last executing test programs: 14.142450282s ago: executing program 1 (id=2655): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x40000000, 0x4, 0x7fff}) r3 = dup3(r0, r2, 0x80000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e63, 0xe4, @empty, 0x7daa}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee80000000000000000200000000", 0x58}], 0x1) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null}) 13.090360593s ago: executing program 1 (id=2660): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440), 0x2010c00, &(0x7f00000005c0)={[], [{@flag='rw'}, {@smackfsfloor={'smackfsfloor', 0x3d, '}\xff\xd8}+!&-*/!]-@/'}}, {@fowner_eq}]}) 12.688105189s ago: executing program 1 (id=2664): getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket$pppoe(0x18, 0x1, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000000)=[{0x5, 0x1000, 0x0, 0x0}, {0x4000, 0x2001, 0x0, 0x0}, {0x2, 0x1000, 0x0, 0x0}], 0x3}) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040811}, 0x854) dup3(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="ccec9000b5943c771fc5e856d7b95a21eb7a7c90d1837e4283ea354c1888c7705f30ddc7592faf0865fb7ee7470d9e8194ec165ec7abdf6b30fd09f1e9fa3dfbb6d16347afd158a8a444d546ad70905d5652ab5b213dba6dd8908bd7d010a0dedd33f612670b88506f0adeef9a2be14b3f694455505850ffc99c546abb0db00f357ad9195d929dab34d340f39054fc77a62a6125b6369acfe0b4f4d114e132577486143b", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf252800000008000300", @ANYRES32=r7, @ANYBLOB="0c00990006000000250000000a00060008021100000000000a00340001010101010100000c002a0000060202020202020a00340002020202020200000a003400010101010101000068002a00832540120208021100000000000000ffffffffffff0600000008000000ffffffffffff000000006804030007000008c66e0a8f9e54d80d010800ec06810316011601080386c897c885ec7b1001d41001df010536361b7d8100060202020202020602ff07"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xfc, 0xd, 0xf8}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x7f, 0x8, 0x5, 0xff, 0x3}, 0x62, &(0x7f0000000540)={0x5, 0xf, 0x62, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x7, 0x8, 0xeb7d, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xc, 0x4, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0xe8, 0xff00, 0x1ff, [0xff0000, 0xffc000, 0xff0000, 0xfe80, 0x3f00, 0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x69, 0x6, 0x4, 0xf00f, 0x5, [0xcf, 0x0, 0x18000, 0xffcf, 0xff0000, 0xc0]}]}, 0x2, [{0x6a, &(0x7f00000005c0)=@string={0x6a, 0x3, "8a4554f72bc57f038b4cf1e28e2970a30c2f45091f297508d7b9d0b36802f7dcade5a22ab11c282a29f60ae483db2dfe789634fb1215c37c301c97b74786e40b6efbdc03aaddf1d7b547ec64b6b8c8a5456f3fd98f60c7f5c418b2a31c23e9786fc3e29cf63fe473"}}, {0xf9, &(0x7f0000000700)=@string={0xf9, 0x3, "a2396d4b0b30881498e345633a5f2fb80a49286c241e0c2961970a1e5df7d44312ffc85ba09568ad0b895acdfebfe0b63622d1ea3b35c5f50573fec6eae2d22c5b553999db748146b4168390fb6ae89a07e6e4147898a13dd078292a4b9ebafdac67d9f1657c76da56a74c980cc4ed3900ee02462a11a5c3ef055db921eaefa2cc82a3774c9cdcc04e8b01abce83c7ca46fb291e91091070fa8ed39638b674e944325f8d9979292b7ac2ecb7b2204c012b7278d045b11cdd16807bd573a6a3e350034f094c2136b25a052dc32675df3b3b9606011b7459743cd248fedd8aedc41fa66e53b4186c08d44fe036fa2ae10119d167975117c1"}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipmr_delroute={0x34, 0x19, 0x8, 0x70bd2a, 0x25dfdbff, {0x80, 0x14, 0x14, 0x6e, 0xfe, 0x1, 0xc8, 0x1, 0x3a00}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40010) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000003300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000abc2500000c0a010300000000000000000e0000000800044000000003080004400000000098250380100000800c000440000000000000000698130080d8000b8020000180090001006c61737400000000100002800c000240fffffffffffff73710000180090001007866726d000000001800018008000100647570000c000280080002400000000f140001800e000100627974656f72646572000000680001800e000100636f6e6e6c696d6974000000540002800800014000000004080001400000000508000240000000010800024000000000080002400000000108000240000000000800024000000000080002400000000008000140000003ff0800014000000400100001800a00010071756575650000000900090073797a30000000003b00064041e82a9a12dc9e8e80681369924346506f8ae2096498fae0884f3dc75fcaa347c270b5deee5a56cf29f8b4dcca7986be44e6a23e52028f0024010280b60001008abb103916b1f548c4d84b226473a70d7cdbbef147675c342085e924ec6714ecd2a54829bbf6c100767afe66f8b578a5155ccab49b92df1cc81823a95814718e456fa9f2cb176a1525f7307957d06824feb4b82a3bb6507438fcf81d5858dc26f2dd48a183c9a3c1b975fd927a1103ebbdc7d7e6d700e53c5a7a1a13409618f7357b1d1e0d8908160bde0fb6994e971cae3d3d845cc7bd35e45e0845be0a1d1b133d60d63716ea5b2470b46493beae9aec4300003c000280080003400000000208000340000000040900020073797a3100000000080003400000000408000340000000020900020073797a32000000002c0002800900020073797a300000000008000180fffffffe08000180fffffffd0900020073797a31000000000c000440000000000000003a44110280041001007f6e334eedfcb5d42b6f795d4103a6f6ff3b2c21fbeaaece59d05f7f90e836bdb30e2333ad65b4fa8248e773081bae9ec21bb9710b57b6ce4e1b909348b450ac7a9e0e155f7e45f6890b01ae7d687aa1ab487ab2301c52f5d60ed7d24c4f0b31be76714108bca0418651916e64689767a8e4e6c25939df154bbd66eff486f48b3c7f69763f7d77e44a496493a18c29cacddfcc7b2baa46d143373dfa7351ac64eaa0b20098a59b2fb9e35e5029580cd0a0169e736d43f1ccf91db0fb562fef79f9a9972f3d92cf47c878096304432a3034e6ff8c5e1f599ea0aef3642f6e20f2275eb837e40dc9841398f1a73d36a028bd7f228f71d3ff0caed3d7679afdb611ec8951d8ace8a3a258f388fac56dc4fc6c52047b5ed48ee3814abb3b627798e6e7dd3d236837d827e44b6867b5191b7c51bad7c60dad2af817a77ba4564d75363d27a785e5d2f3b4baa56aaefc326a67531b8e1a7080043b56302b6b6ce57672949ecae0aef869c36a3b20ead40370743093ccf33d078d4af26468fb731103202485b96430a9a6dff3ae07119bb0fe2d6f5fd745c51537581985a84367ba20c7b4b674dc67a2bd70c77f06136f63954f25a316af9212b79f1b77aa35370059f10dfb91b887add90ac32e99cd1964b8f88f0587a7e6d6e0666376b647e8610be865184408d11c2977bab4ec533a66850b4d4bce6c9c78cc771fffdc74c04bf65d9ccdc90a1fd9f583d4eb108ec6086209a15cef227b1c352a9de9e4b7f655065da095f7f295586c71b0710a478057c5ab62817133c0be3738f9a66144f6c9028738aabd4b7af3142f9d0fe490fd95d02a73107c47e4a00018fbcc403d601c002eeb6667f91510bbfe8707b09a9ebad2722768ca3a590b396d69613b5b17f6fe5b22ffec9d53bc987581af18761ea6bf69d41f07024ca3b2c18e917123ca0dbb55e33daef3d6585eeca8c50047517d1a9e0daa3f7fde152025eb692a4f8d2293b1a11b7a2586655e06aa4c3520a7790815924f81e24af51242a22bd77db4dbbef2d7a450450dd6cb675aeeb235b15ea189604a628e6d64beb6a08482cb20e7ca70acff4c661237a8855b7d5005cccd1c96733a41374d11a6efa184e666beb5815cb3388c2cb44a63fda3a64de8fa21863b43a0215611eef70d20a3d539b6a049ec091bb8564189424ad1eb4d9e7a96f2bf075b3a2e1e7a00c20275767f8db4a7bcb3c5e929308743580c84c606ab25196c80f0e2c5cea4f33c484342121237a1ba50658c337131331eb8d2c9f07532725015f9c6f94a7db5af1dfc546ec494ddfc907ca4ecd540586d66f9406d5535740f7172571e73da93b41cd4306d2cc8efae3dd88bee7747d98b610b54ff53fe96c4456e0fb72c13af506a1347a832ab992d9b4cb4b18cf0d505f1a93c732eb2082d51afea155a452ee4ed03311af0d126553fd526c9302ad58535a798f22fb537f014c3aedf78c9d7c4fd05b3880526bf2a9204f2c8e4271c6a1e3b5200ca76ad11613adf730395b0c7745aed354a0609ec5488a8f2723a66b1c20cf7109f3cac9738d78854ce0d01614aad5f0eea70f38e8cd165590814fed4ae12043c87f0bd4819a2e8654666b2e042f03bbc5bb283b90277e2771e3b15a3ae528ac269d7e2033bc1994df1a8692cc41a16bfb978b9abfad34541ed5fac53be018c510494be500d0dc3898dd5595439a737a18a56635f76d86c6d2e2ed81bbbcd6ecf28ff3b17170712e4f9b1b542ec9c676bf65259b8c3310c6273c48931008389664ff1146e4ca24e00553fb1649762cc0781ea08ec6affa2c06eb931d7aaee4a83970a7033007f5505df5050c0ee60f72514c267d80b8ee83544d7d0821032265a010e3b517913e73dbef66abe95f6b907dc886885b5b27fed49cefd0ab527909e93eb8f6a36b716165731f1063644d817f76aac5896843e9a8c77935cdf9bb32bdb060767c9cd08b36aaf04a0599579c2f1094c7080a5cf9cafaa6456878fd936dde2eec65923cdf36615493546838c4163b3c4ec1ff318dad734f33b1711b99156ab38c107350164bbed22afc835801a05ab517216f736f410d12d65d800ade2c6a3c3e450599d3a11226b215efddf8006c9b98b7ca43b84152dcf6e15b68ddd9d69a26eb28a2b57e02974a62d54f24efb2ceea4eaf18f2341aeac185dd7cf223cf5f9795ec21e169a026d4eabda5b774b87b9ad0b8b6dcd4cb9dbb1cc42604a23ab86ac471b451449f4283a9558db58069b3bd69e2dc4742d93fc5b67d16ae7bae5b5ba349fc8da3278b2ea0ee6418170ba40ce3f5d8147402db626aece3607cd2e5bc01b4564b664633b90629223b9519a31996cbb96ecdb861922dbac9543399f1aaeab6019d2325f71d8b175c4233ce7ce424f0216402eccc70b413e932c7d0f4afcc4a747e7e7d8963de8761fa3024a3ac4926d8e0a78b9c2d0c2cd71080ac3f46a15fe5c7d5bc3b26f5614bd0995495dc55c32d0bc7627c51973e9c04958e9cdf44d16f12c2d7f5993882c76475557149d41f8cb18b68d7c33a8b9a6f6e2ba7dfbb1ae7a1cf89b03e6bf94785a78a0557051ca304d45731d291b1aaa8376869ed0b51e6f677e02fcc84e33ad569c7d634ade547eb9d9d22528be1fbf2a4a1a098879ec2e1ab3dff893bd34d8ebd1c3d120bad7603694634f5dd8596ad98ce0ed414e9462609890eda587a5f44bc93407664f047ba88e34e54bc289ed25c78decaaad54f954e34545ae1994b471cca224d0602b4e62a02f6a26ff4114580ecb5104f966186e711fd3fe5019558a962a68e1810241d45e7a3575d89ca2fbaa0ab103929b21f9ba7d591c663b8f631257347510e49b0b27bf1939ff2f4a9beb8410b7e92a2637d1bf5c0c9d002a23fc1cd5ece865f1c86121ba71a541bdccf38d181cd2435c8605d83c446829d4aba2342c93f2e8a38aee2600dce66d773ffd3b85a5c9ef05416fb0947b27fa9bb14d30121b74f0a385944d70117fdc104bc03fec16d409ab5ee24d79527db06dba5638bff479081070c860f7556b8d5615e0cb3c30e3d8edfb3802b1fa3834d0b660458df8ccbc61af197442bae7e8ef18f650e14e829419c49cb66f7ba49de1f4c103648bd872c826e8e0a0ac80837b6f56825c5970290680db531a790d40c384124f9a91617bad599b284681cc862023b9f1eb8427e5b9a537990a9808fc55f496dba41ebf2988fc80d39f34c8fc7ec8032d05dfd529b7cd6b9997cbafc4538682b9c65fb9ff6b550499cb9d4a302ca83347199a94304cd8a1f75ea3e8c4e4c0172d52ab89614ed540c7a9ff12da31de6f969f42914e65fe4ea09657f0a3760c895a01e1d89aac7c6834ca0864e743f39a1b255f32661dd104eee1f83df52366a2d4dc2d0e9f2262ec5f81210c23a65074d43371a3f325080bcb46b7e9e4e7cfb6363b8efb1326326e552bcc15e2b8473cff1543173c24e0b1163d91ed953e8c955a9abfa3004ef296c1df2d9a63c72c0fcb8cde77068c7c05e0735ee1596e4c3228a31630d05f9ae42ab0f3d2771a4f65ff90e926c3db45ea89cdce27c1d1ea57c1583a88a28e47da1de5cd21f6221c8183855172b87e6b42c582b9c97d6e4b6a27fd650b248c57fdd5c0960dc31c6252d4bec0c5d26edd74d7971bb7a0bbc2d39b299b9cd504aa53d76d373f8ac08fcac930e546aa5a08529ae3103aa13e4436a30caf272c5a8dbd68da95873a3f62909a11ea0bfed27d3bc54167088f0b401070070dc5232e7ef2bf5f863afbc117f4bbf1ae716b26283b29a4ea4ae0cf4984a1672659467e142f0ca72d246024e50b3bdc057e005595e302d153c7b09305774e1a8a33bac1b82d2127bc6efee0fecb81706ec94e5e314010135cdd071e1e64cebf05e6887655dcfd36dfeb376f4f176f5986ef1dcb989c9525e827a22d7a94f3f85da58773f5ba2d43b5b617d9c83a3810dacea2662afd4998896b03eae320e60e5dc33bdf674ce372023c44ecc5cdc7806d8e11a467ab174ecdd7d0482fb1ed66203b732b0905bb5964a1d8c374b4be205081567b3c445e6f7634947f576a6ee7ef0ecea7dbdcf2cfac0cb96a41713b83e2d9defac52755338a59dac1c11c57f9cbea7653d61706628c9734373f882a0a9c3e11fbd0765062474b1fbbd84446667a0fc04066f0e528b6c47cbf3ee023e3f974bf45cdb4c56398d19b6dae3f0c1cb4a02a7dbdcaad0a353b0ba32e209cae4cf0508bc6a70e1a65b1926583d3a7af7f0eebb04b90c232207f845792f2983f62f90c91822122b41fc3d307258553fd5499164f3aeec8623acbdfe96a79a9361099c968240bf7be314af5a46f22d5f8b3db1d95fdebdc7632ed332ff9aeacc4866450b7e447bf41535caa911eed70deb03eeeac88925c0b2145f11fad2f42d68ce417b91593d28a802573c21b350df8a9f30f9d5559292c906d56b100daefc05aa88c3ae9a05eab982a7a04d4696fa18e066635f79ae7ec404d763c1496da18bf9d5853c8adae221a2c53f70bdab1c6a77242bc4fa7e488a2d20bae86a2752cad246ac89301d3f5625703c1f5e1ecd30a25ce4d02358f5bead310fdfe4851f628b372a8b8820c1512c4464cb49e28aa73701fcf7d850695556173a9593ec55621ea3513eb7434ac7c004ecedb335abe99a97820c08ec950d980e8b8126162587c55eeac323dbf1c2aea5ee560b9943469ca5a82954633b32c2f2bf46ff09244c1013a4ed50eff39533a0b5194c86eb1ab0edba593e27d9f2d8bcbfaa88e46f7cece0a87481eb74433c3736cb3a0279f7b14570d7342d6884198fe3bfd5445e8c74b5a3a9b9ff2b39793573ad1e7e84d839587f386cc1361e8dc163fd29ceadd30a0aacee10fe9b5c31096a5ed01fcfa5432c96159840712c4f2f0c7abc9fb0248fded7f00ae165abc36516218f489653a7ccb45a485d080011cc145323065ceade8209374576819b4c594d21a55421de19f0649bfbfe598ad47fc85d4dfa9c4e9856bef45cee84ee0741c4bed9fa53f66e12b9b03d09cea71f9c08daeff17533359ee45d585f1612174ed96f81e7e16f9a6d2ac77e047f557368e8d06fd68e124ba562129a4609964bf94afc817a01252adb285de98401fb9d8919e442c08d1abb89f5dc6b6969d630092f07ffb8b9b91e41d45761181f11013acdde65dd63839457c7b196a0107d3363c6e5dd24cf8c3e4e05725781525a0cac251e97dac6eb2d34c6c3b460d66bd926d352c437a9b1c1f4c33603d1b0afab53043d430d789de6cebdff42c0e873837b50cfdb9c1a4f5589b43d92adaa6c713e7523c08b4e30dc7b7b5e6033168aa7b2096afa2d2f4d5131e172e5c44a8672b01a868f46e01bb39f3cff76ee200c5003e076086a551362b42bb9729578a21eb23a3ed63cb5364d0a9be9cd7c5ff4274bab66f9bd3227901a6f17a65e0dc343272ebde4915a6ca6c4f8b2f83f65aba9e82422b2ea8db514389d4a63039b5fad768edee8d6ec1fc88c19ef91344bd2008a66dd29eeba27b23d95feb8f07701d4bb8a451e15408f17f905082362dabdc6ff80d977b91400293c712c14d1d2e37ff2bab5ff0170efafd33b66625b1695fac1c561a572f587d8d79e04eb9e53af2888c16c3733a486926a6955218824ece6d22e3e4fcd0539d35795f22cbb450203773b26043a188f04f9236e2cbdd723a1f4eb93a2556387895bb3d81f9641945c1baf232997f02947fe2ff27181108b9fdd0efa965efc234849b4c53fe81a6f2b6c8ead05c88ed4f24aa436aae8414c0734e3b9877c806cf30164e446d58c71b03baed9d000100951b49e37f95a1c9048c412067f646d1b50f4b141ba3a1b6245721d5f39161bd33cea38e7f1a2a1723568d94cdd4a22824c56e96fdb5b6e195556ceaf21efb6969afe5ddf128e40be1b0c2cff84eaec32c0731c92c85e26afcfe0bff5db6fb59b5f1b722e682edccaef3c3ff026abbac82124ea6456a41f04a60832329da101cea4096e557483b84790c124f0fcb2c876b1da6d30992617b4b0000009c0001001ab193c923d387865ca5d185ac3c646dd0a7b8aff8f17e3cfc713736e694080cc501f7848f6021acb3f7e735ac349b21e0b3433d42230bbde941a51f81efcd2e206490786286b9dda7c2c6a392007e45ea68836d45544c28a8c58b444c5bd6ce86e5fc5276d503423c9a698fb9c83f9429b1c4778d8ce7c0a3716d81af22222f39a0ad7d2d15e1a4e0be85ddc7262abda479caf8fa18a006500100804c010180430001002a719704f03f0c6b20a15be314c6ba255b57f6bffad876c2bafe4f5b8a2724e62364ad282db4dbaefa842d5b21f1d8e05a56ba9c8131c0fff27d4a7c25936300030101006ec5a4feea7cd6cf9d557493f329caee6757004bbdd8ed53d47fe5015a88e283d3fb379d602c72e0e7520a86b20804c29cbb3661a0870ddd6061502a58538c8f653e119585a54fb16ac952aa39cabb5b70f59ec2c876055bbf91f179dfcd25a1efd48d03a87f865b2cb2a6f0515a2209441bf1ced7214b4f4ab78f6c7661ffb09a85d36b89c466f5b6901bc5fd2fcd020fbb5dbf7729d8dd899545e491921bd3707256a7ca85f4abfed307976dca8fe166b4764e68e7e3787c0ed913548952898260b761bb9b2b2ef5fcb143e45e7ed95bc01705b6bca4c6945c5cee60e437e061cebc94700d9a70a6cbc69d47bbcffd20463d6c2d53d0eaa10b03f77dac47009c10008010000780090001007866726d000000000c0005400000000000000000080003400000000104000a800c00054000000000000000064010018004100100b2d5b322cba34175b9d6afb8404f2d80c63b3408b204d72346dc0a6b3b22262ee51cd96551f26dc5e80fe0d6f86da7b43b49aa2eb439029622e0cf46a988c17590d04340c9f38bddae98e644a391986c8048f556d83dcebce5657a37abdd3d73ba661b0095532f2636b29dc23ea0770b5afe5731b8b1af59336e21e2e4fa60b7ec5428cdc83682d9dfce9fe4582e3d47b8eda203f93eeddd4dee37a19a5540b67a3432527b1dff60cd66e70283fdf6341d8ac7858770a65bcd9996244a03e1e6f84bcb03421150b28f65a11880abb00fd7e0eea862738bde0d2d0a135dac62694bad296fe6219176349fc411aa700413d25031dc667dc6fd268649bd8f847cbead74d56ea7c49690d127fdc4c4f9f42d60d86817883f8b9f92b945755d3f39aa5795d9897d46f800ee3543626c86dffe1c39f1594b534df5a86be2dc0d96ced4271c30fd393aeb0b9ae47d8a7d0a2948836d31a591f34cdf6a3dfd255538173ebc32b2bfa88276987841d56fd66ea5b3781525adf20e33fc4cd8a2714f4149f692b62b0ad7a9020a7c3db23dd3b2d282023c9fe05c34ade4d9906924b7c4b702aeaea4321fbe3c1dab50fef3fe5acc698f58bdc89860ae927ba0d659592bc87c29c8899b8d1fdd71ebaeff4b9a996cc8ca71c8dadd5566da0418e801cfe2674b3b05d5ea59a557ea5de688cb2a62631f0e124285cbd48276ae150192ce3ee111ae43f6fda203c481cc24a68ffbfcb1cf8f9815e1719f4242d802760428ec0f37e772fbb131cf48c86a9aabd1356ba7d20c0c56a0c3fdbc9dec891cf96930fda408d4b94bbb9b51a68a8a4c6cd49ee820b8bde39b3d0f7092d79ea9840160eedc1e3790fd48d36905b61af63e7583b9dd7af13a65c47fa5bc7583ac1191fc9c8bd0527a77a05fd41b0b2dae9bdff6f6843f3ce4df43da3f25eb4b835bc595286253467c68d3e8125b7cc0d50cb65030384ba4047d6fee7b22822588a9d03ccd86d0ab59521bc786e544196314fad036237a80fa414c3d7810df0d91e445fb50581df33f90105f2f45a8a3fc412f0d291f39dd09cf294783a5d8948823206b19dd534065bda2cb344fdc96178590c573ff9c76c87e6d495f921b6249f193dce2aa1b5a9b57f2c251d1a87a1af7afd8fbe617d51b5d24bcae55f675ad087e97d4f380357b3dc25574f03cb09ac7696d44d0f53ab01fc88198782cd348dbf0505c95948e2b8a60d3a041b9d4636e7df58e4fb4874e183cd472fcbefb8f537eae2d1073537ab7acbd7f94f1b9e5189771fbb9c4c2acc6cbed557c86ee0abc31adcb1ea1703a1d1a2fe5da0a68d60166efddaccf85eb0e5c1fc87d997ae52b45ce8fed6bfe63acffe686f36357945e1776f0469cf5584b614ec4d3bde68ab25643c6c8d9a68ad1eb4f47f54e924a6597177e5294bdd39cc5be4308d612c8b405e70fd7cdde10288e66642ef5d788877decd4a8361108fe1d515db0f0b2f070b059419cc72611569d4abb4a401aade48affa5ac1be43478ad589c55ea907bead9162436ebecbf74037ca60b3c7e41d86be1b6e206c3bb471244cb23063d4369054b7ff213ec3753228d03649cd36243d7a220eb2ea96f9c29a216794430d98b5a8c2c76c1af387fe8849cdd966acdc5be26813a1dcaf33eb5685a6c1d0eb24e499516048d7d0d67611d93e006d35bde5b19cd83db840c772d8ac1bc78b4ecd76155ccfce35f8234e1c5257e9790b85aaefeab09dea563282ca5a3fc771068265bb401c198176df8ab356ad0006c816aa94dc80605be85ceab2a743241d2ee10fabf79d1991126a684d819bfc8ab1e7e0536205b7cd15b80160988e7537d8058c44a73a4538f6424c6a436a1c954c7ea41e67cbc1cc2675e93165b9a57d2fef3dfdb58c29f5a7445d8dd9e45f9e6d1abf702355e14f4bce9bc86227fa0c5a2614384bf0a236b805e124793a8b91dc2d42e784a1c69dc6aa49c811f1ec7e6c4f620ba4c3b46c901625e7a74bff35f2788645673434bdc0d5d3b97da925344724b5d931902709807b5942959971cb8d51cbc8d650b3e3d9dd5e8f995bfb34fae4c2fb7af6212070e6c4bcdcc7b91db2269cdf0a481833178bf0854c1e47a26e43709dc0f1f5c595d10e5ab3995b55c290097576dc68344dd39e501b1f1bf0a29b217756c69773fdba0fe90047e9b17d355ffd86b4856842082c64c55b339aed6634c94238b59df7d5b669dfdec3ee8dc98cfb4910f9aabdac6738a77f48854071e2e07af5662a79353addb0ca92da137960a5d2ded8072f63a031be67457c19bd79307da023c251d4a4f20b51856284d1f4e182cf51c2c6a9db06ff7845ba98e722d701512427a3308ee57cc603975ca4ff5c566671f7b42aebafbd05f506f49009f888d5e300b5110dae2a21711941cde2d14761fc52cdf19f9604c5fd46021db673c8079f77691bf63eb5e3292169386ee4fa3dd0b81a4380e624710ac6a667cf6fa666631bbb16044a531584e47eca35d8a172cea50981278401857a368ab7395ae5bfb4491ac3e5678e1b8c41ae984cce5f948ee83b7092ac04d7d3387ef35aaccd44fa8d9b90148eccbec43f2088562f89d0231bd08a9000a9974fda70e374cd176292608a486fbdd5b77610abfb06cf60eb414e8763f7e220e4d7b1cb13155832fc6ffa6197b121ddbaf207640a00db46256d497a53354d7070996d681116ac1bd808480503041e711c1d82393d059aa2c31d4aad9c71f49f223323868a92a4e8806c294c01a8b5941c945221a4003d4e6a153edf50d97fd6142dcb3f66062ed1e998b458af1608d08057d97345053b158e956621a2d41820a2618570db3403a8beaa70de302b283213a70d3f2cbd3693eb2433e19edf71f37859cc1934936778d88c5f2062c3cd2d7350f79846800fbb99a38e1669438ec3895087266183c7b470b4ffcef03d7f73bde5955f1bc254e4d57802099c1550ad04513272a12627118fa5b8ecdee553a9f4fd126a8a68eba98f96e03428987adce1a828abdd626d86085f4f08874d083a1a9644f71b109c1cc864b1f29e0c867d0155df6d98c34313fbb3651f30cd151c446f1726f50c6fbd0582c5f46c4bbb9db9916df41c2d808008fd968fd86a22bf320c569ce7207583c0879b9cfc43671ce998ae1f9ae47ded722c67137442e4d15b76b29d344788fe23bc6f6e33b61581263af0c0a61c069c39b648a6b09850de2439ce2a60379a6a2ab65e9bb9efe82e271a9b9d4925360c86ebe944ff4cf9a364919b89fc05dac9752b4a40c008c8832ac953054eca58175b110caa1ca80971ecbac9cf85568e059538cf334fd661e08e848bfd2e8b68cb47e133281dd6787621e8dffca879c799e024af3a0462e6e9243b77d993e54eab5dc8a1b419802696692346c0e89bc1f204e08acf9b3341d00d43153841b7dde10755f042171cc94541408667b3b85d13370783ffbf4166ac6c1ee00aabc213c25f761d0e642a216313ca4d590aeb9e6bd14774fa77ba8b1796e3c779b23f6361f3bae9334e1e21220ee0fcb810662a935abba6ca48c1c3656ab8eec3b3d06360f67bb16262522721aea8643dc640bed9a98453d518b527730147b048cd05101ad6540260347f7404c2893c4fad8673a021b5cb3a2e6f130dd12fc101801ad7c4623983f966d8e948eaf44c980a89dfd6bcc142af7e24c8bbd3722b94f3990f3ca00606ff6e781875978bc3b8aa551f43ef7bd2d1f79fd9f0dfee0204901ff2a0163f45120dc1906a3a1bc3ce59a390e84eebef1af7a853afe6f059b854b05032a704bf8b0d0aa70fc5929230faa6acb369196f9c6767c9cd9673b3278ddad9dcc8eff462d512eb5ba98e897a63877b93694faa35a6def7030b4c661acb6861a6cb20400c378fe495bddbdad28a5e5c2bd6a5bd873fd49b3277ee4e857b637a1656cfdad7875dde07d471dfd3c0139d78e3cc602dbe1dffd0c31cac805b46d0b7c740043c4f3b64597f67e497793298d09261f0feb3ab9c5d9d7098d7241b73e5dc98c93f7d13306e7483ccf54919190b80c197c7af7c6a0f83dbc4e2b41116199cf567f347cef2fce591ac8bcc8df339e30e91c0ef56a63f9023191cede061963fd8c0c21ee1433e826b77fe1a7ad967db6080151ac654bb238d111288a1bafbf94b85fbb3011a406ab0bfef0ed2b5e57b66380f616efb2584519fb0bc6361f4949c318d62dfedebb676706ba15574ba01682a08d5cc0c0f8711581d5fa222c96c1af3c3b5cd756036520d5ea68d5a769755ffdb3f896ff1e8c3042c9a683f6381c6f7c493f919dc730e46024dd886a12ddacf9a18ee0a4a26c48c8ba5d3e5eceef0cac447df7103ab0075a76be9b2a20f4c3a7bf6ca42fb4d46d196d6dca48c9b8b954f1cd4cdab4e8a28b93d4ebedea1735312013088ab27534770d5ac7a1f773233fa29d6ae08a7e8199b2372eacf9de0da70a87f420444a5ea6990eca8d98de56ed640635b68b8dc72b6935180835c0b02ff3131ff145e436d0818f24f4b915f59e6edf41f4fbf60252b9c588867bd3bfb04208bbcedb28645a3780e0f55fb7265a68779e482a1481a4a15dbb75170777e391d3cc0bdd9b88b007b93f58af9567a27da6626362b5aefb1c0f08a71b54b35fb6c197d6c50800a620f06c0017b46d0fce5e68925847b040ec3371b987ce1536f3c6dc6b0403635c3ed17b54f91224d94bd0439b3c8a03ee00311774f2c892661a34ee28c40111b311fdd907dd24f48720bdb6000d728196be533087b325902c513a81735898d0fa41cb765059e8c5aea7fef486d1d0737078463155ddbe75fe21819a76125546864e1f43aa20f922d19bc1cd8c16c294d53ac29cd3b3b7ed41271ecc0e8e941a396d217475d2c254a7012719063981b48b611220dc00d292709634803932b7452e93cb272256d152f32d31378a28f5f1212317b37f2649d4354fd2da974a5ca54f83a7761f73a41398d2a607b532941b6957b54fbc0fb796b94ee2f1159b33c6d68638bec83bd3b46f8fc8659d81d007f1934b4fc3b77b356325bd10c1d77243bb072352bb034be6ec64f2a498d26b091d72951c1b6b7cb2b1360b913c0d510bd9e9235dad36a105cec3f18af18de5d6fc1ce7a4427c3c22a880b6bdd48c3eb44a3d424968a423a1da6ce3d848a43df9f5d7ca36892d06e2673c88a296f219982dceb6a40045e96aba7c1991d52719afbd45e94a639fe4a1e13e40f1816084dc0243050b668c6d0bde0f73f880f63020ae0e580e5f8d07f374bb09b1cb7c6ef9c1e628b317502412340d00150ab7b351f865c277200163785d7b21527bd4869b8b2feda44c5d7c36383b8489652512880f849bb0acdf23d307abf1974c9a69649cf97ca909d2055604998fd7ed0c9e867f9c0fbe399bfb84f7774b9640c6e62b3e727441ae7bddd59ddac3053bd65916e419c3996ac27a2f77c031fe81345a1c10d7b1eecbb0d31e2f57996ff3f1bb4d27e8f2ca7902e901bc8f5ac750fa8e8bf7ed88e7bcf6e94cf106e849161c3d7fa17eaffbd136ba5995a0494edc4b079a37c6521e309b52df2e388023df20f608985ee62b97c9d85085ee6a4156d639ccc1ba1ef12888946cc19ff440fef4e21a9b55748cbe8b1c9a5d1990e75119c72a617984a8684753b69b72b08f839befde7108187e90d6c62333b6a8772760fe3a9f18a96d981a2334131e48ae693e695cd64eccc158044bbe5e57079317fa404bf630f911826e33cbd42ec5f7d1ce4ef5c6ae1958aadb6475ed3819c909a552cc1a4ac331150bee2000028008000180ffffffff08000340000000040900020073797a31000000001800028008000180fffffffb0900020073797a31000000000c00044000000000000000060c00044000000000000000020c00044003000000000000007c000000180a05000000000000000000030000015c00038054000380140001006261746164765f736c6176655f3100001400010076657468305f746f5f626f6e640000001400010067656e657665310000000000000000001400010073797a6b616c6c657231000000000000040003800900010073797a3000000000140000001100010000000000000000000f00000a477d9f400fbc8089620d0c7cbb04735310c90eed1a6b9fdb59324dc5102acdd2508789481aee5a4e3f589f8a62a786dee091743fc810dbef6231a8cfed9983ee4d"], 0x2660}, 0x1, 0x0, 0x0, 0x40}, 0x4044010) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x3, @local, 'syzkaller0\x00'}}, 0x1e) 11.108360938s ago: executing program 0 (id=2669): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) 11.016036837s ago: executing program 1 (id=2671): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x80, 0x16, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000100)='./file0\x00') mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) 10.806196158s ago: executing program 2 (id=2672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = fcntl$getown(r0, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e2b, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r2, &(0x7f0000000340)="01a4", 0x2, 0x4080, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000070000080000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, r5}, 0x94) 9.891877528s ago: executing program 1 (id=2673): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x208001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000140)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c020000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251b0000006e0019004c470fd1cbd2d80178c929e8dacd2d6e2aa9fb43f47f012414780938f35f6b09e0050027d6dafe227a99305fa4fa2f6d771159fd238c3c0d6de08d6e69f1889fdf88a00e07b75d83a0f477a733f1730df354ce080537b75a165d4c794aca433c96c2ad30094cdb61", @ANYRES32, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x8, 0x2603) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="000000209c369212db9297c4289e79e27f5c6456c787f10300000000000000013702e77385c2b465060d8f0341aec162e7", 0x31, 0x4000000, &(0x7f0000000080)={0x11, 0x17, r6, 0x1, 0x3, 0x6, @random="1d3fbeb7c857"}, 0x14) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x4, &(0x7f0000000000)={0x16, "f30ec8798c7469e800a4e28b8271b72449b1ac9d01f332f17e01647c6e1a4d37e3"}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r7) 9.835545878s ago: executing program 0 (id=2674): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440), 0x2010c00, &(0x7f00000005c0)={[], [{@flag='rw'}, {@smackfsfloor={'smackfsfloor', 0x3d, '}\xff\xd8}+!&-*/!]-@/'}}, {@fowner_eq}]}) 9.814859902s ago: executing program 3 (id=2675): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x20f5800, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x7, 0x0, 0x0, 0x0, "f01881a1debdfbff"}}, 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) 9.664462537s ago: executing program 0 (id=2677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x1c, r2, 0x1, 0xe, 0x6, @random="091494122121"}, 0x68) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) 9.599928488s ago: executing program 3 (id=2678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/228, 0xe4}, {&(0x7f0000000000)=""/38, 0x26}], 0x3, &(0x7f0000001580)=""/4096, 0x1000}}], 0x1, 0x20, &(0x7f0000000400)={0x0, 0x989680}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x58}}, 0x0) 9.419213673s ago: executing program 3 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x47, 0x0, &(0x7f0000000280)=0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x38}, 0x4048881) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b2000600410c04000a0001000000000000000000140035006d6163766c616e30"], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x4000800) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 7.539897117s ago: executing program 2 (id=2682): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000440)={'NETMAP\x00'}, &(0x7f0000000480)=0x1e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r7, 0x10, 0x1, @in={0x2, 0x4e22, @empty}}}, 0xa0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x14}}, 0x0) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x2, 0x8}}, 0x20) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="1d", 0x1}], 0x1}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) 7.340994033s ago: executing program 1 (id=2683): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x80, 0x16, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000100)='./file0\x00') mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) 6.977318044s ago: executing program 0 (id=2685): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, 0x0, 0x20041080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_FUNCS(r2, 0x705, &(0x7f00000000c0)=0xff3b) 6.756824807s ago: executing program 4 (id=2686): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x40000000, 0x4, 0x7fff}) r3 = dup3(r0, r2, 0x80000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0xfffff952, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e63, 0xe4, @empty, 0x7daa}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee80000000000000000200000000", 0x58}], 0x1) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null}) 6.678440218s ago: executing program 3 (id=2687): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 6.433464897s ago: executing program 2 (id=2688): r0 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000600)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCOUTQ(r2, 0x5411, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f000073e000/0xb000)=nil, 0xb000, 0xb635773f06ebbeee, 0x30, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r6, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20002, 0x0) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x38, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect$midi(0x0, 0xc9, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x1, 0x1, 0xe6, 0x70, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x40, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x4, 0x1, [{0x8e, 0x6}], 0xf8}, @midi_in_jack={0x6, 0x24, 0x2, 0x6, 0x2, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xb1, 0x1}], [{{0x9, 0x5, 0xc, 0xc, 0x400, 0xaf, 0x3, 0x40, {0x9, 0x25, 0x1, 0x5, "07f1968064"}}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x1, 0x0, 0x2, {0x14, 0x25, 0x1, 0x10, "5d33c9ca18803353dceb4c5e5949566a"}}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0xe, 0x5, {0xd, 0x25, 0x1, 0x9, "cf5e1cb00787f47f84"}}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x4, 0x6, {0x6, 0x25, 0x1, 0x2, "1172"}}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x8, 0x2, 0x22, {0x9, 0x25, 0x1, 0x5, 'j;>ZT'}}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xdf, 0x7, 0x2, {0xc, 0x25, 0x1, 0x8, "b46b84b886db1408"}}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x0, 0xfc, 0xfc, {0xc, 0x25, 0x1, 0x8, "b577a7ed44227698"}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x10, 0x4, 0x3, 0xff, 0xfe}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "507b57cfa3827f7bd9b5ca37c4394ada"}]}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x415}}, {0x98, &(0x7f0000000400)=@string={0x98, 0x3, "c5c86d981db9cdf6725dd5dace99b2085ea81127961a09fa41dca91c8708fb77f000fef2adc67d7623d9bda8478c8161b77653e65d1c7f7f51fae422c45358c1a81b67db691476862b204dd9349cd0feac05dabeb27c9ddab7d9ed881d93a1d134e38380ae1006deb72f05c1184b0fd8ac3b6f7568cfec1b5ec31a9df8057d75f8fd7fdfd5e01406bdc64aff5e0319eecce146d15ee8"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x438}}]}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r9, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061113c0000000000364a0000ab"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.32058604s ago: executing program 3 (id=2689): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x80, 0x8, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x4, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0x10f27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x24000044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r2, 0x1) r4 = socket(0x840000000002, 0x3, 0x103) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r4, 0x0, 0x26, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000ac0)={0x9, 0x0, [{0xffff1000, 0x5e, &(0x7f0000000240)=""/94}, {0xa000, 0x4, &(0x7f0000000140)=""/4}, {0x5000, 0xc7, &(0x7f0000000340)=""/199}, {0xb000, 0xda, &(0x7f00000004c0)=""/218}, {0xfec00000, 0x98, &(0x7f00000005c0)=""/152}, {0x1000, 0x58, &(0x7f0000000680)=""/88}, {0x5000, 0xfb, &(0x7f0000000840)=""/251}, {0x41000, 0x94, &(0x7f0000000940)=""/148}, {0xcc646ee5106a8f2f, 0xad, &(0x7f0000000a00)=""/173}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006e00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4ece, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000000000000000000015000000000000002900000043"], 0x30}}], 0x1, 0x800) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0100001900010025bd700001000000fe8800000000000000000000000001016401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000060000000000000009000000000000f5ffffffffffffff00050000000000000008000000000000000000000000000000150000000000000000000000000000000008000000000000020000000000000000020000000000000100010000000000840005007f000001000000000000000000000000000004d56c00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000330000000200000000000000000000000000ffffac1414aa000000000100"/244], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x42, 0x0) 5.458970325s ago: executing program 4 (id=2690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/228, 0xe4}, {&(0x7f0000000000)=""/38, 0x26}], 0x3, &(0x7f0000001580)=""/4096, 0x1000}}], 0x1, 0x20, &(0x7f0000000400)={0x0, 0x989680}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x58}}, 0x0) 5.102981331s ago: executing program 3 (id=2691): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r3, 0x2, {0x0, 0x1, 0x4}, 0xff}, 0x18, 0x0, 0x4, 0x0, 0x0, 0x24004041}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, &(0x7f0000000340)={0x34, &(0x7f0000000180)={0x20, 0x8, 0x1, '\b'}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xd6}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x80000001}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x6}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "840d4fd46649432e4630323d5779c084f6e42cf49f6290f652b10ffb4635d53df54de71e4474730fa4a42d520435c2"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x40, 0x9, 0x39, {0x39, 0x3, "c9f92a5096a7b4640463380ebc2384fe70bab727b34310bfc889bd4e88558a8505fd42307edfbf5e581de885284a8ac42d6873836fba5f"}}, &(0x7f0000000400)={0x0, 0x3, 0xa, @string={0xa, 0x3, "830ae1b1aa3331e9"}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x40, 0x15, 0x13, "87d7331e3aa2334d72b0bbdba9866bc7faa27d"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x31}, 0x0, &(0x7f0000000580)}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x19c, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0x86, 0x75, 0x2f, 0x40, 0x1b3d, 0x1dd, 0xa291, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18a, 0x1, 0x52, 0x1, 0x50, 0xa, "", [{{0x9, 0x4, 0x8a, 0x32, 0x4, 0xae, 0x6c, 0x19, 0x4, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7b, 0x81, "76aac9c39827004706"}]}], [{{0x9, 0x5, 0x8, 0x3, 0x8, 0x1, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0xfffb}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x20, 0xfd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xca, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x40}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x9, 0x9, 0x7f, [@generic={0x32, 0xb, "1105b4103c261771db4e325059de2e3ea609c14585b966f148be6577573b30696c8983ebf62800c86946795ae42ef873"}, @generic={0x1a, 0x4, "f0e24fa6a57ce00599671dd3e2d1478bbf28e0bb71f1ff98"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x1df, 0x81, 0x1, 0x0, [@generic={0xe0, 0x6, "c59830bd2dbb87b8ccb314142cba60700e4f84ba4d1aeb817558401c78a962ccfeca7a0fd09b090f243b306eb7a633ce27edd1837e6069f733f64e55bef2741e42c770cb66ccf26b6ae7e8c2c47c24fe73894a4c7768a9b70819b20e1e68ab97e73e933ff61450d08601f489d078a378c164b0ae461ae2ebcd5ded852bebf2b2ea08f60c12f2f54ae599a673527e9e77fadf28e2e17439f3cabb229cf0ff7b9096c056908669aa6463b5beddab91941357cbb13d6ae77022d803cddf2fb485bfb456a1932372552ef8a2e9695d606de2f1029f22769813bb7ba2b091c0f1"}, @generic={0x2, 0x24}]}}]}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x4, 0x1, 0x4, 0x20, 0x74}, 0x10f, &(0x7f00000006c0)={0x5, 0xf, 0x10f, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xe, 0xf, 0x800, [0xc0cf, 0xc0, 0x3f00, 0xff00f0, 0xff3f00]}, @generic={0x6f, 0x10, 0x4, "38fc1afd541c3a076166d8bb015397bd6dfc1d84d84421dc03a4435b973975e308662ba2fc58a8d5605c6976f78d0771c3517dc80f460814a88b8ce5523b122493a1fb386abdc90ac4455409adf3eec83c50f782ef100476e1154e1383843dd37d935c16ad2c98d057376959"}, @ptm_cap={0x3}, @generic={0x78, 0x10, 0xb, "ce747e39a7fc85b9f0c413d9bbd5f9eafb87050c0628d80ad1180cee6b153c6f3716ee10f98e21a64ebdf2fd0dc6f3141e60c16cf81239f18446e963713f6304f5cf9290abdb9641d814f621fc3e8923139ab8b37c712c62ee1141769ac7cc0f1a7be70b01e77f04f613cf56a352a2344f732817fa"}]}, 0x7, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1018}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x21}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.091495666s ago: executing program 4 (id=2692): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$BLKGETZONESZ(r3, 0x80041284, &(0x7f0000000000)=0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) 3.644819476s ago: executing program 4 (id=2693): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440), 0x2010c00, &(0x7f00000005c0)={[], [{@flag='rw'}, {@smackfstransmute={'smackfstransmute', 0x3d, '&1,/.'}}]}) 3.524464005s ago: executing program 0 (id=2694): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x80, 0x16, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000100)='./file0\x00') mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) 3.443404506s ago: executing program 4 (id=2695): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 2.093965467s ago: executing program 4 (id=2696): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x47, 0x0, &(0x7f0000000280)=0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x38}, 0x4048881) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="b2000600410c04000a0001000000000000000000140035006d6163766c616e30"], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x4000800) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.515747162s ago: executing program 0 (id=2697): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000440)={'NETMAP\x00'}, &(0x7f0000000480)=0x1e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc) r6 = dup(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r7, 0x10, 0x1, @in={0x2, 0x4e22, @empty}}}, 0xa0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x14}}, 0x0) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x2, 0x8}}, 0x20) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="1d", 0x1}], 0x1}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) 1.482790087s ago: executing program 2 (id=2698): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) 1.34792094s ago: executing program 2 (id=2699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44891}, 0x44) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x44080) setsockopt(r2, 0x0, 0xea, &(0x7f00000000c0)="183645ca0158891004f3f9b1cb244ad59e4c672fe97c8c4704f7aa04dc9c960fa4290e067e6a104ad7e83ecf4c3b0fba23ea5b4b25e2d51b5b16beb3fb6bc5923b10396447ca8fc38d06ae95e42ef9fa73b575413b24e902dc6a27b732733c81b2acc6bb0518eed11b5a68c0a7d59a7d7b367eacab43422d8a2ddbdbe03dc2f5900b2a815c9039f2216d6c84c2b06693a1afe2346be5a5abb5120c1013271b417568c56459058eee3c922beae4e561076b73de8b79776e8cb63c40cfa53834dde6", 0xc1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x77}, 0x20) 0s ago: executing program 2 (id=2700): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000200)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x80, 0x8, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x4, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0x10f27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x24000044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r2, 0x1) r4 = socket(0x840000000002, 0x3, 0x103) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r4, 0x0, 0x26, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000ac0)={0x9, 0x0, [{0xffff1000, 0x5e, &(0x7f0000000240)=""/94}, {0xa000, 0x4, &(0x7f0000000140)=""/4}, {0x5000, 0xc7, &(0x7f0000000340)=""/199}, {0xb000, 0xda, &(0x7f00000004c0)=""/218}, {0xfec00000, 0x98, &(0x7f00000005c0)=""/152}, {0x1000, 0x58, &(0x7f0000000680)=""/88}, {0x5000, 0xfb, &(0x7f0000000840)=""/251}, {0x41000, 0x94, &(0x7f0000000940)=""/148}, {0xcc646ee5106a8f2f, 0xad, &(0x7f0000000a00)=""/173}]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006e00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4ece, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000000000000000000015000000000000002900000043"], 0x30}}], 0x1, 0x800) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0100001900010025bd700001000000fe8800000000000000000000000001016401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000060000000000000009000000000000f5ffffffffffffff00050000000000000008000000000000000000000000000000150000000000000000000000000000000008000000000000020000000000000000020000000000000100010000000000840005007f000001000000000000000000000000000004d56c00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000330000000200000000000000000000000000ffffac1414aa000000000100"/244], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x42, 0x0) kernel console output (not intermixed with test programs): k+0x10/0x10 [ 563.322074][T13004] ? __pfx_do_msgsnd+0x10/0x10 [ 563.322104][T13004] ? __might_fault+0xaf/0x130 [ 563.322144][T13004] ? __x64_sys_msgsnd+0xee/0x120 [ 563.322174][T13004] do_syscall_64+0x14d/0xf80 [ 563.322203][T13004] ? trace_irq_disable+0x3b/0x150 [ 563.322227][T13004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.322249][T13004] ? clear_bhb_loop+0x40/0x90 [ 563.322279][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.322303][T13004] RIP: 0033:0x7f279ec0c799 [ 563.322324][T13004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.322342][T13004] RSP: 002b:00007f279ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 563.322365][T13004] RAX: ffffffffffffffda RBX: 00007f279ee86180 RCX: 00007f279ec0c799 [ 563.322381][T13004] RDX: 0000000000000008 RSI: 0000200000000cc0 RDI: 0000000000000000 [ 563.322395][T13004] RBP: 00007f279ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 563.322408][T13004] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 563.322421][T13004] R13: 00007f279ee86218 R14: 00007f279ee86180 R15: 00007ffc6db524f8 [ 563.322457][T13004] [ 563.409821][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.409888][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.551398][ T5884] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 563.578381][ T5780] usb 4-1: USB disconnect, device number 61 [ 563.729347][ T5884] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 563.729393][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.729418][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.729457][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 563.730738][ T5884] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 563.730765][ T5884] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 563.730784][ T5884] usb 5-1: Manufacturer: syz [ 563.768448][ T5884] usb 5-1: config 0 descriptor?? [ 564.143570][T13040] binder: 13038:13040 ioctl c018620c 200000000380 returned -1 [ 564.279640][T13043] loop2: detected capacity change from 0 to 7 [ 564.300381][ T5813] Dev loop2: unable to read RDB block 7 [ 564.300418][ T5813] loop2: AHDI p1 p2 [ 564.300449][ T5813] loop2: partition table partially beyond EOD, truncated [ 564.305816][ T5813] loop2: p1 start 926365495 is beyond EOD, truncated [ 564.314868][T13043] Dev loop2: unable to read RDB block 7 [ 564.314898][T13043] loop2: AHDI p1 p2 [ 564.314933][T13043] loop2: partition table partially beyond EOD, truncated [ 564.316427][T13043] loop2: p1 start 926365495 is beyond EOD, truncated [ 565.022364][T13049] ALSA: mixer_oss: invalid OSS volume '' [ 565.022383][T13049] ALSA: mixer_oss: invalid OSS volume '' [ 565.518176][ T1632] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 565.665139][T13072] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1866'. [ 565.686917][ T1632] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.688677][ T1632] usb 1-1: not running at top speed; connect to a high speed hub [ 565.707062][ T1632] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 565.707601][ T1632] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 143, changing to 4 [ 565.737664][ T5780] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 565.755117][ T1632] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 565.755207][ T1632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.755230][ T1632] usb 1-1: Product: syz [ 565.755245][ T1632] usb 1-1: Manufacturer: syz [ 565.755259][ T1632] usb 1-1: SerialNumber: syz [ 565.889700][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.892314][ T5780] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 565.892417][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.892489][ T5780] usb 4-1: Product: syz [ 565.892507][ T5780] usb 4-1: Manufacturer: syz [ 565.892580][ T5780] usb 4-1: SerialNumber: syz [ 565.949323][ T5780] usb 4-1: config 0 descriptor?? [ 566.106171][ T1632] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 566.106200][ T1632] usb 1-1: 1:1 : sample bitwidth 202 in over sample bytes 2 [ 566.106226][ T1632] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 566.113406][ T1632] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 566.166208][ T5780] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 566.564236][ T1632] usb 1-1: USB disconnect, device number 27 [ 567.986449][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.502199][ T5884] usbhid 5-1:0.0: can't add hid device: -71 [ 568.502330][ T5884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 568.546852][T13155] FAULT_INJECTION: forcing a failure. [ 568.546852][T13155] name failslab, interval 1, probability 0, space 0, times 0 [ 568.546892][T13155] CPU: 0 UID: 0 PID: 13155 Comm: syz.2.1869 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 568.546924][T13155] Tainted: [L]=SOFTLOCKUP [ 568.546932][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 568.546946][T13155] Call Trace: [ 568.546955][T13155] [ 568.546965][T13155] dump_stack_lvl+0xe8/0x150 [ 568.547005][T13155] should_fail_ex+0x46b/0x600 [ 568.547050][T13155] should_failslab+0xa8/0x100 [ 568.547089][T13155] __kmalloc_noprof+0xdf/0x7b0 [ 568.547123][T13155] ? tomoyo_encode+0x28b/0x550 [ 568.547165][T13155] tomoyo_encode+0x28b/0x550 [ 568.547206][T13155] tomoyo_realpath_from_path+0x58d/0x5d0 [ 568.547253][T13155] ? tomoyo_path_number_perm+0x219/0x630 [ 568.547286][T13155] tomoyo_path_number_perm+0x246/0x630 [ 568.547321][T13155] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 568.547357][T13155] ? __lock_acquire+0x6b5/0x2cf0 [ 568.547419][T13155] ? __fget_files+0x2a/0x420 [ 568.547454][T13155] ? __fget_files+0x2a/0x420 [ 568.547479][T13155] ? __fget_files+0x3a6/0x420 [ 568.547504][T13155] ? __fget_files+0x2a/0x420 [ 568.547535][T13155] security_file_ioctl+0xc3/0x2a0 [ 568.547570][T13155] __se_sys_ioctl+0x47/0x170 [ 568.547616][T13155] do_syscall_64+0x14d/0xf80 [ 568.547648][T13155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.547672][T13155] ? clear_bhb_loop+0x40/0x90 [ 568.547701][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.547725][T13155] RIP: 0033:0x7f279ec0c799 [ 568.547746][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.547766][T13155] RSP: 002b:00007f279ce5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.547790][T13155] RAX: ffffffffffffffda RBX: 00007f279ee85fa0 RCX: 00007f279ec0c799 [ 568.547807][T13155] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 568.547822][T13155] RBP: 00007f279ce5e090 R08: 0000000000000000 R09: 0000000000000000 [ 568.547836][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.547848][T13155] R13: 00007f279ee86038 R14: 00007f279ee85fa0 R15: 00007ffc6db524f8 [ 568.547886][T13155] [ 568.647621][ T5884] usb 5-1: USB disconnect, device number 65 [ 568.655821][T13155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 568.898773][T10364] usb 4-1: USB disconnect, device number 62 [ 568.974278][T13156] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 569.001332][T13156] netlink: 'syz.0.1868': attribute type 5 has an invalid length. [ 569.001355][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 569.211372][T13156] ip6erspan0: entered promiscuous mode [ 569.323985][T13182] hub 8-0:1.0: USB hub found [ 569.349485][T13186] FAULT_INJECTION: forcing a failure. [ 569.349485][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 569.349522][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.2.1872 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 569.349550][T13186] Tainted: [L]=SOFTLOCKUP [ 569.349557][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.349570][T13186] Call Trace: [ 569.349578][T13186] [ 569.349588][T13186] dump_stack_lvl+0xe8/0x150 [ 569.349625][T13186] should_fail_ex+0x46b/0x600 [ 569.349664][T13186] should_failslab+0xa8/0x100 [ 569.349698][T13186] kmem_cache_alloc_noprof+0x87/0x680 [ 569.349729][T13186] ? fcntl_setlk+0xa9/0x10c0 [ 569.349760][T13186] fcntl_setlk+0xa9/0x10c0 [ 569.349786][T13186] ? __lock_acquire+0x6b5/0x2cf0 [ 569.349823][T13186] ? __pfx_fcntl_setlk+0x10/0x10 [ 569.349867][T13186] do_fcntl+0x981/0x19e0 [ 569.349902][T13186] ? smack_file_fcntl+0x150/0x320 [ 569.349928][T13186] ? __pfx_do_fcntl+0x10/0x10 [ 569.349957][T13186] ? __pfx_smack_file_fcntl+0x10/0x10 [ 569.349992][T13186] ? __fget_files+0x2a/0x420 [ 569.350026][T13186] ? bpf_lsm_file_fcntl+0x9/0x20 [ 569.350049][T13186] __se_sys_fcntl+0xcb/0x160 [ 569.350080][T13186] do_syscall_64+0x14d/0xf80 [ 569.350109][T13186] ? trace_irq_disable+0x3b/0x150 [ 569.350132][T13186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.350153][T13186] ? clear_bhb_loop+0x40/0x90 [ 569.350178][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.350200][T13186] RIP: 0033:0x7f279ec0c799 [ 569.350218][T13186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.350237][T13186] RSP: 002b:00007f279ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 569.350259][T13186] RAX: ffffffffffffffda RBX: 00007f279ee86180 RCX: 00007f279ec0c799 [ 569.350274][T13186] RDX: 0000200000000300 RSI: 0000000000000026 RDI: 0000000000000006 [ 569.350287][T13186] RBP: 00007f279ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 569.350299][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.350311][T13186] R13: 00007f279ee86218 R14: 00007f279ee86180 R15: 00007ffc6db524f8 [ 569.350344][T13186] [ 569.375569][ T5884] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 569.418743][T13182] hub 8-0:1.0: 1 port detected [ 570.499808][ T5810] Bluetooth: hci5: link tx timeout [ 570.499860][ T5810] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 570.627169][ T5884] usb 1-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 570.628038][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.697808][ T5884] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 570.697837][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 570.697857][ T5884] usb 1-1: SerialNumber: syz [ 571.020027][ T5884] usb 1-1: 0:2 : does not exist [ 571.020114][ T5884] usb 1-1: unit 69 not found! [ 571.093726][ T5884] usb 1-1: USB disconnect, device number 28 [ 571.147162][T13227] veth0: entered promiscuous mode [ 571.179298][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 571.203523][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.227635][ T5780] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 571.367672][ T5780] usb 3-1: device descriptor read/64, error -71 [ 571.617626][ T5780] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 571.747722][ T5780] usb 3-1: device descriptor read/64, error -71 [ 571.857646][ T808] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 571.859427][ T5780] usb usb3-port1: attempt power cycle [ 572.014049][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.017077][ T808] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 572.017106][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.017127][ T808] usb 4-1: Product: syz [ 572.017141][ T808] usb 4-1: Manufacturer: syz [ 572.017157][ T808] usb 4-1: SerialNumber: syz [ 572.081056][ T808] usb 4-1: config 0 descriptor?? [ 572.197651][ T5780] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 572.218818][ T5780] usb 3-1: device descriptor read/8, error -71 [ 572.299416][ T808] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 572.477660][ T5780] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 572.498731][ T5780] usb 3-1: device descriptor read/8, error -71 [ 572.608103][ T5780] usb usb3-port1: unable to enumerate USB device [ 572.767676][T13201] Bluetooth: hci5: command 0x0406 tx timeout [ 573.685499][T13282] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1886'. [ 574.936080][T10364] usb 4-1: USB disconnect, device number 63 [ 576.226724][ T37] audit: type=1326 audit(1772413910.387:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13306 comm="syz.0.1893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x0 [ 576.637604][T10364] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 576.847087][T10364] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 576.847131][T10364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.847155][T10364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.847176][T10364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 576.850282][T10364] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 576.850310][T10364] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 576.850330][T10364] usb 3-1: Manufacturer: syz [ 577.271729][T10364] usb 3-1: config 0 descriptor?? [ 580.938775][T10364] usbhid 3-1:0.0: can't add hid device: -71 [ 580.938904][T10364] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 580.985866][T10364] usb 3-1: USB disconnect, device number 64 [ 581.766084][T13400] syz.0.1907 (13400): drop_caches: 2 [ 582.407617][ T5780] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 582.407793][ T5979] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 582.587669][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 582.594024][ T5979] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.594161][ T5979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.594218][ T5979] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.597840][ T5979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.597869][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.597959][ T5979] usb 5-1: Product: syz [ 582.597976][ T5979] usb 5-1: Manufacturer: syz [ 582.597992][ T5979] usb 5-1: SerialNumber: syz [ 582.722448][T13454] team0 (unregistering): Port device team_slave_0 removed [ 582.769968][ T5979] cdc_mbim 5-1:1.0: skipping garbage [ 582.902306][ T5780] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 582.902337][ T5780] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 582.902359][ T5780] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 582.902430][ T5780] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 582.955974][ T5780] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 582.956007][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.956085][ T5780] usb 1-1: Product: syz [ 582.956102][ T5780] usb 1-1: Manufacturer: syz [ 582.956118][ T5780] usb 1-1: SerialNumber: syz [ 583.169149][T13454] team0 (unregistering): Port device team_slave_1 removed [ 583.250963][ T5780] usb 1-1: 0:2 : does not exist [ 583.278788][ T5780] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 583.442645][ T5780] usb 1-1: USB disconnect, device number 29 [ 583.623386][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.773776][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 583.851047][ T5979] cdc_mbim 5-1:1.0: bind() failure [ 583.885266][ T5979] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 583.885313][ T5979] cdc_ncm 5-1:1.1: bind() failure [ 583.910407][ T5979] usb 5-1: USB disconnect, device number 66 [ 584.127700][ T1632] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 584.284773][ T1632] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 584.284823][ T1632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.284851][ T1632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.284875][ T1632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 584.334172][ T1632] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 584.334206][ T1632] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 584.334227][ T1632] usb 4-1: Manufacturer: syz [ 584.363157][ T1632] usb 4-1: config 0 descriptor?? [ 584.487789][ T5980] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 584.639914][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.645261][ T5980] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 584.645669][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.645694][ T5980] usb 1-1: Product: syz [ 584.645710][ T5980] usb 1-1: Manufacturer: syz [ 584.645725][ T5980] usb 1-1: SerialNumber: syz [ 584.708659][ T5980] usb 1-1: config 0 descriptor?? [ 584.914494][ T5980] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -22 [ 586.510036][T13575] FAULT_INJECTION: forcing a failure. [ 586.510036][T13575] name failslab, interval 1, probability 0, space 0, times 0 [ 586.510104][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.2.1939 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.510134][T13575] Tainted: [L]=SOFTLOCKUP [ 586.510143][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.510156][T13575] Call Trace: [ 586.510165][T13575] [ 586.510175][T13575] dump_stack_lvl+0xe8/0x150 [ 586.510215][T13575] should_fail_ex+0x46b/0x600 [ 586.510257][T13575] should_failslab+0xa8/0x100 [ 586.510292][T13575] __kmalloc_noprof+0xdf/0x7b0 [ 586.510329][T13575] ? tomoyo_encode+0x28b/0x550 [ 586.510370][T13575] tomoyo_encode+0x28b/0x550 [ 586.510410][T13575] tomoyo_realpath_from_path+0x58d/0x5d0 [ 586.510457][T13575] ? tomoyo_path_number_perm+0x219/0x630 [ 586.510488][T13575] tomoyo_path_number_perm+0x246/0x630 [ 586.510522][T13575] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 586.510554][T13575] ? __schedule+0x1511/0x52c0 [ 586.510596][T13575] ? __pfx___schedule+0x10/0x10 [ 586.510644][T13575] ? irqentry_exit+0x59e/0x620 [ 586.510673][T13575] ? rcu_is_watching+0x15/0xb0 [ 586.510713][T13575] security_file_ioctl+0xc3/0x2a0 [ 586.510747][T13575] __se_sys_ioctl+0x47/0x170 [ 586.510784][T13575] do_syscall_64+0x14d/0xf80 [ 586.510809][T13575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.510828][T13575] ? clear_bhb_loop+0x40/0x90 [ 586.510850][T13575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.510868][T13575] RIP: 0033:0x7f279ec0c799 [ 586.510884][T13575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.510901][T13575] RSP: 002b:00007f279ce1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.510920][T13575] RAX: ffffffffffffffda RBX: 00007f279ee86180 RCX: 00007f279ec0c799 [ 586.510933][T13575] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000005 [ 586.510945][T13575] RBP: 00007f279ce1c090 R08: 0000000000000000 R09: 0000000000000000 [ 586.510956][T13575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.510967][T13575] R13: 00007f279ee86218 R14: 00007f279ee86180 R15: 00007ffc6db524f8 [ 586.510994][T13575] [ 586.511162][T13575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 586.522535][T13575] hub 8-0:1.0: USB hub found [ 586.532529][T13575] hub 8-0:1.0: 1 port detected [ 587.588461][ T36] usb 1-1: USB disconnect, device number 30 [ 587.657933][ T5980] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 587.818660][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 587.832247][ T5980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.843891][ T5980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.855351][ T5980] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 587.855384][ T5980] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 587.868416][ T5980] usb 5-1: Product: syz [ 587.868437][ T5980] usb 5-1: Manufacturer: syz [ 587.914809][ T5980] hub 5-1:4.0: USB hub found [ 588.227782][ T36] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 588.234174][ T5980] hub 5-1:4.0: 4 ports detected [ 588.234777][ T5980] hub 5-1:4.0: insufficient power available to use all downstream ports [ 589.006612][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.006752][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.006791][ T36] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 589.006874][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.076525][ T36] usb 3-1: config 0 descriptor?? [ 589.195482][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1940'. [ 589.227729][T13570] vlan2: entered promiscuous mode [ 589.227749][T13570] bridge0: entered promiscuous mode [ 589.289303][T13612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.482081][T13612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.093508][ T1632] usbhid 4-1:0.0: can't add hid device: -32 [ 590.094590][ T1632] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 590.944233][ T5980] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 590.944262][ T5980] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 590.945405][ T36] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 590.945609][ T36] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 591.059076][ T36] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0007/input/input23 [ 591.302087][ T36] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 591.495801][ T5979] usb 4-1: USB disconnect, device number 64 [ 591.585038][ T36] usb 3-1: USB disconnect, device number 65 [ 591.621760][T13654] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 591.622850][T13653] 9p: Bad value for 'wfdno' [ 591.623423][T13650] fido_id[13650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0007/report_descriptor': No such file or directory [ 591.920469][ T6139] usb 5-1: USB disconnect, device number 67 [ 594.370444][T13721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1961'. [ 594.541809][T13719] faux_driver vkms: [drm] Unknown color mode 524; guessing buffer size. [ 595.057666][ T5979] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 595.177116][T13746] 9pnet_fd: Insufficient options for proto=fd [ 595.209546][ T5979] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 595.209590][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.209615][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.209636][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 595.221130][ T5979] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 595.221204][ T5979] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 595.221257][ T5979] usb 1-1: Manufacturer: syz [ 595.352589][ T5979] usb 1-1: config 0 descriptor?? [ 595.642347][T13760] Process accounting resumed [ 595.959109][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 597.022291][T13804] hsr0: entered promiscuous mode [ 597.158128][ T808] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 597.167060][T13771] syz.3.1973 (13771): drop_caches: 2 [ 597.260006][T13811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1978'. [ 597.307696][ T808] usb 5-1: Using ep0 maxpacket: 32 [ 597.324591][ T808] usb 5-1: config 32 has an invalid interface number: 233 but max is 0 [ 597.324618][ T808] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 597.324637][ T808] usb 5-1: config 32 has no interface number 0 [ 597.324682][ T808] usb 5-1: config 32 interface 233 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 597.324763][ T808] usb 5-1: config 32 interface 233 has no altsetting 0 [ 597.372839][ T808] usb 5-1: New USB device found, idVendor=12d1, idProduct=143c, bcdDevice= 0.00 [ 597.372932][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.372956][ T808] usb 5-1: Product: syz [ 597.372972][ T808] usb 5-1: Manufacturer: syz [ 597.372989][ T808] usb 5-1: SerialNumber: syz [ 597.615580][T13821] FAULT_INJECTION: forcing a failure. [ 597.615580][T13821] name failslab, interval 1, probability 0, space 0, times 0 [ 597.616376][T13821] CPU: 0 UID: 0 PID: 13821 Comm: syz.2.1980 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.616409][T13821] Tainted: [L]=SOFTLOCKUP [ 597.616418][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.616433][T13821] Call Trace: [ 597.616442][T13821] [ 597.616463][T13821] dump_stack_lvl+0xe8/0x150 [ 597.616504][T13821] should_fail_ex+0x46b/0x600 [ 597.616554][T13821] should_failslab+0xa8/0x100 [ 597.616594][T13821] kmem_cache_alloc_noprof+0x87/0x680 [ 597.616629][T13821] ? mas_alloc_nodes+0x291/0x350 [ 597.616663][T13821] mas_alloc_nodes+0x291/0x350 [ 597.616696][T13821] mas_preallocate+0x2d6/0x640 [ 597.616737][T13821] ? __pfx_mas_preallocate+0x10/0x10 [ 597.616781][T13821] ? __mas_set_range+0x12f/0x3c0 [ 597.616815][T13821] __split_vma+0x33d/0xa30 [ 597.616858][T13821] ? __pfx___split_vma+0x10/0x10 [ 597.616894][T13821] ? __mpol_equal+0x2e/0x370 [ 597.616920][T13821] ? can_vma_merge_right+0x1b6/0x440 [ 597.616950][T13821] vma_modify+0x94b/0x1f00 [ 597.616994][T13821] vma_modify_policy+0x230/0x2b0 [ 597.617025][T13821] ? __pfx_vma_modify_policy+0x10/0x10 [ 597.617083][T13821] mbind_range+0x2be/0x810 [ 597.617107][T13821] ? mas_find+0xb0e/0xd30 [ 597.617144][T13821] __se_sys_mbind+0xad4/0x10f0 [ 597.617187][T13821] ? __pfx___se_sys_mbind+0x10/0x10 [ 597.617233][T13821] ? __pfx___schedule+0x10/0x10 [ 597.617270][T13821] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 597.617307][T13821] ? __x64_sys_mbind+0x21/0xf0 [ 597.617344][T13821] do_syscall_64+0x14d/0xf80 [ 597.617374][T13821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.617397][T13821] ? clear_bhb_loop+0x40/0x90 [ 597.617425][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.617446][T13821] RIP: 0033:0x7f279ec0c799 [ 597.617474][T13821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.617495][T13821] RSP: 002b:00007f279ce5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 597.617519][T13821] RAX: ffffffffffffffda RBX: 00007f279ee85fa0 RCX: 00007f279ec0c799 [ 597.617536][T13821] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 597.617551][T13821] RBP: 00007f279ce5e090 R08: 0000000000000000 R09: 0000000000000000 [ 597.617564][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.617578][T13821] R13: 00007f279ee86038 R14: 00007f279ee85fa0 R15: 00007ffc6db524f8 [ 597.617615][T13821] [ 598.355348][ T808] usb-storage 5-1:32.233: USB Mass Storage device detected [ 598.869427][ T808] usb 5-1: USB disconnect, device number 68 [ 598.920890][ T8168] udevd[8168]: setting owner of /dev/bus/usb/005/068 to uid=0, gid=0 failed: No such file or directory [ 599.249309][ T5979] usbhid 1-1:0.0: can't add hid device: -71 [ 599.249538][ T5979] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 599.293656][ T5979] usb 1-1: USB disconnect, device number 31 [ 599.342287][T13866] binder: 13863:13866 ioctl c018620c 200000000380 returned -1 [ 600.141878][T13878] ALSA: mixer_oss: invalid OSS volume '' [ 600.141898][T13878] ALSA: mixer_oss: invalid OSS volume '' [ 600.213545][T13882] Device name cannot be null; rc = [-22] [ 600.427836][ T5980] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 600.643078][ T5980] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 600.643139][ T5980] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 600.643165][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.667339][ T5980] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 600.887752][ T808] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 600.957698][ T5979] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 601.046556][ T808] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 601.046583][ T808] usb 1-1: config 0 has no interface number 0 [ 601.046611][ T808] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 601.046635][ T808] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 601.046653][ T808] usb 1-1: config 0 interface 255 has no altsetting 0 [ 601.046674][ T808] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 601.046706][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.093811][ T808] usb 1-1: config 0 descriptor?? [ 601.107885][ T5979] usb 3-1: Using ep0 maxpacket: 32 [ 601.137139][ T5979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.137158][ T5979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 601.137192][ T5979] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.195279][ T5979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.195302][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.195315][ T5979] usb 3-1: Product: syz [ 601.195325][ T5979] usb 3-1: Manufacturer: syz [ 601.195336][ T5979] usb 3-1: SerialNumber: syz [ 601.197349][ T808] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 601.275679][ T5979] cdc_ncm 3-1:1.0: skipping garbage [ 601.275700][ T5979] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 601.275736][ T5979] cdc_ncm 3-1:1.0: bind() failure [ 601.376473][ T808] usb 1-1: USB disconnect, device number 32 [ 601.607690][ T5780] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 601.766039][ T5780] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 601.766085][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.766108][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.766128][ T5780] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 601.819444][ T5780] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 601.819520][ T5780] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 601.819563][ T5780] usb 4-1: Manufacturer: syz [ 601.940397][ T5780] usb 4-1: config 0 descriptor?? [ 602.384183][ T5980] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 602.384209][ T5980] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 602.384656][ T5980] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 602.384674][ T5980] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 604.003100][ T5979] usb 5-1: USB disconnect, device number 69 [ 604.271288][ T5980] usb 3-1: USB disconnect, device number 66 [ 605.269986][T14002] binder: 14001:14002 ioctl c018620c 200000000380 returned -1 [ 605.387811][ T5979] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 605.555387][ T5979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.578508][ T5979] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 605.578598][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.578620][ T5979] usb 3-1: Product: syz [ 605.578635][ T5979] usb 3-1: Manufacturer: syz [ 605.578651][ T5979] usb 3-1: SerialNumber: syz [ 606.111022][T14004] ALSA: mixer_oss: invalid OSS volume '' [ 606.111042][T14004] ALSA: mixer_oss: invalid OSS volume '' [ 606.373463][ T5979] usb 3-1: config 0 descriptor?? [ 606.592576][ T5979] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -22 [ 606.748952][ T5780] usbhid 4-1:0.0: can't add hid device: -71 [ 606.749083][ T5780] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 606.776363][ T5780] usb 4-1: USB disconnect, device number 65 [ 608.006866][T14027] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2015'. [ 608.022402][T13201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 608.022433][T13201] CPU: 1 UID: 0 PID: 13201 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 608.022465][T13201] Tainted: [L]=SOFTLOCKUP [ 608.022481][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 608.022497][T13201] Workqueue: hci1 hci_rx_work [ 608.022531][T13201] Call Trace: [ 608.022542][T13201] [ 608.022552][T13201] dump_stack_lvl+0xe8/0x150 [ 608.022590][T13201] sysfs_create_dir_ns+0x271/0x2a0 [ 608.022615][T13201] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 608.022644][T13201] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 608.022672][T13201] ? rt_spin_unlock+0x160/0x200 [ 608.022702][T13201] kobject_add_internal+0x631/0xd10 [ 608.022734][T13201] kobject_add+0x163/0x240 [ 608.022776][T13201] ? __pfx_kobject_add+0x10/0x10 [ 608.022818][T13201] ? get_device_parent+0x370/0x3a0 [ 608.022858][T13201] device_add+0x408/0xb80 [ 608.022914][T13201] hci_conn_add_sysfs+0xd5/0x210 [ 608.022946][T13201] le_conn_complete_evt+0xf1d/0x1430 [ 608.022994][T13201] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 608.023031][T13201] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 608.023064][T13201] ? lockdep_hardirqs_on+0x7a/0x110 [ 608.023098][T13201] ? skb_pull_data+0xfb/0x200 [ 608.023140][T13201] hci_le_conn_complete_evt+0x187/0x470 [ 608.023186][T13201] hci_event_packet+0x7af/0x12c0 [ 608.023223][T13201] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 608.023257][T13201] ? __pfx_hci_event_packet+0x10/0x10 [ 608.023285][T13201] ? rt_spin_unlock+0x14f/0x200 [ 608.023322][T13201] ? hci_send_to_monitor+0xe2/0x590 [ 608.023354][T13201] hci_rx_work+0x3ee/0x1030 [ 608.023393][T13201] ? process_scheduled_works+0xa25/0x1830 [ 608.023429][T13201] process_scheduled_works+0xb02/0x1830 [ 608.023500][T13201] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.023541][T13201] ? assign_work+0x3d5/0x5e0 [ 608.023580][T13201] worker_thread+0xa50/0xfc0 [ 608.023645][T13201] kthread+0x388/0x470 [ 608.023670][T13201] ? __pfx_worker_thread+0x10/0x10 [ 608.023701][T13201] ? __pfx_kthread+0x10/0x10 [ 608.023727][T13201] ret_from_fork+0x51e/0xb90 [ 608.023765][T13201] ? __pfx_ret_from_fork+0x10/0x10 [ 608.023797][T13201] ? __switch_to+0xc7d/0x1450 [ 608.023830][T13201] ? __pfx_kthread+0x10/0x10 [ 608.023857][T13201] ret_from_fork_asm+0x1a/0x30 [ 608.023900][T13201] [ 608.024045][T13201] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 608.024090][T13201] Bluetooth: hci1: failed to register connection device [ 608.337731][ T6139] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 608.500517][ T6139] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.500547][ T6139] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 608.500604][ T6139] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 608.500628][ T6139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.518948][ T6139] usb 4-1: config 0 descriptor?? [ 608.546318][ T6139] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 608.546459][ T6139] dvb-usb: bulk message failed: -22 (3/0) [ 608.576854][ T6139] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 608.579535][ T6139] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 608.579668][ T6139] usb 4-1: media controller created [ 608.603450][ T6139] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.629794][ T6139] dvb-usb: bulk message failed: -22 (6/0) [ 608.629869][ T6139] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 608.655179][ T6139] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 608.687658][ T6139] dvb-usb: schedule remote query interval to 150 msecs. [ 608.687682][ T6139] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 608.729277][T14027] dvb-usb: bulk message failed: -22 (2/0) [ 608.732831][ T6139] usb 4-1: USB disconnect, device number 66 [ 608.751230][ T36] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 608.846380][ T6139] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 608.897791][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 608.989996][ T36] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.990027][ T36] usb 5-1: config 0 has no interface number 0 [ 608.997338][ T36] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 608.997378][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.997398][ T36] usb 5-1: Product: syz [ 608.997484][ T36] usb 5-1: Manufacturer: syz [ 608.997502][ T36] usb 5-1: SerialNumber: syz [ 609.034886][ T5780] usb 3-1: USB disconnect, device number 67 [ 609.097695][ T36] usb 5-1: config 0 descriptor?? [ 609.104747][ T36] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 609.104767][ T36] usb 5-1: selecting invalid altsetting 1 [ 609.104779][ T36] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 609.200419][ T36] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 609.200795][ T36] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 609.200859][ T36] usb 5-1: media controller created [ 609.258557][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 609.333397][T14081] syz.0.2021 (14081): drop_caches: 2 [ 609.452375][T14088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 609.657871][T14097] binder: 14095:14097 ioctl c018620c 200000000380 returned -1 [ 610.813394][ T36] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 610.813473][ T36] zl10353_read_register: readreg error (reg=127, ret==-110) [ 610.828306][T14039] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 611.096061][ T5810] Bluetooth: hci1: unexpected event for opcode 0x0413 [ 611.307655][ T5780] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 611.470304][ T5780] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 611.470363][ T5780] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 611.470388][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.515432][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.517189][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.544364][ T5780] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 613.424523][T14153] binder: 14151:14153 ioctl c018620c 200000000380 returned -1 [ 613.827994][ T5780] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -110 [ 613.828420][ T5780] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 613.828440][ T5780] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 614.616192][ T808] usb 1-1: USB disconnect, device number 33 [ 615.367993][ T5980] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 615.987508][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 616.018450][T14028] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 617.353379][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 617.369608][ T5980] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 617.369657][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.369686][ T5980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.369709][ T5980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 617.371225][ T5980] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 617.371254][ T5980] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 617.371275][ T5980] usb 3-1: Manufacturer: syz [ 617.446152][T14205] FAULT_INJECTION: forcing a failure. [ 617.446152][T14205] name failslab, interval 1, probability 0, space 0, times 0 [ 617.446180][T14205] CPU: 0 UID: 0 PID: 14205 Comm: syz.0.2046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.446201][T14205] Tainted: [L]=SOFTLOCKUP [ 617.446208][T14205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.446218][T14205] Call Trace: [ 617.446224][T14205] [ 617.446231][T14205] dump_stack_lvl+0xe8/0x150 [ 617.446260][T14205] should_fail_ex+0x46b/0x600 [ 617.446290][T14205] should_failslab+0xa8/0x100 [ 617.446316][T14205] __kmalloc_cache_noprof+0x84/0x690 [ 617.446340][T14205] ? l2tp_tunnel_create+0x92/0x410 [ 617.446357][T14205] ? __pfx_l2tp_tunnel_get+0x10/0x10 [ 617.446377][T14205] l2tp_tunnel_create+0x92/0x410 [ 617.446398][T14205] pppol2tp_connect+0x826/0x17c0 [ 617.446443][T14205] ? __pfx_pppol2tp_connect+0x10/0x10 [ 617.446472][T14205] ? hook_socket_connect+0x107/0x190 [ 617.446493][T14205] ? bpf_lsm_socket_connect+0x9/0x20 [ 617.446517][T14205] __sys_connect+0x315/0x450 [ 617.446538][T14205] ? __pfx___sys_connect+0x10/0x10 [ 617.446564][T14205] ? __pfx_ksys_write+0x10/0x10 [ 617.446590][T14205] __x64_sys_connect+0x7a/0x90 [ 617.446609][T14205] do_syscall_64+0x14d/0xf80 [ 617.446630][T14205] ? trace_irq_disable+0x3b/0x150 [ 617.446647][T14205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.446662][T14205] ? clear_bhb_loop+0x40/0x90 [ 617.446699][T14205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.446715][T14205] RIP: 0033:0x7fada077c799 [ 617.446731][T14205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.446745][T14205] RSP: 002b:00007fad9e9b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 617.446764][T14205] RAX: ffffffffffffffda RBX: 00007fada09f6090 RCX: 00007fada077c799 [ 617.446776][T14205] RDX: 000000000000003a RSI: 0000200000000080 RDI: 0000000000000005 [ 617.446786][T14205] RBP: 00007fad9e9b5090 R08: 0000000000000000 R09: 0000000000000000 [ 617.446796][T14205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.446806][T14205] R13: 00007fada09f6128 R14: 00007fada09f6090 R15: 00007ffc3a97bc48 [ 617.446830][T14205] [ 617.689266][ T5980] usb 3-1: config 0 descriptor?? [ 617.724880][ T5980] usb 3-1: can't set config #0, error -71 [ 617.737864][ T5980] usb 3-1: USB disconnect, device number 68 [ 617.872343][T14218] binder: 14217:14218 ioctl c018620c 200000000380 returned -1 [ 618.741115][ T1632] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 618.979803][ T1632] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 618.979862][ T1632] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 618.979891][ T1632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.025254][ T1632] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 619.117100][T14247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2054'. [ 619.459297][T14028] Bluetooth: hci2: unexpected event for opcode 0x0413 [ 619.958674][T14283] binder: 14281:14283 ioctl c018620c 200000000380 returned -1 [ 620.788556][ T1632] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 620.788581][ T1632] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 620.791020][ T1632] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 620.791042][ T1632] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 621.230536][T14028] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 621.243658][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2068'. [ 621.281639][T14290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.282228][T14290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.368810][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 622.445430][T14317] bond0: entered promiscuous mode [ 622.445503][T14317] bond_slave_0: entered promiscuous mode [ 622.447575][T14317] bond_slave_1: entered promiscuous mode [ 622.496512][T14317] batadv0: entered promiscuous mode [ 622.555735][T14317] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 622.906757][ T5780] usb 1-1: USB disconnect, device number 34 [ 623.067735][ T6139] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 623.110385][T14329] netlink: 'syz.0.2073': attribute type 1 has an invalid length. [ 623.230075][ T6139] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 623.230204][ T6139] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.230230][ T6139] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.230252][ T6139] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 623.230276][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 623.230307][ T6139] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 623.230328][ T6139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.486468][T14329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.271547][ T6139] usb 3-1: config 0 descriptor?? [ 624.510544][T14335] bond1: (slave gretap1): making interface the new active one [ 624.512668][T14335] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 624.843822][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.843916][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.920095][ T6139] hid-alps 0003:044E:120C.0008: unknown main item tag 0x2 [ 624.964567][ T6139] hid-alps 0003:044E:120C.0008: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 625.178963][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 625.186114][ T37] audit: type=1326 audit(1772413959.347:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14401 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d9fcc799 code=0x7ffc0000 [ 625.218190][ T37] audit: type=1326 audit(1772413959.347:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14401 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d9fcc799 code=0x7ffc0000 [ 625.218513][ T37] audit: type=1326 audit(1772413959.387:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14401 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f08d9fcc799 code=0x7ffc0000 [ 625.218804][ T37] audit: type=1326 audit(1772413959.387:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14401 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d9fcc799 code=0x7ffc0000 [ 625.219091][ T37] audit: type=1326 audit(1772413959.387:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14401 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08d9fcc799 code=0x7ffc0000 [ 625.275966][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 625.345577][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 625.352729][ T31] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 625.352756][ T31] usb 1-1: config 0 has no interface number 0 [ 625.352786][ T31] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.352802][ T31] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 625.352819][ T31] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 625.352837][ T31] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 625.352867][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 625.352883][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.423544][ T31] usb 1-1: config 0 descriptor?? [ 625.493946][ T31] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 625.522434][T14412] MTD: Couldn't look up './file0': -15 [ 625.754309][ T5979] usb 1-1: USB disconnect, device number 35 [ 625.754411][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 625.787708][ T6139] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 625.950796][ T6139] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 625.950836][ T6139] usb 4-1: can't read configurations, error -71 [ 626.045950][T14426] netlink: 'syz.4.2085': attribute type 10 has an invalid length. [ 626.046448][T14426] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.047317][T14426] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.052195][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.052366][T14426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.054450][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.054618][T14426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.059405][T14426] team0: Port device bridge0 added [ 626.162575][ T5780] usb 3-1: USB disconnect, device number 69 [ 626.256766][T14443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.271915][T14443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.284716][T14443] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 626.284783][T14443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.325519][T14443] vhci_hcd vhci_hcd.0: Device attached [ 626.327090][T14446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.349369][T14443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.351436][T14443] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.370572][T14443] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(16) [ 626.370644][T14443] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.375951][T14443] vhci_hcd vhci_hcd.0: Device attached [ 626.412987][T14443] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(18) [ 626.413009][T14443] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 626.416568][T14443] vhci_hcd vhci_hcd.0: Device attached [ 626.567720][ T5780] usb 37-3: new high-speed USB device number 2 using vhci_hcd [ 627.712035][T14447] vhci_hcd: connection closed [ 627.712743][T14449] vhci_hcd: connection closed [ 627.727798][T14444] vhci_hcd: connection reset by peer [ 627.753602][ T5979] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 627.805419][T13119] vhci_hcd vhci_hcd.2: stop threads [ 627.835332][T13119] vhci_hcd vhci_hcd.2: release socket [ 627.880818][T13119] vhci_hcd vhci_hcd.2: disconnect device [ 627.882074][T13119] vhci_hcd vhci_hcd.2: stop threads [ 627.882096][T13119] vhci_hcd vhci_hcd.2: release socket [ 627.882170][T13119] vhci_hcd vhci_hcd.2: disconnect device [ 627.928583][T13119] vhci_hcd vhci_hcd.2: stop threads [ 627.928606][T13119] vhci_hcd vhci_hcd.2: release socket [ 627.928694][T13119] vhci_hcd vhci_hcd.2: disconnect device [ 628.201552][T14480] hsr0: entered promiscuous mode [ 628.472592][T14492] overlayfs: failed lookup in lower (newroot/115, name='file0', err=-40): overlapping layers [ 629.257646][ T6139] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 629.417809][ T6139] usb 3-1: Using ep0 maxpacket: 16 [ 629.473584][ T6139] usb 3-1: unable to get BOS descriptor or descriptor too short [ 629.477233][ T6139] usb 3-1: config 7 has an invalid interface number: 106 but max is 3 [ 629.478143][ T6139] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 629.478186][ T6139] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 629.478205][ T6139] usb 3-1: config 7 has no interface number 0 [ 629.487577][ T6139] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 629.487695][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.487717][ T6139] usb 3-1: Product: syz [ 629.487731][ T6139] usb 3-1: Manufacturer: syz [ 629.487745][ T6139] usb 3-1: SerialNumber: syz [ 629.518203][T14519] sch_tbf: burst 2 is lower than device lo mtu (81) ! [ 631.707606][ T5780] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 631.837657][ T1632] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 632.007781][ T1632] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 632.007823][ T1632] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 632.008080][ T1632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.123130][ T1632] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 632.931998][T14568] netlink: 'syz.1.2113': attribute type 9 has an invalid length. [ 632.932021][T14568] netlink: 'syz.1.2113': attribute type 11 has an invalid length. [ 632.932034][T14568] netlink: 'syz.1.2113': attribute type 12 has an invalid length. [ 632.932052][T14568] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2113'. [ 632.932489][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2113'. [ 633.562643][T14588] FAULT_INJECTION: forcing a failure. [ 633.562643][T14588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.562680][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.2.2116 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 633.562708][T14588] Tainted: [L]=SOFTLOCKUP [ 633.562716][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.562729][T14588] Call Trace: [ 633.562738][T14588] [ 633.562747][T14588] dump_stack_lvl+0xe8/0x150 [ 633.562785][T14588] should_fail_ex+0x46b/0x600 [ 633.562824][T14588] _copy_from_user+0x2d/0xb0 [ 633.562857][T14588] alg_setkey+0xb8/0x190 [ 633.562887][T14588] alg_setsockopt+0x3da/0x4a0 [ 633.562932][T14588] ? __pfx_alg_setsockopt+0x10/0x10 [ 633.562962][T14588] do_sock_setsockopt+0x17c/0x1b0 [ 633.562999][T14588] __x64_sys_setsockopt+0x143/0x1b0 [ 633.563037][T14588] do_syscall_64+0x14d/0xf80 [ 633.563068][T14588] ? trace_irq_disable+0x3b/0x150 [ 633.563093][T14588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.563116][T14588] ? clear_bhb_loop+0x40/0x90 [ 633.563144][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.563167][T14588] RIP: 0033:0x7f279ec0c799 [ 633.563189][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.563209][T14588] RSP: 002b:00007f279ce5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 633.563232][T14588] RAX: ffffffffffffffda RBX: 00007f279ee85fa0 RCX: 00007f279ec0c799 [ 633.563249][T14588] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 633.563261][T14588] RBP: 00007f279ce5e090 R08: 0000000000000011 R09: 0000000000000000 [ 633.563274][T14588] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 633.563288][T14588] R13: 00007f279ee86038 R14: 00007f279ee85fa0 R15: 00007ffc6db524f8 [ 633.563324][T14588] [ 633.565143][ T6139] usb 3-1: USB disconnect, device number 70 [ 633.657904][ T1632] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 633.657970][ T1632] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 633.687723][ T1632] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 633.687783][ T1632] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 634.043752][T14604] FAULT_INJECTION: forcing a failure. [ 634.043752][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 634.043799][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.2.2119 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 634.043830][T14604] Tainted: [L]=SOFTLOCKUP [ 634.043839][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.043853][T14604] Call Trace: [ 634.043863][T14604] [ 634.043872][T14604] dump_stack_lvl+0xe8/0x150 [ 634.043912][T14604] should_fail_ex+0x46b/0x600 [ 634.043955][T14604] should_failslab+0xa8/0x100 [ 634.043995][T14604] __kmalloc_noprof+0xdf/0x7b0 [ 634.044028][T14604] ? tomoyo_encode+0x28b/0x550 [ 634.044071][T14604] tomoyo_encode+0x28b/0x550 [ 634.044125][T14604] tomoyo_realpath_from_path+0x58d/0x5d0 [ 634.044187][T14604] ? tomoyo_path_number_perm+0x219/0x630 [ 634.044215][T14604] tomoyo_path_number_perm+0x246/0x630 [ 634.044244][T14604] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.044275][T14604] ? __lock_acquire+0x6b5/0x2cf0 [ 634.044329][T14604] ? __fget_files+0x2a/0x420 [ 634.044358][T14604] ? __fget_files+0x2a/0x420 [ 634.044383][T14604] ? __fget_files+0x3a6/0x420 [ 634.044407][T14604] ? __fget_files+0x2a/0x420 [ 634.044448][T14604] security_file_ioctl+0xc3/0x2a0 [ 634.044477][T14604] __se_sys_ioctl+0x47/0x170 [ 634.044511][T14604] do_syscall_64+0x14d/0xf80 [ 634.044538][T14604] ? trace_irq_disable+0x3b/0x150 [ 634.044561][T14604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.044580][T14604] ? clear_bhb_loop+0x40/0x90 [ 634.044605][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.044625][T14604] RIP: 0033:0x7f279ec0c799 [ 634.044644][T14604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.044660][T14604] RSP: 002b:00007f279ce5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.044680][T14604] RAX: ffffffffffffffda RBX: 00007f279ee85fa0 RCX: 00007f279ec0c799 [ 634.044694][T14604] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 634.044706][T14604] RBP: 00007f279ce5e090 R08: 0000000000000000 R09: 0000000000000000 [ 634.044719][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.044731][T14604] R13: 00007f279ee86038 R14: 00007f279ee85fa0 R15: 00007ffc6db524f8 [ 634.044778][T14604] [ 634.044899][T14604] ERROR: Out of memory at tomoyo_realpath_from_path. [ 634.044915][T14604] program syz.2.2119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.587563][ T37] audit: type=1326 audit(1772413968.737:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 634.587622][ T37] audit: type=1326 audit(1772413968.737:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 634.587670][ T37] audit: type=1326 audit(1772413968.737:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 634.587715][ T37] audit: type=1326 audit(1772413968.737:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f279ebccfce code=0x7ffc0000 [ 634.587761][ T37] audit: type=1326 audit(1772413968.737:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ec0c42b code=0x7ffc0000 [ 634.587806][ T37] audit: type=1326 audit(1772413968.737:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ec0c42b code=0x7ffc0000 [ 634.589319][ T37] audit: type=1326 audit(1772413968.757:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ec0c42b code=0x7ffc0000 [ 634.589730][ T37] audit: type=1326 audit(1772413968.757:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ec0c42b code=0x7ffc0000 [ 634.662653][ T1632] usb 1-1: USB disconnect, device number 36 [ 634.715057][ T37] audit: type=1326 audit(1772413968.877:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ec0c42b code=0x7ffc0000 [ 634.811291][ T37] audit: type=1326 audit(1772413968.977:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14617 comm="syz.2.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ec0c42b code=0x7ffc0000 [ 634.867641][ T6139] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 634.874355][T14633] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2127'. [ 635.019510][ T6139] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 635.022169][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.022223][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.022250][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.029495][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.029632][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.029695][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.114169][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.114211][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.114229][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.116827][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.116900][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.116924][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.169333][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.169388][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.169405][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.176072][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.176126][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.176151][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.228446][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.228510][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.228533][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.230761][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.230904][ T6139] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 635.230928][ T6139] usb 3-1: config 0 interface 0 has no altsetting 0 [ 635.307289][ T6139] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 635.307321][ T6139] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 635.307342][ T6139] usb 3-1: Product: syz [ 635.307356][ T6139] usb 3-1: Manufacturer: syz [ 635.307371][ T6139] usb 3-1: SerialNumber: syz [ 635.362766][ T6139] usb 3-1: config 0 descriptor?? [ 635.399185][ T6139] yurex 3-1:0.0: Could not find endpoints [ 635.592733][ T6139] usb 3-1: USB disconnect, device number 71 [ 635.621811][T14666] netlink: 532 bytes leftover after parsing attributes in process `syz.0.2137'. [ 635.651364][T14666] batadv0: entered promiscuous mode [ 635.651655][T14666] macsec1: entered allmulticast mode [ 635.651666][T14666] batadv0: entered allmulticast mode [ 635.688114][T14666] batadv0: left allmulticast mode [ 635.688170][T14666] batadv0: left promiscuous mode [ 635.928527][T14685] MTD: Couldn't look up './file0': -15 [ 635.928570][T14685] ./file0: Can't lookup blockdev [ 636.007619][ T808] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 636.846347][ T808] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 636.848638][ T808] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 636.848668][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.012886][ T808] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 638.618515][T14718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2150'. [ 639.842446][ T808] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 639.842474][ T808] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 639.842896][ T808] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 639.842916][ T808] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 640.416416][ T5979] usb 4-1: USB disconnect, device number 69 [ 640.583750][T14742] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2154'. [ 640.583782][T14742] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 640.919833][T14749] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2156'. [ 640.919983][T14749] netlink: Unknown conntrack attr (0) [ 640.931619][T14749] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2156'. [ 640.931682][T14749] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 641.028548][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2157'. [ 641.056968][T14752] batman_adv: batadv0: Adding interface: dummy0 [ 641.056987][T14752] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.057021][T14752] batman_adv: batadv0: Interface activated: dummy0 [ 642.957555][ T1632] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 643.119911][ T1632] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 643.119969][ T1632] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 643.119996][ T1632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.176415][ T1632] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 643.525374][ T37] kauditd_printk_skb: 53 callbacks suppressed [ 643.525389][ T37] audit: type=1326 audit(1772413977.687:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.525424][ T37] audit: type=1326 audit(1772413977.687:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.525458][ T37] audit: type=1326 audit(1772413977.687:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.525490][ T37] audit: type=1326 audit(1772413977.687:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.525766][ T37] audit: type=1326 audit(1772413977.687:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.525801][ T37] audit: type=1326 audit(1772413977.687:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.525843][ T37] audit: type=1326 audit(1772413977.687:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.527136][ T37] audit: type=1326 audit(1772413977.687:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.527173][ T37] audit: type=1326 audit(1772413977.687:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.527203][ T37] audit: type=1326 audit(1772413977.687:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14807 comm="syz.0.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fada077c799 code=0x7ffc0000 [ 643.603723][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2171'. [ 644.766011][ T1632] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 644.766413][ T1632] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 644.766426][ T1632] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 644.796678][ T1632] usb 4-1: USB disconnect, device number 70 [ 645.537024][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2175'. [ 645.621304][T14853] binder: Bad value for 'stats' [ 645.682445][T14834] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 645.755583][T14834] bond1 (unregistering): Released all slaves [ 647.437533][ T5980] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 647.599106][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 647.602563][ T5980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.604982][ T5980] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 647.605007][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.605026][ T5980] usb 4-1: Product: syz [ 647.605040][ T5980] usb 4-1: Manufacturer: syz [ 647.605053][ T5980] usb 4-1: SerialNumber: syz [ 647.653224][ T5980] usb 4-1: config 0 descriptor?? [ 647.685887][ T5980] usb 4-1: bad CDC descriptors [ 647.687135][ T5980] usb 4-1: unsupported MDLM descriptors [ 647.806956][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 647.863951][ T5885] usb 4-1: USB disconnect, device number 71 [ 650.684570][T14980] FAULT_INJECTION: forcing a failure. [ 650.684570][T14980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.684605][T14980] CPU: 0 UID: 0 PID: 14980 Comm: syz.0.2196 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 650.684632][T14980] Tainted: [L]=SOFTLOCKUP [ 650.684639][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.684652][T14980] Call Trace: [ 650.684659][T14980] [ 650.684668][T14980] dump_stack_lvl+0xe8/0x150 [ 650.684702][T14980] should_fail_ex+0x46b/0x600 [ 650.684741][T14980] _copy_from_user+0x2d/0xb0 [ 650.684768][T14980] memdup_user+0x5e/0xd0 [ 650.684793][T14980] strndup_user+0x68/0xd0 [ 650.684819][T14980] __se_sys_mount+0x9d/0x420 [ 650.684843][T14980] ? ksys_write+0x248/0x270 [ 650.684875][T14980] ? __pfx___se_sys_mount+0x10/0x10 [ 650.684904][T14980] ? __x64_sys_mount+0x20/0xc0 [ 650.684930][T14980] do_syscall_64+0x14d/0xf80 [ 650.684957][T14980] ? trace_irq_disable+0x3b/0x150 [ 650.684979][T14980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.684999][T14980] ? clear_bhb_loop+0x40/0x90 [ 650.685024][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.685044][T14980] RIP: 0033:0x7fada077c799 [ 650.685062][T14980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.685080][T14980] RSP: 002b:00007fad9e9d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 650.685099][T14980] RAX: ffffffffffffffda RBX: 00007fada09f5fa0 RCX: 00007fada077c799 [ 650.685113][T14980] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 650.685126][T14980] RBP: 00007fad9e9d6090 R08: 0000200000000100 R09: 0000000000000000 [ 650.685138][T14980] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 650.685150][T14980] R13: 00007fada09f6038 R14: 00007fada09f5fa0 R15: 00007ffc3a97bc48 [ 650.685180][T14980] [ 651.572365][ T5980] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 651.637347][T15002] FAULT_INJECTION: forcing a failure. [ 651.637347][T15002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.637382][T15002] CPU: 1 UID: 0 PID: 15002 Comm: syz.3.2203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.637411][T15002] Tainted: [L]=SOFTLOCKUP [ 651.637419][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.637430][T15002] Call Trace: [ 651.637437][T15002] [ 651.637445][T15002] dump_stack_lvl+0xe8/0x150 [ 651.637479][T15002] should_fail_ex+0x46b/0x600 [ 651.637515][T15002] _copy_from_iter+0x1d3/0x1670 [ 651.637536][T15002] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 651.637562][T15002] ? __pfx_policy_nodemask+0x10/0x10 [ 651.637594][T15002] ? __pfx__copy_from_iter+0x10/0x10 [ 651.637618][T15002] ? set_page_refcounted+0xa0/0x1e0 [ 651.637639][T15002] ? page_copy_sane+0x4e/0x270 [ 651.637661][T15002] copy_page_from_iter+0xdd/0x170 [ 651.637686][T15002] tun_get_user+0x1d4b/0x3de0 [ 651.637707][T15002] ? tun_get_user+0x6ff/0x3de0 [ 651.637749][T15002] ? __pfx_tun_get_user+0x10/0x10 [ 651.637809][T15002] ? ref_tracker_alloc+0x332/0x4a0 [ 651.637834][T15002] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 651.637861][T15002] ? tun_get+0x1c/0x2f0 [ 651.637891][T15002] ? tun_get+0x1c/0x2f0 [ 651.637915][T15002] ? tun_get+0x1c/0x2f0 [ 651.637943][T15002] tun_chr_write_iter+0x119/0x200 [ 651.637969][T15002] vfs_write+0x629/0xba0 [ 651.638005][T15002] ? __pfx_vfs_write+0x10/0x10 [ 651.638044][T15002] ? __fget_files+0x2a/0x420 [ 651.638078][T15002] ksys_write+0x156/0x270 [ 651.638109][T15002] ? __pfx_ksys_write+0x10/0x10 [ 651.638148][T15002] do_syscall_64+0x14d/0xf80 [ 651.638176][T15002] ? trace_irq_disable+0x3b/0x150 [ 651.638200][T15002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.638221][T15002] ? clear_bhb_loop+0x40/0x90 [ 651.638246][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.638275][T15002] RIP: 0033:0x7fe617ebcfce [ 651.638295][T15002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 651.638313][T15002] RSP: 002b:00007fe616155fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.638334][T15002] RAX: ffffffffffffffda RBX: 00007fe6161566c0 RCX: 00007fe617ebcfce [ 651.638349][T15002] RDX: 0000000000000056 RSI: 00002000000002c0 RDI: 00000000000000c8 [ 651.638363][T15002] RBP: 00007fe616156090 R08: 0000000000000000 R09: 0000000000000000 [ 651.638375][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.638387][T15002] R13: 00007fe618176038 R14: 00007fe618175fa0 R15: 00007fff08f07288 [ 651.638417][T15002] [ 652.269620][T15007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2204'. [ 652.412955][T15001] vlan2: entered promiscuous mode [ 652.437531][ T5980] usb 1-1: device descriptor read/64, error -71 [ 652.580967][T15020] program syz.3.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.710015][ T5980] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 652.887630][ T5980] usb 1-1: device descriptor read/64, error -71 [ 653.008254][ T5980] usb usb1-port1: attempt power cycle [ 653.347737][ T5980] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 653.373763][ T5980] usb 1-1: device descriptor read/8, error -71 [ 653.617542][ T5980] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 653.638724][ T5980] usb 1-1: device descriptor read/8, error -71 [ 653.809231][ T5980] usb usb1-port1: unable to enumerate USB device [ 654.155293][T15051] netlink: 'syz.1.2216': attribute type 10 has an invalid length. [ 654.200511][T15051] team0: Failed to send options change via netlink (err -105) [ 654.200532][T15051] team0: Port device dummy0 added [ 656.679371][T15089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2226'. [ 656.688578][T15089] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2226'. [ 656.700017][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2226'. [ 657.106514][T15096] program syz.3.2229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.327592][ T808] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 657.698107][ T5980] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 657.719908][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 657.721519][ T808] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 657.721566][ T808] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 657.724218][ T808] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 657.724245][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.724265][ T808] usb 1-1: Product: syz [ 657.724280][ T808] usb 1-1: Manufacturer: syz [ 657.724295][ T808] usb 1-1: SerialNumber: syz [ 658.379649][ T5980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.382166][ T5980] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 658.382194][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.382214][ T5980] usb 4-1: Product: syz [ 658.382227][ T5980] usb 4-1: Manufacturer: syz [ 658.382241][ T5980] usb 4-1: SerialNumber: syz [ 658.448517][T15124] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2235'. [ 658.451928][ T5980] usb 4-1: config 0 descriptor?? [ 658.656748][ T5980] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 660.354033][ T808] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 660.354072][ T808] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 660.378096][ T808] usb 1-1: failed to enable PITCH for EP 0x1 [ 661.482850][ T5979] usb 4-1: USB disconnect, device number 72 [ 661.609693][T15166] program syz.0.2240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.644077][ T808] usb 1-1: USB disconnect, device number 41 [ 661.819653][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 661.977196][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.235708][T15199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'. [ 662.947749][T10364] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 663.555108][T10364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.568635][T10364] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 663.568665][T10364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.568686][T10364] usb 1-1: Product: syz [ 663.568701][T10364] usb 1-1: Manufacturer: syz [ 663.568716][T10364] usb 1-1: SerialNumber: syz [ 663.618793][T10364] usb 1-1: config 0 descriptor?? [ 663.822396][T10364] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -22 [ 666.574476][T10364] usb 1-1: USB disconnect, device number 42 [ 667.617639][T10364] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 667.778135][T10364] usb 1-1: Using ep0 maxpacket: 16 [ 667.781417][T10364] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 667.781449][T10364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 667.784006][T10364] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 667.784040][T10364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.784056][T10364] usb 1-1: Product: syz [ 667.784067][T10364] usb 1-1: Manufacturer: syz [ 667.784078][T10364] usb 1-1: SerialNumber: syz [ 667.847143][T10364] usb 1-1: config 0 descriptor?? [ 667.856522][T10364] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 667.856546][T10364] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 668.028581][ T808] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 668.190054][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.192952][ T808] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 668.192986][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.193007][ T808] usb 4-1: Product: syz [ 668.193083][ T808] usb 4-1: Manufacturer: syz [ 668.193100][ T808] usb 4-1: SerialNumber: syz [ 668.244023][ T808] usb 4-1: config 0 descriptor?? [ 668.296539][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 668.448731][ T808] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 668.475511][T10364] em28xx 1-1:0.0: unknown em28xx chip ID (74) [ 668.529035][T15336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2284'. [ 668.930511][T10364] em28xx 1-1:0.0: Config register raw data: 0x4a [ 670.275356][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2286'. [ 670.639062][ T37] kauditd_printk_skb: 102 callbacks suppressed [ 670.639082][ T37] audit: type=1326 audit(1772414004.807:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.639228][ T37] audit: type=1326 audit(1772414004.807:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.639979][ T37] audit: type=1326 audit(1772414004.807:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.640031][ T37] audit: type=1326 audit(1772414004.807:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.640417][ T37] audit: type=1326 audit(1772414004.807:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.640716][ T37] audit: type=1326 audit(1772414004.807:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.641000][ T37] audit: type=1326 audit(1772414004.807:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.641321][ T37] audit: type=1326 audit(1772414004.807:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 670.641769][ T37] audit: type=1326 audit(1772414004.807:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f279ebccfce code=0x7ffc0000 [ 670.642255][ T37] audit: type=1326 audit(1772414004.807:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15351 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x7ffc0000 [ 672.308454][ T5979] usb 4-1: USB disconnect, device number 73 [ 672.513630][ T5780] usb 1-1: USB disconnect, device number 43 [ 672.541045][ T5780] em28xx 1-1:0.0: Disconnecting em28xx [ 672.623883][T15374] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2294'. [ 672.754167][T15383] overlay: Unknown parameter 'fowner' [ 672.796207][ T5780] em28xx 1-1:0.0: Freeing device [ 673.145609][T15390] tmpfs: Unknown parameter '00000000000000000000003' [ 674.318512][T15369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 674.318655][T15369] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 674.468266][T15369] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 674.549457][T15369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 674.549573][T15369] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 674.597466][T15422] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 674.597498][T15422] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 674.633803][T15369] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 674.633994][T15369] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 674.744354][T15369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 674.779006][T15369] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 675.940965][T15447] overlay: Unknown parameter 'fowner' [ 675.998871][T15448] FAULT_INJECTION: forcing a failure. [ 675.998871][T15448] name failslab, interval 1, probability 0, space 0, times 0 [ 675.998907][T15448] CPU: 0 UID: 0 PID: 15448 Comm: syz.3.2316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 675.998934][T15448] Tainted: [L]=SOFTLOCKUP [ 675.998942][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 675.998955][T15448] Call Trace: [ 675.998963][T15448] [ 675.998971][T15448] dump_stack_lvl+0xe8/0x150 [ 675.999006][T15448] should_fail_ex+0x46b/0x600 [ 675.999043][T15448] should_failslab+0xa8/0x100 [ 675.999074][T15448] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 675.999103][T15448] ? __alloc_skb+0x1d0/0x7d0 [ 675.999125][T15448] ? lockdep_hardirqs_on+0x7a/0x110 [ 675.999156][T15448] __alloc_skb+0x1d0/0x7d0 [ 675.999185][T15448] netlink_sendmsg+0x5d4/0xb40 [ 675.999216][T15448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.999245][T15448] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.999278][T15448] ____sys_sendmsg+0xa4e/0xac0 [ 675.999331][T15448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.999369][T15448] ? import_iovec+0x73/0xa0 [ 675.999398][T15448] ___sys_sendmsg+0x2a5/0x360 [ 675.999433][T15448] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.999505][T15448] ? __fget_files+0x2a/0x420 [ 675.999527][T15448] ? __fget_files+0x3a6/0x420 [ 675.999560][T15448] __x64_sys_sendmsg+0x1c3/0x2a0 [ 675.999590][T15448] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.999627][T15448] ? __pfx_ksys_write+0x10/0x10 [ 675.999670][T15448] do_syscall_64+0x14d/0xf80 [ 675.999695][T15448] ? trace_irq_disable+0x3b/0x150 [ 675.999717][T15448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.999736][T15448] ? clear_bhb_loop+0x40/0x90 [ 675.999761][T15448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.999780][T15448] RIP: 0033:0x7fe617efc799 [ 675.999798][T15448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.999815][T15448] RSP: 002b:00007fe616156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.999835][T15448] RAX: ffffffffffffffda RBX: 00007fe618175fa0 RCX: 00007fe617efc799 [ 675.999849][T15448] RDX: 0000000000008880 RSI: 0000200000002a80 RDI: 0000000000000003 [ 675.999862][T15448] RBP: 00007fe616156090 R08: 0000000000000000 R09: 0000000000000000 [ 675.999873][T15448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.999884][T15448] R13: 00007fe618176038 R14: 00007fe618175fa0 R15: 00007fff08f07288 [ 675.999913][T15448] [ 676.347557][T14028] Bluetooth: hci1: command 0x0406 tx timeout [ 676.667556][T14028] Bluetooth: hci2: command 0x0406 tx timeout [ 676.667874][T14028] Bluetooth: hci4: command 0x0406 tx timeout [ 677.562095][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 677.562136][ T5810] Bluetooth: hci5: command 0x0406 tx timeout [ 678.488027][T14028] Bluetooth: hci1: command 0x0406 tx timeout [ 679.863246][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 679.864262][T14028] Bluetooth: hci4: command 0x0406 tx timeout [ 679.906972][ T5161] udevd[5161]: worker [6041] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 680.510031][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 682.285951][T15521] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 0, id = 0 [ 682.385693][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 682.690805][T15540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2343'. [ 682.690831][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2343'. [ 682.690850][T15540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2343'. [ 682.739133][T15540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2343'. [ 682.829722][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'. [ 684.643988][T15564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2348'. [ 686.275632][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.275685][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.312331][T15599] FAULT_INJECTION: forcing a failure. [ 687.312331][T15599] name failslab, interval 1, probability 0, space 0, times 0 [ 687.312371][T15599] CPU: 0 UID: 0 PID: 15599 Comm: syz.3.2361 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 687.312401][T15599] Tainted: [L]=SOFTLOCKUP [ 687.312410][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.312424][T15599] Call Trace: [ 687.312433][T15599] [ 687.312442][T15599] dump_stack_lvl+0xe8/0x150 [ 687.312481][T15599] should_fail_ex+0x46b/0x600 [ 687.312535][T15599] should_failslab+0xa8/0x100 [ 687.312569][T15599] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 687.312610][T15599] ? __alloc_skb+0x1d0/0x7d0 [ 687.312635][T15599] ? lockdep_hardirqs_on+0x7a/0x110 [ 687.312690][T15599] __alloc_skb+0x1d0/0x7d0 [ 687.312722][T15599] netlink_sendmsg+0x5d4/0xb40 [ 687.312759][T15599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.312794][T15599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 687.312833][T15599] ____sys_sendmsg+0xa4e/0xac0 [ 687.312876][T15599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.312917][T15599] ? import_iovec+0x73/0xa0 [ 687.312950][T15599] ___sys_sendmsg+0x2a5/0x360 [ 687.312988][T15599] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.313055][T15599] ? __fget_files+0x2a/0x420 [ 687.313081][T15599] ? __fget_files+0x3a6/0x420 [ 687.313120][T15599] __x64_sys_sendmsg+0x1c3/0x2a0 [ 687.313155][T15599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 687.313197][T15599] ? __pfx_ksys_write+0x10/0x10 [ 687.313243][T15599] do_syscall_64+0x14d/0xf80 [ 687.313274][T15599] ? trace_irq_disable+0x3b/0x150 [ 687.313299][T15599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.313322][T15599] ? clear_bhb_loop+0x40/0x90 [ 687.313351][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.313374][T15599] RIP: 0033:0x7fe617efc799 [ 687.313395][T15599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.313415][T15599] RSP: 002b:00007fe616156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.313439][T15599] RAX: ffffffffffffffda RBX: 00007fe618175fa0 RCX: 00007fe617efc799 [ 687.313456][T15599] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 687.313471][T15599] RBP: 00007fe616156090 R08: 0000000000000000 R09: 0000000000000000 [ 687.313485][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.313499][T15599] R13: 00007fe618176038 R14: 00007fe618175fa0 R15: 00007fff08f07288 [ 687.313535][T15599] [ 687.775700][T15605] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2364'. [ 687.775732][T15605] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2364'. [ 687.775750][T15605] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2364'. [ 687.812531][T15614] overlay: Unknown parameter 'fowner' [ 688.103530][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 688.103551][ T37] audit: type=1326 audit(1772414022.267:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15620 comm="syz.2.2369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f279ec0c799 code=0x0 [ 689.088160][T15638] /dev/nullb0: Can't lookup blockdev [ 691.085559][T15666] overlay: Unknown parameter 'fowner' [ 691.156885][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 691.251920][T15673] overlayfs: failed to resolve './file0': -2 [ 692.548407][T15682] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2381'. [ 697.011504][T15713] binder: 15712:15713 ioctl c018620c 200000000380 returned -1 [ 697.057542][ T5979] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 697.227592][ T5979] usb 1-1: Using ep0 maxpacket: 16 [ 697.230251][ T5979] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 697.230277][ T5979] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 697.230297][ T5979] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 697.230318][ T5979] usb 1-1: config 0 has no interface number 0 [ 697.230362][ T5979] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 697.230384][ T5979] usb 1-1: config 0 interface 104 has no altsetting 1 [ 697.233313][ T5979] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 697.233343][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.233365][ T5979] usb 1-1: Product: syz [ 697.233381][ T5979] usb 1-1: Manufacturer: syz [ 697.233397][ T5979] usb 1-1: SerialNumber: syz [ 697.392720][ T5979] usb 1-1: config 0 descriptor?? [ 697.506871][ T5979] asix 1-1:0.104: probe with driver asix failed with error -22 [ 698.187878][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.188553][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.224186][ T1632] usb 1-1: USB disconnect, device number 44 [ 698.482614][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 698.482638][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 698.782148][T15752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2400'. [ 698.785982][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2400'. [ 699.058265][T15759] overlayfs: failed to resolve './cgroup': -2 [ 699.297841][ T1632] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 699.734859][ T1632] usb 4-1: config 1 has an invalid descriptor of length 30, skipping remainder of the config [ 699.734890][ T1632] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.736301][ T1632] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 699.736331][ T1632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 699.736351][ T1632] usb 4-1: SerialNumber: syz [ 699.847123][T15778] program syz.0.2406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.782243][ T1632] usb 4-1: 0:2 : does not exist [ 702.782341][ T1632] usb 4-1: unit 5: unexpected type 0x0c [ 702.864824][ T1632] usb 4-1: USB disconnect, device number 74 [ 702.882488][T14028] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 702.962523][T15810] netlink: 'syz.1.2412': attribute type 58 has an invalid length. [ 702.962544][T15810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2412'. [ 703.004655][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2408'. [ 703.029612][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.147572][ T5980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 703.297499][ T5980] usb 1-1: Using ep0 maxpacket: 16 [ 703.301432][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.301467][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.301510][ T5980] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 703.301534][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.307267][ T5980] usb 1-1: config 0 descriptor?? [ 703.370905][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2414'. [ 703.581626][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581674][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581704][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581732][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581759][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581787][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581815][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581908][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581937][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.581965][ T5980] apple 0003:05AC:0273.0009: unknown main item tag 0x0 [ 703.584820][ T5980] apple 0003:05AC:0273.0009: unknown global tag 0xc [ 703.584841][ T5980] apple 0003:05AC:0273.0009: item 0 1 1 12 parsing failed [ 703.586938][ T5980] apple 0003:05AC:0273.0009: parse failed [ 703.596008][ T5980] apple 0003:05AC:0273.0009: probe with driver apple failed with error -22 [ 703.772710][ T5980] usb 1-1: USB disconnect, device number 45 [ 703.838342][T15862] MPI: mpi too large (113288 bits) [ 704.785352][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 705.573829][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2426'. [ 706.145451][T15912] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2432'. [ 706.317589][ T5979] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 706.467840][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 706.472121][ T5979] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 706.472158][ T5979] usb 1-1: can't read configurations, error -61 [ 707.444262][ T5979] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 707.601072][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 707.604152][ T5979] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 707.604187][ T5979] usb 1-1: can't read configurations, error -61 [ 707.604561][ T5979] usb usb1-port1: attempt power cycle [ 709.562051][T15945] overlayfs: failed to clone upperpath [ 710.127720][ T5885] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 710.174294][ T5979] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 710.339713][ T5885] usb 4-1: device descriptor read/64, error -71 [ 710.343179][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 710.343222][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 710.378495][ T5979] usb 1-1: device not accepting address 48, error -71 [ 710.481931][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 710.577496][ T5885] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 710.762165][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2446'. [ 712.433972][ T5979] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 712.511748][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.511785][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.511919][ T5979] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 712.512001][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.668151][ T5979] usb 1-1: config 0 descriptor?? [ 713.146690][ T5979] hid_parser_main: 79 callbacks suppressed [ 713.146714][ T5979] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 713.146742][ T5979] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 713.146765][ T5979] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 713.146788][ T5979] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 713.146811][ T5979] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 713.236777][ T5979] cm6533_jd 0003:0D8C:0022.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 713.403113][T15982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.403718][T15982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.433963][ T5979] usb 1-1: USB disconnect, device number 49 [ 713.641459][T16044] FAULT_INJECTION: forcing a failure. [ 713.641459][T16044] name failslab, interval 1, probability 0, space 0, times 0 [ 713.641494][T16044] CPU: 0 UID: 0 PID: 16044 Comm: syz.3.2462 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 713.641519][T16044] Tainted: [L]=SOFTLOCKUP [ 713.641526][T16044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.641538][T16044] Call Trace: [ 713.641546][T16044] [ 713.641554][T16044] dump_stack_lvl+0xe8/0x150 [ 713.641588][T16044] should_fail_ex+0x46b/0x600 [ 713.641626][T16044] should_failslab+0xa8/0x100 [ 713.641658][T16044] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 713.641687][T16044] ? __alloc_skb+0x1d0/0x7d0 [ 713.641710][T16044] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.641742][T16044] __alloc_skb+0x1d0/0x7d0 [ 713.641770][T16044] netlink_sendmsg+0x5d4/0xb40 [ 713.641802][T16044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.641831][T16044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.641862][T16044] ____sys_sendmsg+0xa4e/0xac0 [ 713.641899][T16044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.641942][T16044] ? import_iovec+0x73/0xa0 [ 713.641988][T16044] ___sys_sendmsg+0x2a5/0x360 [ 713.642022][T16044] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.642087][T16044] ? __fget_files+0x2a/0x420 [ 713.642112][T16044] ? __fget_files+0x3a6/0x420 [ 713.642148][T16044] __x64_sys_sendmsg+0x1c3/0x2a0 [ 713.642179][T16044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.642216][T16044] ? __pfx_ksys_write+0x10/0x10 [ 713.642257][T16044] do_syscall_64+0x14d/0xf80 [ 713.642283][T16044] ? trace_irq_disable+0x3b/0x150 [ 713.642306][T16044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.642327][T16044] ? clear_bhb_loop+0x40/0x90 [ 713.642353][T16044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.642374][T16044] RIP: 0033:0x7fe617efc799 [ 713.642393][T16044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.642410][T16044] RSP: 002b:00007fe616156028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.642431][T16044] RAX: ffffffffffffffda RBX: 00007fe618175fa0 RCX: 00007fe617efc799 [ 713.642446][T16044] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 713.642458][T16044] RBP: 00007fe616156090 R08: 0000000000000000 R09: 0000000000000000 [ 713.642471][T16044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.642482][T16044] R13: 00007fe618176038 R14: 00007fe618175fa0 R15: 00007fff08f07288 [ 713.642514][T16044] [ 713.828211][T16045] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2461'. [ 713.828318][T16045] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2461'. [ 714.687233][T16023] fido_id[16023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 714.978065][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2460'. [ 715.124037][ T5979] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 715.254182][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2468'. [ 715.277479][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 715.280128][ T5979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 715.280159][ T5979] usb 4-1: can't read configurations, error -61 [ 715.423130][ T5979] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 715.597736][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 715.601722][ T5979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 715.601779][ T5979] usb 4-1: can't read configurations, error -61 [ 715.602470][ T5979] usb usb4-port1: attempt power cycle [ 715.937570][ T5979] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 715.958439][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 715.961029][ T5979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 715.961066][ T5979] usb 4-1: can't read configurations, error -61 [ 716.087577][ T5979] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 716.111128][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 716.113941][ T5979] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 716.113980][ T5979] usb 4-1: can't read configurations, error -61 [ 716.119280][ T5979] usb usb4-port1: unable to enumerate USB device [ 716.257796][T16109] FAULT_INJECTION: forcing a failure. [ 716.257796][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 716.257896][T16109] CPU: 0 UID: 0 PID: 16109 Comm: syz.0.2479 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 716.257925][T16109] Tainted: [L]=SOFTLOCKUP [ 716.257933][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.257945][T16109] Call Trace: [ 716.257954][T16109] [ 716.257964][T16109] dump_stack_lvl+0xe8/0x150 [ 716.258000][T16109] should_fail_ex+0x46b/0x600 [ 716.258039][T16109] should_failslab+0xa8/0x100 [ 716.258075][T16109] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 716.258107][T16109] ? __alloc_skb+0x1d0/0x7d0 [ 716.258130][T16109] ? lockdep_hardirqs_on+0x7a/0x110 [ 716.258164][T16109] __alloc_skb+0x1d0/0x7d0 [ 716.258193][T16109] netlink_sendmsg+0x5d4/0xb40 [ 716.258228][T16109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.258259][T16109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.258294][T16109] ____sys_sendmsg+0xa4e/0xac0 [ 716.258332][T16109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.258370][T16109] ? import_iovec+0x73/0xa0 [ 716.258400][T16109] ___sys_sendmsg+0x2a5/0x360 [ 716.258434][T16109] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.258497][T16109] ? __fget_files+0x2a/0x420 [ 716.258523][T16109] ? __fget_files+0x3a6/0x420 [ 716.258558][T16109] __x64_sys_sendmsg+0x1c3/0x2a0 [ 716.258591][T16109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.258629][T16109] ? __pfx_ksys_write+0x10/0x10 [ 716.258670][T16109] do_syscall_64+0x14d/0xf80 [ 716.258697][T16109] ? trace_irq_disable+0x3b/0x150 [ 716.258727][T16109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.258748][T16109] ? clear_bhb_loop+0x40/0x90 [ 716.258774][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.258795][T16109] RIP: 0033:0x7fada077c799 [ 716.258814][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.258831][T16109] RSP: 002b:00007fad9e9d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.258852][T16109] RAX: ffffffffffffffda RBX: 00007fada09f5fa0 RCX: 00007fada077c799 [ 716.258872][T16109] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 716.258886][T16109] RBP: 00007fad9e9d6090 R08: 0000000000000000 R09: 0000000000000000 [ 716.258899][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.258911][T16109] R13: 00007fada09f6038 R14: 00007fada09f5fa0 R15: 00007ffc3a97bc48 [ 716.258942][T16109] [ 716.549407][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'. [ 717.287634][ T5980] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 717.439839][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.439871][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.439908][ T5980] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 717.439949][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.445591][ T5980] usb 1-1: config 0 descriptor?? [ 717.868723][ T5980] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 717.868761][ T5980] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 717.868787][ T5980] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 717.868815][ T5980] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 717.868841][ T5980] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 717.877036][ T5980] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 718.066301][ T5980] cp2112 0003:10C4:EA90.000B: error requesting version [ 718.087997][ T5980] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71 [ 718.118073][ T5980] usb 1-1: USB disconnect, device number 50 [ 718.241923][T16171] overlayfs: failed to clone lowerpath [ 718.242649][T16154] fido_id[16154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 718.308637][T16175] overlayfs: failed to clone lowerpath [ 718.337574][ T5780] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 718.436590][T16177] tmpfs: Bad value for 'mpol' [ 718.466047][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 718.471242][T16180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2496'. [ 718.490852][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.493346][ T5780] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 718.493376][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.493391][ T5780] usb 4-1: Product: syz [ 718.493402][ T5780] usb 4-1: Manufacturer: syz [ 718.493413][ T5780] usb 4-1: SerialNumber: syz [ 718.542289][ T5780] usb 4-1: config 0 descriptor?? [ 718.764065][ T5780] cdc_subset 4-1:0.0: probe with driver cdc_subset failed with error -22 [ 721.228942][T16208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2502'. [ 721.300262][ T5979] usb 4-1: USB disconnect, device number 81 [ 723.333090][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 723.397117][T16250] overlayfs: failed to resolve './bus': -2 [ 723.571350][T16248] overlayfs: failed to clone upperpath [ 725.772155][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 725.977627][ T6139] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 725.977832][ T1632] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 725.984640][T16290] netlink: 'syz.1.2518': attribute type 10 has an invalid length. [ 726.046928][T16290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.076252][T16290] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 726.149118][ T6139] usb 1-1: Using ep0 maxpacket: 16 [ 726.149265][ T1632] usb 4-1: Using ep0 maxpacket: 32 [ 726.169911][ T1632] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 726.169945][ T1632] usb 4-1: can't read configurations, error -61 [ 726.175839][ T6139] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 726.175865][ T6139] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 726.175898][ T6139] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 726.175916][ T6139] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 726.230610][ T6139] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.230638][ T6139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.230657][ T6139] usb 1-1: Product: syz [ 726.230671][ T6139] usb 1-1: Manufacturer: syz [ 726.230684][ T6139] usb 1-1: SerialNumber: syz [ 726.308185][ T1632] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 726.467797][ T1632] usb 4-1: Using ep0 maxpacket: 32 [ 726.470985][ T1632] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 726.471020][ T1632] usb 4-1: can't read configurations, error -61 [ 726.471448][ T1632] usb usb4-port1: attempt power cycle [ 726.518630][ T6139] usb 1-1: 0:2 : does not exist [ 726.533930][ T6139] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 726.644245][T16313] 9p: Bad value for 'rfdno' [ 726.650584][ T6139] usb 1-1: USB disconnect, device number 51 [ 726.771700][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.821009][ T1632] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 726.842360][ T1632] usb 4-1: Using ep0 maxpacket: 32 [ 726.846476][ T1632] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 726.846509][ T1632] usb 4-1: can't read configurations, error -61 [ 726.988006][ T1632] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 727.009404][ T1632] usb 4-1: Using ep0 maxpacket: 32 [ 727.011817][ T1632] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 727.011854][ T1632] usb 4-1: can't read configurations, error -61 [ 727.012239][ T1632] usb usb4-port1: unable to enumerate USB device [ 727.929468][T16347] netlink: 'syz.4.2532': attribute type 22 has an invalid length. [ 728.039357][T16350] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2534'. [ 728.039523][T16350] netem: invalid attributes len -5 [ 728.039536][T16350] netem: change failed [ 728.093552][T16354] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 728.212695][T16350] gretap2: entered allmulticast mode [ 731.202441][T16431] openvswitch: netlink: IP tunnel dst address not specified [ 732.427480][ T5979] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 732.577653][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 732.579558][ T5979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.579577][ T5979] usb 4-1: config 0 has no interface number 0 [ 732.581486][ T5979] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 732.581505][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.581526][ T5979] usb 4-1: Product: syz [ 732.581537][ T5979] usb 4-1: Manufacturer: syz [ 732.581548][ T5979] usb 4-1: SerialNumber: syz [ 732.615870][ T5979] usb 4-1: config 0 descriptor?? [ 732.662431][ T5979] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 732.662454][ T5979] usb 4-1: selecting invalid altsetting 1 [ 732.662465][ T5979] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 732.690355][ T5979] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 732.690646][ T5979] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 732.690676][ T5979] usb 4-1: media controller created [ 732.743929][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 733.271506][ T5979] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 733.271549][ T5979] zl10353_read_register: readreg error (reg=127, ret==-71) [ 733.271965][ T5979] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 733.462022][ T5979] usb 4-1: USB disconnect, device number 86 [ 733.599124][T16475] overlayfs: missing 'lowerdir' [ 734.664795][T16496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2562'. [ 734.681242][T16486] ip6tnl2: entered allmulticast mode [ 736.527527][T16507] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2566'. [ 736.527635][T16507] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2566'. [ 737.376515][T16510] binder: 16509:16510 ioctl c018620c 200000000380 returned -1 [ 737.924900][T16519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2569'. [ 738.268392][T16527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2570'. [ 741.317060][T16595] trusted_key: encrypted_key: keylen parameter is missing [ 745.633986][T16633] binder: 16632:16633 ioctl c018620c 200000000380 returned -1 [ 746.217179][T16642] bond1: option lacp_rate: invalid value (5) [ 746.244226][T16642] bond1 (unregistering): Released all slaves [ 746.892101][T16719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2613'. [ 747.724884][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.724953][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.130890][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.132092][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.646942][T16751] binder: 16750:16751 ioctl c018620c 200000000380 returned -1 [ 748.859526][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2625'. [ 749.339209][T16776] overlay: Unknown parameter 'fowner' [ 750.860863][T16795] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 751.007506][ T5979] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 751.067272][T16803] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 751.157977][ T5979] usb 4-1: Using ep0 maxpacket: 8 [ 751.160056][ T5979] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.160095][ T5979] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 751.160143][ T5979] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 751.160167][ T5979] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.160208][ T5979] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.160230][ T5979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.387848][ T5979] usb 4-1: GET_CAPABILITIES returned 0 [ 751.388000][ T5979] usbtmc 4-1:16.0: can't read capabilities [ 752.514155][ T6139] usb 4-1: USB disconnect, device number 87 [ 752.716547][T16837] overlay: Unknown parameter 'fowner' [ 753.279724][T16848] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 753.450288][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 754.935714][T16875] overlay: Unknown parameter 'fowner' [ 755.228726][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'. [ 755.287745][T16882] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 755.636371][T16899] bond3: option arp_all_targets: invalid value (786433) [ 755.846642][T16899] bond3 (unregistering): Released all slaves [ 756.671127][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2668'. [ 758.179124][T16993] overlay: Unknown parameter 'fowner' [ 759.833781][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 760.364839][T17020] binder: 17018:17020 ioctl c018620c 200000000380 returned -1 [ 760.536853][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 761.268247][ T808] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 761.306607][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.331529][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.332998][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.334207][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.334927][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.427464][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 761.429822][ T808] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.429846][ T808] usb 1-1: config 0 has no interface number 0 [ 761.433687][ T808] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 761.433717][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.433739][ T808] usb 1-1: Product: syz [ 761.433754][ T808] usb 1-1: Manufacturer: syz [ 761.433769][ T808] usb 1-1: SerialNumber: syz [ 761.520703][ T808] usb 1-1: config 0 descriptor?? [ 761.537680][ T808] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 761.537710][ T808] usb 1-1: selecting invalid altsetting 1 [ 761.537726][ T808] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 761.570878][ T808] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 761.571363][ T808] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 761.571423][ T808] usb 1-1: media controller created [ 761.633324][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 762.447055][T17081] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 762.651139][ T808] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 762.651200][ T808] zl10353_read_register: readreg error (reg=127, ret==-71) [ 762.651619][ T808] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 762.799514][ T808] usb 1-1: USB disconnect, device number 52 [ 763.482566][ T5800] Bluetooth: hci0: command tx timeout [ 764.167438][T10364] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 764.340185][T17120] overlay: Unknown parameter '/.' [ 764.370885][T10364] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 764.370917][T10364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.370937][T10364] usb 4-1: Product: syz [ 764.370951][T10364] usb 4-1: Manufacturer: syz [ 764.370970][T10364] usb 4-1: SerialNumber: syz [ 764.831693][T10364] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 764.831760][T10364] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 765.599195][ T5800] Bluetooth: hci0: command tx timeout [ 765.639171][ T140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.535150][ T140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.648836][T17145] syz.0.2697 (17145): drop_caches: 2 [ 766.666834][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2697'. [ 767.870558][ T5800] Bluetooth: hci0: command tx timeout [ 768.603874][ T38] INFO: task kworker/1:1:36 blocked for more than 144 seconds. [ 768.603874][ T38] INFO: task kworker/1:1:36 blocked for more than 144 seconds. [ 768.603903][ T38] Tainted: G L syzkaller #0 [ 768.603916][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 768.603927][ T38] task:kworker/1:1 state:D stack:21248 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 768.603991][ T38] Workqueue: usb_hub_wq hub_event [ 768.604027][ T38] Call Trace: [ 768.604035][ T38] [ 768.604050][ T38] __schedule+0x14fb/0x52c0 [ 768.604096][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 768.604128][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 768.604165][ T38] ? __pfx___schedule+0x10/0x10 [ 768.604205][ T38] ? schedule+0x90/0x360 [ 768.604237][ T38] schedule+0x164/0x360 [ 768.604276][ T38] schedule_timeout+0xc3/0x2c0 [ 768.604310][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 768.604345][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 768.604388][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.604419][ T38] ? wait_for_completion+0x274/0x5e0 [ 768.604454][ T38] wait_for_completion+0x2cc/0x5e0 [ 768.604506][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 768.604555][ T38] i2c_del_adapter+0x5c0/0x790 [ 768.604582][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 768.604628][ T38] ? dvb_usbv2_exit+0x4a1/0xb60 [ 768.604662][ T38] ? __pfx_i2c_del_adapter+0x10/0x10 [ 768.604693][ T38] ? dvb_usbv2_exit+0x935/0xb60 [ 768.604729][ T38] dvb_usbv2_probe+0x4c0/0x3c20 [ 768.604818][ T38] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 768.604851][ T38] ? __pm_runtime_set_status+0x99c/0xc70 [ 768.604897][ T38] usb_probe_interface+0x668/0xc90 [ 768.604933][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 768.604955][ T38] really_probe+0x267/0xaf0 [ 768.604988][ T38] __driver_probe_device+0x18c/0x320 [ 768.605017][ T38] driver_probe_device+0x4f/0x240 [ 768.605046][ T38] __device_attach_driver+0x2d4/0x4c0 [ 768.605075][ T38] bus_for_each_drv+0x25b/0x2f0 [ 768.605106][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 768.605132][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 768.605163][ T38] ? rt_spin_unlock+0x160/0x200 [ 768.605198][ T38] __device_attach+0x2c8/0x450 [ 768.605237][ T38] ? __pfx___device_attach+0x10/0x10 [ 768.605275][ T38] ? rt_spin_unlock+0x160/0x200 [ 768.605311][ T38] device_initial_probe+0xa1/0xd0 [ 768.605350][ T38] bus_probe_device+0x12d/0x220 [ 768.605377][ T38] ? device_add+0x726/0xb80 [ 768.605413][ T38] device_add+0x7b6/0xb80 [ 768.605455][ T38] usb_set_configuration+0x1a87/0x2110 [ 768.605521][ T38] usb_generic_driver_probe+0x8d/0x150 [ 768.605558][ T38] usb_probe_device+0x1c4/0x3b0 [ 768.605599][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 768.605642][ T38] really_probe+0x267/0xaf0 [ 768.605674][ T38] __driver_probe_device+0x18c/0x320 [ 768.605701][ T38] driver_probe_device+0x4f/0x240 [ 768.605729][ T38] __device_attach_driver+0x2d4/0x4c0 [ 768.605759][ T38] bus_for_each_drv+0x25b/0x2f0 [ 768.605791][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 768.605815][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 768.605845][ T38] ? rt_spin_unlock+0x160/0x200 [ 768.605881][ T38] __device_attach+0x2c8/0x450 [ 768.605919][ T38] ? __pfx___device_attach+0x10/0x10 [ 768.605956][ T38] ? rt_spin_unlock+0x160/0x200 [ 768.605990][ T38] device_initial_probe+0xa1/0xd0 [ 768.606029][ T38] bus_probe_device+0x12d/0x220 [ 768.606058][ T38] ? device_add+0x726/0xb80 [ 768.606094][ T38] device_add+0x7b6/0xb80 [ 768.606134][ T38] usb_new_device+0x9f8/0x16e0 [ 768.606178][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 768.606219][ T38] hub_event+0x2a49/0x4f60 [ 768.606310][ T38] ? __pfx_hub_event+0x10/0x10 [ 768.606354][ T38] ? process_scheduled_works+0xa25/0x1830 [ 768.606386][ T38] ? process_scheduled_works+0xa25/0x1830 [ 768.606422][ T38] process_scheduled_works+0xb02/0x1830 [ 768.606487][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 768.606539][ T38] ? assign_work+0x3d5/0x5e0 [ 768.606578][ T38] worker_thread+0xa50/0xfc0 [ 768.606648][ T38] kthread+0x388/0x470 [ 768.606672][ T38] ? __pfx_worker_thread+0x10/0x10 [ 768.606701][ T38] ? __pfx_kthread+0x10/0x10 [ 768.606746][ T38] ret_from_fork+0x51e/0xb90 [ 768.606785][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 768.606816][ T38] ? __switch_to+0xc7d/0x1450 [ 768.606849][ T38] ? __pfx_kthread+0x10/0x10 [ 768.606876][ T38] ret_from_fork_asm+0x1a/0x30 [ 768.606918][ T38] [ 768.607119][ T38] [ 768.607119][ T38] Showing all locks held in the system: [ 768.607131][ T38] 4 locks held by rcuc/0/20: [ 768.607148][ T38] 5 locks held by kworker/1:1/36: [ 768.607161][ T38] #0: ffff888021ad7938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 768.607239][ T38] #1: ffffc90000ab7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 768.607302][ T38] #2: ffff888029f9e188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 768.617447][ T38] #3: ffff88802d5e6188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 768.617517][ T38] #4: ffff888028337150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 768.617582][ T38] 1 lock held by khungtaskd/38: [ 768.617596][ T38] #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 768.617665][ T38] 7 locks held by kworker/u8:6/140: [ 768.617680][ T38] #0: ffff88801aed9138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 768.617741][ T38] #1: ffffc90003a57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 768.617803][ T38] #2: ffffffff8f14bb40 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 768.617858][ T38] #3: ffff88805e5110d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0 [ 768.617914][ T38] #4: ffff88805e51a300 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0 [ 768.617973][ T38] #5: ffffffff8f15a378 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 768.618029][ T38] #6: ffff88805e44cea0 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x118e/0x2360 [ 768.618105][ T38] 3 locks held by kworker/0:2/808: [ 768.618119][ T38] #0: ffff888019c01938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 768.618188][ T38] #1: ffffc90005557c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 768.618267][ T38] #2: ffffffff8ddce658 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x6e/0x1220 [ 768.618323][ T38] 3 locks held by kworker/u8:8/1153: [ 768.618337][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 768.618396][ T38] #1: ffffc900062ffc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 768.618460][ T38] #2: ffffffff8f15a378 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 768.618539][ T38] 2 locks held by getty/5548: [ 768.618552][ T38] #0: ffff8880374250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 768.618606][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 768.618680][ T38] 4 locks held by kworker/u8:13/5919: [ 768.618695][ T38] 4 locks held by udevd/6041: [ 768.618708][ T38] #0: ffff88803a388090 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 768.618760][ T38] #1: ffff88803d875478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 768.618829][ T38] #2: ffff88805de960f8 (kn->active#26){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 768.618896][ T38] #3: ffff88802d5e6188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 768.618960][ T38] 5 locks held by kworker/0:0/10364: [ 768.618973][ T38] #0: ffff888021ad7938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 768.619033][ T38] #1: ffffc9000633fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 768.619098][ T38] #2: ffff888029f89188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 768.619159][ T38] #3: ffff88805e3c9188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 768.619224][ T38] #4: ffff88805e3cc150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 768.619293][ T38] 1 lock held by syz-executor/17043: [ 768.619307][ T38] #0: ffffffff8f15a378 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 768.619362][ T38] 7 locks held by syz.3.2691/17111: [ 768.619375][ T38] 4 locks held by syz.4.2696/17129: [ 768.619388][ T38] 2 locks held by syz.4.2696/17144: [ 768.619402][ T38] #0: ffff8880411049f8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 768.619459][ T38] #1: ffffffff8f15a378 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x7f/0x270 [ 768.619524][ T38] 1 lock held by syz.0.2697/17146: [ 768.619539][ T38] 1 lock held by dhcpcd/17169: [ 768.619552][ T38] #0: ffff888038f48358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 768.619621][ T38] 1 lock held by syz.2.2700/17171: [ 768.619635][ T38] #0: ffffffff8f15a378 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xefa/0x2ea0 [ 768.619698][ T38] [ 768.619704][ T38] ============================================= [ 768.619704][ T38] [ 768.619733][ T38] NMI backtrace for cpu 1 [ 768.619753][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.619782][ T38] Tainted: [L]=SOFTLOCKUP [ 768.619790][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.619804][ T38] Call Trace: [ 768.619814][ T38] [ 768.619824][ T38] dump_stack_lvl+0xe8/0x150 [ 768.619861][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 768.619887][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 768.619923][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 768.619952][ T38] sys_info+0x135/0x170 [ 768.619973][ T38] watchdog+0xfd9/0x1030 [ 768.620006][ T38] ? watchdog+0x21a/0x1030 [ 768.620043][ T38] kthread+0x388/0x470 [ 768.620069][ T38] ? __pfx_watchdog+0x10/0x10 [ 768.620093][ T38] ? __pfx_kthread+0x10/0x10 [ 768.620118][ T38] ret_from_fork+0x51e/0xb90 [ 768.620160][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 768.620192][ T38] ? __switch_to+0xc7d/0x1450 [ 768.620225][ T38] ? __pfx_kthread+0x10/0x10 [ 768.620251][ T38] ret_from_fork_asm+0x1a/0x30 [ 768.620290][ T38] [ 768.620299][ T38] Sending NMI from CPU 1 to CPUs 0: [ 768.620334][ C0] NMI backtrace for cpu 0 [ 768.620352][ C0] CPU: 0 UID: 0 PID: 17111 Comm: syz.3.2691 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.620379][ C0] Tainted: [L]=SOFTLOCKUP [ 768.620386][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.620398][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x30/0xa0 [ 768.620425][ C0] Code: 04 24 65 48 8b 0d 68 a7 89 10 65 44 8b 05 88 a7 89 10 41 81 e0 00 00 ff 00 ba 00 01 00 00 23 91 64 0b 00 00 41 89 d1 45 09 c1 <74> 12 45 85 c0 75 5b 85 d2 74 57 83 b9 24 16 00 00 00 74 4e 8b 91 [ 768.620442][ C0] RSP: 0018:ffffc9000681f360 EFLAGS: 00000246 [ 768.620459][ C0] RAX: ffffffff8210154d RBX: 000000000004ddf8 RCX: ffff888073ff3c80 [ 768.620473][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.620485][ C0] RBP: ffffc9000681f600 R08: 0000000000000000 R09: 0000000000000000 [ 768.620497][ C0] R10: dffffc0000000000 R11: fffff9400026efbf R12: ffff88806778e8c0 [ 768.620518][ C0] R13: dffffc0000000000 R14: 800000004ddf8007 R15: 00007fe617b57000 [ 768.620533][ C0] FS: 0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000 [ 768.620549][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.620563][ C0] CR2: 00007f7279e0f040 CR3: 000000002928a000 CR4: 00000000003526f0 [ 768.620580][ C0] Call Trace: [ 768.620587][ C0] [ 768.620594][ C0] vm_normal_page+0x6d/0x1a0 [ 768.620619][ C0] unmap_page_range+0xb4a/0x4540 [ 768.620669][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 768.620696][ C0] ? mas_find+0xb0e/0xd30 [ 768.620721][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 768.620744][ C0] unmap_vmas+0x48f/0x6a0 [ 768.620778][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 768.620814][ C0] exit_mmap+0x280/0xa10 [ 768.620844][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 768.620879][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 768.620913][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 768.620945][ C0] ? __pfx_exit_aio+0x10/0x10 [ 768.620976][ C0] ? uprobe_clear_state+0x288/0x2a0 [ 768.621008][ C0] __mmput+0xcb/0x3d0 [ 768.621034][ C0] exit_mm+0x168/0x220 [ 768.621056][ C0] do_exit+0x62e/0x2320 [ 768.621076][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 768.621102][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 768.621129][ C0] ? __pfx_do_exit+0x10/0x10 [ 768.621147][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 768.621168][ C0] ? reacquire_held_locks+0x104/0x190 [ 768.621189][ C0] ? rt_spin_lock+0x1e0/0x400 [ 768.621216][ C0] do_group_exit+0x21b/0x2d0 [ 768.621241][ C0] ? rt_spin_unlock+0x160/0x200 [ 768.621263][ C0] get_signal+0x125c/0x1310 [ 768.621301][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 768.621325][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 768.621344][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 768.621373][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 768.621401][ C0] exit_to_user_mode_loop+0x86/0x480 [ 768.621429][ C0] ? rcu_is_watching+0x15/0xb0 [ 768.621451][ C0] do_syscall_64+0x32d/0xf80 [ 768.621479][ C0] ? trace_irq_disable+0x3b/0x150 [ 768.621501][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.621520][ C0] ? clear_bhb_loop+0x40/0x90 [ 768.621543][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.621562][ C0] RIP: 0033:0x7fe617ebcfce [ 768.621578][ C0] Code: Unable to access opcode bytes at 0x7fe617ebcfa4. [ 768.621588][ C0] RSP: 002b:00007fe616153f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 768.621607][ C0] RAX: 0000000000000000 RBX: 00007fe6161566c0 RCX: 00007fe617ebcfce [ 768.621621][ C0] RDX: 00007fe616153f80 RSI: 0000000000000000 RDI: 0000000000000000 [ 768.621633][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 768.621645][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe616153fd8 [ 768.621657][ C0] R13: 0000000000000000 R14: 00007fe618175fa0 R15: 00007fff08f07288 [ 768.621681][ C0] [ 768.622342][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 768.622364][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 768.622394][ T38] Tainted: [L]=SOFTLOCKUP [ 768.622403][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 768.622428][ T38] Call Trace: [ 768.622437][ T38] [ 768.622447][ T38] vpanic+0x56c/0xa60 [ 768.622484][ T38] ? __pfx_vpanic+0x10/0x10 [ 768.622529][ T38] panic+0xc5/0xd0 [ 768.622563][ T38] ? __pfx_panic+0x10/0x10 [ 768.622594][ T38] ? printk_trigger_flush+0x117/0x180 [ 768.622633][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 768.622670][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 768.622700][ T38] watchdog+0x1023/0x1030 [ 768.622733][ T38] ? watchdog+0x21a/0x1030 [ 768.622767][ T38] kthread+0x388/0x470 [ 768.622790][ T38] ? __pfx_watchdog+0x10/0x10 [ 768.622814][ T38] ? __pfx_kthread+0x10/0x10 [ 768.622840][ T38] ret_from_fork+0x51e/0xb90 [ 768.622874][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 768.622905][ T38] ? __switch_to+0xc7d/0x1450 [ 768.622936][ T38] ? __pfx_kthread+0x10/0x10 [ 768.622962][ T38] ret_from_fork_asm+0x1a/0x30 [ 768.623031][ T38] [ 768.623732][ T38] Kernel Offset: disabled