last executing test programs: 18.631907747s ago: executing program 0 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0xf}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x20000) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x98000, 0x100) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 18.437442855s ago: executing program 3 (id=2099): socket$igmp(0x2, 0x3, 0x2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@my=0x0, 0x11}, {@my=0x0, 0x6}, 0x400, "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"}, 0x418, 0x1008}) ioctl$IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, &(0x7f0000000140)={0x9, 0x10000, 0x20000000}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/current\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6], 0x20) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) 18.168767448s ago: executing program 2 (id=2102): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xf8) sendto$unix(r5, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000cc0)={0x0, 0x4}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}, {&(0x7f0000000900)}], 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000"], 0x90) fchdir(r1) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000180)=""/82, 0x52) 17.704754279s ago: executing program 0 (id=2103): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @local, 0x3}], 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000000040)=r7, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r10 = dup2(r9, r7) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f00000000c0)=r10, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r3}, 0x10) 17.582035143s ago: executing program 1 (id=2104): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' '], 0x120}}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) (fail_nth: 2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) 17.523692846s ago: executing program 3 (id=2105): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000140)="8f5ce04ccea7c28f2c60cd6c9a489cb61b9824", 0x13}, {&(0x7f0000000180)="4bb604e5a835279ae3a4ab4092d3871ae557b95127c30c9f0b9b768e3ddcd2fb9d2c8850511568490216c4f823061edfebf6ea9553b07d44da530c98051577508193bd", 0x43}, {&(0x7f00000002c0)="4f81b27367285810c9658a820753db6d6ddf0ccc7ac2989cd5ed4d0176410b3cf60bce88b0a26a7c62963df4c985580cc4e28406e701863942c262c7cf50e2f0ec1f6025068bf238d738aaa17d62ed00e6b4784b68453d35b7d456120970480c3d0d04cfefbcef4a5319a8e7a6f68f628420fbcc2168aa2d828a92bf57de6d52ce94113997d751edf33e63241793098e066cbbba38ed22f894c542934de318ca", 0xa0}, {&(0x7f0000000380)="336c51f4c4b02fde8dfd086136b6cb2dd413900395eb08b9b64556f4855633839df01c086a2d9012c7e60f4f0d037ea08945620200e4e5f20dda", 0x3a}, {&(0x7f0000001400)="e8e0d8bd7826f75e02c498e4cbdbc1fc7027d13f330aa72beff3aee8540c71a2fa16c1ff3e15db61edefd855994e6ff5a86daba6f1306a62a17dc10cd5abe199a3dd8f0b83bd482fcde4b2f98574b29d7005bc4ccbdc13dc7533c2c41e248c170017203669c6e4ae699afb6b7fa3eaf4f1700cf3c781539fee679cce36e85b8fa74a8057c211795b3b0ea06b1097b16366ed17e11c8980b760d88a1770dad96014b124cdf82889495d97a87eb4da6ce0ec853415caf583e6b4d107cf5670c3c9f57f98d3ece0da5a6e471f1256c8bbe9c45207899ab8b84f1d49fca6cabc7976e3e55d2c1398697c861b927913895765d485ebbe968d85025f1d7a70e48a7f3f9cad85042f55db709ed6d30be235d82d3efd58293e0ce32445a8141a963e42e95581f137c9b612fa075c608df52087343a97ecaf4d3f8c1c6d29e5e42322fe125f24cf41e4e6faefbaae41a390db92e31fdd20526d4a8d9911bed0d159aa7a3d90a9ddf5f66d5a75ca7619773c698d", 0x16f}, {&(0x7f0000000000)="f5d671253323dba5a86d1869", 0xc}, {&(0x7f0000000200)="c6606e87f5402f3267330eea734c5a33c999e9d245e421491107ddcaed4e4f9088bbfe386bb30a2d7c5b1dbc59bac9d351e5912bb254f96bd26f7a9751f4c5336b36dfd732cc2f05416e2749356493a361fd8e00e3902dc6c0c0c305cbf745dc9c775bda9fff4a2c16d21c2f233a66c7e248b45b36697725342882ba2057396bcb850def01443cd9", 0x88}], 0x7, &(0x7f0000000800)=[@dstopts={{0x1e0, 0x29, 0x37, {0x5e, 0x39, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x3, 0x99, "6f815add380927e258d9c193e953e686cdc02bbfb7b1ba34c35f8e11ff5156b7be70249b89d925bba608124f82e703cf7715dfef3564d2655095b93a12e02e0241e4b7d61137fd8084e47059b848b36818e390639beb410f6c019572f3aaed4888882a7f79ca6d42830b8cb11d045fd02b16c3feef2840aee5be81ce018cecf6d94fe7eda4a73473183acd7f502b01de67d3fb5cf922b8dd39"}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x0, 0xcf, "53283b7dd2fcc42bdaa268178048fb965cc37930a7261926a4aab7ad6d32a672c4f760dffa921d116506fa0872f640784efed3e375c78e617e41472c8b9e0285a29ec86256d6fab200309ad5c6549f166ae682797af2a4ac440c52e9c5ac605c79fa8e3eec904739b0c68ff1664be6a2aaabc1ea894f3f763431f1beae6d27047bb4496d1eedf469243e6adef9a741fe3984b7961529d17d0f015ac18dc060ce93f910fc34ed340e916137838ab5cda146d10e54498cfa917e79dd50a45cb33dbbe62f3c9fd22c859ef52facd64f2e"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x97, 0xff, [0x8, 0x2000000000000, 0x1, 0x2, 0x479]}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x33}}}], 0x1f8}, 0x8040) sendmsg$inet6(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="9baf4d", 0x3}], 0x1}, 0x4000001) 16.976144801s ago: executing program 3 (id=2106): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x5, 0x6, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x8000, 0x2, 0x9}}) r1 = msgget$private(0x0, 0x8) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000040)=""/43) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090262000201a20001002400002000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0xfffffffffffffffc) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, 'f'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x80}, 0x1, 0x7}, 0x0) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e3, &(0x7f0000000000)) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) 16.45107891s ago: executing program 1 (id=2107): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000300)="5411", 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/17, 0x11}], 0x1) 16.346080693s ago: executing program 2 (id=2108): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' '], 0x120}}, 0x0) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) 16.241863913s ago: executing program 1 (id=2109): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3291c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x8c) r1 = socket$nl_generic(0x10, 0x3, 0x10) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f00000009c0)='4', 0x1, 0x400c0cc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) close(r0) 16.148659944s ago: executing program 4 (id=2110): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000030c0008000c0086dd88ca88be1200000415030735010000000000c289080022eb000000012e0059040200000000000003000485150800655800000004a0b2"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000400)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(0x0) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x533a81, 0x1d0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x100, 0x3ff, 0xa1, 0x1}}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (fail_nth: 2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 16.028748373s ago: executing program 1 (id=2111): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0xb0, 0x38, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0xfb, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xf8, 0x6, 0x73}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x3, 0x34}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x46, 0x9, 0x7e, 0x10, 0x1}, 0x5d, &(0x7f00000000c0)={0x5, 0xf, 0x5d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "7566cff6fdc262cd25c2aca50eba745b"}, @generic={0x41, 0x10, 0x4, "04859d5589325b057d0199cda3895b9e3213fd90207800e55f096a00668d137d08a10122c94e86abd1c93888d593bf5a99ccd2cab4166cb4e9026863ddaf"}, @ptm_cap={0x3}]}, 0x9, [{0x53, &(0x7f0000000140)=@string={0x53, 0x3, "fd34d2b4a527fbae76ad0545c97fc5bd5fe8ec26aa569e411389488947253d744a4ba26375e0716c1aa8b32caf1b134a7402c1a8bce50f64d6d76b02650dff484063010e0c3639b70108930889c25ab15a"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x96, &(0x7f00000003c0)=@string={0x96, 0x3, "a4206cec325f227e932b4c31eaf54e62677d278c0e337083109f88ae5aa88738c3e0667bcfdac1fdb56b0f30a86610f0c9b9bfdb38f85538e4a4d8d55fbf3da7a2f931014bbf612e441ad030e83cb03e7cc0ddf69f40fb003379386ba579d17fe22955090f582038ab6dc72077d6d033f13ed6c800c99db72597314a1956165ee9b36bd6d0bef471be6b714252a9bdd4cdf4f5ab"}}, {0x4e, &(0x7f0000000300)=@string={0x4e, 0x3, "41fc49a881e7ddf1ea458ee807249c4b53b89c8a68c89063d4121eb2da82844b3de31493e578d34fe4eae0eab8f75dccaf85deec9246cfe9e00d4825d92176c5ca2cadf28a1be74dae6b2915"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) 15.927984607s ago: executing program 2 (id=2112): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYRESHEX=r5], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r5, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0xffb}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x124}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4000000) (async) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x400c811) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) fcntl$lock(r2, 0x6, &(0x7f0000019080)={0x1, 0x1, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 15.661199757s ago: executing program 4 (id=2113): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00') pread64(r0, &(0x7f0000001300)=""/4118, 0x1016, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x1000001, 0xb853, r1, 0x83000000) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.648238188s ago: executing program 0 (id=2114): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x44}, 0x8840) recvmsg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, 0x0) 15.444481808s ago: executing program 4 (id=2115): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xfffffffa}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3e, 0x0, 0x9b, 0x9, 0xc52, 0x6}, {0x11, 0x0, 0x1ff, 0x7f, 0x4, 0x1}, 0x0, 0x1368, 0x200}}, @TCA_TBF_PBURST={0x8, 0x7, 0x16f2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb77c8e9a34a5a04f}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f00000004c0)=0x1000, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2", 0x9e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea", 0x4c}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55", 0x19}], 0x3}}], 0x2, 0x2090) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd70"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) socket(0x11, 0x80803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 15.133678468s ago: executing program 2 (id=2116): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x210480, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) write$ppp(r0, &(0x7f0000000340)="bc7a5313a25870a567f814a14ac25e306a313e6c89792b39c7f2ca98157bb17b8998bc7c0339930b", 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRESOCT=r4], 0x38}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000200)=0xe6, 0x4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x278, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}, @NL80211_ATTR_TID_CONFIG={0x218, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x33}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x67}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdb}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xee}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x521, 0x0, 0x0, 0x8, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x9, 0x3, 0xffff, 0xa, 0x6, 0x2, 0x37]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x1b, 0x1b, 0x6, 0x4]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x2, 0x101, 0x7b6, 0x7, 0xf23, 0x100]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8609, 0x6182, 0x5, 0x2, 0xff, 0x0, 0x0, 0x80]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x5, 0xb}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x3}, {0x3, 0x9}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0x7}, {0x6}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x5}, {0x2, 0x1}, {0x7, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0xd, 0xfff9, 0x7, 0xfffe, 0x6]}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xda}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x24000850}, 0x80) sendto$packet(r6, &(0x7f0000000240)="000a1800000000aa344e4394637556e7c931a9935c4bf7c2c1f066561b479864888fc06d22da08e815b218b175e62e90d9c5596d03", 0x35, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r5, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 14.953281356s ago: executing program 2 (id=2117): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x29, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utimes(&(0x7f0000000140)='./cgroup\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x1, 0x7, 0x40, 0x9}, 0x46, &(0x7f0000000100)={0x5, 0xf, 0x46, 0x4, [@generic={0x2c, 0x10, 0x1, "39d3c88f488bfa67172106f491d728c0facebe1d18f90c9df59fd7d5e0c26f9fa0039752b4eb353c06"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x4, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x58, 0x8, 0x0, 0x9, 0xfa}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41d}}, {0x2f, &(0x7f00000001c0)=@string={0x2f, 0x3, "25b0eab216ed443a5cc0a9be10b8231aa2d0ac81a308ac70b1b20e31e683f60583cd0d0dd2fafddc48c228d2ae"}}, {0xe5, &(0x7f00000004c0)=@string={0xe5, 0x3, "6e39f0a71591a6d76e37d74531c1b2a53462e208f7f9e3f0fda1dbdfbac4709962d0a1bd254ed2503a606d412bdd103facc644fe1f2303909a17160ed9006281dee9b95e865301cd8ae38564f000b264bc897236a1dd3c5e809fab6dfb4b709e9b609633cb2fb0d33032b344d56ddc3b7b5353df3d12f815c14de2bb83015465780fc554fefe0a5220685cb274ae216eb06429bbcc90a83644547718149c44212671a276fef96ebc67d90a160dae9a0d1e649b8ea882430d9216fccf5e11a77987a5b838f91f2db1b8428d1ee766a67b2770e6411a2a285301fcd43458bf2a6e5d5db0"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1007}}, {0x8f, &(0x7f00000005c0)=@string={0x8f, 0x3, "c356a6a5cf280ca7018f50b63324575485bd2fa218d770d26b90486682d8a093aef7ad5cf398323c4150ae78d4552b7984f26f34c6936d34de01c25a9243bbaf000c521673e88ff07a9844f14a54e71f4792638f488f1a1bfadb45e100e010c08b58b254485361a320e81c1e875329bbb355b5d0b8de984887312cf06396d1eeae0894fe835646ead64026d412"}}]}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14.642009629s ago: executing program 0 (id=2118): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xf8) sendto$unix(r5, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000cc0)={0x0, 0x4}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}, {&(0x7f0000000900)}], 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000"], 0x90) fchdir(r1) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000180)=""/82, 0x52) 13.585184595s ago: executing program 1 (id=2119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x172}, 0x0, 0x0) (async) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x172}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) socket(0x840000000002, 0x3, 0xfa) (async) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000c0000000080000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000600), 0x0}, 0x20) ptrace(0x797d3b2e8fbc73fb, r3) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40825) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socket$igmp6(0xa, 0x3, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x5a) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffe, {0x0, 0x0, 0x0, r7, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="23820100e30002000a000100f65378d4e2e2000008001b0000000000"], 0x34}}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRESHEX=r8], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYRESHEX=r8], 0x50) unshare(0x62040200) 12.623624023s ago: executing program 3 (id=2120): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1b2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7fffffffffffffff, 0x4, 0xfa11, 0xffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x2c, 0xa, 0x3, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000"}) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) getpgrp(0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x86) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6b8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000029d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x9f1037f7df184b2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) 9.844844838s ago: executing program 4 (id=2121): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000976000000763085262928f95d38909e1db88ee37c172c0486fef0616d6ca79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd4b2f1a4a63c8489cad1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) (fail_nth: 2) 5.753510427s ago: executing program 2 (id=2122): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x4001) shutdown(r0, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') lstat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000001dc0)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xda, 0x4000000005, 0x2, 0x6, {0x4, 0x0, 0xc0, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x9, r9, r10, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000002c00)='./file1\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000002e80)=[0xee00, 0xee00]) syz_fuse_handle_req(r3, &(0x7f00000002c0)="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", 0x2000, &(0x7f0000003000)={&(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x2d, 0x8, 0x10001000, 0x1, 0x0, 0x9, 0x600000, 0x0, 0x0, 0x10, 0x7}}, &(0x7f0000000100)={0x18, 0x4899b9077b415ee4, 0x4, {0x7}}, &(0x7f0000000140)={0x18, 0x0, 0x53af, {0x8}}, &(0x7f0000000180)={0x18, 0x0, 0x1, {0xff}}, &(0x7f00000022c0)={0x18, 0x0, 0xfffffffffffffffb, {0x1ff}}, &(0x7f0000002300)={0x28, 0x0, 0x7ff, {{0xd, 0xffffffffffff0000}}}, &(0x7f0000002340)={0x60, 0xfffffffffffffffe, 0xed, {{0x4, 0xffff, 0x10000, 0x4, 0x7f, 0x841, 0x80000001, 0xffffffad}}}, &(0x7f00000023c0)={0x18, 0x0, 0x8, {0x7fffffff}}, &(0x7f0000002400)={0x17, 0x0, 0x0, {'@\'-*$\xde\x00'}}, &(0x7f0000002440)={0x20, 0x0, 0x1b, {0x0, 0x1}}, &(0x7f00000025c0)={0x78, 0xffffffffffffffda, 0x7fffffff, {0x80000001, 0x7, 0x0, {0x5, 0x6, 0x3, 0x3, 0x3, 0x3, 0x2, 0x5, 0x400, 0xa000, 0xffffffff, 0x0, 0x0, 0x2, 0x1}}}, &(0x7f0000002740)={0x90, 0x0, 0x5, {0x2, 0x3, 0x7, 0x7, 0x6, 0x0, {0x5, 0x9, 0x7, 0xc, 0x2, 0xffffffffffffffff, 0xffff8001, 0x200, 0xfffffff7, 0xa000, 0xffffffff, 0x0, r4, 0x678aa767, 0x7}}}, &(0x7f0000002800)={0xb8, 0xfffffffffffffffe, 0x6, [{0x0, 0x800, 0xf, 0x4, 'net/ipv6_route\x00'}, {0x4, 0x1, 0x8, 0x200, 'ip_vti0\x00'}, {0x4, 0x37, 0x4, 0x2, ')@.\''}, {0x0, 0x4, 0x2, 0x3, '(,'}, {0x1, 0x2, 0x2, 0x4, ':\a'}]}, &(0x7f0000002a80)={0x150, 0xffffffffffffffea, 0x8000000000000000, [{{0x2, 0x1, 0x7fffffffffffffff, 0x3af6, 0x5, 0x0, {0x5, 0x2, 0x8001, 0x6851, 0x400, 0x1, 0xd, 0x10, 0x4, 0x8000, 0x1, r5, r6, 0x3, 0x3}}, {0x0, 0x5, 0x6, 0xbc, ';-.!+\x95'}}, {{0x5, 0x2, 0x8, 0x2, 0x2, 0xfffffffa, {0x3, 0xb7, 0x2, 0x1, 0x5, 0x7fffffffffffffff, 0x9, 0x0, 0x1, 0x2000, 0x8, r9, r11, 0x947, 0x80000000}}, {0x0, 0x40, 0x8, 0x897, 'ip_vti0\x00'}}]}, &(0x7f0000002cc0)={0xa0, 0x0, 0x8000, {{0x0, 0x1, 0x9, 0x2, 0x5, 0x3ff, {0x2, 0x8001, 0xd, 0x5, 0x6, 0x1e2, 0x2, 0xa8cb, 0xffffffff, 0xa000, 0x2, 0xee01, r12, 0x9000, 0x6}}, {0x0, 0x1}}}, &(0x7f0000002d80)={0x20, 0xffffffffffffffda, 0x3, {0x0, 0x0, 0xf64, 0xa}}, &(0x7f0000002ec0)={0x130, 0x0, 0x4, {0xd84, 0x3fa, 0x0, '\x00', {0x1000, 0x2, 0x4, 0x400, r13, r14, 0x10000, '\x00', 0x9, 0x7, 0xa0a, 0x4, {0x0, 0x3}, {0x40, 0xc81aef9}, {0x1, 0x5}, {0x6, 0x1}, 0x100, 0x3, 0xffff, 0x9}}}}) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 3.423092535s ago: executing program 4 (id=2123): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') close(0x3) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a8820086dd44fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x3, 0x7, 0x1}) 2.291754633s ago: executing program 3 (id=2124): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="000976000000763085262928f95d38909e1db88ee37c172c0486fef0616d6ca79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd4b2f1a4a63c8489cad1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 2.173325862s ago: executing program 4 (id=2125): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r0, 0x10, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x8, 0x0, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000240)=""/249, 0xf9}], 0x2, 0x5e, 0xfffffff8) 2.062825706s ago: executing program 0 (id=2126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fdffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800e0ffb704000002000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000580), 0x109000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) fcntl$dupfd(r1, 0x70879cf580a7ebe1, r0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x4, 0x8001, 0xedb5, 0x9, 0x7f}, 0x14) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 944.799629ms ago: executing program 0 (id=2127): socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7ff, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000240), {0x2b}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendto$l2tp6(r5, &(0x7f0000000240), 0x0, 0x20040840, &(0x7f0000000140)={0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b2, 0x3a8e5b6e, 0xc, 0x8000000000000000]}, &(0x7f0000000200)=0x78) 326.751µs ago: executing program 3 (id=2128): socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000200)={0x3000, 0x1000}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f000106"], 0x18}], 0x1}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x8084) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f344562600000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x1) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r10, 0x80286f4e, &(0x7f0000000240)) ioctl$FE_SET_FRONTEND(r10, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}}) 0s ago: executing program 1 (id=2129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x22020400) close(0x3) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50}, 0xffd3) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x4}) r6 = syz_io_uring_setup(0x750d, &(0x7f0000000080)={0x0, 0xffffffff, 0x8, 0x3, 0x16f, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000079c0)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x10040) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045000028006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc22ac50000000000"], 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0xc2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}, @window={0x3, 0x3, 0x5}, @sack={0x5, 0xa, [0x5, 0x1]}, @timestamp={0x8, 0xa, 0xee, 0x500000}, @sack={0x5, 0x16, [0x5, 0xfffff000, 0x9, 0xd, 0x80000001]}, @timestamp={0x8, 0xa, 0x1, 0x2}]}}}}}}}, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0xc000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0004005f58e9f04d027d6d4495e12802c1fb8c748f41f2129efaeec08ece8c13", @ANYRES16=r10, @ANYBLOB="000428bd7000fbdbdf251100000008000400fa0e0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x18040051) kernel console output (not intermixed with test programs): .736630][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.086511][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 424.165890][ T5914] usb 3-1: usb_control_msg returned -71 [ 424.187923][ T5914] usbtmc 3-1:16.0: can't read capabilities [ 424.235984][T11216] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1695'. [ 424.254975][ T5914] usb 3-1: USB disconnect, device number 48 [ 424.261199][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 424.299391][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.328264][ T10] usb 5-1: config 0 has no interfaces? [ 424.375682][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 424.389439][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.412407][ T10] usb 5-1: Product: syz [ 424.419390][ T10] usb 5-1: Manufacturer: syz [ 424.441863][ T10] usb 5-1: SerialNumber: syz [ 424.473888][ T10] usb 5-1: config 0 descriptor?? [ 424.704317][T11227] kvm: MWAIT instruction emulated as NOP! [ 425.049563][T11231] [U]  [ 425.678549][ T5914] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 425.847624][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 425.868020][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.889280][ T5914] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 425.910614][T11252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1707'. [ 425.950423][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.980788][ T5914] usb 3-1: Product: syz [ 425.988343][ T5914] usb 3-1: Manufacturer: syz [ 425.997917][ T5914] usb 3-1: SerialNumber: syz [ 426.010520][ T5914] usb 3-1: config 0 descriptor?? [ 426.026271][ T5914] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 426.560892][ T5914] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 426.572851][ T5914] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 427.181970][T11269] FAULT_INJECTION: forcing a failure. [ 427.181970][T11269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.236443][T11269] CPU: 1 UID: 0 PID: 11269 Comm: syz.1.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.236478][T11269] Tainted: [L]=SOFTLOCKUP [ 427.236485][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.236496][T11269] Call Trace: [ 427.236504][T11269] [ 427.236514][T11269] dump_stack_lvl+0xe8/0x150 [ 427.236543][T11269] should_fail_ex+0x412/0x560 [ 427.236576][T11269] _copy_from_user+0x2d/0xb0 [ 427.236602][T11269] get_timespec64+0x96/0x1b0 [ 427.236624][T11269] ? __pfx_get_timespec64+0x10/0x10 [ 427.236654][T11269] __x64_sys_recvmmsg+0x14b/0x250 [ 427.236676][T11269] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 427.236706][T11269] do_syscall_64+0x14d/0xf80 [ 427.236733][T11269] ? trace_irq_disable+0x3b/0x150 [ 427.236757][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.236776][T11269] ? clear_bhb_loop+0x40/0x90 [ 427.236798][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.236818][T11269] RIP: 0033:0x7f84e539c799 [ 427.236837][T11269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.236853][T11269] RSP: 002b:00007f84e6201028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 427.236876][T11269] RAX: ffffffffffffffda RBX: 00007f84e5615fa0 RCX: 00007f84e539c799 [ 427.236890][T11269] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 427.236904][T11269] RBP: 00007f84e6201090 R08: 0000200000003700 R09: 0000000000000000 [ 427.236918][T11269] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 427.236931][T11269] R13: 00007f84e5616038 R14: 00007f84e5615fa0 R15: 00007f84e573fa48 [ 427.236961][T11269] [ 427.786030][ T5914] usb 5-1: USB disconnect, device number 60 [ 427.969511][T11273] xt_bpf: check failed: parse error [ 428.344014][T11288] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1718'. [ 428.437057][ T5914] usb 3-1: USB disconnect, device number 49 [ 429.117384][ T5914] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 429.235215][T11305] netlink: 'syz.4.1722': attribute type 2 has an invalid length. [ 429.301549][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 429.314760][ T5914] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 429.328386][ T5914] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 429.356147][ T5914] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.396822][ T5914] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.02 [ 429.410389][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.419697][ T5914] usb 4-1: SerialNumber: syz [ 429.446928][ T29] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 429.715122][ T29] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 429.744060][ T29] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 429.767767][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.788412][ T29] usb 3-1: Product: syz [ 429.802733][ T29] usb 3-1: Manufacturer: syz [ 429.809889][ T29] usb 3-1: SerialNumber: syz [ 430.353554][ T29] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 430.364797][ T29] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 430.604259][ T29] usb 3-1: USB disconnect, device number 50 [ 430.685205][ T6135] udevd[6135]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.786539][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 431.000426][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 431.025960][T11324] FAULT_INJECTION: forcing a failure. [ 431.025960][T11324] name failslab, interval 1, probability 0, space 0, times 0 [ 431.043551][T11324] CPU: 1 UID: 0 PID: 11324 Comm: syz.2.1728 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.043584][T11324] Tainted: [L]=SOFTLOCKUP [ 431.043591][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.043602][T11324] Call Trace: [ 431.043612][T11324] [ 431.043621][T11324] dump_stack_lvl+0xe8/0x150 [ 431.043655][T11324] should_fail_ex+0x412/0x560 [ 431.043683][T11324] should_failslab+0xa8/0x100 [ 431.043708][T11324] __kmalloc_cache_noprof+0x88/0x660 [ 431.043724][T11324] ? l2cap_chan_create+0x51/0x790 [ 431.043744][T11324] l2cap_chan_create+0x51/0x790 [ 431.043767][T11324] lowpan_control_write+0x457/0x8f0 [ 431.043795][T11324] ? __pfx_lowpan_control_write+0x10/0x10 [ 431.043827][T11324] ? __pfx___debugfs_file_get+0x10/0x10 [ 431.043866][T11324] full_proxy_write+0x127/0x1f0 [ 431.043889][T11324] ? __pfx_full_proxy_write+0x10/0x10 [ 431.043901][T11324] vfs_write+0x29a/0xb90 [ 431.043919][T11324] ? __pfx_vfs_write+0x10/0x10 [ 431.043940][T11324] ? __fget_files+0x2a/0x420 [ 431.043970][T11324] ? __fget_files+0x3a0/0x420 [ 431.043994][T11324] ? __fget_files+0x2a/0x420 [ 431.044025][T11324] ksys_write+0x150/0x270 [ 431.044039][T11324] ? __pfx_ksys_write+0x10/0x10 [ 431.044057][T11324] do_syscall_64+0x14d/0xf80 [ 431.044069][T11324] ? trace_irq_disable+0x3b/0x150 [ 431.044091][T11324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.044110][T11324] ? clear_bhb_loop+0x40/0x90 [ 431.044134][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.044153][T11324] RIP: 0033:0x7f213c19c799 [ 431.044179][T11324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.044191][T11324] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.044205][T11324] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 431.044214][T11324] RDX: 000000000000001b RSI: 0000200000000440 RDI: 0000000000000003 [ 431.044221][T11324] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 431.044229][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.044240][T11324] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 431.044271][T11324] [ 431.332813][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 431.352876][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.387997][ T10] usb 5-1: config 0 descriptor?? [ 431.776653][ T5914] usb 4-1: 0:2 : does not exist [ 431.800562][ T5914] usb 4-1: unit 1 not found! [ 431.811032][ T5914] usb 4-1: unit 130 not found! [ 431.832076][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 431.845239][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 431.984415][ T5914] usb 4-1: USB disconnect, device number 52 [ 432.074410][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.215445][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 432.215467][ T30] audit: type=1326 audit(1772514573.669:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.468155][ T30] audit: type=1326 audit(1772514573.669:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.478997][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 432.522225][ T30] audit: type=1326 audit(1772514573.669:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.548033][ T30] audit: type=1326 audit(1772514573.669:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.582156][ T30] audit: type=1326 audit(1772514573.679:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.583165][ T29] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 432.687112][ T30] audit: type=1326 audit(1772514573.679:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.719278][T11344] FAULT_INJECTION: forcing a failure. [ 432.719278][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.767674][ T30] audit: type=1326 audit(1772514573.719:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.792301][ T30] audit: type=1326 audit(1772514573.729:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.833582][ T30] audit: type=1326 audit(1772514573.729:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.857438][ T30] audit: type=1326 audit(1772514573.729:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11321 comm="syz.4.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8af59c799 code=0x7ffc0000 [ 432.928570][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.2.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.928593][T11344] Tainted: [L]=SOFTLOCKUP [ 432.928598][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.928606][T11344] Call Trace: [ 432.928612][T11344] [ 432.928618][T11344] dump_stack_lvl+0xe8/0x150 [ 432.928640][T11344] should_fail_ex+0x412/0x560 [ 432.928658][T11344] _copy_from_user+0x2d/0xb0 [ 432.928675][T11344] __copy_msghdr+0x3c5/0x5b0 [ 432.928695][T11344] ___sys_sendmsg+0x213/0x360 [ 432.928715][T11344] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.928750][T11344] ? __fget_files+0x2a/0x420 [ 432.928766][T11344] ? __fget_files+0x3a0/0x420 [ 432.928787][T11344] __x64_sys_sendmsg+0x1bd/0x2a0 [ 432.928805][T11344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.928827][T11344] ? __pfx_ksys_write+0x10/0x10 [ 432.928846][T11344] do_syscall_64+0x14d/0xf80 [ 432.928857][T11344] ? trace_irq_disable+0x3b/0x150 [ 432.928874][T11344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.928886][T11344] ? clear_bhb_loop+0x40/0x90 [ 432.928900][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.928912][T11344] RIP: 0033:0x7f213c19c799 [ 432.928924][T11344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.928934][T11344] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.928953][T11344] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 432.928962][T11344] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 432.928970][T11344] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 432.928977][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.928985][T11344] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 432.929003][T11344] [ 433.132466][ T29] usb 2-1: device descriptor read/64, error -71 [ 433.239224][T11350] sctp: [Deprecated]: syz.2.1735 (pid 11350) Use of int in maxseg socket option. [ 433.239224][T11350] Use struct sctp_assoc_value instead [ 433.396673][ T29] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 433.546513][ T29] usb 2-1: device descriptor read/64, error -71 [ 433.658502][ T29] usb usb2-port1: attempt power cycle [ 434.027219][ T29] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 434.047870][ T29] usb 2-1: device descriptor read/8, error -71 [ 434.236593][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 434.296689][ T29] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 434.318410][ T29] usb 2-1: device descriptor read/8, error -71 [ 434.361624][ T5928] usb 5-1: USB disconnect, device number 61 [ 434.387236][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 434.408461][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.427539][ T29] usb usb2-port1: unable to enumerate USB device [ 434.450682][ T10] usb 4-1: config 0 has no interfaces? [ 434.469335][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 434.479401][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.490415][ T10] usb 4-1: Product: syz [ 434.495041][ T10] usb 4-1: Manufacturer: syz [ 434.499834][ T10] usb 4-1: SerialNumber: syz [ 434.526981][ T10] usb 4-1: config 0 descriptor?? [ 434.946540][ T5928] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 435.110180][ T5928] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 435.161148][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.242220][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.279935][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.312703][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.331128][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.358189][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.438960][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.457795][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.458724][T11383] FAULT_INJECTION: forcing a failure. [ 435.458724][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.484533][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.510903][T11383] CPU: 0 UID: 0 PID: 11383 Comm: syz.1.1748 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.510937][T11383] Tainted: [L]=SOFTLOCKUP [ 435.510944][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.510955][T11383] Call Trace: [ 435.510964][T11383] [ 435.510973][T11383] dump_stack_lvl+0xe8/0x150 [ 435.511006][T11383] should_fail_ex+0x412/0x560 [ 435.511034][T11383] _copy_from_user+0x2d/0xb0 [ 435.511152][T11383] smc_setsockopt+0x3c5/0xac0 [ 435.511185][T11383] ? __pfx_smc_setsockopt+0x10/0x10 [ 435.511207][T11383] ? aa_sock_opt_perm+0xff/0x1a0 [ 435.511227][T11383] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 435.511239][T11383] ? __pfx_smc_setsockopt+0x10/0x10 [ 435.511254][T11383] do_sock_setsockopt+0x17c/0x1b0 [ 435.511276][T11383] __x64_sys_setsockopt+0x13d/0x1b0 [ 435.511305][T11383] do_syscall_64+0x14d/0xf80 [ 435.511319][T11383] ? trace_irq_disable+0x3b/0x150 [ 435.511340][T11383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.511359][T11383] ? clear_bhb_loop+0x40/0x90 [ 435.511381][T11383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.511399][T11383] RIP: 0033:0x7f84e539c799 [ 435.511457][T11383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.511476][T11383] RSP: 002b:00007f84e6201028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.511521][T11383] RAX: ffffffffffffffda RBX: 00007f84e5615fa0 RCX: 00007f84e539c799 [ 435.511535][T11383] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 435.511546][T11383] RBP: 00007f84e6201090 R08: 0000000000000018 R09: 0000000000000000 [ 435.511558][T11383] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 435.511570][T11383] R13: 00007f84e5616038 R14: 00007f84e5615fa0 R15: 00007f84e573fa48 [ 435.511632][T11383] [ 435.711305][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.720649][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.782862][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.819083][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.829612][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.871134][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.900431][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.919698][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 435.945167][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 435.972135][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.002580][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.044938][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.070757][ T5928] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.082556][ T5928] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 436.101970][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 436.119200][ T5928] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 436.129248][ T5928] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 436.139657][ T5928] usb 5-1: Product: syz [ 436.164856][ T5928] usb 5-1: Manufacturer: syz [ 436.178179][ T5928] usb 5-1: SerialNumber: syz [ 436.187526][ T5928] usb 5-1: config 0 descriptor?? [ 436.226737][ T5928] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 436.460560][ T5928] usb 5-1: USB disconnect, device number 62 [ 436.509118][ T5928] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 436.664922][T11378] fuse: Bad value for 'fd' [ 437.134389][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 437.143359][T11405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1755'. [ 437.208534][T11407] binder: BINDER_SET_CONTEXT_MGR already set [ 437.219179][T11407] binder: 11406:11407 ioctl 4018620d 200000004a80 returned -16 [ 437.410868][ T5915] usb 4-1: USB disconnect, device number 53 [ 438.739007][T11426] IPVS: Error connecting to the multicast addr [ 438.773625][T11429] FAULT_INJECTION: forcing a failure. [ 438.773625][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 438.815106][T11429] CPU: 1 UID: 0 PID: 11429 Comm: syz.4.1760 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.815140][T11429] Tainted: [L]=SOFTLOCKUP [ 438.815147][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.815159][T11429] Call Trace: [ 438.815168][T11429] [ 438.815176][T11429] dump_stack_lvl+0xe8/0x150 [ 438.815210][T11429] should_fail_ex+0x412/0x560 [ 438.815241][T11429] should_failslab+0xa8/0x100 [ 438.815266][T11429] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 438.815287][T11429] ? __alloc_skb+0x186/0x7d0 [ 438.815311][T11429] ? __alloc_skb+0x1d0/0x7d0 [ 438.815332][T11429] ? __local_bh_enable_ip+0xd0/0x130 [ 438.815362][T11429] __alloc_skb+0x1d0/0x7d0 [ 438.815386][T11429] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 438.815412][T11429] netlink_sendmsg+0x5d4/0xb40 [ 438.815445][T11429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.815473][T11429] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.815499][T11429] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.815522][T11429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.815545][T11429] ____sys_sendmsg+0xa68/0xad0 [ 438.815585][T11429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.815621][T11429] ? import_iovec+0x73/0xa0 [ 438.815651][T11429] ___sys_sendmsg+0x2a5/0x360 [ 438.815685][T11429] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.815748][T11429] ? __fget_files+0x2a/0x420 [ 438.815773][T11429] ? __fget_files+0x3a0/0x420 [ 438.815809][T11429] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.815840][T11429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.815878][T11429] ? __pfx_ksys_write+0x10/0x10 [ 438.815910][T11429] do_syscall_64+0x14d/0xf80 [ 438.815928][T11429] ? trace_irq_disable+0x3b/0x150 [ 438.815953][T11429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.815970][T11429] ? clear_bhb_loop+0x40/0x90 [ 438.815989][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.816006][T11429] RIP: 0033:0x7fd8af59c799 [ 438.816023][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.816038][T11429] RSP: 002b:00007fd8b037d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.816069][T11429] RAX: ffffffffffffffda RBX: 00007fd8af815fa0 RCX: 00007fd8af59c799 [ 438.816081][T11429] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 438.816093][T11429] RBP: 00007fd8b037d090 R08: 0000000000000000 R09: 0000000000000000 [ 438.816103][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.816113][T11429] R13: 00007fd8af816038 R14: 00007fd8af815fa0 R15: 00007fd8af93fa48 [ 438.816141][T11429] [ 439.506966][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 439.796943][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 439.803942][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.814454][ T9] usb 2-1: config 0 has no interfaces? [ 439.858267][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 439.887914][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.906554][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 439.917760][ T9] usb 2-1: Product: syz [ 439.925832][ T9] usb 2-1: Manufacturer: syz [ 439.931345][ T9] usb 2-1: SerialNumber: syz [ 439.949929][ T9] usb 2-1: config 0 descriptor?? [ 440.076475][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 440.085733][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.115395][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.130685][ T10] usb 3-1: config 0 has no interfaces? [ 440.137411][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.147215][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.156199][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.165844][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.175243][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 440.187121][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.203541][ T10] usb 3-1: Product: syz [ 440.208582][ T10] usb 3-1: Manufacturer: syz [ 440.214607][ T10] usb 3-1: SerialNumber: syz [ 440.222383][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.238591][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.250916][ T10] usb 3-1: config 0 descriptor?? [ 440.260840][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 440.280233][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 440.291651][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.319825][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.339249][ T9] hid-generic 00A0:0006:0003.0015: unknown main item tag 0x0 [ 440.517364][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.523884][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.543551][ T9] hid-generic 00A0:0006:0003.0015: hidraw0: HID v0.05 Device [syz0] on syz0 [ 440.645946][T11451] fido_id[11451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 441.106521][ T5928] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 441.258712][ T5928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 441.266651][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.277585][ T5928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.289654][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.300960][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.314691][ T5928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 441.322563][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.333561][ T5928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.345767][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.357460][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.369854][ T5928] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 441.378131][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 441.389626][ T5928] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.401488][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 441.412758][ T5928] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 441.428088][ T5928] usb 5-1: string descriptor 0 read error: -22 [ 441.434516][ T5928] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 441.443636][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.463029][ T5928] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 441.677347][T11464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1771'. [ 441.698492][ T9] usb 5-1: USB disconnect, device number 63 [ 441.797786][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1772'. [ 441.956857][T11459] tc_dump_action: action bad kind [ 442.145534][T11477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1775'. [ 442.176616][T11477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1775'. [ 442.308706][ T5915] usb 2-1: USB disconnect, device number 41 [ 442.438487][T11486] FAULT_INJECTION: forcing a failure. [ 442.438487][T11486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.452130][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.3.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.452158][T11486] Tainted: [L]=SOFTLOCKUP [ 442.452164][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.452171][T11486] Call Trace: [ 442.452177][T11486] [ 442.452183][T11486] dump_stack_lvl+0xe8/0x150 [ 442.452206][T11486] should_fail_ex+0x412/0x560 [ 442.452224][T11486] _copy_to_user+0x31/0xb0 [ 442.452242][T11486] simple_read_from_buffer+0xe1/0x170 [ 442.452265][T11486] proc_fail_nth_read+0x1bb/0x230 [ 442.452283][T11486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.452300][T11486] ? rw_verify_area+0x2a6/0x4d0 [ 442.452312][T11486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.452328][T11486] vfs_read+0x20c/0xa70 [ 442.452339][T11486] ? fdget_pos+0x246/0x320 [ 442.452358][T11486] ? __pfx___mutex_lock+0x10/0x10 [ 442.452370][T11486] ? __pfx_vfs_read+0x10/0x10 [ 442.452383][T11486] ? __fget_files+0x2a/0x420 [ 442.452401][T11486] ? __fget_files+0x3a0/0x420 [ 442.452415][T11486] ? __fget_files+0x2a/0x420 [ 442.452435][T11486] ksys_read+0x150/0x270 [ 442.452448][T11486] ? __pfx_ksys_read+0x10/0x10 [ 442.452466][T11486] do_syscall_64+0x14d/0xf80 [ 442.452477][T11486] ? trace_irq_disable+0x3b/0x150 [ 442.452493][T11486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.452505][T11486] ? clear_bhb_loop+0x40/0x90 [ 442.452519][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.452530][T11486] RIP: 0033:0x7fbbfb15cfce [ 442.452544][T11486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.452554][T11486] RSP: 002b:00007fbbfc081fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.452568][T11486] RAX: ffffffffffffffda RBX: 00007fbbfc0826c0 RCX: 00007fbbfb15cfce [ 442.452577][T11486] RDX: 000000000000000f RSI: 00007fbbfc0820a0 RDI: 0000000000000005 [ 442.452584][T11486] RBP: 00007fbbfc082090 R08: 0000000000000000 R09: 0000000000000000 [ 442.452591][T11486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.452598][T11486] R13: 00007fbbfb416038 R14: 00007fbbfb415fa0 R15: 00007fbbfb53fa48 [ 442.452616][T11486] [ 442.951234][T11494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.055440][ T5915] usb 3-1: USB disconnect, device number 51 [ 443.908783][T11507] SET target dimension over the limit! [ 444.426891][ T5915] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 444.473201][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 444.587065][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 444.607953][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.640064][ T5915] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 444.667445][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.716877][ T5915] usb 2-1: Product: syz [ 444.737393][ T5915] usb 2-1: Manufacturer: syz [ 444.748067][ T5915] usb 2-1: SerialNumber: syz [ 444.759398][ T5915] usb 2-1: config 0 descriptor?? [ 444.800998][ T5915] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 444.839882][T11515] FAULT_INJECTION: forcing a failure. [ 444.839882][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 444.866610][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.3.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.866632][T11515] Tainted: [L]=SOFTLOCKUP [ 444.866637][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.866644][T11515] Call Trace: [ 444.866650][T11515] [ 444.866656][T11515] dump_stack_lvl+0xe8/0x150 [ 444.866701][T11515] should_fail_ex+0x412/0x560 [ 444.866719][T11515] should_failslab+0xa8/0x100 [ 444.866735][T11515] __kmalloc_noprof+0xe8/0x760 [ 444.866754][T11515] ? tomoyo_encode+0x28b/0x550 [ 444.866783][T11515] tomoyo_encode+0x28b/0x550 [ 444.866810][T11515] tomoyo_realpath_from_path+0x58d/0x5d0 [ 444.866843][T11515] ? tomoyo_path_number_perm+0x219/0x630 [ 444.866911][T11515] tomoyo_path_number_perm+0x246/0x630 [ 444.866936][T11515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 444.866961][T11515] ? __lock_acquire+0x6b5/0x2cf0 [ 444.866997][T11515] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 444.867040][T11515] ? __fget_files+0x2a/0x420 [ 444.867078][T11515] ? __fget_files+0x2a/0x420 [ 444.867104][T11515] ? __fget_files+0x3a0/0x420 [ 444.867128][T11515] ? __fget_files+0x2a/0x420 [ 444.867156][T11515] security_file_ioctl+0xc3/0x2a0 [ 444.867180][T11515] __se_sys_ioctl+0x47/0x170 [ 444.867206][T11515] do_syscall_64+0x14d/0xf80 [ 444.867225][T11515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.867244][T11515] ? clear_bhb_loop+0x40/0x90 [ 444.867278][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.867296][T11515] RIP: 0033:0x7fbbfb19c799 [ 444.867316][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.867333][T11515] RSP: 002b:00007fbbfc061028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.867356][T11515] RAX: ffffffffffffffda RBX: 00007fbbfb416090 RCX: 00007fbbfb19c799 [ 444.867370][T11515] RDX: 0000200000000380 RSI: 0000000040045010 RDI: 0000000000000003 [ 444.867384][T11515] RBP: 00007fbbfc061090 R08: 0000000000000000 R09: 0000000000000000 [ 444.867396][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.867408][T11515] R13: 00007fbbfb416128 R14: 00007fbbfb416090 R15: 00007fbbfb53fa48 [ 444.867442][T11515] [ 444.869920][T11515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.357493][ T5915] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 445.484814][ T5915] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 445.535508][T11520] FAULT_INJECTION: forcing a failure. [ 445.535508][T11520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.578028][T11520] CPU: 0 UID: 0 PID: 11520 Comm: syz.0.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.578060][T11520] Tainted: [L]=SOFTLOCKUP [ 445.578067][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.578078][T11520] Call Trace: [ 445.578087][T11520] [ 445.578095][T11520] dump_stack_lvl+0xe8/0x150 [ 445.578127][T11520] should_fail_ex+0x412/0x560 [ 445.578157][T11520] _copy_to_user+0x31/0xb0 [ 445.578188][T11520] simple_read_from_buffer+0xe1/0x170 [ 445.578219][T11520] proc_fail_nth_read+0x1bb/0x230 [ 445.578248][T11520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.578276][T11520] ? rw_verify_area+0x2a6/0x4d0 [ 445.578295][T11520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.578321][T11520] vfs_read+0x20c/0xa70 [ 445.578338][T11520] ? __local_bh_enable_ip+0xd0/0x130 [ 445.578362][T11520] ? fdget_pos+0x246/0x320 [ 445.578391][T11520] ? __pfx___mutex_lock+0x10/0x10 [ 445.578414][T11520] ? __pfx_vfs_read+0x10/0x10 [ 445.578436][T11520] ? __fget_files+0x2a/0x420 [ 445.578468][T11520] ? __fget_files+0x3a0/0x420 [ 445.578493][T11520] ? __fget_files+0x2a/0x420 [ 445.578530][T11520] ksys_read+0x150/0x270 [ 445.578553][T11520] ? __pfx_ksys_read+0x10/0x10 [ 445.578587][T11520] do_syscall_64+0x14d/0xf80 [ 445.578606][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.578627][T11520] ? clear_bhb_loop+0x40/0x90 [ 445.578653][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.578673][T11520] RIP: 0033:0x7f8be375cfce [ 445.578694][T11520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.578712][T11520] RSP: 002b:00007f8be471ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.578736][T11520] RAX: ffffffffffffffda RBX: 00007f8be47206c0 RCX: 00007f8be375cfce [ 445.578750][T11520] RDX: 000000000000000f RSI: 00007f8be47200a0 RDI: 0000000000000005 [ 445.578762][T11520] RBP: 00007f8be4720090 R08: 0000000000000000 R09: 0000000000000000 [ 445.578775][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.578787][T11520] R13: 00007f8be3a16038 R14: 00007f8be3a15fa0 R15: 00007f8be3b3fa48 [ 445.578819][T11520] [ 446.255718][T11535] netlink: 'syz.0.1790': attribute type 5 has an invalid length. [ 446.357306][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 446.369194][T11536] loop2: detected capacity change from 0 to 7 [ 446.381872][T11535] ip6erspan0: entered promiscuous mode [ 446.400655][T11536] Dev loop2: unable to read RDB block 7 [ 446.417582][T11536] loop2: AHDI p1 p2 p3 [ 446.440081][T11538] ip6tnl1: entered allmulticast mode [ 446.451638][T11536] loop2: partition table partially beyond EOD, truncated [ 446.468215][ T5915] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 446.477990][T11536] loop2: p1 start 1601398130 is beyond EOD, truncated [ 446.488741][T11536] loop2: p2 start 1702059890 is beyond EOD, truncated [ 446.580977][T11542] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 446.626459][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 446.642150][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.726576][ T5915] usb 4-1: config 0 has no interfaces? [ 446.751235][ T5915] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 446.761991][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.775228][ T5189] Dev loop2: unable to read RDB block 7 [ 446.781072][ T5189] loop2: AHDI p1 p2 p3 [ 446.785282][ T5189] loop2: partition table partially beyond EOD, truncated [ 446.792548][ T5915] usb 4-1: Product: syz [ 446.797259][ T5915] usb 4-1: Manufacturer: syz [ 446.802260][ T5189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 446.809556][ T5915] usb 4-1: SerialNumber: syz [ 446.814720][ T5189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 446.834669][ T5915] usb 4-1: config 0 descriptor?? [ 446.856883][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 447.838044][ T5907] usb 2-1: USB disconnect, device number 42 [ 448.338776][ T5189] Dev loop2: unable to read RDB block 7 [ 448.344578][ T5189] loop2: AHDI p1 p2 p3 [ 448.366438][ T5189] loop2: partition table partially beyond EOD, truncated [ 448.373742][ T5189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 448.380985][ T5189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 448.473353][ T5189] Dev loop2: unable to read RDB block 7 [ 448.484020][ T5189] loop2: AHDI p1 p2 p3 [ 448.492475][ T5189] loop2: partition table partially beyond EOD, truncated [ 448.509031][ T5189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 448.526991][ T5189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 448.547046][T11581] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 448.634739][ T5189] Dev loop2: unable to read RDB block 7 [ 448.643551][ T5189] loop2: AHDI p1 p2 p3 [ 448.676787][ T5189] loop2: partition table partially beyond EOD, truncated [ 448.694423][ T5189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 448.710320][ T5189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 448.788747][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1808'. [ 448.856938][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 449.057777][T11589] FAULT_INJECTION: forcing a failure. [ 449.057777][T11589] name failslab, interval 1, probability 0, space 0, times 0 [ 449.072338][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.1.1809 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.072374][T11589] Tainted: [L]=SOFTLOCKUP [ 449.072382][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.072392][T11589] Call Trace: [ 449.072401][T11589] [ 449.072409][T11589] dump_stack_lvl+0xe8/0x150 [ 449.072442][T11589] should_fail_ex+0x412/0x560 [ 449.072469][T11589] should_failslab+0xa8/0x100 [ 449.072491][T11589] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 449.072508][T11589] ? __alloc_skb+0x186/0x7d0 [ 449.072529][T11589] ? __alloc_skb+0x1d0/0x7d0 [ 449.072551][T11589] ? __local_bh_enable_ip+0xd0/0x130 [ 449.072576][T11589] __alloc_skb+0x1d0/0x7d0 [ 449.072599][T11589] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 449.072623][T11589] netlink_sendmsg+0x5d4/0xb40 [ 449.072655][T11589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.072681][T11589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.072707][T11589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.072730][T11589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.072753][T11589] ____sys_sendmsg+0xa68/0xad0 [ 449.072787][T11589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.072823][T11589] ? import_iovec+0x73/0xa0 [ 449.072851][T11589] ___sys_sendmsg+0x2a5/0x360 [ 449.072895][T11589] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.072956][T11589] ? __fget_files+0x2a/0x420 [ 449.072979][T11589] ? __fget_files+0x3a0/0x420 [ 449.073010][T11589] __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.073041][T11589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.073079][T11589] ? __pfx_ksys_write+0x10/0x10 [ 449.073112][T11589] do_syscall_64+0x14d/0xf80 [ 449.073131][T11589] ? trace_irq_disable+0x3b/0x150 [ 449.073156][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.073177][T11589] ? clear_bhb_loop+0x40/0x90 [ 449.073201][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.073221][T11589] RIP: 0033:0x7f84e539c799 [ 449.073242][T11589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.073258][T11589] RSP: 002b:00007f84e6201028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.073280][T11589] RAX: ffffffffffffffda RBX: 00007f84e5615fa0 RCX: 00007f84e539c799 [ 449.073294][T11589] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 449.073306][T11589] RBP: 00007f84e6201090 R08: 0000000000000000 R09: 0000000000000000 [ 449.073319][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.073332][T11589] R13: 00007f84e5616038 R14: 00007f84e5615fa0 R15: 00007f84e573fa48 [ 449.073378][T11589] [ 449.705349][T11601] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 449.786538][ T5907] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 449.805178][T11604] netlink: 'syz.2.1816': attribute type 29 has an invalid length. [ 449.817042][ T5915] usb 4-1: USB disconnect, device number 55 [ 449.959245][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 449.968163][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.014557][ T5907] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 450.041912][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.070688][ T5907] usb 2-1: Product: syz [ 450.074919][ T5907] usb 2-1: Manufacturer: syz [ 450.083215][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 450.083235][ T30] audit: type=1804 audit(1772514591.539:2321): pid=11611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1818" name="/newroot/369/file0" dev="fuse" ino=1 res=1 errno=0 [ 450.130497][ T5907] usb 2-1: SerialNumber: syz [ 450.158061][ T5907] usb 2-1: config 0 descriptor?? [ 450.179051][ T5907] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 450.304354][T11628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1824'. [ 450.316164][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 450.698648][ T5907] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 450.722817][ T5907] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 450.726504][ T5936] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 450.899689][ T5936] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.911656][ T5936] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 450.922270][ T5936] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.944741][T11642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'. [ 450.957445][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.002825][T11630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.014710][T11642] geneve2: entered promiscuous mode [ 451.023298][ T5936] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 451.032914][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.061971][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.095992][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.112476][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.066488][ T5936] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 452.216621][ T5936] usb 4-1: device descriptor read/64, error -71 [ 452.240559][ T5915] usb 3-1: USB disconnect, device number 52 [ 452.456774][ T5936] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 452.587943][ T5936] usb 4-1: device descriptor read/64, error -71 [ 452.697155][ T5936] usb usb4-port1: attempt power cycle [ 453.056486][ T5936] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 453.088012][ T5936] usb 4-1: device descriptor read/8, error -71 [ 453.326588][ T5936] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 453.347291][ T5936] usb 4-1: device descriptor read/8, error -71 [ 453.458421][ T5936] usb usb4-port1: unable to enumerate USB device [ 453.510204][T11666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1838'. [ 453.522042][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 453.612631][ T5936] usb 2-1: USB disconnect, device number 43 [ 453.684242][T11670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1840'. [ 454.416690][ T29] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 454.574789][ T29] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 454.590321][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.611162][ T29] usb 5-1: config 0 has no interface number 0 [ 454.629503][ T29] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 454.647575][ T29] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 454.665887][ T29] usb 5-1: Product: syz [ 454.759841][ T29] usb 5-1: Manufacturer: syz [ 454.800491][ T29] usb 5-1: SerialNumber: syz [ 454.854379][ T29] usb 5-1: config 0 descriptor?? [ 454.895130][ T29] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 454.922529][ T29] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized! [ 454.952830][ T29] uvcvideo 5-1:0.105: Failed to create links for entity 1 [ 454.970328][ T29] uvcvideo 5-1:0.105: Failed to register entities (-22). [ 455.067660][T11702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1851'. [ 455.125905][T11685] netlink: 'syz.4.1845': attribute type 7 has an invalid length. [ 455.307723][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 455.625116][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 455.645669][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.646630][ T29] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 455.675736][ T10] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 455.690260][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.708287][ T10] usb 4-1: Product: syz [ 455.725783][ T10] usb 4-1: Manufacturer: syz [ 455.744210][ T10] usb 4-1: SerialNumber: syz [ 455.906550][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 455.916064][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.940523][ T10] usb 4-1: config 0 descriptor?? [ 455.942567][ T29] usb 2-1: config 0 has no interfaces? [ 455.963867][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 456.006615][ T29] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 456.056818][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.104372][ T29] usb 2-1: Product: syz [ 456.143851][ T29] usb 2-1: Manufacturer: syz [ 456.267087][ T29] usb 2-1: SerialNumber: syz [ 456.325621][ T29] usb 2-1: config 0 descriptor?? [ 456.487186][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 456.496047][ T10] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 456.942839][T11720] FAULT_INJECTION: forcing a failure. [ 456.942839][T11720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.972114][T11720] CPU: 0 UID: 0 PID: 11720 Comm: syz.2.1856 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.972148][T11720] Tainted: [L]=SOFTLOCKUP [ 456.972155][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.972167][T11720] Call Trace: [ 456.972181][T11720] [ 456.972191][T11720] dump_stack_lvl+0xe8/0x150 [ 456.972222][T11720] should_fail_ex+0x412/0x560 [ 456.972251][T11720] _copy_to_user+0x31/0xb0 [ 456.972282][T11720] simple_read_from_buffer+0xe1/0x170 [ 456.972314][T11720] proc_fail_nth_read+0x1bb/0x230 [ 456.972344][T11720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.972374][T11720] ? rw_verify_area+0x2a6/0x4d0 [ 456.972394][T11720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.972421][T11720] vfs_read+0x20c/0xa70 [ 456.972447][T11720] ? __pfx_fuse_fsync_common+0x10/0x10 [ 456.972474][T11720] ? __pfx_vfs_read+0x10/0x10 [ 456.972516][T11720] ksys_read+0x150/0x270 [ 456.972538][T11720] ? __pfx_ksys_read+0x10/0x10 [ 456.972569][T11720] do_syscall_64+0x14d/0xf80 [ 456.972588][T11720] ? trace_irq_disable+0x3b/0x150 [ 456.972614][T11720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.972634][T11720] ? clear_bhb_loop+0x40/0x90 [ 456.972658][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.972677][T11720] RIP: 0033:0x7f213c15cfce [ 456.972696][T11720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.972713][T11720] RSP: 002b:00007f213d099fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.972734][T11720] RAX: ffffffffffffffda RBX: 00007f213d09a6c0 RCX: 00007f213c15cfce [ 456.972748][T11720] RDX: 000000000000000f RSI: 00007f213d09a0a0 RDI: 0000000000000005 [ 456.972761][T11720] RBP: 00007f213d09a090 R08: 0000000000000000 R09: 0000000000000000 [ 456.972772][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.972792][T11720] R13: 00007f213c416128 R14: 00007f213c416090 R15: 00007f213c53fa48 [ 456.972824][T11720] [ 457.487836][ T10] usb 5-1: USB disconnect, device number 64 [ 458.232250][ T10] usb 4-1: USB disconnect, device number 60 [ 458.680792][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'. [ 459.017171][ T5915] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 459.109004][T11755] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1867'. [ 459.176457][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 459.187210][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 459.212442][ T5915] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.249562][ T5915] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 459.270755][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.289453][ T5915] usb 3-1: Product: syz [ 459.291065][ T5936] usb 2-1: USB disconnect, device number 44 [ 459.303479][ T5915] usb 3-1: Manufacturer: syz [ 459.344076][ T5915] usb 3-1: SerialNumber: syz [ 459.774005][ T30] audit: type=1326 audit(1772514601.229:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 459.797765][ T30] audit: type=1326 audit(1772514601.239:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 459.824364][ T30] audit: type=1326 audit(1772514601.239:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 459.848373][ T5915] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 459.856572][ T5915] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 459.884910][ T30] audit: type=1326 audit(1772514601.239:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 459.929216][ T5915] usb 3-1: USB disconnect, device number 53 [ 459.964208][ T30] audit: type=1326 audit(1772514601.239:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 460.047077][ T30] audit: type=1326 audit(1772514601.239:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 460.105217][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.140551][ T30] audit: type=1326 audit(1772514601.239:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 460.236451][ T30] audit: type=1326 audit(1772514601.239:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 460.297484][ T30] audit: type=1326 audit(1772514601.239:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11760 comm="syz.1.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 460.364313][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1874'. [ 460.468822][T11776] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1877'. [ 460.516516][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 460.677782][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 460.685892][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.699370][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 460.709475][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.718006][ T10] usb 2-1: Product: syz [ 460.722884][ T10] usb 2-1: Manufacturer: syz [ 460.727986][ T10] usb 2-1: SerialNumber: syz [ 460.738161][ T10] usb 2-1: config 0 descriptor?? [ 460.747604][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 461.348963][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 461.364612][ T10] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 462.016449][ T5915] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 462.661098][T11806] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 462.667971][T11809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1887'. [ 462.710051][T11806] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 462.811182][ T5915] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 462.821547][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.878480][ T5915] usb 4-1: config 0 has no interface number 0 [ 462.975318][ T5915] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 462.992050][ T5915] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 463.012774][ T5915] usb 4-1: Product: syz [ 463.020675][ T5915] usb 4-1: Manufacturer: syz [ 463.029853][T11815] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1889'. [ 463.137317][ T5915] usb 4-1: SerialNumber: syz [ 463.217622][ T5936] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 463.255508][ T5915] usb 4-1: config 0 descriptor?? [ 463.310490][ T5915] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 463.321755][ T5915] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 463.339936][ T5915] uvcvideo 4-1:0.105: Failed to create links for entity 1 [ 463.352572][ T5915] uvcvideo 4-1:0.105: Failed to register entities (-22). [ 463.366478][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 463.398543][ T5936] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 463.408028][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.438103][ T5936] usb 5-1: config 0 descriptor?? [ 463.464728][ T5936] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 463.526967][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.547319][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.568010][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.587510][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.588856][T11804] netlink: 'syz.3.1885': attribute type 7 has an invalid length. [ 463.612019][ T10] usb 3-1: SerialNumber: syz [ 463.667767][ T5907] usb 2-1: USB disconnect, device number 45 [ 463.852605][ T10] usb 3-1: 0:2 : does not exist [ 463.978087][ T10] usb 3-1: USB disconnect, device number 54 [ 464.343981][ T5936] gspca_sunplus: reg_w_riv err -71 [ 464.349450][ T5936] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 464.372098][ T5936] usb 5-1: USB disconnect, device number 65 [ 465.269980][T11839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1899'. [ 465.427628][T11845] FAULT_INJECTION: forcing a failure. [ 465.427628][T11845] name failslab, interval 1, probability 0, space 0, times 0 [ 465.469438][T11845] CPU: 0 UID: 0 PID: 11845 Comm: syz.4.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.469461][T11845] Tainted: [L]=SOFTLOCKUP [ 465.469465][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.469473][T11845] Call Trace: [ 465.469478][T11845] [ 465.469484][T11845] dump_stack_lvl+0xe8/0x150 [ 465.469505][T11845] should_fail_ex+0x412/0x560 [ 465.469528][T11845] should_failslab+0xa8/0x100 [ 465.469543][T11845] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 465.469555][T11845] ? __alloc_skb+0x186/0x7d0 [ 465.469570][T11845] ? __alloc_skb+0x1d0/0x7d0 [ 465.469583][T11845] ? __local_bh_enable_ip+0xd0/0x130 [ 465.469600][T11845] __alloc_skb+0x1d0/0x7d0 [ 465.469617][T11845] netlink_sendmsg+0x5d4/0xb40 [ 465.469637][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.469653][T11845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 465.469676][T11845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.469691][T11845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.469704][T11845] ____sys_sendmsg+0xa68/0xad0 [ 465.469725][T11845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.469746][T11845] ? import_iovec+0x73/0xa0 [ 465.469764][T11845] ___sys_sendmsg+0x2a5/0x360 [ 465.469789][T11845] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.469824][T11845] ? __fget_files+0x2a/0x420 [ 465.469839][T11845] ? __fget_files+0x3a0/0x420 [ 465.469862][T11845] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.469880][T11845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.469902][T11845] ? __pfx_ksys_write+0x10/0x10 [ 465.469920][T11845] do_syscall_64+0x14d/0xf80 [ 465.469931][T11845] ? trace_irq_disable+0x3b/0x150 [ 465.469947][T11845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.469958][T11845] ? clear_bhb_loop+0x40/0x90 [ 465.469974][T11845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.469991][T11845] RIP: 0033:0x7fd8af59c799 [ 465.470009][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.470025][T11845] RSP: 002b:00007fd8ad7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.470046][T11845] RAX: ffffffffffffffda RBX: 00007fd8af816090 RCX: 00007fd8af59c799 [ 465.470059][T11845] RDX: 0000000000008008 RSI: 0000200000000000 RDI: 0000000000000005 [ 465.470072][T11845] RBP: 00007fd8ad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 465.470084][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.470095][T11845] R13: 00007fd8af816128 R14: 00007fd8af816090 R15: 00007fd8af93fa48 [ 465.470114][T11845] [ 465.780720][ T10] usb 4-1: USB disconnect, device number 61 [ 465.987437][T11853] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1901'. [ 466.128261][T11860] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 466.142039][T11860] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 466.150057][ T5936] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 466.164129][ T30] audit: type=1804 audit(1772514607.619:2331): pid=11857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1905" name="/newroot/378/file1" dev="fuse" ino=1 res=1 errno=0 [ 466.208369][T11860] tipc: Started in network mode [ 466.213865][T11860] tipc: Node identity 080211000001, cluster identity 4711 [ 466.232792][T11860] tipc: Enabled bearer , priority 0 [ 466.424851][T11857] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 466.536451][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 466.627872][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.640807][ T5936] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 466.650693][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.659098][ T5936] usb 5-1: Product: syz [ 466.663484][ T5936] usb 5-1: Manufacturer: syz [ 466.668405][ T5936] usb 5-1: SerialNumber: syz [ 466.676749][T11873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1910'. [ 466.813073][ T5936] usb 5-1: config 0 descriptor?? [ 466.829925][ T5936] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 466.970682][T11875] FAULT_INJECTION: forcing a failure. [ 466.970682][T11875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.006466][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.3.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.006503][T11875] Tainted: [L]=SOFTLOCKUP [ 467.006511][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.006523][T11875] Call Trace: [ 467.006532][T11875] [ 467.006541][T11875] dump_stack_lvl+0xe8/0x150 [ 467.006577][T11875] should_fail_ex+0x412/0x560 [ 467.006607][T11875] _copy_from_user+0x2d/0xb0 [ 467.006636][T11875] ___sys_sendmsg+0x1c6/0x360 [ 467.006671][T11875] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.006731][T11875] ? __fget_files+0x2a/0x420 [ 467.006756][T11875] ? __fget_files+0x3a0/0x420 [ 467.006851][T11875] __x64_sys_sendmsg+0x1bd/0x2a0 [ 467.006885][T11875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.006923][T11875] ? __pfx_ksys_write+0x10/0x10 [ 467.006957][T11875] do_syscall_64+0x14d/0xf80 [ 467.006975][T11875] ? trace_irq_disable+0x3b/0x150 [ 467.007000][T11875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.007018][T11875] ? clear_bhb_loop+0x40/0x90 [ 467.007041][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.007115][T11875] RIP: 0033:0x7fbbfb19c799 [ 467.007137][T11875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.007154][T11875] RSP: 002b:00007fbbfc082028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.007175][T11875] RAX: ffffffffffffffda RBX: 00007fbbfb415fa0 RCX: 00007fbbfb19c799 [ 467.007189][T11875] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 467.007200][T11875] RBP: 00007fbbfc082090 R08: 0000000000000000 R09: 0000000000000000 [ 467.007212][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.007222][T11875] R13: 00007fbbfb416038 R14: 00007fbbfb415fa0 R15: 00007fbbfb53fa48 [ 467.007252][T11875] [ 467.359023][ T5915] tipc: Node number set to 134418688 [ 467.367400][ T5936] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 467.374567][ T5936] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 467.558680][T11882] input: syz1 as /devices/virtual/input/input36 [ 467.975509][T11892] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1917'. [ 468.136949][T11895] FAULT_INJECTION: forcing a failure. [ 468.136949][T11895] name fail_futex, interval 1, probability 0, space 0, times 0 [ 468.176178][T11895] CPU: 0 UID: 0 PID: 11895 Comm: syz.1.1918 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.176213][T11895] Tainted: [L]=SOFTLOCKUP [ 468.176221][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.176233][T11895] Call Trace: [ 468.176241][T11895] [ 468.176251][T11895] dump_stack_lvl+0xe8/0x150 [ 468.176284][T11895] should_fail_ex+0x412/0x560 [ 468.176320][T11895] get_futex_key+0x92a/0x1690 [ 468.176345][T11895] ? __lock_acquire+0x6b5/0x2cf0 [ 468.176378][T11895] ? __pfx_get_futex_key+0x10/0x10 [ 468.176402][T11895] ? aa_file_perm+0x192/0x15e0 [ 468.176435][T11895] futex_wait_requeue_pi+0x2bf/0x960 [ 468.176469][T11895] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 468.176495][T11895] ? kstrtoull+0x12f/0x1d0 [ 468.176539][T11895] ? get_pid_task+0x20/0x1f0 [ 468.176558][T11895] ? get_pid_task+0x20/0x1f0 [ 468.176583][T11895] ? __pfx_futex_wake_mark+0x10/0x10 [ 468.176624][T11895] ? ksys_write+0x1e6/0x270 [ 468.176649][T11895] do_futex+0x181/0x420 [ 468.176679][T11895] ? __pfx_do_futex+0x10/0x10 [ 468.176712][T11895] __se_sys_futex+0x3a8/0x450 [ 468.176741][T11895] ? ksys_write+0x242/0x270 [ 468.176769][T11895] ? __pfx___se_sys_futex+0x10/0x10 [ 468.176793][T11895] ? __pfx_ksys_write+0x10/0x10 [ 468.176818][T11895] ? __x64_sys_futex+0x21/0xf0 [ 468.176844][T11895] do_syscall_64+0x14d/0xf80 [ 468.176862][T11895] ? trace_irq_disable+0x3b/0x150 [ 468.176886][T11895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.176905][T11895] ? clear_bhb_loop+0x40/0x90 [ 468.176928][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.176946][T11895] RIP: 0033:0x7f84e539c799 [ 468.176965][T11895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.176981][T11895] RSP: 002b:00007f84e6201028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.177003][T11895] RAX: ffffffffffffffda RBX: 00007f84e5615fa0 RCX: 00007f84e539c799 [ 468.177017][T11895] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 468.177030][T11895] RBP: 00007f84e6201090 R08: 0000200000048000 R09: 00000000fffffffc [ 468.177043][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.177055][T11895] R13: 00007f84e5616038 R14: 00007f84e5615fa0 R15: 00007f84e573fa48 [ 468.177084][T11895] [ 468.742123][T11898] FAULT_INJECTION: forcing a failure. [ 468.742123][T11898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.777682][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1921'. [ 468.796797][T11898] CPU: 0 UID: 0 PID: 11898 Comm: syz.2.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.796831][T11898] Tainted: [L]=SOFTLOCKUP [ 468.796838][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.796850][T11898] Call Trace: [ 468.796858][T11898] [ 468.796866][T11898] dump_stack_lvl+0xe8/0x150 [ 468.796898][T11898] should_fail_ex+0x412/0x560 [ 468.796927][T11898] _copy_to_user+0x31/0xb0 [ 468.796956][T11898] simple_read_from_buffer+0xe1/0x170 [ 468.796987][T11898] proc_fail_nth_read+0x1bb/0x230 [ 468.797015][T11898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.797045][T11898] ? rw_verify_area+0x2a6/0x4d0 [ 468.797064][T11898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.797091][T11898] vfs_read+0x20c/0xa70 [ 468.797109][T11898] ? fdget_pos+0x246/0x320 [ 468.797134][T11898] ? __pfx_do_recvmmsg+0x10/0x10 [ 468.797157][T11898] ? __pfx___mutex_lock+0x10/0x10 [ 468.797177][T11898] ? __pfx_vfs_read+0x10/0x10 [ 468.797199][T11898] ? __fget_files+0x2a/0x420 [ 468.797228][T11898] ? __fget_files+0x3a0/0x420 [ 468.797253][T11898] ? __fget_files+0x2a/0x420 [ 468.797286][T11898] ksys_read+0x150/0x270 [ 468.797308][T11898] ? __pfx_ksys_read+0x10/0x10 [ 468.797339][T11898] do_syscall_64+0x14d/0xf80 [ 468.797448][T11898] ? trace_irq_disable+0x3b/0x150 [ 468.797485][T11898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.797507][T11898] ? clear_bhb_loop+0x40/0x90 [ 468.797530][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.797549][T11898] RIP: 0033:0x7f213c15cfce [ 468.797569][T11898] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.797595][T11898] RSP: 002b:00007f213d0bafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.797622][T11898] RAX: ffffffffffffffda RBX: 00007f213d0bb6c0 RCX: 00007f213c15cfce [ 468.797635][T11898] RDX: 000000000000000f RSI: 00007f213d0bb0a0 RDI: 0000000000000004 [ 468.797647][T11898] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 468.797660][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.797671][T11898] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 468.797762][T11898] [ 469.718164][ T10] usb 5-1: USB disconnect, device number 66 [ 469.784419][T11921] FAULT_INJECTION: forcing a failure. [ 469.784419][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 469.854437][T11921] CPU: 0 UID: 0 PID: 11921 Comm: syz.2.1926 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.854472][T11921] Tainted: [L]=SOFTLOCKUP [ 469.854480][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.854491][T11921] Call Trace: [ 469.854501][T11921] [ 469.854511][T11921] dump_stack_lvl+0xe8/0x150 [ 469.854544][T11921] should_fail_ex+0x412/0x560 [ 469.854575][T11921] should_failslab+0xa8/0x100 [ 469.854600][T11921] __kmalloc_noprof+0xe8/0x760 [ 469.854623][T11921] ? alloc_pipe_info+0x1fc/0x4d0 [ 469.854643][T11921] ? __kmalloc_cache_noprof+0x15b/0x660 [ 469.854668][T11921] alloc_pipe_info+0x1fc/0x4d0 [ 469.854693][T11921] splice_direct_to_actor+0xa08/0xc70 [ 469.854732][T11921] ? __pfx_direct_splice_actor+0x10/0x10 [ 469.854771][T11921] ? __pfx_aa_file_perm+0x10/0x10 [ 469.854802][T11921] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 469.854830][T11921] ? get_pid_task+0x20/0x1f0 [ 469.854858][T11921] do_splice_direct+0x195/0x290 [ 469.854888][T11921] ? __pfx_do_splice_direct+0x10/0x10 [ 469.854916][T11921] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 469.854946][T11921] ? bpf_lsm_file_permission+0x9/0x20 [ 469.854969][T11921] ? security_file_permission+0x75/0x260 [ 469.854991][T11921] ? rw_verify_area+0x255/0x4d0 [ 469.855013][T11921] do_sendfile+0x535/0x7d0 [ 469.855049][T11921] ? __pfx_do_sendfile+0x10/0x10 [ 469.855074][T11921] ? __fget_files+0x3a0/0x420 [ 469.855112][T11921] __se_sys_sendfile64+0x144/0x1a0 [ 469.855141][T11921] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 469.855177][T11921] do_syscall_64+0x14d/0xf80 [ 469.855196][T11921] ? trace_irq_disable+0x3b/0x150 [ 469.855222][T11921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.855243][T11921] ? clear_bhb_loop+0x40/0x90 [ 469.855267][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.855287][T11921] RIP: 0033:0x7f213c19c799 [ 469.855308][T11921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.855325][T11921] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 469.855349][T11921] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 469.855363][T11921] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 469.855376][T11921] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 469.855388][T11921] R10: 000000010000a007 R11: 0000000000000246 R12: 0000000000000001 [ 469.855401][T11921] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 469.855432][T11921] [ 470.299826][T11933] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1931'. [ 472.556545][ T5936] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 472.762589][ T5936] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 472.770880][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.826387][ T5936] usb 4-1: config 0 has no interface number 0 [ 472.921358][ T5936] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 472.979507][ T5936] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 473.095672][ T5936] usb 4-1: Product: syz [ 473.141205][ T5936] usb 4-1: Manufacturer: syz [ 473.211491][ T5936] usb 4-1: SerialNumber: syz [ 473.245675][ T5936] usb 4-1: config 0 descriptor?? [ 473.273355][ T5936] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 473.284519][ T5936] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 473.302301][ T5936] uvcvideo 4-1:0.105: Failed to create links for entity 1 [ 473.319846][ T5936] uvcvideo 4-1:0.105: Failed to register entities (-22). [ 473.482740][T11960] netlink: 'syz.3.1936': attribute type 7 has an invalid length. [ 473.905553][T11980] FAULT_INJECTION: forcing a failure. [ 473.905553][T11980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.038659][T11980] CPU: 0 UID: 0 PID: 11980 Comm: syz.2.1943 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.038684][T11980] Tainted: [L]=SOFTLOCKUP [ 474.038689][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.038696][T11980] Call Trace: [ 474.038703][T11980] [ 474.038709][T11980] dump_stack_lvl+0xe8/0x150 [ 474.038730][T11980] should_fail_ex+0x412/0x560 [ 474.038748][T11980] _copy_from_user+0x2d/0xb0 [ 474.038765][T11980] sctp_getsockopt_encap_port+0x10a/0x6e0 [ 474.038787][T11980] ? __pfx_sctp_getsockopt_encap_port+0x10/0x10 [ 474.038813][T11980] ? sctp_getsockopt+0x12f/0xb90 [ 474.038830][T11980] ? __local_bh_enable_ip+0xd0/0x130 [ 474.038848][T11980] sctp_getsockopt+0xa15/0xb90 [ 474.038863][T11980] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 474.038878][T11980] do_sock_getsockopt+0x2d3/0x3f0 [ 474.038896][T11980] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 474.038913][T11980] ? __fget_files+0x3a0/0x420 [ 474.038928][T11980] ? __fget_files+0x2a/0x420 [ 474.038967][T11980] __x64_sys_getsockopt+0x1a4/0x240 [ 474.039003][T11980] do_syscall_64+0x14d/0xf80 [ 474.039014][T11980] ? trace_irq_disable+0x3b/0x150 [ 474.039030][T11980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.039042][T11980] ? clear_bhb_loop+0x40/0x90 [ 474.039055][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.039067][T11980] RIP: 0033:0x7f213c19c799 [ 474.039079][T11980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.039090][T11980] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 474.039104][T11980] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 474.039113][T11980] RDX: 0000000000000084 RSI: 0000000000000084 RDI: 0000000000000003 [ 474.039120][T11980] RBP: 00007f213d0bb090 R08: 0000200000000480 R09: 0000000000000000 [ 474.039128][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.039135][T11980] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 474.039153][T11980] [ 474.886436][T11989] bond3: entered promiscuous mode [ 475.726944][ T10] usb 4-1: USB disconnect, device number 62 [ 476.088085][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'. [ 476.097554][T12005] bridge_slave_1: left allmulticast mode [ 476.103328][T12005] bridge_slave_1: left promiscuous mode [ 476.164500][T12005] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.222242][T12005] bridge_slave_0: left allmulticast mode [ 476.228780][T12005] bridge_slave_0: left promiscuous mode [ 476.235334][T12005] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.881718][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 476.894339][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 476.915968][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 476.926955][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 477.166235][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 477.174367][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 477.245763][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 477.316533][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1952'. [ 477.539287][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1953'. [ 477.786548][ T5936] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 477.936439][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 477.943786][ T5936] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 477.952510][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.963683][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1152, setting to 1024 [ 478.037315][ T5936] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 478.072170][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.130136][ T5936] usb 3-1: config 0 descriptor?? [ 478.140833][T12022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.755537][ T5936] usbhid 3-1:0.0: can't add hid device: -71 [ 478.761913][ T5936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 478.812235][ T5936] usb 3-1: USB disconnect, device number 55 [ 479.216467][ T5936] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 479.426549][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 479.434511][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.449685][ T5936] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.467022][ T5936] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.482617][ T5936] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.544141][ T5936] usb 4-1: config 0 interface 0 has no altsetting 0 [ 479.566973][ T5936] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 479.646095][T12052] FAULT_INJECTION: forcing a failure. [ 479.646095][T12052] name failslab, interval 1, probability 0, space 0, times 0 [ 479.662086][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.674262][T12052] CPU: 1 UID: 0 PID: 12052 Comm: syz.2.1964 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.674289][T12052] Tainted: [L]=SOFTLOCKUP [ 479.674297][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.674308][T12052] Call Trace: [ 479.674317][T12052] [ 479.674326][T12052] dump_stack_lvl+0xe8/0x150 [ 479.674360][T12052] should_fail_ex+0x412/0x560 [ 479.674388][T12052] should_failslab+0xa8/0x100 [ 479.674411][T12052] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 479.674426][T12052] ? __alloc_skb+0x186/0x7d0 [ 479.674441][T12052] ? __alloc_skb+0x1d0/0x7d0 [ 479.674454][T12052] ? __local_bh_enable_ip+0xd0/0x130 [ 479.674471][T12052] __alloc_skb+0x1d0/0x7d0 [ 479.674488][T12052] netlink_sendmsg+0x5d4/0xb40 [ 479.674508][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.674524][T12052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 479.674539][T12052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.674553][T12052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.674565][T12052] ____sys_sendmsg+0xa68/0xad0 [ 479.674587][T12052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.674608][T12052] ? import_iovec+0x73/0xa0 [ 479.674626][T12052] ___sys_sendmsg+0x2a5/0x360 [ 479.674653][T12052] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.674688][T12052] ? __fget_files+0x2a/0x420 [ 479.674704][T12052] ? __fget_files+0x3a0/0x420 [ 479.674725][T12052] __x64_sys_sendmsg+0x1bd/0x2a0 [ 479.674742][T12052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.674764][T12052] ? __pfx_ksys_write+0x10/0x10 [ 479.674783][T12052] do_syscall_64+0x14d/0xf80 [ 479.674794][T12052] ? trace_irq_disable+0x3b/0x150 [ 479.674809][T12052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.674820][T12052] ? clear_bhb_loop+0x40/0x90 [ 479.674834][T12052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.674846][T12052] RIP: 0033:0x7f213c19c799 [ 479.674859][T12052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.674870][T12052] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.674883][T12052] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 479.674892][T12052] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 479.674910][T12052] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 479.674917][T12052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.674924][T12052] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 479.674942][T12052] [ 479.930456][ T5936] usb 4-1: config 0 descriptor?? [ 480.334208][T12054] FAULT_INJECTION: forcing a failure. [ 480.334208][T12054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.347964][T12054] CPU: 1 UID: 0 PID: 12054 Comm: syz.4.1965 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.347997][T12054] Tainted: [L]=SOFTLOCKUP [ 480.348017][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.348029][T12054] Call Trace: [ 480.348037][T12054] [ 480.348046][T12054] dump_stack_lvl+0xe8/0x150 [ 480.348079][T12054] should_fail_ex+0x412/0x560 [ 480.348108][T12054] _copy_from_user+0x2d/0xb0 [ 480.348137][T12054] ___sys_sendmsg+0x1c6/0x360 [ 480.348173][T12054] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.348207][T12054] ? lockdep_hardirqs_on+0x7a/0x110 [ 480.348266][T12054] ? __fget_files+0x2a/0x420 [ 480.348293][T12054] ? __fget_files+0x3a0/0x420 [ 480.348343][T12054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 480.348375][T12054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.348413][T12054] ? __pfx_ksys_write+0x10/0x10 [ 480.348446][T12054] do_syscall_64+0x14d/0xf80 [ 480.348464][T12054] ? trace_irq_disable+0x3b/0x150 [ 480.348490][T12054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.348510][T12054] ? clear_bhb_loop+0x40/0x90 [ 480.348556][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.348576][T12054] RIP: 0033:0x7fd8af59c799 [ 480.348595][T12054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.348611][T12054] RSP: 002b:00007fd8b037d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.348633][T12054] RAX: ffffffffffffffda RBX: 00007fd8af815fa0 RCX: 00007fd8af59c799 [ 480.348646][T12054] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 480.348659][T12054] RBP: 00007fd8b037d090 R08: 0000000000000000 R09: 0000000000000000 [ 480.348672][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.348683][T12054] R13: 00007fd8af816038 R14: 00007fd8af815fa0 R15: 00007fd8af93fa48 [ 480.348715][T12054] [ 480.590722][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.662603][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.674162][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.717153][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.720963][T12059] FAULT_INJECTION: forcing a failure. [ 480.720963][T12059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.738670][T12059] CPU: 1 UID: 0 PID: 12059 Comm: syz.1.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.738704][T12059] Tainted: [L]=SOFTLOCKUP [ 480.738712][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.738723][T12059] Call Trace: [ 480.738731][T12059] [ 480.738740][T12059] dump_stack_lvl+0xe8/0x150 [ 480.738779][T12059] should_fail_ex+0x412/0x560 [ 480.738806][T12059] _copy_from_user+0x2d/0xb0 [ 480.738832][T12059] core_sys_select+0x578/0xc30 [ 480.738873][T12059] ? __pfx_core_sys_select+0x10/0x10 [ 480.738923][T12059] ? __pfx_set_user_sigmask+0x10/0x10 [ 480.738961][T12059] __se_sys_pselect6+0x267/0x320 [ 480.738991][T12059] ? __pfx___se_sys_pselect6+0x10/0x10 [ 480.739013][T12059] ? __pfx_ksys_write+0x10/0x10 [ 480.739038][T12059] ? __x64_sys_pselect6+0x21/0xf0 [ 480.739062][T12059] do_syscall_64+0x14d/0xf80 [ 480.739081][T12059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.739099][T12059] ? clear_bhb_loop+0x40/0x90 [ 480.739123][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.739142][T12059] RIP: 0033:0x7f84e539c799 [ 480.739162][T12059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.739179][T12059] RSP: 002b:00007f84e6201028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 480.739201][T12059] RAX: ffffffffffffffda RBX: 00007f84e5615fa0 RCX: 00007f84e539c799 [ 480.739215][T12059] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 480.739228][T12059] RBP: 00007f84e6201090 R08: 0000000000000000 R09: 0000200000000180 [ 480.739240][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.739252][T12059] R13: 00007f84e5616038 R14: 00007f84e5615fa0 R15: 00007f84e573fa48 [ 480.739283][T12059] [ 481.181124][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.203888][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.262793][T12073] __nla_validate_parse: 1 callbacks suppressed [ 481.262819][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1974'. [ 481.282404][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.301951][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.450723][T12080] FAULT_INJECTION: forcing a failure. [ 481.450723][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 481.463697][T12080] CPU: 1 UID: 0 PID: 12080 Comm: syz.4.1976 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.463727][T12080] Tainted: [L]=SOFTLOCKUP [ 481.463732][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.463744][T12080] Call Trace: [ 481.463751][T12080] [ 481.463757][T12080] dump_stack_lvl+0xe8/0x150 [ 481.463779][T12080] should_fail_ex+0x412/0x560 [ 481.463797][T12080] should_failslab+0xa8/0x100 [ 481.463812][T12080] __kmalloc_noprof+0xe8/0x760 [ 481.463826][T12080] ? tomoyo_encode+0x28b/0x550 [ 481.463844][T12080] tomoyo_encode+0x28b/0x550 [ 481.463862][T12080] tomoyo_realpath_from_path+0x58d/0x5d0 [ 481.463882][T12080] ? tomoyo_path_number_perm+0x219/0x630 [ 481.463895][T12080] tomoyo_path_number_perm+0x246/0x630 [ 481.463909][T12080] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.463924][T12080] ? __lock_acquire+0x6b5/0x2cf0 [ 481.463945][T12080] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 481.463969][T12080] ? __fget_files+0x2a/0x420 [ 481.463986][T12080] ? __fget_files+0x2a/0x420 [ 481.464001][T12080] ? __fget_files+0x3a0/0x420 [ 481.464015][T12080] ? __fget_files+0x2a/0x420 [ 481.464032][T12080] security_file_ioctl+0xc3/0x2a0 [ 481.464046][T12080] __se_sys_ioctl+0x47/0x170 [ 481.464061][T12080] do_syscall_64+0x14d/0xf80 [ 481.464072][T12080] ? trace_irq_disable+0x3b/0x150 [ 481.464088][T12080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.464099][T12080] ? clear_bhb_loop+0x40/0x90 [ 481.464113][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.464124][T12080] RIP: 0033:0x7fd8af59c799 [ 481.464137][T12080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.464147][T12080] RSP: 002b:00007fd8b037d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.464161][T12080] RAX: ffffffffffffffda RBX: 00007fd8af815fa0 RCX: 00007fd8af59c799 [ 481.464170][T12080] RDX: 00000000000000ff RSI: 0000000000006f50 RDI: 0000000000000003 [ 481.464177][T12080] RBP: 00007fd8b037d090 R08: 0000000000000000 R09: 0000000000000000 [ 481.464184][T12080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.464191][T12080] R13: 00007fd8af816038 R14: 00007fd8af815fa0 R15: 00007fd8af93fa48 [ 481.464210][T12080] [ 481.464245][T12080] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.866431][T12085] team0: Device gtp0 is of different type [ 482.045500][T12093] FAULT_INJECTION: forcing a failure. [ 482.045500][T12093] name failslab, interval 1, probability 0, space 0, times 0 [ 482.160985][T12093] CPU: 1 UID: 0 PID: 12093 Comm: syz.2.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.161023][T12093] Tainted: [L]=SOFTLOCKUP [ 482.161030][T12093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.161040][T12093] Call Trace: [ 482.161049][T12093] [ 482.161057][T12093] dump_stack_lvl+0xe8/0x150 [ 482.161096][T12093] should_fail_ex+0x412/0x560 [ 482.161126][T12093] should_failslab+0xa8/0x100 [ 482.161152][T12093] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 482.161172][T12093] ? __alloc_skb+0x186/0x7d0 [ 482.161194][T12093] ? __alloc_skb+0x1d0/0x7d0 [ 482.161214][T12093] ? __local_bh_enable_ip+0xd0/0x130 [ 482.161244][T12093] __alloc_skb+0x1d0/0x7d0 [ 482.161269][T12093] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 482.161295][T12093] netlink_sendmsg+0x5d4/0xb40 [ 482.161329][T12093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.161356][T12093] ? aa_sock_msg_perm+0xf1/0x1b0 [ 482.161380][T12093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.161401][T12093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.161423][T12093] ____sys_sendmsg+0xa68/0xad0 [ 482.161458][T12093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.161495][T12093] ? import_iovec+0x73/0xa0 [ 482.161524][T12093] ___sys_sendmsg+0x2a5/0x360 [ 482.161556][T12093] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.161615][T12093] ? __fget_files+0x2a/0x420 [ 482.161641][T12093] ? __fget_files+0x3a0/0x420 [ 482.161675][T12093] __x64_sys_sendmsg+0x1bd/0x2a0 [ 482.161705][T12093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.161741][T12093] ? __pfx_ksys_write+0x10/0x10 [ 482.161767][T12093] do_syscall_64+0x14d/0xf80 [ 482.161784][T12093] ? trace_irq_disable+0x3b/0x150 [ 482.161818][T12093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.161838][T12093] ? clear_bhb_loop+0x40/0x90 [ 482.161859][T12093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.161877][T12093] RIP: 0033:0x7f213c19c799 [ 482.161895][T12093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.161910][T12093] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.161930][T12093] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 482.161943][T12093] RDX: 0000000000044054 RSI: 0000200000000000 RDI: 0000000000000003 [ 482.161955][T12093] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 482.161966][T12093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.161977][T12093] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 482.162006][T12093] [ 482.851939][ T5936] usbhid 4-1:0.0: can't add hid device: -71 [ 482.858164][ T5936] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 482.889741][ T5936] usb 4-1: USB disconnect, device number 63 [ 483.452552][ T5936] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 483.776529][ T5936] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 483.784959][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.797875][ T5936] usb 4-1: config 0 has no interface number 0 [ 483.843395][ T5936] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 483.856264][ T5936] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 483.939864][ T5936] usb 4-1: Product: syz [ 483.961682][ T5936] usb 4-1: Manufacturer: syz [ 483.971023][ T5936] usb 4-1: SerialNumber: syz [ 484.015359][ T5936] usb 4-1: config 0 descriptor?? [ 484.040596][ T5936] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 484.052033][ T5936] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 484.168207][ T5936] uvcvideo 4-1:0.105: Failed to create links for entity 1 [ 484.185445][ T5936] uvcvideo 4-1:0.105: Failed to register entities (-22). [ 484.696570][ T5914] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 484.817821][T12124] tipc: Started in network mode [ 484.823034][T12124] tipc: Node identity 080211000001, cluster identity 4711 [ 484.838862][T12124] tipc: Enabled bearer , priority 0 [ 484.854624][T12124] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 484.864117][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 484.878675][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.909712][ T5914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 484.930737][T12124] tipc: Resetting bearer [ 484.955745][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.979795][ T5914] usb 3-1: config 0 descriptor?? [ 485.220862][ T5914] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 485.773988][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 485.785184][T12133] netlink: 'syz.1.1992': attribute type 13 has an invalid length. [ 485.995253][T12133] gretap0: refused to change device tx_queue_len [ 486.074060][T12133] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 486.106964][ T5907] tipc: Node number set to 134418688 [ 486.241036][ T5936] usb 4-1: USB disconnect, device number 64 [ 486.456746][ T10] usb 3-1: USB disconnect, device number 56 [ 486.709804][T12141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.375638][T12154] FAULT_INJECTION: forcing a failure. [ 487.375638][T12154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.411532][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.2.2001 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.411566][T12154] Tainted: [L]=SOFTLOCKUP [ 487.411571][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.411578][T12154] Call Trace: [ 487.411583][T12154] [ 487.411589][T12154] dump_stack_lvl+0xe8/0x150 [ 487.411611][T12154] should_fail_ex+0x412/0x560 [ 487.411628][T12154] _copy_from_user+0x2d/0xb0 [ 487.411645][T12154] __copy_msghdr+0x3c5/0x5b0 [ 487.411665][T12154] ___sys_sendmsg+0x213/0x360 [ 487.411684][T12154] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.411703][T12154] ? kstrtouint+0x6e/0xe0 [ 487.411729][T12154] ? __fget_files+0x2a/0x420 [ 487.411748][T12154] ? __fget_files+0x3a0/0x420 [ 487.411768][T12154] __sys_sendmmsg+0x27c/0x4e0 [ 487.411792][T12154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 487.411807][T12154] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 487.411832][T12154] ? ksys_write+0x242/0x270 [ 487.411845][T12154] ? __pfx_ksys_write+0x10/0x10 [ 487.411867][T12154] __x64_sys_sendmmsg+0xa0/0xc0 [ 487.411888][T12154] do_syscall_64+0x14d/0xf80 [ 487.411899][T12154] ? trace_irq_disable+0x3b/0x150 [ 487.411915][T12154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.411927][T12154] ? clear_bhb_loop+0x40/0x90 [ 487.411940][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.411954][T12154] RIP: 0033:0x7f213c19c799 [ 487.411967][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.411976][T12154] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.411990][T12154] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 487.411999][T12154] RDX: 0000000000000002 RSI: 0000200000001c80 RDI: 0000000000000003 [ 487.412006][T12154] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 487.412013][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.412020][T12154] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 487.412037][T12154] [ 487.818794][T12158] FAULT_INJECTION: forcing a failure. [ 487.818794][T12158] name failslab, interval 1, probability 0, space 0, times 0 [ 487.896726][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.2.2003 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.896761][T12158] Tainted: [L]=SOFTLOCKUP [ 487.896769][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.896789][T12158] Call Trace: [ 487.896798][T12158] [ 487.896806][T12158] dump_stack_lvl+0xe8/0x150 [ 487.896838][T12158] should_fail_ex+0x412/0x560 [ 487.896867][T12158] should_failslab+0xa8/0x100 [ 487.896889][T12158] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 487.896909][T12158] ? __alloc_skb+0x186/0x7d0 [ 487.896930][T12158] ? __alloc_skb+0x1d0/0x7d0 [ 487.896949][T12158] ? __local_bh_enable_ip+0xd0/0x130 [ 487.896974][T12158] __alloc_skb+0x1d0/0x7d0 [ 487.897001][T12158] netlink_sendmsg+0x5d4/0xb40 [ 487.897034][T12158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.897061][T12158] ? aa_sock_msg_perm+0xf1/0x1b0 [ 487.897085][T12158] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.897107][T12158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.897128][T12158] ____sys_sendmsg+0xa68/0xad0 [ 487.897163][T12158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.897198][T12158] ? import_iovec+0x73/0xa0 [ 487.897226][T12158] ___sys_sendmsg+0x2a5/0x360 [ 487.897257][T12158] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.897382][T12158] ? __fget_files+0x2a/0x420 [ 487.897434][T12158] ? __fget_files+0x3a0/0x420 [ 487.897476][T12158] __x64_sys_sendmsg+0x1bd/0x2a0 [ 487.897508][T12158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.897541][T12158] ? __pfx_ksys_write+0x10/0x10 [ 487.897568][T12158] do_syscall_64+0x14d/0xf80 [ 487.897586][T12158] ? trace_irq_disable+0x3b/0x150 [ 487.897609][T12158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.897629][T12158] ? clear_bhb_loop+0x40/0x90 [ 487.897652][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.897672][T12158] RIP: 0033:0x7f213c19c799 [ 487.897692][T12158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.897707][T12158] RSP: 002b:00007f213d0bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.897729][T12158] RAX: ffffffffffffffda RBX: 00007f213c415fa0 RCX: 00007f213c19c799 [ 487.897749][T12158] RDX: 000000000000c014 RSI: 0000200000000280 RDI: 0000000000000003 [ 487.897761][T12158] RBP: 00007f213d0bb090 R08: 0000000000000000 R09: 0000000000000000 [ 487.897773][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.897784][T12158] R13: 00007f213c416038 R14: 00007f213c415fa0 R15: 00007f213c53fa48 [ 487.897824][T12158] [ 488.452112][ T30] audit: type=1326 audit(1772514629.909:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 488.566747][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 488.663890][ T30] audit: type=1326 audit(1772514629.909:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 488.729825][ T30] audit: type=1326 audit(1772514629.909:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 488.783295][ T30] audit: type=1326 audit(1772514629.909:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 488.915447][ T30] audit: type=1326 audit(1772514629.909:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 488.958309][T12180] xt_connbytes: Forcing CT accounting to be enabled [ 489.037455][ T30] audit: type=1326 audit(1772514629.939:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 489.183479][ T30] audit: type=1326 audit(1772514629.939:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 489.315990][ T30] audit: type=1326 audit(1772514629.939:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 489.316254][T12193] delete_channel: no stack [ 489.519215][ T30] audit: type=1326 audit(1772514629.939:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 489.643150][ T30] audit: type=1326 audit(1772514629.939:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.0.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8be379c799 code=0x7ffc0000 [ 489.759302][T12197] fuse: Bad value for 'fd' [ 491.829586][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2022'. [ 491.858089][T12226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2022'. [ 493.721008][T12254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2033'. [ 493.785292][T12254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2033'. [ 493.814987][T12254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2033'. [ 494.098649][T12264] batadv0: entered allmulticast mode [ 494.122258][T12264] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 494.426750][ T5936] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 494.576528][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 494.685432][ T5936] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 494.699619][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 494.715418][ T5936] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 494.745820][ T5936] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 494.773568][ T5936] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 494.813439][ T5936] usb 2-1: config 0 interface 0 has no altsetting 0 [ 494.835010][ T5936] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 494.848271][ T5936] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 494.857755][ T5936] usb 2-1: Product: syz [ 494.862664][ T5936] usb 2-1: Manufacturer: syz [ 494.869155][ T5936] usb 2-1: SerialNumber: syz [ 494.887069][ T5936] usb 2-1: config 0 descriptor?? [ 494.896502][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 494.909391][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.918192][ T5936] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 495.007010][ T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 495.026517][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.042226][ T10] usb 4-1: Product: syz [ 495.051300][ T5936] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 495.095764][ T10] usb 4-1: Manufacturer: syz [ 495.119987][ T10] usb 4-1: SerialNumber: syz [ 495.120180][ T5936] usb 2-1: USB disconnect, device number 46 [ 495.136549][ T10] usb 4-1: config 0 descriptor?? [ 495.169945][ T5936] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 495.186066][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 495.206239][ T10] usb 4-1: selecting invalid altsetting 1 [ 495.643065][T12298] xfrm1: entered allmulticast mode [ 495.652387][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.661404][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.729248][ T5907] usb 4-1: USB disconnect, device number 65 [ 496.411336][T12312] FAULT_INJECTION: forcing a failure. [ 496.411336][T12312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.456313][T12314] fuse: Bad value for 'fd' [ 496.461582][T12314] netlink: 'syz.1.2053': attribute type 2 has an invalid length. [ 496.520859][T12314] : entered promiscuous mode [ 496.531649][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.4.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.531684][T12312] Tainted: [L]=SOFTLOCKUP [ 496.531692][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.531729][T12312] Call Trace: [ 496.531739][T12312] [ 496.531748][T12312] dump_stack_lvl+0xe8/0x150 [ 496.531781][T12312] should_fail_ex+0x412/0x560 [ 496.531810][T12312] _copy_from_user+0x2d/0xb0 [ 496.531839][T12312] __copy_msghdr+0x3c5/0x5b0 [ 496.531871][T12312] ___sys_sendmsg+0x213/0x360 [ 496.531903][T12312] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.531963][T12312] ? __fget_files+0x2a/0x420 [ 496.531989][T12312] ? __fget_files+0x3a0/0x420 [ 496.532023][T12312] __x64_sys_sendmsg+0x1bd/0x2a0 [ 496.532055][T12312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.532091][T12312] ? __pfx_ksys_write+0x10/0x10 [ 496.532125][T12312] do_syscall_64+0x14d/0xf80 [ 496.532144][T12312] ? trace_irq_disable+0x3b/0x150 [ 496.532169][T12312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.532189][T12312] ? clear_bhb_loop+0x40/0x90 [ 496.532211][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.532231][T12312] RIP: 0033:0x7fd8af59c799 [ 496.532250][T12312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.532267][T12312] RSP: 002b:00007fd8ad7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.532289][T12312] RAX: ffffffffffffffda RBX: 00007fd8af816090 RCX: 00007fd8af59c799 [ 496.532304][T12312] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 496.532316][T12312] RBP: 00007fd8ad7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.532329][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.532340][T12312] R13: 00007fd8af816128 R14: 00007fd8af816090 R15: 00007fd8af93fa48 [ 496.532368][T12312] [ 499.355564][T12361] usb usb8: usbfs: process 12361 (syz.1.2067) did not claim interface 0 before use [ 499.394798][T12354] veth3: entered promiscuous mode [ 501.873638][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.880270][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.815703][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 503.260021][T12361] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 503.290403][T12361] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 503.317579][T12361] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 507.601978][T12413] binder: BINDER_SET_CONTEXT_MGR already set [ 507.615044][T12413] binder: 12412:12413 ioctl 4018620d 200000000040 returned -16 [ 507.707995][T12413] FAULT_INJECTION: forcing a failure. [ 507.707995][T12413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.138156][T12413] CPU: 0 UID: 0 PID: 12413 Comm: syz.0.2084 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.138190][T12413] Tainted: [L]=SOFTLOCKUP [ 508.138199][T12413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.138211][T12413] Call Trace: [ 508.138220][T12413] [ 508.138230][T12413] dump_stack_lvl+0xe8/0x150 [ 508.138263][T12413] should_fail_ex+0x412/0x560 [ 508.138294][T12413] _copy_to_iter+0x404/0x17d0 [ 508.138338][T12413] ? __pfx__copy_to_iter+0x10/0x10 [ 508.138398][T12413] ? stats_show+0x6e6/0x700 [ 508.138427][T12413] seq_read_iter+0xbf5/0xe10 [ 508.138473][T12413] seq_read+0x367/0x480 [ 508.138506][T12413] ? __pfx_seq_read+0x10/0x10 [ 508.138529][T12413] ? __debugfs_file_get+0x5e0/0x720 [ 508.138562][T12413] ? __pfx___debugfs_file_get+0x10/0x10 [ 508.138594][T12413] ? apparmor_file_permission+0x1f4/0x300 [ 508.138621][T12413] full_proxy_read+0x127/0x1f0 [ 508.138643][T12413] ? __pfx_full_proxy_read+0x10/0x10 [ 508.138665][T12413] vfs_read+0x20c/0xa70 [ 508.138684][T12413] ? fdget_pos+0x246/0x320 [ 508.138711][T12413] ? ksys_write+0x1e6/0x270 [ 508.138734][T12413] ? __pfx___mutex_lock+0x10/0x10 [ 508.138756][T12413] ? __pfx_vfs_read+0x10/0x10 [ 508.138778][T12413] ? __fget_files+0x2a/0x420 [ 508.138809][T12413] ? __fget_files+0x3a0/0x420 [ 508.138834][T12413] ? __fget_files+0x2a/0x420 [ 508.138870][T12413] ksys_read+0x150/0x270 [ 508.138894][T12413] ? __pfx_ksys_read+0x10/0x10 [ 508.138928][T12413] do_syscall_64+0x14d/0xf80 [ 508.138946][T12413] ? trace_irq_disable+0x3b/0x150 [ 508.138972][T12413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.138992][T12413] ? clear_bhb_loop+0x40/0x90 [ 508.139017][T12413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.139037][T12413] RIP: 0033:0x7f8be379c799 [ 508.139057][T12413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.139073][T12413] RSP: 002b:00007f8be4720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.139095][T12413] RAX: ffffffffffffffda RBX: 00007f8be3a15fa0 RCX: 00007f8be379c799 [ 508.139109][T12413] RDX: 0000000000000cac RSI: 00002000000034c0 RDI: 0000000000000006 [ 508.139122][T12413] RBP: 00007f8be4720090 R08: 0000000000000000 R09: 0000000000000000 [ 508.139134][T12413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.139145][T12413] R13: 00007f8be3a16038 R14: 00007f8be3a15fa0 R15: 00007f8be3b3fa48 [ 508.139184][T12413] [ 508.554201][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2086'. [ 510.446742][T12428] FAULT_INJECTION: forcing a failure. [ 510.446742][T12428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.461056][T12428] CPU: 0 UID: 0 PID: 12428 Comm: syz.0.2089 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.461089][T12428] Tainted: [L]=SOFTLOCKUP [ 510.461098][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.461109][T12428] Call Trace: [ 510.461119][T12428] [ 510.461128][T12428] dump_stack_lvl+0xe8/0x150 [ 510.461163][T12428] should_fail_ex+0x412/0x560 [ 510.461194][T12428] _copy_from_user+0x2d/0xb0 [ 510.461224][T12428] ___sys_sendmsg+0x1c6/0x360 [ 510.461261][T12428] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.461326][T12428] ? __fget_files+0x2a/0x420 [ 510.461363][T12428] ? __fget_files+0x3a0/0x420 [ 510.461400][T12428] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.461432][T12428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.461471][T12428] ? __pfx_ksys_write+0x10/0x10 [ 510.461504][T12428] do_syscall_64+0x14d/0xf80 [ 510.461523][T12428] ? trace_irq_disable+0x3b/0x150 [ 510.461550][T12428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.461570][T12428] ? clear_bhb_loop+0x40/0x90 [ 510.461593][T12428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.461613][T12428] RIP: 0033:0x7f8be379c799 [ 510.461632][T12428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.461649][T12428] RSP: 002b:00007f8be4720028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.461672][T12428] RAX: ffffffffffffffda RBX: 00007f8be3a15fa0 RCX: 00007f8be379c799 [ 510.461686][T12428] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 510.461699][T12428] RBP: 00007f8be4720090 R08: 0000000000000000 R09: 0000000000000000 [ 510.461711][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.461722][T12428] R13: 00007f8be3a16038 R14: 00007f8be3a15fa0 R15: 00007f8be3b3fa48 [ 510.461753][T12428] [ 510.955952][T12434] syzkaller1: entered promiscuous mode [ 510.974402][T12434] syzkaller1: entered allmulticast mode [ 511.389201][ T5914] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 511.616451][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 511.625534][ T5914] usb 2-1: config 0 has no interfaces? [ 511.639815][ T5914] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 511.650234][ T5914] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 511.675564][ T5914] usb 2-1: Manufacturer: syz [ 511.718355][ T5914] usb 2-1: config 0 descriptor?? [ 512.641971][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 513.683261][ T5915] usb 2-1: USB disconnect, device number 47 [ 513.985506][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 513.985528][ T30] audit: type=1326 audit(1772514655.429:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 514.016913][T12486] FAULT_INJECTION: forcing a failure. [ 514.016913][T12486] name failslab, interval 1, probability 0, space 0, times 0 [ 514.296517][T12486] CPU: 0 UID: 0 PID: 12486 Comm: syz.1.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.296550][T12486] Tainted: [L]=SOFTLOCKUP [ 514.296557][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.296568][T12486] Call Trace: [ 514.296576][T12486] [ 514.296586][T12486] dump_stack_lvl+0xe8/0x150 [ 514.296618][T12486] should_fail_ex+0x412/0x560 [ 514.296644][T12486] should_failslab+0xa8/0x100 [ 514.296667][T12486] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 514.296687][T12486] ? __alloc_skb+0x186/0x7d0 [ 514.296712][T12486] ? __alloc_skb+0x1d0/0x7d0 [ 514.296732][T12486] ? __local_bh_enable_ip+0xd0/0x130 [ 514.296761][T12486] __alloc_skb+0x1d0/0x7d0 [ 514.296783][T12486] ? __raw_spin_lock_init+0x45/0x100 [ 514.296805][T12486] audit_log_start+0x416/0xa20 [ 514.296834][T12486] ? __pfx_audit_log_start+0x10/0x10 [ 514.296859][T12486] ? get_pid_task+0x20/0x1f0 [ 514.296877][T12486] ? get_pid_task+0x20/0x1f0 [ 514.296892][T12486] ? get_pid_task+0x20/0x1f0 [ 514.296918][T12486] audit_seccomp+0x63/0x190 [ 514.296938][T12486] ? clear_bhb_loop+0x40/0x90 [ 514.296957][T12486] ? clear_bhb_loop+0xe/0x90 [ 514.296979][T12486] __seccomp_filter+0xd48/0x1ef0 [ 514.297010][T12486] ? __pfx___seccomp_filter+0x10/0x10 [ 514.297032][T12486] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.297056][T12486] ? __fget_files+0x3a0/0x420 [ 514.297089][T12486] ? fput+0xa0/0xd0 [ 514.297120][T12486] ? __pfx_ksys_write+0x10/0x10 [ 514.297144][T12486] ? __secure_computing+0xe1/0x2a0 [ 514.297168][T12486] do_syscall_64+0xf4/0xf80 [ 514.297187][T12486] ? trace_irq_disable+0x3b/0x150 [ 514.297212][T12486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.297229][T12486] ? clear_bhb_loop+0x40/0x90 [ 514.297254][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.297272][T12486] RIP: 0033:0x7f84e539c799 [ 514.297302][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.297318][T12486] RSP: 002b:00007f84e6201028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 514.297339][T12486] RAX: ffffffffffffffda RBX: 00007f84e5615fa0 RCX: 00007f84e539c799 [ 514.297353][T12486] RDX: 0000000000000000 RSI: 0000200000001840 RDI: 0000000000000003 [ 514.297366][T12486] RBP: 00007f84e6201090 R08: 0000000000000000 R09: 0000000000000000 [ 514.297378][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.297389][T12486] R13: 00007f84e5616038 R14: 00007f84e5615fa0 R15: 00007f84e573fa48 [ 514.297420][T12486] [ 514.297446][T12486] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 514.683383][ T30] audit: type=1326 audit(1772514655.439:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 514.798259][T12486] audit: out of memory in audit_log_start [ 514.824230][T12490] tipc: Failed to remove unknown binding: 66,1,1/134418688:223262073/223262075 [ 514.887155][ T30] audit: type=1326 audit(1772514655.439:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 515.002054][ T30] audit: type=1326 audit(1772514655.439:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 515.070913][ T30] audit: type=1326 audit(1772514655.439:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 515.094262][ T5907] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 515.156447][ T30] audit: type=1326 audit(1772514655.439:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 515.181760][T12496] netlink: 'syz.1.2109': attribute type 10 has an invalid length. [ 515.236667][ T30] audit: type=1326 audit(1772514655.439:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 515.283802][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 515.291795][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.307732][ T5907] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 515.318210][ T30] audit: type=1326 audit(1772514655.439:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12483 comm="syz.1.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84e539c799 code=0x7ffc0000 [ 515.670367][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 515.846563][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 515.859929][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.873558][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.884285][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.901769][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.917282][T12515] sch_tbf: burst 5874 is lower than device lo mtu (65550) ! [ 515.918514][ T10] usb 2-1: config 0 descriptor?? [ 515.945343][ T10] hub 2-1:0.0: USB hub found [ 516.143782][T12501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.170123][T12501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.191185][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 516.241034][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 516.252798][T12519] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2116'. [ 516.645596][ T29] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 516.881659][ T10] hid_parser_main: 5 callbacks suppressed [ 516.881686][ T10] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 517.046471][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 517.054708][ T10] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 517.261797][ T29] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 517.303719][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.351898][ T29] usb 3-1: Product: syz [ 517.393026][ T29] usb 3-1: Manufacturer: syz [ 517.446865][ T29] usb 3-1: SerialNumber: syz [ 517.507039][ T29] usb 3-1: config 0 descriptor?? [ 517.529486][ T10] usb 2-1: USB disconnect, device number 48 [ 517.562702][ T29] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 517.985781][ T29] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 518.278882][ T5907] usb 4-1: string descriptor 0 read error: -71 [ 518.548398][ T5907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.595293][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.714184][ T5907] usb 4-1: can't set config #1, error -71 [ 518.752548][ T5907] usb 4-1: USB disconnect, device number 66 [ 525.498761][ T5915] usb 3-1: USB disconnect, device number 57 [ 528.838102][T12552] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2123'. [ 563.531588][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.549574][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.726357][ C0] sched: DL replenish lagged too much [ 680.366264][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 680.373274][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12564/1:b..l P5843/1:b..l [ 680.383240][ C1] rcu: (detected by 1, t=10503 jiffies, g=67281, q=691166 ncpus=2) [ 680.391422][ C1] task:syz-executor state:R running task stack:22184 pid:5843 tgid:5843 ppid:5820 task_flags:0x400140 flags:0x00080000 [ 680.406672][ C1] Call Trace: [ 680.410027][ C1] [ 680.413021][ C1] __schedule+0x15dd/0x52d0 [ 680.417597][ C1] ? arch_stack_walk+0x10f/0x150 [ 680.422598][ C1] ? __pfx___schedule+0x10/0x10 [ 680.427596][ C1] preempt_schedule_irq+0x4d/0xa0 [ 680.432660][ C1] irqentry_exit+0x599/0x620 [ 680.437285][ C1] ? trace_irq_disable+0x3b/0x150 [ 680.441747][ T31] INFO: task syz.3.2128:12569 blocked for more than 146 seconds. [ 680.443275][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 680.457198][ C1] RIP: 0010:kasan_check_range+0x75/0x2c0 [ 680.462886][ C1] Code: 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 <4d> 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c [ 680.465981][ T31] Tainted: G L syzkaller #0 [ 680.482872][ C1] RSP: 0018:ffffc90003b472a0 EFLAGS: 00000a07 [ 680.482906][ C1] RAX: ffffffff823c0901 RBX: dffffc0000000001 RCX: ffffffff823c09dd [ 680.482921][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801d27532c [ 680.482943][ C1] RBP: 0000000000000000 R08: ffff88801d27532f R09: 1ffff11003a4ea65 [ 680.482957][ C1] R10: dffffc0000000000 R11: ffffed1003a4ea65 R12: 0000000000000000 [ 680.482971][ C1] R13: 0000000000057dd7 R14: ffffed1003a4ea66 R15: 1ffff11003a4ea65 [ 680.483003][ C1] ? __page_table_check_zero+0x121/0x3e0 [ 680.483029][ C1] ? __page_table_check_zero+0x1fd/0x3e0 [ 680.483070][ C1] __page_table_check_zero+0x1fd/0x3e0 [ 680.483097][ C1] ? __page_table_check_zero+0x6a/0x3e0 [ 680.483121][ C1] __free_frozen_pages+0xc3b/0xdb0 [ 680.483153][ C1] __slab_free+0x263/0x2b0 [ 680.483186][ C1] qlist_free_all+0x97/0x100 [ 680.483210][ C1] kasan_quarantine_reduce+0x148/0x160 [ 680.483231][ C1] __kasan_kmalloc+0x22/0xb0 [ 680.483254][ C1] __kmalloc_noprof+0x35c/0x760 [ 680.483275][ C1] ? trace_kmalloc+0x2a/0x110 [ 680.483293][ C1] ? tomoyo_encode+0x28b/0x550 [ 680.483315][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 680.483339][ C1] tomoyo_encode+0x28b/0x550 [ 680.483369][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 680.483415][ C1] tomoyo_check_open_permission+0x229/0x470 [ 680.483440][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 680.483461][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 680.483536][ C1] security_file_open+0xa9/0x240 [ 680.483560][ C1] do_dentry_open+0x384/0x14e0 [ 680.483594][ C1] ? vfs_open+0x31/0x340 [ 680.483623][ C1] vfs_open+0x3b/0x340 [ 680.483646][ C1] ? path_openat+0x2df0/0x3860 [ 680.483671][ C1] path_openat+0x2e08/0x3860 [ 680.483708][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 680.483735][ C1] ? stack_depot_save_flags+0x33/0x810 [ 680.483767][ C1] ? __pfx_path_openat+0x10/0x10 [ 680.483785][ C1] ? __x64_sys_openat+0x138/0x170 [ 680.483809][ C1] ? do_syscall_64+0x14d/0xf80 [ 680.483828][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.483858][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 680.483891][ C1] do_file_open+0x23e/0x4a0 [ 680.483919][ C1] ? __pfx_do_file_open+0x10/0x10 [ 680.483964][ C1] ? _raw_spin_unlock+0x28/0x50 [ 680.483990][ C1] ? alloc_fd+0x64b/0x6c0 [ 680.484040][ C1] do_sys_openat2+0x113/0x200 [ 680.484071][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.484098][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 680.484130][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 680.484162][ C1] __x64_sys_openat+0x138/0x170 [ 680.484195][ C1] do_syscall_64+0x14d/0xf80 [ 680.484214][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.484234][ C1] ? clear_bhb_loop+0x40/0x90 [ 680.484259][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.484279][ C1] RIP: 0033:0x7fd8af59babc [ 680.484300][ C1] RSP: 002b:00007fd8af93fd40 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 680.484324][ C1] RAX: ffffffffffffffda RBX: 00000000000004d0 RCX: 00007fd8af59babc [ 680.484340][ C1] RDX: 0000000000090800 RSI: 00007fd8af63251b RDI: 00000000ffffff9c [ 680.484354][ C1] RBP: 00007fd8af93fdec R08: 0000000000000000 R09: 0000000000000000 [ 680.484367][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000001a1 [ 680.484380][ C1] R13: 0000000000000000 R14: 0000000000081833 R15: 00007fd8af93fe40 [ 680.484413][ C1] [ 680.484424][ C1] task:syz.0.2127 state:R running task stack:25984 pid:12564 tgid:12563 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 680.484497][ C1] Call Trace: [ 680.484506][ C1] [ 680.484519][ C1] __schedule+0x15dd/0x52d0 [ 680.484576][ C1] ? __pfx___schedule+0x10/0x10 [ 680.484622][ C1] preempt_schedule_irq+0x4d/0xa0 [ 680.484651][ C1] irqentry_exit+0x599/0x620 [ 680.484671][ C1] ? trace_irq_disable+0x3b/0x150 [ 680.484704][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 680.484726][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 680.484749][ C1] Code: e9 30 ff ff ff e8 d5 ed 0b 0a f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 51 3b 7a 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d ee 5a 73 [ 680.484767][ C1] RSP: 0018:ffffc9000bffefb8 EFLAGS: 00000286 [ 680.484786][ C1] RAX: 7c97b68ae84b5100 RBX: 0000000000000246 RCX: 0000000000000046 [ 680.484801][ C1] RDX: 00000000294d6185 RSI: ffffffff8e16369b RDI: ffffffff8c27ae80 [ 680.484816][ C1] RBP: 0000000000000000 R08: ffffffff81767a45 R09: ffffffff8e7602e0 [ 680.484831][ C1] R10: ffffc9000bfff118 R11: ffffffff81b0bb90 R12: 0000000000000002 [ 680.484845][ C1] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 680.484865][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 680.484888][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 680.484924][ C1] ? sysfs_add_file_mode_ns+0x238/0x300 [ 680.484949][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 680.484975][ C1] unwind_next_frame+0xc2/0x23c0 [ 680.485001][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 680.485034][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 680.485062][ C1] ? __kernfs_create_file+0x4b/0x2e0 [ 680.485083][ C1] ? sysfs_add_file_mode_ns+0x238/0x300 [ 680.485109][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 680.485130][ C1] arch_stack_walk+0x11b/0x150 [ 680.485165][ C1] ? sysfs_add_file_mode_ns+0x238/0x300 [ 680.485192][ C1] stack_trace_save+0xa9/0x100 [ 680.485213][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 680.485245][ C1] save_stack+0x122/0x230 [ 680.485270][ C1] ? __pfx_save_stack+0x10/0x10 [ 680.485290][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 680.485310][ C1] ? __slab_free+0x263/0x2b0 [ 680.485330][ C1] ? qlist_free_all+0x97/0x100 [ 680.485348][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 680.485368][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 680.485388][ C1] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 680.485407][ C1] ? __kernfs_new_node+0xe9/0x8e0 [ 680.485433][ C1] ? kernfs_new_node+0x102/0x210 [ 680.485457][ C1] ? __kernfs_create_file+0x4b/0x2e0 [ 680.485477][ C1] ? sysfs_add_file_mode_ns+0x238/0x300 [ 680.485516][ C1] ? page_ext_put+0x97/0xc0 [ 680.485542][ C1] __reset_page_owner+0x71/0x1f0 [ 680.485567][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 680.485598][ C1] __slab_free+0x263/0x2b0 [ 680.485627][ C1] ? qlist_free_all+0x8c/0x100 [ 680.485651][ C1] qlist_free_all+0x97/0x100 [ 680.485671][ C1] ? __kernfs_new_node+0xe9/0x8e0 [ 680.485699][ C1] kasan_quarantine_reduce+0x148/0x160 [ 680.485722][ C1] __kasan_slab_alloc+0x22/0x80 [ 680.485745][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 680.485764][ C1] ? __kernfs_new_node+0xe9/0x8e0 [ 680.485790][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 680.485816][ C1] __kernfs_new_node+0xe9/0x8e0 [ 680.485843][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 680.485872][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 680.485901][ C1] ? kernfs_root+0x1c/0x230 [ 680.485934][ C1] ? kernfs_root+0x1c/0x230 [ 680.485959][ C1] ? kernfs_root+0x1c/0x230 [ 680.485983][ C1] ? kernfs_root+0x1c/0x230 [ 680.486014][ C1] kernfs_new_node+0x102/0x210 [ 680.486047][ C1] __kernfs_create_file+0x4b/0x2e0 [ 680.486073][ C1] sysfs_add_file_mode_ns+0x238/0x300 [ 680.486106][ C1] sysfs_merge_group+0x183/0x320 [ 680.486136][ C1] ? __pfx_sysfs_merge_group+0x10/0x10 [ 680.486161][ C1] ? device_add_attrs+0x55d/0x5b0 [ 680.486185][ C1] ? __pfx_device_add_attrs+0x10/0x10 [ 680.486211][ C1] dpm_sysfs_add+0xd2/0x270 [ 680.486237][ C1] device_add+0x4d8/0xb70 [ 680.486255][ C1] ? device_initialize+0x24b/0x440 [ 680.486282][ C1] netdev_register_kobject+0x178/0x310 [ 680.486308][ C1] register_netdevice+0x12c0/0x1cf0 [ 680.486345][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 680.486377][ C1] ? alloc_netdev_mqs+0xe2a/0x11b0 [ 680.486403][ C1] register_netdev+0x40/0x60 [ 680.486424][ C1] sit_init_net+0x228/0x5c0 [ 680.486451][ C1] ops_init+0x35c/0x5c0 [ 680.486515][ C1] setup_net+0x118/0x340 [ 680.486543][ C1] ? __pfx_setup_net+0x10/0x10 [ 680.486572][ C1] ? preinit_net+0x47d/0x780 [ 680.486599][ C1] copy_net_ns+0x50e/0x730 [ 680.486628][ C1] create_new_namespaces+0x3e7/0x6a0 [ 680.486658][ C1] ? security_capable+0x7e/0x2c0 [ 680.486689][ C1] unshare_nsproxy_namespaces+0x11a/0x160 [ 680.486719][ C1] ksys_unshare+0x51d/0x930 [ 680.486757][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 680.486784][ C1] ? rcu_is_watching+0x15/0xb0 [ 680.486822][ C1] __x64_sys_unshare+0x38/0x50 [ 680.486849][ C1] do_syscall_64+0x14d/0xf80 [ 680.486868][ C1] ? trace_irq_disable+0x3b/0x150 [ 680.486893][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.486914][ C1] ? clear_bhb_loop+0x40/0x90 [ 680.486938][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.486959][ C1] RIP: 0033:0x7f8be379c799 [ 680.486978][ C1] RSP: 002b:00007f8be4720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 680.486999][ C1] RAX: ffffffffffffffda RBX: 00007f8be3a15fa0 RCX: 00007f8be379c799 [ 680.487015][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 680.487028][ C1] RBP: 00007f8be3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 680.487042][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.487055][ C1] R13: 00007f8be3a16038 R14: 00007f8be3a15fa0 R15: 00007f8be3b3fa48 [ 680.487089][ C1]