USB disconnect, device number 69 [ 1168.378529][T18645] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1168.385046][T18645] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1168.413271][T18645] vhci_hcd vhci_hcd.0: Device attached [ 1168.433699][T18647] vhci_hcd: connection closed [ 1168.433928][T15258] vhci_hcd vhci_hcd.2: stop threads [ 1168.450367][T15258] vhci_hcd vhci_hcd.2: release socket [ 1168.458128][T15258] vhci_hcd vhci_hcd.2: disconnect device [ 1168.600124][T18652] FAULT_INJECTION: forcing a failure. [ 1168.600124][T18652] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.676048][T18655] sp0: Synchronizing with TNC [ 1168.686996][ T29] audit: type=1400 audit(2000000312.160:1585): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1168.710494][T18652] CPU: 0 UID: 0 PID: 18652 Comm: syz.1.3262 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.710522][T18652] Tainted: [L]=SOFTLOCKUP [ 1168.710528][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1168.710538][T18652] Call Trace: [ 1168.710544][T18652] [ 1168.710550][T18652] dump_stack_lvl+0x100/0x190 [ 1168.710583][T18652] should_fail_ex.cold+0x5/0xa [ 1168.710604][T18652] should_failslab+0xc2/0x120 [ 1168.710621][T18652] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1168.710643][T18652] ? do_getname+0x35/0x390 [ 1168.710663][T18652] ? find_held_lock+0x2b/0x80 [ 1168.710694][T18652] do_getname+0x35/0x390 [ 1168.710713][T18652] do_sys_openat2+0xc5/0x1e0 [ 1168.710734][T18652] ? __pfx_do_sys_openat2+0x10/0x10 [ 1168.710754][T18652] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1168.710781][T18652] ? __fget_files+0x21f/0x3d0 [ 1168.710802][T18652] __x64_sys_openat+0x12d/0x210 [ 1168.710822][T18652] ? __pfx___x64_sys_openat+0x10/0x10 [ 1168.710837][T18652] ? ksys_write+0x1ac/0x250 [ 1168.710858][T18652] do_syscall_64+0x106/0xf80 [ 1168.710872][T18652] ? clear_bhb_loop+0x40/0x90 [ 1168.710886][T18652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.710903][T18652] RIP: 0033:0x7fc31f59c799 [ 1168.710919][T18652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.710936][T18652] RSP: 002b:00007fc31d7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1168.710956][T18652] RAX: ffffffffffffffda RBX: 00007fc31f816090 RCX: 00007fc31f59c799 [ 1168.710967][T18652] RDX: 0000000000040042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1168.710978][T18652] RBP: 00007fc31d7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.710988][T18652] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1168.710997][T18652] R13: 00007fc31f816128 R14: 00007fc31f816090 R15: 00007ffeb7c1f388 [ 1168.711020][T18652] [ 1169.306845][T15209] usb 7-1: USB disconnect, device number 15 [ 1169.306985][ C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1169.643990][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1169.924163][ T29] audit: type=1400 audit(2000000313.400:1586): avc: denied { ioctl } for pid=18669 comm="syz.4.3268" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1169.965784][T18676] xt_hashlimit: size too large, truncated to 1048576 [ 1170.358544][T15209] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1170.447306][T18688] FAULT_INJECTION: forcing a failure. [ 1170.447306][T18688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.460845][T18688] CPU: 1 UID: 0 PID: 18688 Comm: syz.2.3272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.460873][T18688] Tainted: [L]=SOFTLOCKUP [ 1170.460879][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1170.460890][T18688] Call Trace: [ 1170.460897][T18688] [ 1170.460904][T18688] dump_stack_lvl+0x100/0x190 [ 1170.460935][T18688] should_fail_ex.cold+0x5/0xa [ 1170.460962][T18688] _copy_from_user+0x2e/0xd0 [ 1170.460990][T18688] get_timespec64+0x8d/0x240 [ 1170.461013][T18688] ? __pfx_get_timespec64+0x10/0x10 [ 1170.461044][T18688] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 1170.461068][T18688] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1170.461098][T18688] do_syscall_64+0x106/0xf80 [ 1170.461120][T18688] ? clear_bhb_loop+0x40/0x90 [ 1170.461142][T18688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.461168][T18688] RIP: 0033:0x7f2f7379c799 [ 1170.461184][T18688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.461201][T18688] RSP: 002b:00007f2f74577028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1170.461218][T18688] RAX: ffffffffffffffda RBX: 00007f2f73a15fa0 RCX: 00007f2f7379c799 [ 1170.461230][T18688] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 00000000fffffff2 [ 1170.461240][T18688] RBP: 00007f2f74577090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.461251][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.461261][T18688] R13: 00007f2f73a16038 R14: 00007f2f73a15fa0 R15: 00007ffe91057a98 [ 1170.461285][T18688] [ 1170.640271][T15209] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1170.661019][T15209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.701273][T15209] usb 2-1: Product: syz [ 1170.705460][T15209] usb 2-1: Manufacturer: syz [ 1170.710037][T15209] usb 2-1: SerialNumber: syz [ 1170.781848][T15209] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1170.963544][T10429] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1171.777001][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1171.783346][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.907008][T18701] FAULT_INJECTION: forcing a failure. [ 1172.907008][T18701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1172.934789][T18701] CPU: 1 UID: 0 PID: 18701 Comm: syz.2.3275 Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.934817][T18701] Tainted: [L]=SOFTLOCKUP [ 1172.934823][T18701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.934833][T18701] Call Trace: [ 1172.934839][T18701] [ 1172.934846][T18701] dump_stack_lvl+0x100/0x190 [ 1172.934876][T18701] should_fail_ex.cold+0x5/0xa [ 1172.934898][T18701] _copy_from_user+0x2e/0xd0 [ 1172.934927][T18701] copy_msghdr_from_user+0x9f/0x4f0 [ 1172.934955][T18701] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1172.934988][T18701] ___sys_sendmsg+0x106/0x1e0 [ 1172.935007][T18701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.935040][T18701] __sys_sendmsg+0x170/0x220 [ 1172.935058][T18701] ? __pfx___sys_sendmsg+0x10/0x10 [ 1172.935093][T18701] do_syscall_64+0x106/0xf80 [ 1172.935115][T18701] ? clear_bhb_loop+0x40/0x90 [ 1172.935135][T18701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.935152][T18701] RIP: 0033:0x7f2f7379c799 [ 1172.935162][T18701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.935173][T18701] RSP: 002b:00007f2f719f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.935184][T18701] RAX: ffffffffffffffda RBX: 00007f2f73a16090 RCX: 00007f2f7379c799 [ 1172.935191][T18701] RDX: 0000000000040010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1172.935198][T18701] RBP: 00007f2f719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1172.935204][T18701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.935211][T18701] R13: 00007f2f73a16128 R14: 00007f2f73a16090 R15: 00007ffe91057a98 [ 1172.935233][T18701] [ 1172.995503][T10429] usb 2-1: Service connection timeout for: 256 [ 1173.314330][T10429] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1173.339398][T15209] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1173.405543][T10429] ath9k_htc: Failed to initialize the device [ 1173.418486][T10429] usb 2-1: ath9k_htc: USB layer deinitialized [ 1173.506934][T15209] usb 5-1: Using ep0 maxpacket: 8 [ 1173.515304][T15209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.533994][ T29] audit: type=1400 audit(2000000316.970:1587): avc: denied { read } for pid=18706 comm="syz.5.3278" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1173.564319][T15209] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1173.611109][T15209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1173.624399][ T29] audit: type=1400 audit(2000000316.970:1588): avc: denied { open } for pid=18706 comm="syz.5.3278" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1173.656044][T15209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1173.681304][T15209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1173.693713][T15209] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.709604][ T29] audit: type=1400 audit(2000000316.970:1589): avc: denied { ioctl } for pid=18706 comm="syz.5.3278" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1173.824897][T15209] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1173.838871][T15209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.858429][T15209] usb 5-1: Product: syz [ 1173.868191][T15209] usb 5-1: Manufacturer: syz [ 1173.905870][T15209] usb 5-1: SerialNumber: syz [ 1173.934513][T15209] usb 5-1: config 0 descriptor?? [ 1173.939951][T18700] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1174.120760][ T29] audit: type=1400 audit(2000000317.450:1590): avc: denied { bind } for pid=18708 comm="syz.6.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1174.159569][T10418] usb 2-1: USB disconnect, device number 64 [ 1174.222946][ T29] audit: type=1400 audit(2000000317.450:1591): avc: denied { name_bind } for pid=18708 comm="syz.6.3280" src=3619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1174.421062][ T29] audit: type=1400 audit(2000000317.450:1592): avc: denied { node_bind } for pid=18708 comm="syz.6.3280" src=3619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1175.292616][T18731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.309218][T18731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.341845][T15209] rc_core: IR keymap rc-snapstream-firefly not found [ 1175.351043][T15209] Registered IR keymap rc-empty [ 1175.499166][ T29] audit: type=1400 audit(2000000318.950:1593): avc: denied { connect } for pid=18732 comm="syz.2.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1175.499485][T15209] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1175.838515][T15209] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 1175.977289][T15209] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input78 [ 1176.072160][T10429] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1176.234361][T10429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.311314][T10429] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1176.323437][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.345888][T10429] usb 2-1: config 0 descriptor?? [ 1176.620381][T18742] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1176.706491][T18749] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1176.815132][T10429] usb 2-1: USB disconnect, device number 65 [ 1177.413743][T10429] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1177.514698][T10430] usb 5-1: USB disconnect, device number 70 [ 1177.520651][ C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1177.652826][T10429] usb 2-1: Using ep0 maxpacket: 8 [ 1177.749307][T10429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.864655][T10429] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.40 [ 1177.978403][T10429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.165056][T10429] usb 2-1: config 0 descriptor?? [ 1178.322392][T10429] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 1178.447460][T10429] dvb-usb: bulk message failed: -22 (2/0) [ 1178.475881][T18756] FAULT_INJECTION: forcing a failure. [ 1178.475881][T18756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.538333][T10429] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1178.585554][T18756] CPU: 0 UID: 0 PID: 18756 Comm: syz.6.3288 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.585586][T18756] Tainted: [L]=SOFTLOCKUP [ 1178.585594][T18756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1178.585604][T18756] Call Trace: [ 1178.585611][T18756] [ 1178.585618][T18756] dump_stack_lvl+0x100/0x190 [ 1178.585669][T18756] should_fail_ex.cold+0x5/0xa [ 1178.585693][T18756] _copy_to_user+0x32/0xd0 [ 1178.585724][T18756] simple_read_from_buffer+0xcb/0x170 [ 1178.585756][T18756] proc_fail_nth_read+0x1af/0x230 [ 1178.585783][T18756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1178.585809][T18756] ? rw_verify_area+0xce/0x6d0 [ 1178.585833][T18756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1178.585858][T18756] vfs_read+0x1e4/0xb30 [ 1178.585887][T18756] ? __pfx_vfs_read+0x10/0x10 [ 1178.585916][T18756] ? __fget_files+0x215/0x3d0 [ 1178.585941][T18756] ? __fget_files+0x21f/0x3d0 [ 1178.585966][T18756] ksys_read+0x12a/0x250 [ 1178.585993][T18756] ? __pfx_ksys_read+0x10/0x10 [ 1178.586027][T18756] do_syscall_64+0x106/0xf80 [ 1178.586049][T18756] ? clear_bhb_loop+0x40/0x90 [ 1178.586072][T18756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.586091][T18756] RIP: 0033:0x7fc65eb5cfce [ 1178.586106][T18756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1178.586123][T18756] RSP: 002b:00007fc65cdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1178.586141][T18756] RAX: ffffffffffffffda RBX: 00007fc65cdf66c0 RCX: 00007fc65eb5cfce [ 1178.586153][T18756] RDX: 000000000000000f RSI: 00007fc65cdf60a0 RDI: 0000000000000004 [ 1178.586163][T18756] RBP: 00007fc65cdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.586174][T18756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.586190][T18756] R13: 00007fc65ee16038 R14: 00007fc65ee15fa0 R15: 00007ffcadd56e38 [ 1178.586214][T18756] [ 1178.784766][T18749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.034909][T10429] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 1179.060566][T10429] usb 2-1: media controller created [ 1179.164597][T10429] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.556038][T10429] cxusb: set interface failed [ 1179.585875][T10429] dvb-usb: bulk message failed: -22 (1/0) [ 1179.618042][ T29] audit: type=1400 audit(2000000323.090:1594): avc: denied { write } for pid=18762 comm="syz.6.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1179.655305][T18765] netlink: 'syz.4.3291': attribute type 3 has an invalid length. [ 1179.676078][T10429] DVB: Unable to find symbol mt352_attach() [ 1179.771149][T10429] dvb-usb: bulk message failed: -22 (5/0) [ 1179.797624][T18765] netlink: 'syz.4.3291': attribute type 3 has an invalid length. [ 1179.805539][T10429] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1179.851163][T10429] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 1179.901133][T10419] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1179.961867][T10429] rc_core: IR keymap rc-dvico-mce not found [ 1179.967765][T10429] Registered IR keymap rc-empty [ 1179.990863][T10429] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1180.018574][T10429] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input79 [ 1180.051784][T10429] dvb-usb: schedule remote query interval to 100 msecs. [ 1180.058754][T10429] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 1180.095685][T10419] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1180.101068][T15209] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1180.109432][T10419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.121969][T10419] usb 6-1: Product: syz [ 1180.130472][T10419] usb 6-1: Manufacturer: syz [ 1180.140939][T10429] usb 2-1: USB disconnect, device number 66 [ 1180.141179][T10430] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1180.148001][T10419] usb 6-1: SerialNumber: syz [ 1180.185450][T10419] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1180.215237][T16079] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1180.301091][T15209] usb 5-1: Using ep0 maxpacket: 16 [ 1180.311324][T10430] usb 3-1: Using ep0 maxpacket: 16 [ 1180.322290][T10429] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 1180.353322][T10430] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.377697][T15209] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1180.396938][T10430] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.415941][T15209] usb 5-1: config 0 has no interface number 0 [ 1180.471125][T15209] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1180.493702][T10430] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1180.516599][T10430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.526283][T15209] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1180.549775][T15209] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1180.565698][T18760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.588794][T15209] usb 5-1: Product: syz [ 1180.601382][T15209] usb 5-1: SerialNumber: syz [ 1180.606882][T18760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.639410][T15209] usb 5-1: config 0 descriptor?? [ 1180.653167][T15209] cm109 5-1:0.8: invalid payload size 256, expected 4 [ 1180.671980][ T30] INFO: task syz.0.2785:16701 blocked for more than 143 seconds. [ 1180.700452][ T30] Tainted: G L syzkaller #0 [ 1180.708525][T15209] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input80 [ 1180.720471][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1180.818753][ T30] task:syz.0.2785 state:D stack:28792 pid:16701 tgid:16700 ppid:5804 task_flags:0x400040 flags:0x00080002 [ 1180.881947][T18760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1180.934883][ T30] Call Trace: [ 1180.963779][ T30] [ 1180.981017][ T30] __schedule+0xfee/0x6120 [ 1181.015957][T10430] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1181.032771][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1181.054495][ T30] ? __pfx___schedule+0x10/0x10 [ 1181.066273][ T30] ? find_held_lock+0x2b/0x80 [ 1181.077890][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1181.085051][ C0] cm109_urb_ctl_callback: 80 callbacks suppressed [ 1181.085076][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.098587][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.105690][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.112769][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.119869][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.127541][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.134649][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.141752][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.148837][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.155958][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1181.195363][T10419] usb 5-1: USB disconnect, device number 71 [ 1181.195486][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1181.231194][ T30] ? schedule+0x2bf/0x390 [ 1181.252174][ T30] schedule+0xdd/0x390 [ 1181.278030][ T30] schedule_preempt_disabled+0x13/0x30 [ 1181.315269][T16079] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1181.331164][T16079] ath9k_htc: Failed to initialize the device [ 1181.351230][ T30] __mutex_lock+0xc9a/0x1b90 [ 1181.397059][T16079] usb 6-1: ath9k_htc: USB layer deinitialized [ 1181.417136][ T30] ? bdev_open+0xa2/0xe40 [ 1181.427356][T10430] usb 3-1: USB disconnect, device number 65 [ 1181.441073][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1181.487922][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1181.521065][ T30] ? bdev_open+0xa2/0xe40 [ 1181.543329][ T30] bdev_open+0xa2/0xe40 [ 1181.557821][ T30] ? iput+0x3a/0x40 [ 1181.567274][ T30] blkdev_open+0x34e/0x4f0 [ 1181.579483][ T30] do_dentry_open+0x6d8/0x1660 [ 1181.592170][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1181.606264][ T30] vfs_open+0x82/0x3f0 [ 1181.621036][ T30] path_openat+0x208c/0x31a0 [ 1181.636967][ T30] ? __pfx_path_openat+0x10/0x10 [ 1181.646175][ T30] do_file_open+0x20e/0x430 [ 1181.658180][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1181.671012][ T30] ? alloc_fd+0x476/0x790 [ 1181.691097][ T30] ? do_getname+0x191/0x390 [ 1181.695638][ T30] do_sys_openat2+0x10d/0x1e0 [ 1181.724217][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1181.737281][ T30] __x64_sys_openat+0x12d/0x210 [ 1181.758834][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1181.789688][ T30] ? do_user_addr_fault+0x8d6/0x12f0 [ 1181.806986][ T30] do_syscall_64+0x106/0xf80 [ 1181.824364][ T30] ? clear_bhb_loop+0x40/0x90 [ 1181.838408][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.861327][ T30] RIP: 0033:0x7f20c915cfce [ 1181.876607][ T30] RSP: 002b:00007f20ca0e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1181.919302][ T30] RAX: ffffffffffffffda RBX: 00007f20ca0e56c0 RCX: 00007f20c915cfce [ 1181.947338][ T30] RDX: 0000000000004880 RSI: 00007f20ca0e4c00 RDI: ffffffffffffff9c [ 1181.993460][ T30] RBP: 00007f20ca0e4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1182.020667][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1182.039193][ T30] R13: 00007f20c9416038 R14: 00007f20c9415fa0 R15: 00007ffd4c7291a8 [ 1182.061024][ T30] [ 1182.073933][ T30] [ 1182.073933][ T30] Showing all locks held in the system: [ 1182.076488][T10417] usb 6-1: USB disconnect, device number 76 [ 1182.099398][T10419] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1182.118060][ T30] 1 lock held by khungtaskd/30: [ 1182.123506][ T30] #0: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1182.176772][ T30] 3 locks held by kworker/u8:4/60: [ 1182.235940][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1182.257183][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1182.277244][ T30] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 1182.295513][ T30] 2 locks held by getty/5566: [ 1182.300185][ T30] #0: ffff888038f6a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1182.331037][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1182.363546][ T30] 1 lock held by udevd/5818: [ 1182.368154][ T30] #0: ffff888027c23358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1182.391028][ T30] 4 locks held by udevd/5822: [ 1182.395719][ T30] #0: ffff888037db80a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1182.412266][ T30] #1: ffff88807c432c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1182.431316][ T30] #2: ffff88802c1923c8 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1182.440842][ T30] #3: ffff8880393ad198 (&dev->mutex){....}-{4:4}, at: product_show+0x26/0xa0 [ 1182.464899][ T30] 7 locks held by kworker/1:14/10419: [ 1182.470278][ T30] #0: ffff888022eb5148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1182.493445][ T30] #1: ffffc9000d82fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1182.507658][ T30] #2: ffff88802af4d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1182.521014][ T30] #3: ffff8880393ad198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0 [ 1182.533731][ T30] #4: ffff88807c80e160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xaa/0x600 [ 1182.544434][ T30] #5: ffffffff8fe1aba8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 1182.555617][ T30] #6: ffffffff8e7f31f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1182.565831][ T30] 1 lock held by syz.0.2785/16701: [ 1182.571071][ T30] #0: ffff888027c23358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1182.584709][ T30] 2 locks held by syz.6.3294/18776: [ 1182.591380][ T30] [ 1182.597104][ T30] ============================================= [ 1182.597104][ T30] [ 1182.620357][ T30] NMI backtrace for cpu 1 [ 1182.620376][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.620401][ T30] Tainted: [L]=SOFTLOCKUP [ 1182.620407][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1182.620417][ T30] Call Trace: [ 1182.620423][ T30] [ 1182.620430][ T30] dump_stack_lvl+0x100/0x190 [ 1182.620462][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1182.620483][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1182.620512][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1182.620542][ T30] sys_info+0x141/0x190 [ 1182.620565][ T30] watchdog+0xd25/0x1050 [ 1182.620594][ T30] ? __pfx_watchdog+0x10/0x10 [ 1182.620615][ T30] ? __kthread_parkme+0x18c/0x230 [ 1182.620641][ T30] ? kthread+0x13a/0x450 [ 1182.620655][ T30] ? __pfx_watchdog+0x10/0x10 [ 1182.620676][ T30] kthread+0x370/0x450 [ 1182.620691][ T30] ? __pfx_kthread+0x10/0x10 [ 1182.620708][ T30] ret_from_fork+0x754/0xd80 [ 1182.620727][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1182.620746][ T30] ? __switch_to+0x7b4/0x1120 [ 1182.620767][ T30] ? __pfx_kthread+0x10/0x10 [ 1182.620784][ T30] ret_from_fork_asm+0x1a/0x30 [ 1182.620814][ T30] [ 1182.620836][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1182.748178][ C0] NMI backtrace for cpu 0 [ 1182.748194][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.748213][ C0] Tainted: [L]=SOFTLOCKUP [ 1182.748218][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1182.748225][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1182.748247][ C0] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 81 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1182.748260][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 1182.748272][ C0] RAX: 0000000004a58a47 RBX: ffffffff8e4975c0 RCX: ffffffff8b900c75 [ 1182.748281][ C0] RDX: 0000000000000000 RSI: ffffffff8de76c00 RDI: ffffffff8c1b05a0 [ 1182.748290][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1182.748298][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1182.748306][ C0] R13: 0000000000000000 R14: ffffffff90d99010 R15: 0000000000000000 [ 1182.748315][ C0] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 1182.748329][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.748338][ C0] CR2: 00007fc7397e92f8 CR3: 000000003786e000 CR4: 00000000003526f0 [ 1182.748348][ C0] Call Trace: [ 1182.748352][ C0] [ 1182.748357][ C0] default_idle+0x9/0x10 [ 1182.748374][ C0] default_idle_call+0x6c/0xb0 [ 1182.748392][ C0] do_idle+0x43a/0x550 [ 1182.748409][ C0] ? __pfx_do_idle+0x10/0x10 [ 1182.748427][ C0] cpu_startup_entry+0x4f/0x60 [ 1182.748443][ C0] rest_init+0x251/0x260 [ 1182.748461][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1182.748477][ C0] start_kernel+0x47f/0x480 [ 1182.748497][ C0] x86_64_start_reservations+0x24/0x30 [ 1182.748510][ C0] x86_64_start_kernel+0x12b/0x130 [ 1182.748524][ C0] common_startup_64+0x13e/0x148 [ 1182.748543][ C0] [ 1182.941060][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1182.947926][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.958594][ T30] Tainted: [L]=SOFTLOCKUP [ 1182.962901][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1182.972939][ T30] Call Trace: [ 1182.976207][ T30] [ 1182.979117][ T30] dump_stack_lvl+0x100/0x190 [ 1182.983786][ T30] vpanic+0x552/0x970 [ 1182.987747][ T30] ? __pfx_vpanic+0x10/0x10 [ 1182.992232][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1182.998379][ T30] panic+0xd1/0xe0 [ 1183.002079][ T30] ? __pfx_panic+0x10/0x10 [ 1183.006477][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1183.012617][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1183.018772][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1183.024910][ T30] ? watchdog.cold+0x198/0x1ca [ 1183.029654][ T30] ? watchdog+0xd35/0x1050 [ 1183.034055][ T30] watchdog.cold+0x1a9/0x1ca [ 1183.038631][ T30] ? __pfx_watchdog+0x10/0x10 [ 1183.043300][ T30] ? __kthread_parkme+0x18c/0x230 [ 1183.048313][ T30] ? kthread+0x13a/0x450 [ 1183.052534][ T30] ? __pfx_watchdog+0x10/0x10 [ 1183.057195][ T30] kthread+0x370/0x450 [ 1183.061242][ T30] ? __pfx_kthread+0x10/0x10 [ 1183.065813][ T30] ret_from_fork+0x754/0xd80 [ 1183.070384][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.075479][ T30] ? __switch_to+0x7b4/0x1120 [ 1183.080140][ T30] ? __pfx_kthread+0x10/0x10 [ 1183.084726][ T30] ret_from_fork_asm+0x1a/0x30 [ 1183.089491][ T30] [ 1183.092723][ T30] Kernel Offset: disabled [ 1183.097022][ T30] Rebooting in 86400 seconds..