last executing test programs: 2m41.994682277s ago: executing program 1 (id=1759): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r3 = epoll_create(0x80f04) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) epoll_wait(r3, 0x0, 0x0, 0xfffffff7) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40c0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000004680)=[{0x9, 0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f00000047c0)=""/243, 0xf3}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000001440)=""/34, 0x22}, {&(0x7f0000001480)=""/93, 0x5d}], &(0x7f00000015c0)=[0x2, 0x10, 0x4, 0x0, 0xfff, 0x5, 0x9, 0x6]}, {0x1, 0x1, 0x0, &(0x7f0000001700)=[{&(0x7f0000001600)=""/207, 0xcf}], &(0x7f0000001740)=[0x80, 0x6, 0x6f2d4920, 0x1, 0x2b]}, {0x7, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000017c0)=""/125, 0x7d}, {&(0x7f0000001840)=""/192, 0xc0}, {&(0x7f0000001900)=""/83, 0x53}, {&(0x7f0000001980)=""/156, 0x9c}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/103, 0x67}], &(0x7f0000001c00)=[0x8, 0x2, 0x8, 0x81, 0x3, 0x4, 0x80000000, 0x7, 0xfffffffffffffffc, 0x0]}, {0x5, 0x1, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)=""/62, 0x3e}, {&(0x7f0000001d00)=""/98, 0x62}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/4096, 0x1000}], &(0x7f0000004440)=[0x6, 0x8, 0x2, 0x9, 0x3, 0x1, 0x9, 0x3, 0x1000]}, {0x6, 0x1, 0x0, &(0x7f0000003200)=[{&(0x7f0000002ec0)=""/96, 0x60}, {&(0x7f0000002f40)=""/239, 0xef}, {&(0x7f0000003040)=""/49, 0x31}, {&(0x7f0000003080)=""/37, 0x25}, {&(0x7f00000030c0)=""/110, 0x6e}, {&(0x7f0000003140)=""/192, 0xc0}], &(0x7f0000003280)=[0x1, 0x2b53, 0x1, 0xfffffffffffffff9, 0x37f, 0x3, 0x8, 0x5]}, {0x6, 0x1, 0x0, &(0x7f00000045c0)=[{&(0x7f00000032c0)=""/109, 0x6d}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/117, 0x75}, {&(0x7f0000004740)=""/99, 0x63}, {&(0x7f00000044c0)=""/248, 0xf8}], &(0x7f0000004640)=[0x2, 0x2, 0xec, 0x696, 0xfff, 0x5]}], 0x6) 2m39.450406064s ago: executing program 1 (id=1765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000000500000a34000000090a010400000000000000000a0000040900010073797a31000e20c8992e05d76d0000020900020073797a3100000000140000001100010000000000000000000300000a00"/92], 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mount$overlay(0x0, 0x0, 0x0, 0xfff3c6eff1642883, 0x0) socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000180)}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f00000000c0)) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x1, "32f9ca36137221e90e425b09aef406d3103c189e2a1e8cab22fedf1841bc7363", 0xe, 0x9, 0x4, 0x9}, 0x3c) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r10, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0c000200ff7f0043191c24d99fb8af9afe090f7e2b6aeb52"], 0x30}}, 0x20000000) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, &(0x7f0000000080)={0x0, 0x6}) 2m39.064864842s ago: executing program 1 (id=1767): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x2, "78d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m34.717726566s ago: executing program 1 (id=1779): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000a00)=""/102400, 0x19000) fsopen(0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) socket$netlink(0x10, 0x3, 0x0) connect$can_j1939(r2, &(0x7f0000000640), 0x18) sendfile(r2, r1, 0x0, 0x10000000000008) 2m33.702843077s ago: executing program 1 (id=1783): socket$kcm(0x2, 0x1000000000000002, 0x0) epoll_create1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x420101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="e0000000130001", @ANYRESHEX, @ANYBLOB="18278b2f3ce43b93dcec87b5399bde57d7123dfeac5fd3347e5e211745e6f551f0f441254dae9d606009f5af879aba9351c1706e0b9232a5"], 0xe0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xa}}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) utimes(0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x7e0, r6}, 0x38) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x100, 0x2, {0xffffffffffffffff}, {}, 0x7f, 0x1}) getpriority(0x1, r7) 2m32.780879344s ago: executing program 1 (id=1787): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffff, 0x10, &(0x7f0000000000)=0x1) (async) sync() 2m17.471955608s ago: executing program 32 (id=1787): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffff, 0x10, &(0x7f0000000000)=0x1) (async) sync() 1m43.145082266s ago: executing program 0 (id=1937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x1, 0x800, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000300)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000019080)={{{@in6, @in6=@loopback}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000004000000cffd3f00ff07000000000000", @ANYRES32=0x1, @ANYBLOB="00000ebf0000000025a7000000000000c3a99f0000f200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24005080}, 0x4810) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYRES64=r6, @ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x930e849e31080342}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r6, @ANYBLOB="100f2abd7000fcdbdf2555000000080001005c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x30000800}, 0x44000) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) 1m41.268371668s ago: executing program 0 (id=1944): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x70bd25, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x47, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x40}}, @TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x78, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4e, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x46f8}, @device_b, @device_b, @initial, {0x4, 0xf01}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x2, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0xb5, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x8000, 0x2, 0x4, 0x0, {0x10, 0xcf1, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x8001, 0xf}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x800, 0x1, 0xffff]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20844}, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r6 = syz_open_procfs(0x0, 0x0) statx(r6, 0x0, 0x1000, 0x80, &(0x7f0000000540)) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x1, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m40.73879844s ago: executing program 0 (id=1946): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000014}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="64460f01cf8ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f39823bf3450fc7b2000000000f01d9410f01df", 0x3d}], 0x1, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r8], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a4}}, 0x20004000) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$uac2(0x2, 0xa1, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x6, 0xc0, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x3, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x15, 0xed}, [@output_terminal={0xc, 0x24, 0x3, 0x1, 0x405, 0xfb, 0x5, 0x2, 0x5, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0x4, 0x1, {0x8, 0x25, 0x1, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x9, 0x5, 0x40}, @as_header={0x10, 0x24, 0x1, 0x1, 0xe0, 0x3, 0x3, 0x4, 0x81, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0xa9, 0x9, {0x8, 0x25, 0x1, 0x1, 0x0, 0x10, 0xf}}}}}}}}]}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 1m37.451103322s ago: executing program 0 (id=1958): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xa1ffffff, 0xff, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) open(&(0x7f0000000780)='./file0/../file0/../file0/../file0\x00', 0x200002, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1m36.852304934s ago: executing program 0 (id=1960): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) ptrace(0x4207, r0) 1m36.570951848s ago: executing program 0 (id=1961): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3400000040000101ccb42aa992496a000100000004004880100001800c00108005000b00000000000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x13d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 1m36.085945984s ago: executing program 33 (id=1961): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3400000040000101ccb42aa992496a000100000004004880100001800c00108005000b00000000000c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x13d) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') 20.10450199s ago: executing program 6 (id=2208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4010000) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c80)={0x310, 0x3e, 0x300, 0x70bd28, 0x25dfdbff, {0x13}, [@nested={0x8, 0x90, 0x0, 0x1, [@nested={0x4, 0x6b}]}, @nested={0x121, 0xb9, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r2}, @generic="ca88b33d74b8dcb353295e7854b155908dc6f3d3fc3583970504ef1c2615aa2e2f26ad8b886334d62bb0c61a34d393f6ebe7b393c2d2714bd1a5440ff9ac55976973ec6969968ff2783b1494dcadcde62e0462bd413b2c57966ebc30fb2ae89b9f73f606b8d3594636d734bdd63062160c3cb970f17cc0fa784a45f1460f802a7e19561ec8fe5bfa2d8e5784e1483074b325c6199f169255626f3121777940e286ad480b6b440488fa4d3f63b764facad121e04cbd3686825fe3889dd97f2288b2b8b2e0a510", @generic="1b6b86cfab85ff0f6d01c541fd307ac6840cf6928a7c28f265a7b0247ec22fa50233a59eb50c26cda0c61550c139b34276613022018d1b3f49aae4ba2bda6d94cb708b7d82841e"]}, @nested={0x34, 0x130, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x4e}, @typed={0x8, 0x6, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x4f, 0x0, 0x0, @u32}, @typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@private2}]}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x5}, @generic="4187e652a3bbb9a494f64adee7fb7bca28d1b487eff379aaf602ddf915c190b3f948eb4f130322e6de1a27265aa76f0a2de32acc88d72b2843c1a5069ee7f13d43d41fdb46198c309789c182e318d50081af460c4a5817bc060b9d3163f0433c3b7498b3f4ae14fdbedaa239c7876511f5575f24fc192a6eacf2e882bf79a40512f787dc5ff94c4bacead564afd675", @nested={0x102, 0xc, 0x0, 0x1, [@nested={0x4, 0x4a}, @generic="afcbd1291c20aa588153121a99e00a109dc2562cf9c16d4a00857d257ddb66ebf5d159a069cbd8eee3c87d9ad344ae91008c2a3de3cb6f5dc9e496e52d46103841c798030ccb973a29e3ea8bebdccc230d66020387ce11a033989aca3f2f0901cf8018299c31af3b48d3ffb50d6c4f3ad62f2d9e2dc288ad4a94f9f8697ab878a47636868ad419e6913a397b1a2a7ea2723d6e499fba871edf3cf6783a63d8df49c95b54e956ef0b5eec0fb414189fa2a2e0e9dfef35e64ce46a05e902894650824768f7314ef07684d06bceb5fb39134e73305e86a0c16986429c4c163e672d1eae8b1bd8914ea542d92830252b785862c37ee1d44b25c95072"]}]}, 0x310}, 0x1, 0x0, 0x0, 0x44}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xf, 0x4, 0x5d}, 0x2c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) socket$kcm(0xa, 0x2, 0x0) 19.762387373s ago: executing program 6 (id=2210): ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) read$char_usb(r1, 0x0, 0x0) 16.569658373s ago: executing program 6 (id=2218): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 16.138720455s ago: executing program 6 (id=2221): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) close(r3) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b240)=[{{&(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001140)="309b66fcf4c859d9786972863c3192fa267be11fade3cba6a4d5c9c0dfc2e03bb3159500bf0592afa0e9d8c353d283", 0x2f}], 0x1, &(0x7f0000001600)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r5, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xe0, 0x800}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001700)="59a29eb3bf6c0486022fa4f03369233e2ee154758b867b257ef88eeda389062eeccafb85cccb738a795797efb5eedec8198c8227bcefd8e1f941ad6881bd4684f224910b0b85c523c071bf41c1900b73b3b44cde6118458af42938c73a77bc7f9efe224855a706fbb2ec88327280a4441bc6a51fd0df9b3f62dd626664b91dcd3c5c3cad81f021a22f5158e7afcf27c79aeaba68f76ac9efba2c2a70a8b578c1630083d829b1be84b4f1b29b5841b01aa23b558e132fef56ec", 0xb9}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="e3badc8b952274789909a8cc0fb8b6d578731b08c7a9374b09a2f6f5983ac09bc79691d5c698a198216bd832e85a6475f590c2e773e2fe33e5ca83fabd637545a7ffe6554cc7dfb13988aa91b7022e066df5b5859c5de28e5d6671969344832a96ba0e6b1aeff567d04420b8359b9cd8bc3a4a5460f8587e9a59416a3b3f1fa2a31440e3ab93281a621616b8ae53b5ae4dbb5f9ed851059b15bd29db34c781738053ec1cafefde5542c62f02ac72ed2be150cc44be39af34f4e842a3fbd91ea955000948a5f0c778becc27937a9191b5f90bc53c844c2896956faad8d3fd09a9a2c5d03f5c1b76fc908bf2a9ceca", 0xee}, {&(0x7f00000028c0)="2c899af289605c1a9d979ca1595fabb7714be0645559376da513973640fbd68e00d1f17f82ca549f61d78aae1e5a4164a0d18a87fb499834b698aa26f820b718f74028d9fa3cf0b884068a00617d58b5c6602b24f0ef2c3db0c1d205fdd2605c0884e7d9e59e03b8f336db576724da4f26b897e1d05a323c9958d7ed6600ee73f2c032e160e9e16f75f404dba764ffc30295ab13d3f2ff2e7294048b38201e0352c2775b9114604f5d7b12f1f29285d5d95c8a3ffec518ef02140631fc208a54a9c6d4a2c16cd22b503f203a2f37346e78700262544acfc137999ae1520994ad761cf094f6a34946326e2d00ca", 0xed}, {&(0x7f00000029c0)="d8f1f55eba23d2c5c7354d0a0ce7fd5f7d4b2de6da3eaa8634df1963364676bf573d1d36d47f229f1c5c8c76230e39ebb9fa13ca3459396fa9493b63cb8560fe27551f74d30fcb1532770f94955dc3", 0x4f}, {&(0x7f0000002a40)}], 0x6, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x1000}}, {{&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002d00)="a11a2822", 0x4}, {&(0x7f0000002d40)="76969ab27721675f128250e45e66dfd998d64901b92d8fd824ac6af65a4567ad1f7c86b320c5603c567751277d9baf5b0caf4a5356eb5ca245abb45a88a978ebecc5b9662a37b0ce487df858163a1488becfe858d86c99364f3346e5652383f9cf954987141908eb080060a953a1ee1825776eb68bc2c44bf7e9559630d1d50fc0d622651bc6bea11fc884fb1fd551e661274b30ce61cbf842821621ca0f28", 0x9f}], 0x2, &(0x7f0000004f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x60, 0x4}}, {{&(0x7f0000004fc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005400)=[{&(0x7f0000005040)="80eb60725244e0f922f9c630b5a22488b667300f03ab09ae80e625e6d568ce8dc69450df8a1a8ec170eec9b154128c532d364cd51e7d9b17252d00963de6bb8687d88203ec476cbf34f018ef9bbae639dcb4b19cb3c050", 0x57}, {&(0x7f00000050c0)="67f84a2912c8ef700847d18d94941308d20f179a696530944d29b5cc43a52c44e9125f1bc88beea993f953ba19add2cc1b6ecc372da23ddf79b622b6cda12067ea37fa15bd824d5cbc625f3d71ba6485d4acf9755e0c385359f955f7165786e0f320394503761c534c4ea2", 0x6b}, {&(0x7f0000005140)="c5af7d0d6ab3fce5ee21362f633ee0800c5403b2ae2c8b32d021ea12f9a98b2d0ebc0f9f6cd7f39052ea189026e1ca63f634028e440d651bc8bc6d74008dbd7df8d63b668b01dfe134d69f", 0x4b}, {&(0x7f00000051c0)="5c341cd106dfc1615dcd897b8b265d1f6c65f3ed2e4d23e5e411f483d44fdbb177da11e8e453edc9fb7116233fa37eb55eab331197677bbc2074834fabb136ee9a235f3fd83ee78677039cdb902b9a0b222de7874e7ef1257acbba9cc3ca84929a4679", 0x63}, {&(0x7f0000005240)="cb7e0aafe48f96a24aa437b0e5aba4d7ea75d22e85a2f78ec2f7604cb65c48ec6a8288482e7627970f4395de72a045174a63c26e15effc3d29e89220d237874ef7a05ad1d1e9a05fe180b5f09c9318dedad64ea4cf48f5ebb422e1708ff428eafa9851001e9ceb86e83b99c9ab1e69335244fdc75f5b7b507fd0bba30c527c267ce4949b51c35c02fa6723b5941a", 0x8e}, {&(0x7f0000005300)="7d3430d2a1ac9bf470b79d2a4791752c906ad8f6459dae66f0fdd3bebd5de2363e9c89715cd69a6bd0189f2ded169a0aeff3716103bb4690480f06fb350c866113045514a15fe3c2fdf617e7bd1c256f8de00c0e2d6bcceb93d6a3b9a3140c6d24e7c0b340600b7c4de412530b3542f923a529be5226b4c0c82658613883da250965c5366c6819a636eba36f199bbdc68630b9686256a82a76b8b1e7d3c7afe5b4ac9a101de630dee1d12a7285a9172761fd2cd345844a66dfb4d6c5fe7c706056bc225dc0933359343bce9d6f5f344da70e7c470c286ea2", 0xd8}], 0x6, &(0x7f0000005680)=[@rights={{0x24, 0x1, 0x1, [r5, r0, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r5, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r3, r3, 0xffffffffffffffff, r5, r3, r0, r5]}}], 0xc8, 0x4008000}}, {{&(0x7f0000005780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006f00)=[{&(0x7f0000005800)="376193fb3f684d4788c12eb18874291393c68fbe9673bdf8d21b0879361f341c8618ffcd455494d438e2bdde3c3eaa8b3d15995acd414d3f07eb662cb148191aca37c1d468c5bf521cd368ceaae91cf6289a4bba7922de6d520a613b8d48f384c82448cf0de5b7c16c3ca55cba9dfab7df7d4a0f466adf836e9b1509467706863d37ca944dce3a", 0x87}, {&(0x7f00000058c0)="459ac826bc2d1c257cf02bbd34f821da2adecc6cb22c9383d10a86817e9a0bc70443418e0dc111c87bf9302342e721056b9d7493d950e2044f34028d2a9de0b50305390858a18b40cd5499e174f0e7f1686f7a8f6266f78a29dc9de6ad72dc3ec3466ac773df55ff36e625efded2ccf5ede596e01769aa9efa75e4bb94f3659294e4448737d50f5cf8da37575ee4115a9d867836b49b7bfd71b2add6b3cb8b0c1eaa0a2222ac9a3799c65ebbe3191d7158291c4200fab7d28ebfcc83e607467a91afa716cc48", 0xc6}, {&(0x7f00000059c0)="aeb358c87575d83e56910b52d122661af307103b735c5326975c03cd9b27def2a7b859656387f4a70f44b1e8e697d04237a7cb2dd07c5c182a036e791fbab15ec90ca851185a15eeb41c16f0c6daae96c628de603808e716ded89ba98b3a06ed5d6a5cc31c9ca8c2482680385b9b5d7f5c67ee73aae195eb306977ffeb718e57bb0d6e3e298236cb021598e19b81e82230b67d2d2f397e2b5ff3dbfdfbf4e8086f20edf221a3a1f89a4b57b12bdbf4cb17b692ed84acb42f1e3814093d4c859abeb81a46c668381a345da696", 0xcc}, {&(0x7f0000005ac0)="b9fd44c50cfdfac3c3cf1ffda6c12d5cdc4e7ac76828a3fe684d10746baed11eca618e4de723a23b3032f7dee44898e723522f829614767bd3326b959e04a9d60d0c1601a05037a38ac6cabb1fe697b124b167c5080e8e64cd5cb7911f53b327ac38fc4c2e9e4544d3e44eef3d26fb302a1079f40a34bce389ca721d8943567c86c78fccfb6eebc2e3989e390d1960256910e8074cb2426a23a426cc2071af83d6fb43211d2f5941047ce6213818d9e56cc5c74672e246f69e31a870fd3d223b22a58a4734f6f0c7d09329d1c5fdc1fed94eedeb764e0a645df7cca607907fc6f28f", 0xe2}, {&(0x7f0000005bc0)="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", 0x1000}, {&(0x7f0000006bc0)="4155bd0eba0f8051f475cd3a289d113bb4980c810ec593d0510f82066aa70edcb20feb16edb3ebd35247caef76f648cc366fe0150e7c25d8c4d701e30c79bf14ce49bd8678271ab636c7d24b5b6ebee781d55ea896426199c88b6cad4376bb403c6e9138b5086af68f8d342c30fa5bf10adebfb5c8f3b9f70b45420f4252f665d245ff0a18f663aa3f00", 0x8a}, {&(0x7f0000006c80)="12b70a8c9bf7c66bfac6b59a690d151d7fff0693516d8171164f7ad3242871d9c4655f887359e55416bde7e679828deb40784d83fad9e755ece747cf25ad6a988974f1608e15ed3087773a4d19c88745b7616091335d563116906f2b5f71919cea5ab994f133666aff5b19b16dcd981aee0ed76e49a24ad97db609571fa3e71e94a97c3a1f79a67e1887a21424dc0872ab98e7a0777ea912dd24e2cf1821b34651464957fe27f45ca0e93ac9bf9ea4ca18a3063564bbc798dc5dc78ca14a869cfd371e99591e5f15b356b12c023fe7539255dc70b3f1b642c3f85f7ce6bc1f25cd28ee95940ad2880f", 0xe9}, {&(0x7f0000006d80)="2dfab9f7ae3237e145875cab8525a38416d20c6abede50d077dd887b604a51de3ab6d5c64282ee62a7982640a7cabbec6cdb195014b867cccccd74fddabb01f89fe97ad2e4e0a758f2967b8715e78a8088ed1e549462b6140d", 0x59}, {&(0x7f0000006e00)="1fa83f5338aefb34c63709b00d002ef300ca046b67e7c4e0d6fa46aa16ac1fc4d9506a3046b24c6010aa596b2bdf03532de986da2044338a65706dbdad7f23d4431c3798a673646d3cb3853b63a9b0ab882f6faec5bd68814aa1202783b2ae6c3b960350ff13e003d5658ae36eff22d3a987ac23da9a4efb07c46130ecf49d9393f38f0297bdf8648878745668d86e95054b27fa3c678564cd0a747d34ff7bd6944a6fffed26c633a9dbfe80aaf78573e32626251d70af407b69a6c25b95d8d15ee97a85f9df852ad3ad998efe56af96168119b18611", 0xd6}], 0x9, &(0x7f0000007200)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r2, 0xffffffffffffffff, r3, r5, r0, r0, r5]}}, @cred={{0x1c}}], 0x58, 0x800}}, {{&(0x7f0000007280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000074c0), 0x0, &(0x7f0000007580)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r4, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r3, r4, r2]}}], 0x90, 0x50}}, {{&(0x7f0000007640)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000008c00)=[{&(0x7f00000076c0)="1107ce868addcc55e73d509731205a305df2d4120246461001df0fa4f0e34ecedaa903974d89cf1dab", 0x29}, {&(0x7f0000007700)="99732f295e5f7a17e82fcdbce33e3127a32270088fe85b47a044eadd36334ddcf38209f6b350b2ded50faf63b824763e88d862acfb781e0d48bbee00fc8d6ddc82e1fb5d06bfabfd851d1d7a621c26b406de67f6282775186dc8f4aba9b63276321a7e75f076656b57bf4cbc096c4bea4c1aa81fdc0d1897579a539e40d1ee76bea52027f15c606159aa4ffadc42697bfde13edfcfae9027fa7f7e9f6b3076dce34486e5a97a07fa08693fe2e24f2e12cc4197378ce53da43d685b060b4e3c08e38325b9f8696aa8792715", 0xcb}, {&(0x7f0000007800)="d858d54620857ace67617139bc263315c0aac4cf5ff1b19b1107d4941570eb78132cb295ddc461ff6da04206c2a11713762e32536e3f329e0bb4a458f2221d4ad9bfed0b7b513641576f38784531d17278ea4c5b3e58c068bb936e1a017899a4f7ac46f1f4b7041aef0d6fff74618b977c946a15553e7b8fa4498ae9f1dda93d8c861fbe85a731260a1421dc215329f8a1c43c999f50d48ee406823e4f302a610b69b4b85c55696598232409bcb1f9c030637c737c867fe412d4ef246f8931586f3387841864691b1eb11f93cc89748f9225524615de127e", 0xd8}, {&(0x7f0000007900)="d8cd93e6ed13e0080d3078024b44b5f4dae83df799f4a9160def96112674bd7bae89b93a3847e2878290ae810800d440a7480b4d5886f2496ad10a6325411399f43f161e1d4544", 0x47}, {&(0x7f0000007980)="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", 0x1000}, {&(0x7f0000008980)="e2fd7dcd3a3322e86f67bc66a9a1d85359c83d3be1410a09c6fec2ed3d7cf56154a747c113e6788565d905eed098e1eaf6837c9f789de8fb9a0ff97a82abaed10c31c97106a38fa70a84f2f67a82973f3d1691c394e3241c8609237efa567f20aecbbc26bc89d2abf02a5128246bff4c8857822f5f045da97f24e327432ee8030bb384fbe571bb48e2094f03d22708783e135778442d4a7b513c4985", 0x9c}, {&(0x7f0000008a40)="0cd5636844789d3d738f9ae0ac487313583bc07a2f022984e07cbb107e847e88580c8e3cca35d7e05deee29984e308d0f7362101f41413c7a49710e829989693ac5b51098e0fb5488eb7df510de88f502fe705762b", 0x55}, {&(0x7f0000008ac0)="1f323fd562909053f884d6f0c02972bfed86f1dd32dda36cfd23cdc68e6e225ace46d8a4d4bd21a6aed065289fb32b32ffa675ac031e29ba5be27efee4f25655cdb192ea373a2dc73bed960b85cf565adcb819d35469122c0f6be0f0214869ff3ba44464a349d9ffbce30febad8f7baa98c113ea2c9204a7b3ec537e2bc516b66dd119e4ca6120c5f5796e441a14e376918cf4f77449c6f53b82bb559f73dd58110d94b696a19f", 0xa7}, {&(0x7f0000008b80)="831fe9df1e6fa282c1017c07c0e702d9a14227b127747a79550388e0a9de00ab196c3c070c7e6dc8d144e4861d6941465ace861b8e2c66b723132463b15f1e47e411d3efc1de737501906b8ed8779cbfeb41a881f253cb954843f0eda9fd56bac27cab05ed80f53c15", 0x69}], 0x9, &(0x7f000000b180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r4, r0, r5, r5, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xa8, 0x48800}}], 0x7, 0x4000) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x220}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x4, 0x3}) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 14.298311007s ago: executing program 6 (id=2225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = socket(0x1e, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) unshare(0x62040200) socket$unix(0x1, 0x2, 0x0) 13.05218192s ago: executing program 2 (id=2230): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x59, 0xa0}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x18, &(0x7f0000000100)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x800, 0xf, 0x7, [0xffc030]}, @ptm_cap={0x3}]}, 0x2, [{0xc5, &(0x7f0000000700)=ANY=[@ANYBLOB="c5037daa164689816b757805885fcd3777673df026e5ec4b16ed2457743ed0fd80c2ac0c17e94ab65c9179c5093226b5daa130f64123e689c7ea7b681836d6692c3818435b3cedf11a78f2548aee39459d1e29e3e803c449c6b73e7e9a9828dc6a5ed273f95ad076a4"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x412}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x24000800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prlimit64(0x0, 0x4, &(0x7f0000000300)={0x1, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x77359400}}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000800) syz_usb_connect$cdc_ecm(0x1, 0x6b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102020000282505a1a4400001020301090259000101040099090400010202060003090004000d240f0100020000040d080043052401020d152412e600a317a88b045e4f01a607c0fdcb7e392a09058202100070090009050302080008080585edc5cf976a28802b97b206d6d6dbcde699cbed428877b0a778f0b223e4cff8f3efe30b4886f9f5fd309154fcc57e1bc5b696ffb325761399e1a8d03a47a0bd778fbcad8c26418e3fdbb444d82cbded481a9e5f7a0645a57d7248e33a48e92a5bdce9b5b48db07e7b4b"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x1, 0x2, 0xfe, 0x20, 0x5}, 0xc, &(0x7f00000003c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x2, 0x2}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2009}}]}) listen(r0, 0xfffffffc) 12.298130003s ago: executing program 5 (id=2232): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x110e, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x394}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) (fail_nth: 1) 11.323854204s ago: executing program 6 (id=2236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect(0x3, 0x65, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x2a, 0x89, 0xac, 0x20, 0x403, 0xd9af, 0x607b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0xd, 0x0, 0x70, 0x5, "", [{{0x9, 0x4, 0x45, 0x5, 0x4, 0x73, 0x8e, 0x76, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xe00d, 0x9}, {0x6, 0x24, 0x1a, 0x4, 0x1}}], [{{0x9, 0x5, 0x0, 0x8, 0x40, 0x1, 0x3, 0x1}}, {{0x9, 0x5, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3a}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x40, 0x6, 0xf}}, {{0x9, 0x5, 0x88d9c3c234c6279a, 0x4, 0x400, 0x3, 0x6, 0xd0}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sync() sync() syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.375757913s ago: executing program 5 (id=2240): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000640), 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x87a5c3, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x6, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffa) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2502001000"/14], 0x14}}, 0x0) pread64(r3, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 9.721394325s ago: executing program 2 (id=2241): socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000520001fe2abd70000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 8.457757913s ago: executing program 2 (id=2245): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x6) r2 = socket$phonet(0x23, 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r4, r3, 0x0, 0x578410eb) r5 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x20802, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000040)={0x7fffffffffffffff, 0xfffffffffffffffd}) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) r6 = dup(r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) 7.462844701s ago: executing program 2 (id=2246): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xdca, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x7f, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x1}], 0x2, 0x7, 0x2, 0x2, 0x6}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0x3}}, 0x20) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x800008, &(0x7f00000001c0)='{$-\x00') r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.033467768s ago: executing program 5 (id=2249): r0 = socket$inet6(0x10, 0x1, 0x3) sendmsg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000380)="8908617d3ca9c65cf7fd64094150076787f115b8441968d7fe4ff10af24f09c1267138d00948d9ae45efccf99baee8e9606f4073b116638b2fe6d81f525272950a10683356a48175466ac0b768c066eeee4f6bf80ee08fc61b21eef10b4b28457a87b332ae564bfae5fcfbc1040327e464582e5161482ef36f3d4e38ea6617dc", 0x80}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x3, 0x87) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r7, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58) 6.49897132s ago: executing program 4 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x443, 0x1fe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r3) writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)="8a322f73428402971ec9abeac4f7146f2e18e5b7eacec689c276d612a4fce90845261c", 0x23}], 0x1) close(r1) socket(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='z', 0x1}], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x2, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (fail_nth: 2) 5.425083321s ago: executing program 4 (id=2252): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @none, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r7 = dup(r6) r8 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xfffffffc}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x1}, 0x2) 5.382642033s ago: executing program 5 (id=2253): syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 5.281022512s ago: executing program 3 (id=2254): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x80000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x2, r2, 0x5) pipe(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) utime(&(0x7f0000000000)='.\x00', 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4.867301412s ago: executing program 2 (id=2255): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) chdir(0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x33) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84002, 0xa4) fanotify_init(0xf00, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) 4.177659996s ago: executing program 3 (id=2256): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffff7c, 0x9, 0x8000}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xe0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000040000000000000000bbff8600000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x238, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@inet=@recent1={{0x108}, {0x1, 0xaa8, 0x8, 0x0, 'syz0\x00', 0x63, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff]}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 'rose0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x6c, 0x3b, 0x1, 0x20}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0x0, 0x3}}, @common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x5, 0xfb}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) syz_emit_ethernet(0x15, &(0x7f0000000e80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@x25={0x805, {0x1, 0x0, 0x23}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, 0x0) setxattr$incfs_id(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000340)={'0000000000000000000000000000000', 0x32}, 0x20, 0x3) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="060000000000000000000000000000000700000a64000000060a0b0400000000000000082d0000003800040068617368000000002400028008400000000808000740000000fb07000240000000170900010073797a30000600000000000000797a3200000000140000001100010000000000000000000500000a00"/140], 0x8c}}, 0x40) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/70, 0x46}, 0x1}], 0x1, 0x2, 0x0) pidfd_getfd(r5, r0, 0x0) 4.176292224s ago: executing program 4 (id=2257): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r1, &(0x7f0000000300), 0xfdef) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r3 = epoll_create(0x80f04) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) epoll_wait(r3, 0x0, 0x0, 0xfffffff7) ioctl$FS_IOC_GETFLAGS(r2, 0x5437, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40c0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x14, &(0x7f0000004680), 0x0) 3.83780312s ago: executing program 4 (id=2258): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x30000014}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="64460f01cf8ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f39823bf3450fc7b2000000000f01d9410f01df", 0x3d}], 0x1, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0xf) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x4000000) r9 = socket$packet(0x11, 0x3, 0x300) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r9], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1a4}}, 0x20004000) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$uac2(0x2, 0xa1, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x6, 0xc0, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x3, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x6, 0x15, 0xed}, [@output_terminal={0xc, 0x24, 0x3, 0x1, 0x405, 0xfb, 0x5, 0x2, 0x5, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0x4, 0x1, {0x8, 0x25, 0x1, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x9, 0x5, 0x40}, @as_header={0x10, 0x24, 0x1, 0x1, 0xe0, 0x3, 0x3, 0x4, 0x81, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0xa9, 0x9, {0x8, 0x25, 0x1, 0x1, 0x0, 0x10, 0xf}}}}}}}}]}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 3.808435785s ago: executing program 5 (id=2259): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000000003) write$char_usb(r9, &(0x7f0000000080)='7', 0x1) syz_usb_connect(0x3, 0xffffff3b, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_disconnect(r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000f0d1f1063a94779b20ec5feb3e4c48177f8dad11fa", @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdf25030000001f00070073797374656d5f753a6f626a6563745f723a7661725f743a73300000"], 0x34}}, 0x8004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES64=r7, @ANYRES32=r7, @ANYBLOB="0c00990000000100770000000a00180003030303030300000500530000000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x240040c0) socket$inet(0x2, 0x3, 0x2) inotify_init() 3.278787434s ago: executing program 3 (id=2260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4010000) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c80)={0x310, 0x3e, 0x300, 0x70bd28, 0x25dfdbff, {0x13}, [@nested={0x8, 0x90, 0x0, 0x1, [@nested={0x4, 0x6b}]}, @nested={0x121, 0xb9, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r2}, @generic="ca88b33d74b8dcb353295e7854b155908dc6f3d3fc3583970504ef1c2615aa2e2f26ad8b886334d62bb0c61a34d393f6ebe7b393c2d2714bd1a5440ff9ac55976973ec6969968ff2783b1494dcadcde62e0462bd413b2c57966ebc30fb2ae89b9f73f606b8d3594636d734bdd63062160c3cb970f17cc0fa784a45f1460f802a7e19561ec8fe5bfa2d8e5784e1483074b325c6199f169255626f3121777940e286ad480b6b440488fa4d3f63b764facad121e04cbd3686825fe3889dd97f2288b2b8b2e0a510", @generic="1b6b86cfab85ff0f6d01c541fd307ac6840cf6928a7c28f265a7b0247ec22fa50233a59eb50c26cda0c61550c139b34276613022018d1b3f49aae4ba2bda6d94cb708b7d82841e"]}, @nested={0x34, 0x130, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x4e}, @typed={0x8, 0x6, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x4f, 0x0, 0x0, @u32}, @typed={0x14, 0xc8, 0x0, 0x0, @ipv6=@private2}]}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x5}, @generic="4187e652a3bbb9a494f64adee7fb7bca28d1b487eff379aaf602ddf915c190b3f948eb4f130322e6de1a27265aa76f0a2de32acc88d72b2843c1a5069ee7f13d43d41fdb46198c309789c182e318d50081af460c4a5817bc060b9d3163f0433c3b7498b3f4ae14fdbedaa239c7876511f5575f24fc192a6eacf2e882bf79a40512f787dc5ff94c4bacead564afd675", @nested={0x102, 0xc, 0x0, 0x1, [@nested={0x4, 0x4a}, @generic="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"]}]}, 0x310}, 0x1, 0x0, 0x0, 0x44}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xf, 0x4, 0x5d}, 0x2c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) socket$kcm(0xa, 0x2, 0x0) 3.032460262s ago: executing program 3 (id=2261): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r4, 0x1c, 0x0, @ib={0x1b, 0x3, 0x82, {"272a1be32d8a640c9f59fe5cd92fa737"}, 0xff, 0x10, 0x9}}}, 0x90) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) socket(0x10, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYBLOB="8711ecc6a722341b6d5c148813800da4"], 0x270}, 0x1, 0x0, 0x0, 0x4044000}, 0x367b86eeb754b152) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x6, 0x10, 0x7, 0x401}, {0x97b0, 0x20, 0x9, 0x1}]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7fff}}, './file0\x00'}) ioctl$CEC_ADAP_G_CAPS(r6, 0xc04c6100, &(0x7f0000000840)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000050900020073797a3200000000280004802426f4c20001800b0001006e756dffffffffffffffff80080001400000001d08000240000000000900010073797a3100000000140000001100010000000000000000000300000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.526975137s ago: executing program 2 (id=2262): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000000003) write$char_usb(r9, &(0x7f0000000080)='7', 0x1) syz_usb_connect(0x3, 0xffffff3b, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_disconnect(r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000f0d1f1063a94779b20ec5feb3e4c48177f8dad11fa", @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdf25030000001f00070073797374656d5f753a6f626a6563745f723a7661725f743a73300000"], 0x34}}, 0x8004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYRES64=r7, @ANYRES32=r7, @ANYBLOB="0c00990000000100770000000a00180003030303030300000500530000000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x240040c0) socket$inet(0x2, 0x3, 0x2) inotify_init() 1.884085006s ago: executing program 3 (id=2263): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0008403}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000006800000426bd7000fddbdf250200010004000000fd000300010000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20044800}, 0x20004015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004600)=""/102400, 0x19000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x39b3) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f0000000000), &(0x7f0000004880)=@udp=r5}, 0x20) recvmmsg(r5, 0x0, 0x0, 0x23, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) ioctl$USBDEVFS_IOCTL(r8, 0x80045515, 0x0) brk(0x200000ffc002) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="05000000010900"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000aa778f"], 0x80}}, 0x0) 780.440055ms ago: executing program 3 (id=2264): epoll_create1(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x420101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x111, 0x3}}, 0x20) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x4100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) utimes(0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x7e0, r6}, 0x38) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x100, 0x2, {0xffffffffffffffff}, {}, 0x7f, 0x1}) getpriority(0x1, r7) 739.133827ms ago: executing program 5 (id=2265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = socket(0x1e, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) unshare(0x62040200) socket$unix(0x1, 0x2, 0x0) 633.113521ms ago: executing program 4 (id=2266): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x443, 0x1fe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r3) writev(r1, &(0x7f0000000680)=[{&(0x7f00000003c0)="8a322f73428402971ec9abeac4f7146f2e18e5b7eacec689c276d612a4fce90845261c", 0x23}], 0x1) close(r1) socket(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r4, 0x7fffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='z', 0x1}], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x2, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 0s ago: executing program 4 (id=2267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x2000}) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "1c5665", "33aa6e74aefcc8f6f955e24804e83062186954b9267d4e6271c3ea4c32bcef2493fb49978f106275967735fedcb8dfd1bf019f15a64938d9c9c6b17f41097c276d55c23876f93aa2df816ebcf2c8d42c6eec432d226f912ff923bbc5951ebd2e2053787a594f7e0f1b94d06b72164385269dc87788691c3248b7fc160d9de9f68b9016a6b4dd84d39b193ed1c23447f485ae8a8b020fc904f5fe3a0e85eaad314ed18cfe0935186d859709e6ce8c65858d30a4b3681e5df6e3d3a20c2eae01bfde5978402a23c9ec00d397db93b010d7186953e5539ebfe4a568212233ab4403da43510a1dd5f4059b7dedcaa87d774c795f5e05118dc8ac8d1f37986d06d1e4"}}, 0x110) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x100000000008a}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x2, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 8: 0000000000000000 R09: 0000000000000000 [ 635.278692][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.278702][T13738] R13: 00007f9978216038 R14: 00007f9978215fa0 R15: 00007ffc34972b18 [ 635.278727][T13738] [ 635.279849][T13738] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.675773][T13713] chnl_net:caif_netlink_parms(): no params data found [ 635.897049][ T5822] Bluetooth: hci1: command tx timeout [ 636.086404][T13713] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.148423][T13713] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.228765][T13713] bridge_slave_0: entered allmulticast mode [ 636.262950][T13713] bridge_slave_0: entered promiscuous mode [ 636.475988][ T9051] hsr_slave_0: left promiscuous mode [ 636.500950][ T9051] hsr_slave_1: left promiscuous mode [ 636.518413][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.565310][ T9051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.611059][ T9051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.649246][ T9051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.772812][ T9051] veth1_macvtap: left promiscuous mode [ 636.810296][ T5915] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 636.839122][ T9051] veth0_macvtap: left promiscuous mode [ 636.862624][ T9051] veth1_vlan: left promiscuous mode [ 636.898114][ T9051] veth0_vlan: left promiscuous mode [ 637.010727][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 637.033657][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.069235][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.172577][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 637.234542][ T5915] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 637.287370][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.408598][ T5915] usb 3-1: config 0 descriptor?? [ 637.450878][T13782] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 637.457494][T13782] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.499031][T13782] vhci_hcd vhci_hcd.0: Device attached [ 637.561122][ T29] audit: type=1400 audit(1773862701.984:1191): avc: denied { append } for pid=13773 comm="syz.4.1976" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 637.600463][T13782] random: crng reseeded on system resumption [ 637.683269][ T29] audit: type=1400 audit(1773862702.024:1192): avc: denied { open } for pid=13773 comm="syz.4.1976" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 637.742491][ T10] usb 42-1: SetAddress Request (2) to port 0 [ 637.762709][T13783] vhci_hcd: connection closed [ 637.770289][ T139] vhci_hcd vhci_hcd.4: stop threads [ 637.780870][ T10] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 637.821761][ T139] vhci_hcd vhci_hcd.4: release socket [ 637.857433][ T5918] hid-generic 000A:0004:0009.0036: item fetching failed at offset 0/2 [ 637.870960][ T139] vhci_hcd vhci_hcd.4: disconnect device [ 637.874685][ T5918] hid-generic 000A:0004:0009.0036: probe with driver hid-generic failed with error -22 [ 637.928079][ T9051] team0 (unregistering): Port device team_slave_1 removed [ 637.970065][ T5822] Bluetooth: hci1: command tx timeout [ 637.985498][ T9051] team0 (unregistering): Port device team_slave_0 removed [ 638.280120][ T5868] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 638.447258][ T87] smc: removing ib device syz2 [ 638.474581][ T5868] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 638.505778][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.538039][ T5868] usb 4-1: Product: syz [ 638.568063][ T5868] usb 4-1: Manufacturer: syz [ 638.597306][ T5868] usb 4-1: SerialNumber: syz [ 638.658623][ T5868] usb 4-1: config 0 descriptor?? [ 638.731062][T13713] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.765866][T13713] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.829069][T13713] bridge_slave_1: entered allmulticast mode [ 638.874174][T13713] bridge_slave_1: entered promiscuous mode [ 638.929483][T13771] tipc: Started in network mode [ 638.966699][T13771] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 639.157871][T13771] tipc: Enabled bearer , priority 10 [ 639.172647][ T1209] vxcan1 speed is unknown, defaulting to 1000 [ 639.178829][ T1209] syz2: Port: 1 Link DOWN [ 639.339857][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 639.346021][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 639.359727][ T5915] usb 3-1: USB disconnect, device number 40 [ 639.444994][T13713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.710304][T13713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.062011][ T5822] Bluetooth: hci1: command tx timeout [ 640.161513][T13713] team0: Port device team_slave_0 added [ 640.167344][ T9455] tipc: Node number set to 4269801491 [ 640.235747][T13713] team0: Port device team_slave_1 added [ 640.484580][ T5868] usb 4-1: Firmware version (0.0) predates our first public release. [ 640.658233][ T5868] usb 4-1: Please update to version 0.2 or newer [ 641.133665][T13713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.144988][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.178925][T13713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.193918][ T5868] usb 4-1: USB disconnect, device number 82 [ 641.194973][T13713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.209046][T13713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.244408][T13713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.775428][ T9051] IPVS: stop unused estimator thread 0... [ 641.993855][T13713] hsr_slave_0: entered promiscuous mode [ 642.123090][T13713] hsr_slave_1: entered promiscuous mode [ 642.138892][ T5822] Bluetooth: hci1: command tx timeout [ 642.361792][T13833] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 642.606739][ T9051] Bluetooth: hci6: Frame reassembly failed (-84) [ 642.977888][ T10] usb 42-1: device descriptor read/8, error -110 [ 643.031691][ T29] audit: type=1400 audit(1773862707.454:1193): avc: denied { bind } for pid=13838 comm="syz.4.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 643.100725][ T29] audit: type=1400 audit(1773862707.454:1194): avc: denied { name_bind } for pid=13838 comm="syz.4.1985" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 643.175128][ T29] audit: type=1400 audit(1773862707.454:1195): avc: denied { node_bind } for pid=13838 comm="syz.4.1985" saddr=ffff:ffff:: src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 643.494090][ T10] usb usb42-port1: attempt power cycle [ 643.534566][T13713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.591158][T13713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.625057][T13713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.659699][T13713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.780332][ T47] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 643.905564][T13713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.940289][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 643.965517][T13713] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.973034][ T47] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 643.983479][ T5868] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 643.996831][ T47] usb 5-1: config 0 has no interface number 0 [ 644.007361][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.014510][ T9057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.027329][ T47] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 644.043032][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.060927][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.068116][ T9055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.086154][ T47] usb 5-1: Product: syz [ 644.095951][ T47] usb 5-1: Manufacturer: syz [ 644.102308][ T47] usb 5-1: SerialNumber: syz [ 644.111017][ T10] usb usb42-port1: unable to enumerate USB device [ 644.122941][ T47] usb 5-1: config 0 descriptor?? [ 644.174720][ T5868] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 644.189505][ T5868] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 644.219080][ T5868] usb 3-1: Product: syz [ 644.227369][ T5868] usb 3-1: Manufacturer: syz [ 644.234148][ T5868] usb 3-1: SerialNumber: syz [ 644.368103][ T5868] usb 3-1: config 0 descriptor?? [ 644.450146][ T5822] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 644.508367][ T5868] ch341 3-1:0.0: ch341-uart converter detected [ 644.603808][ T47] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 644.651275][ T47] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 644.845439][T13713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.343025][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.381643][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.730589][ T5868] usb 3-1: failed to send control message: -110 [ 645.753033][ T29] audit: type=1400 audit(1773862710.174:1196): avc: denied { lock } for pid=13852 comm="syz.2.1989" path="socket:[46143]" dev="sockfs" ino=46143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 645.779170][ T5868] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 646.284652][ T29] audit: type=1400 audit(1773862710.704:1197): avc: denied { setopt } for pid=13852 comm="syz.2.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 646.357942][T13713] veth0_vlan: entered promiscuous mode [ 646.402102][ T29] audit: type=1400 audit(1773862710.734:1198): avc: denied { read } for pid=13852 comm="syz.2.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 646.481519][ T47] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 646.524009][T13713] veth1_vlan: entered promiscuous mode [ 646.537046][ T47] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 646.658973][T13713] veth0_macvtap: entered promiscuous mode [ 646.718875][T13713] veth1_macvtap: entered promiscuous mode [ 646.775946][ T47] usb 5-1: USB disconnect, device number 71 [ 646.867611][T13713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.902323][T13713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.951637][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.990251][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.053371][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.076132][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.214699][T13927] syzkaller1: entered promiscuous mode [ 647.226546][T13927] syzkaller1: entered allmulticast mode [ 647.385326][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.398613][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.416402][ T10] usb 3-1: USB disconnect, device number 41 [ 647.489819][ T10] ch341 3-1:0.0: device disconnected [ 647.550838][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.619564][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.641387][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 647.762164][T13939] cgroup: Name too long [ 648.055167][ T29] audit: type=1326 audit(1773862712.474:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.086859][T13950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64 sclass=netlink_audit_socket pid=13950 comm=syz.4.2003 [ 648.094204][T13955] netlink: 'syz.6.1962': attribute type 1 has an invalid length. [ 648.099896][T13950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62 sclass=netlink_audit_socket pid=13950 comm=syz.4.2003 [ 648.107719][ T29] audit: type=1326 audit(1773862712.504:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.119847][T13950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=13950 comm=syz.4.2003 [ 648.155938][T13950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=13950 comm=syz.4.2003 [ 648.168513][T13950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60 sclass=netlink_audit_socket pid=13950 comm=syz.4.2003 [ 648.181030][T13950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33 sclass=netlink_audit_socket pid=13950 comm=syz.4.2003 [ 648.256106][ T29] audit: type=1326 audit(1773862712.504:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.280152][ T29] audit: type=1326 audit(1773862712.504:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=145 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.307959][ T29] audit: type=1326 audit(1773862712.504:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.378343][T13960] FAULT_INJECTION: forcing a failure. [ 648.378343][T13960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.394882][ T29] audit: type=1326 audit(1773862712.504:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.407957][T13960] CPU: 0 UID: 0 PID: 13960 Comm: syz.2.2001 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.407985][T13960] Tainted: [L]=SOFTLOCKUP [ 648.407991][T13960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.408000][T13960] Call Trace: [ 648.408006][T13960] [ 648.408012][T13960] dump_stack_lvl+0x100/0x190 [ 648.408146][T13960] should_fail_ex.cold+0x5/0xa [ 648.408173][T13960] _copy_from_user+0x2e/0xd0 [ 648.408190][T13960] input_event_from_user+0x123/0x310 [ 648.408263][T13960] ? __pfx_input_event_from_user+0x10/0x10 [ 648.408285][T13960] ? __pfx___might_resched+0x10/0x10 [ 648.408303][T13960] ? input_inject_event+0x1c9/0x3b0 [ 648.408327][T13960] evdev_write+0x342/0x610 [ 648.408353][T13960] ? __pfx_evdev_write+0x10/0x10 [ 648.408376][T13960] ? bpf_lsm_file_permission+0x9/0x10 [ 648.408399][T13960] ? security_file_permission+0x76/0x210 [ 648.408422][T13960] ? rw_verify_area+0xce/0x6d0 [ 648.408445][T13960] vfs_write+0x2aa/0x1070 [ 648.408470][T13960] ? __pfx_evdev_write+0x10/0x10 [ 648.408492][T13960] ? __pfx_vfs_write+0x10/0x10 [ 648.408513][T13960] ? find_held_lock+0x2b/0x80 [ 648.408532][T13960] ? __fget_files+0x215/0x3d0 [ 648.408548][T13960] ? __fget_files+0x215/0x3d0 [ 648.408567][T13960] ? __fget_files+0x21f/0x3d0 [ 648.408589][T13960] ksys_write+0x1f8/0x250 [ 648.408612][T13960] ? __pfx_ksys_write+0x10/0x10 [ 648.408641][T13960] do_syscall_64+0x106/0xf80 [ 648.408660][T13960] ? clear_bhb_loop+0x40/0x90 [ 648.408679][T13960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.408695][T13960] RIP: 0033:0x7f9977f9c799 [ 648.408709][T13960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.408724][T13960] RSP: 002b:00007f9978d90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.408741][T13960] RAX: ffffffffffffffda RBX: 00007f9978215fa0 RCX: 00007f9977f9c799 [ 648.408752][T13960] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 648.408761][T13960] RBP: 00007f9978d90090 R08: 0000000000000000 R09: 0000000000000000 [ 648.408771][T13960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.408780][T13960] R13: 00007f9978216038 R14: 00007f9978215fa0 R15: 00007ffc34972b18 [ 648.408801][T13960] [ 648.419765][T13955] vlan2: entered allmulticast mode [ 648.456665][ T29] audit: type=1326 audit(1773862712.504:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.685460][ T29] audit: type=1326 audit(1773862712.504:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 648.746032][T13955] veth0_to_bond: entered allmulticast mode [ 649.087621][ T29] audit: type=1326 audit(1773862712.504:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 649.118356][ T29] audit: type=1326 audit(1773862712.504:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 649.691318][T13993] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 649.697851][T13993] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.721644][T13993] vhci_hcd vhci_hcd.0: Device attached [ 649.756372][T13993] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 649.762919][T13993] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.773167][T13993] vhci_hcd vhci_hcd.0: Device attached [ 650.364062][T14006] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 650.370665][T14006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 650.379735][T14006] vhci_hcd vhci_hcd.0: Device attached [ 650.410509][ T1209] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 650.434913][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585e2000: rx timeout, send abort [ 650.582358][T13994] vhci_hcd: connection reset by peer [ 650.587701][T13999] vhci_hcd: connection closed [ 650.590730][T14008] vhci_hcd: connection closed [ 650.688747][ T9051] vhci_hcd vhci_hcd.4: stop threads [ 650.789969][ T9051] vhci_hcd vhci_hcd.4: release socket [ 650.797818][ T9051] vhci_hcd vhci_hcd.4: disconnect device [ 650.812028][ T9051] vhci_hcd vhci_hcd.4: stop threads [ 650.824278][ T9051] vhci_hcd vhci_hcd.4: release socket [ 650.870158][ T9051] vhci_hcd vhci_hcd.4: disconnect device [ 650.882181][ T9051] vhci_hcd vhci_hcd.4: stop threads [ 650.888853][ T9051] vhci_hcd vhci_hcd.4: release socket [ 650.894712][ T9051] vhci_hcd vhci_hcd.4: disconnect device [ 650.943150][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585e2000: abort rx timeout. Force session deactivation [ 651.253386][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 651.590729][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 651.601455][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 651.618037][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 651.643840][ T10] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 651.658386][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.666631][ T10] usb 4-1: Product: syz [ 651.671052][ T10] usb 4-1: Manufacturer: syz [ 651.675771][ T10] usb 4-1: SerialNumber: syz [ 652.219401][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d7ac400: rx timeout, send abort [ 652.354287][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 652.380303][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 652.780144][ T5915] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 652.942509][ T10] usb 4-1: 2:1 : can't get Cluster Descriptor [ 653.089601][ T5915] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 653.122104][ T9057] Bluetooth: hci6: Frame reassembly failed (-84) [ 653.145639][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.198823][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 653.198841][ T29] audit: type=1326 audit(1773862717.614:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369259c799 code=0x7ffc0000 [ 653.201192][ T5915] usb 3-1: Product: syz [ 653.205622][ T29] audit: type=1326 audit(1773862717.614:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.5.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369259c799 code=0x7ffc0000 [ 653.287209][ T10] usb 4-1: USB disconnect, device number 83 [ 653.311595][ T5915] usb 3-1: Manufacturer: syz [ 653.316644][ T5915] usb 3-1: SerialNumber: syz [ 653.342905][ T5915] usb 3-1: config 0 descriptor?? [ 653.354751][T14057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14057 comm=syz.6.2025 [ 653.421652][ T29] audit: type=1400 audit(1773862717.834:1276): avc: denied { accept } for pid=14056 comm="syz.6.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 654.314454][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 654.704008][T14088] 9p: Bad value for 'rfdno' [ 654.708729][T14087] 9p: Bad value for 'rfdno' [ 654.748361][T14079] 9p: Could not find request transport: fd0x0000000000000004 [ 654.749997][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 654.778902][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 654.791368][ T10] usb 4-1: config 6 has an invalid interface descriptor of length 8, skipping [ 654.800956][ T10] usb 4-1: config 6 descriptor has 1 excess byte, ignoring [ 654.808233][ T10] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 654.836081][ T10] usb 4-1: New USB device found, idVendor=10b8, idProduct=1fa0, bcdDevice=60.4b [ 654.846410][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.863133][ T10] usb 4-1: Product: syz [ 654.869786][ T10] usb 4-1: Manufacturer: syz [ 654.892500][ T10] usb 4-1: SerialNumber: syz [ 655.149986][ T5855] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 655.170171][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 655.176566][ T5822] Bluetooth: hci6: command 0x1003 tx timeout [ 655.260086][ T5915] usb 3-1: Firmware version (0.0) predates our first public release. [ 655.280876][ T5915] usb 3-1: Please update to version 0.2 or newer [ 655.302255][ T5855] usb 5-1: device descriptor read/64, error -71 [ 655.347810][ T29] audit: type=1400 audit(1773862719.764:1277): avc: denied { connect } for pid=14073 comm="syz.3.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 655.836603][T14098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2029'. [ 655.846994][T14098] ubi31: attaching mtd0 [ 655.853414][T14098] ubi31: scanning is finished [ 655.858092][T14098] ubi31: empty MTD device detected [ 655.866923][ T1209] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 655.932134][ T5855] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 656.004685][ T47] usb 3-1: USB disconnect, device number 42 [ 656.037067][T14098] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 656.045210][T14098] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 656.052783][T14098] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 656.059788][T14098] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 656.067240][T14098] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 656.074106][T14098] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 656.082576][T14098] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 740984607 [ 656.092541][T14098] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 656.104013][ T5915] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 656.118140][ T5855] usb 5-1: device descriptor read/64, error -71 [ 656.124652][T14099] ubi31: background thread "ubi_bgt31d" started, PID 14099 [ 656.152815][ T10] usb 4-1: USB disconnect, device number 84 [ 656.260167][ T5855] usb usb5-port1: attempt power cycle [ 656.310024][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 656.325227][ T5915] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 656.373835][ T5915] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 656.406608][ T5915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 656.458308][ T5915] usb 6-1: config 1 has no interface number 0 [ 656.483117][ T5915] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.509932][ T5915] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 656.538995][ T5915] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 656.560668][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.610472][ T5855] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 656.622148][ T5915] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 656.661159][ T5855] usb 5-1: device descriptor read/8, error -71 [ 656.809934][ T5915] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 657.018032][ T5855] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 657.043094][ T5855] usb 5-1: device descriptor read/8, error -71 [ 657.161407][ T5855] usb usb5-port1: unable to enumerate USB device [ 657.302301][ T1209] usb 6-1: USB disconnect, device number 5 [ 657.321957][ T1209] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 657.581830][ T29] audit: type=1400 audit(1773862722.004:1278): avc: denied { connect } for pid=14111 comm="syz.5.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 657.604265][T14116] syz.5.2038 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 658.618016][T14135] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2037'. [ 658.712059][ T1209] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 659.000978][ T1209] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.044171][ T1209] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 659.083300][ T1209] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 659.129423][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.397543][T14132] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 659.422606][ T1209] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.450319][T14153] FAULT_INJECTION: forcing a failure. [ 659.450319][T14153] name failslab, interval 1, probability 0, space 0, times 0 [ 659.517147][T14153] CPU: 1 UID: 0 PID: 14153 Comm: syz.2.2046 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.517180][T14153] Tainted: [L]=SOFTLOCKUP [ 659.517186][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.517197][T14153] Call Trace: [ 659.517203][T14153] [ 659.517211][T14153] dump_stack_lvl+0x100/0x190 [ 659.517243][T14153] should_fail_ex.cold+0x5/0xa [ 659.517266][T14153] should_failslab+0xc2/0x120 [ 659.517285][T14153] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 659.517310][T14153] ? __alloc_skb+0x140/0x710 [ 659.517335][T14153] __alloc_skb+0x140/0x710 [ 659.517353][T14153] ? __alloc_skb+0x5b7/0x710 [ 659.517372][T14153] ? __pfx___alloc_skb+0x10/0x10 [ 659.517398][T14153] netlink_alloc_large_skb+0x69/0x150 [ 659.517425][T14153] netlink_sendmsg+0x680/0xda0 [ 659.517452][T14153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.517474][T14153] ? PageHuge+0x170/0x180 [ 659.517503][T14153] ____sys_sendmsg+0x9e1/0xb70 [ 659.517524][T14153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.517541][T14153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.517564][T14153] ___sys_sendmsg+0x190/0x1e0 [ 659.517583][T14153] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.517617][T14153] __sys_sendmsg+0x170/0x220 [ 659.517631][T14153] ? __pfx___sys_sendmsg+0x10/0x10 [ 659.517654][T14153] do_syscall_64+0x106/0xf80 [ 659.517668][T14153] ? clear_bhb_loop+0x40/0x90 [ 659.517686][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.517697][T14153] RIP: 0033:0x7f9977f9c799 [ 659.517707][T14153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.517718][T14153] RSP: 002b:00007f9978d90028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.517729][T14153] RAX: ffffffffffffffda RBX: 00007f9978215fa0 RCX: 00007f9977f9c799 [ 659.517736][T14153] RDX: 0000000000040054 RSI: 0000200000000200 RDI: 0000000000000004 [ 659.517743][T14153] RBP: 00007f9978d90090 R08: 0000000000000000 R09: 0000000000000000 [ 659.517749][T14153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.517755][T14153] R13: 00007f9978216038 R14: 00007f9978215fa0 R15: 00007ffc34972b18 [ 659.517769][T14153] [ 659.862203][T14130] overlay: Unknown parameter '' [ 660.218145][ T5855] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 660.463745][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.781835][ T29] audit: type=1400 audit(1773862724.784:1279): avc: denied { name_bind } for pid=14169 comm="syz.2.2049" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 660.995371][ T1209] usb 7-1: USB disconnect, device number 2 [ 661.011839][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.029695][ T5855] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 661.051333][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.086929][ T5855] usb 5-1: config 0 descriptor?? [ 661.191794][T14185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64 sclass=netlink_audit_socket pid=14185 comm=syz.3.2053 [ 661.205029][T14185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=62 sclass=netlink_audit_socket pid=14185 comm=syz.3.2053 [ 661.219002][T14185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=60 sclass=netlink_audit_socket pid=14185 comm=syz.3.2053 [ 661.439627][T14189] can0: slcan on ttyS3. [ 661.449505][ T9444] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 661.457392][ T29] audit: type=1400 audit(1773862725.834:1280): avc: denied { create } for pid=14180 comm="syz.6.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 661.620034][ T9444] usb 3-1: device descriptor read/64, error -71 [ 661.857345][ T29] audit: type=1400 audit(1773862725.844:1281): avc: denied { write } for pid=14180 comm="syz.6.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 661.878023][T14189] can0 (unregistered): slcan off ttyS3. [ 661.894556][T14190] can0: slcan on ttyS3. [ 662.009134][ T5855] usbhid 5-1:0.0: can't add hid device: -71 [ 662.027902][ T5855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 662.039992][ T9444] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 662.051653][T14180] can0 (unregistered): slcan off ttyS3. [ 662.062052][ T5855] usb 5-1: USB disconnect, device number 76 [ 662.190037][ T9444] usb 3-1: device descriptor read/64, error -71 [ 662.303880][ T9444] usb usb3-port1: attempt power cycle [ 662.665915][ T9444] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 662.696098][ T29] audit: type=1400 audit(1773862727.104:1282): avc: denied { setopt } for pid=14209 comm="syz.6.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 662.742459][ T9444] usb 3-1: device descriptor read/8, error -71 [ 662.756550][ T29] audit: type=1400 audit(1773862727.104:1283): avc: denied { read } for pid=14209 comm="syz.6.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 662.937795][T14221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2059'. [ 662.994607][ T9444] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 663.153797][T14225] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2060'. [ 663.200575][ T9444] usb 3-1: device descriptor read/8, error -71 [ 663.310340][ T9444] usb usb3-port1: unable to enumerate USB device [ 663.822263][ T2692] block nbd0: Possible stuck request ffff888027908000: control (read@0,1024B). Runtime 90 seconds [ 663.833046][ T2692] block nbd0: Possible stuck request ffff888027908200: control (read@1024,1024B). Runtime 90 seconds [ 663.844095][ T2692] block nbd0: Possible stuck request ffff888027908400: control (read@2048,1024B). Runtime 90 seconds [ 663.855091][ T2692] block nbd0: Possible stuck request ffff888027908600: control (read@3072,1024B). Runtime 90 seconds [ 664.620559][ T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 664.843002][ T47] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.924327][ T47] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 664.987712][ T47] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 665.024027][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.071477][T14255] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 665.103726][ T47] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.291461][T14251] overlay: Unknown parameter 't' [ 665.368157][T14286] comedi comedi2: comedi_parport: I/O port conflict (0xafff,3) [ 665.404155][ T5855] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 665.780043][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 665.802361][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 665.836839][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 665.847484][ T5855] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 665.856908][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.867390][ T5855] usb 4-1: Product: syz [ 665.876412][ T5855] usb 4-1: Manufacturer: syz [ 665.883179][ T5855] usb 4-1: SerialNumber: syz [ 665.902189][ T5855] usb 4-1: config 0 descriptor?? [ 665.935212][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 665.994843][T14296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2073'. [ 666.146334][ T5855] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 666.443085][ T5855] rc_core: IR keymap rc-imon-pad not found [ 666.467123][ T5855] Registered IR keymap rc-empty [ 666.482733][ T5855] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 666.511652][ T5855] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 666.558392][ T5855] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 666.623757][ T5855] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 666.647040][ T5855] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:85> initialized [ 666.748110][ T47] usb 6-1: USB disconnect, device number 6 [ 667.440368][ T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 667.539919][ T1209] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 667.683605][ T47] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 667.699318][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.708429][ T47] usb 7-1: Product: syz [ 667.716925][ T47] usb 7-1: Manufacturer: syz [ 667.742804][ T47] usb 7-1: SerialNumber: syz [ 667.763562][ T47] usb 7-1: config 0 descriptor?? [ 667.814494][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 667.826525][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.846629][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.858007][ T1209] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 667.867519][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.881914][ T1209] usb 3-1: config 0 descriptor?? [ 667.895644][ T1209] hub 3-1:0.0: USB hub found [ 668.226999][ T1209] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 668.590093][ T9444] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 668.620005][ T1209] usbhid 3-1:0.0: can't add hid device: -71 [ 668.626479][ T1209] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 668.858961][ T1209] usb 3-1: USB disconnect, device number 47 [ 669.000674][ T9444] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 669.022461][ T9444] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 32 [ 669.034865][ T9444] usb 5-1: config 1 interface 0 has no altsetting 0 [ 669.060386][ T9444] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.087392][ T47] usb 7-1: Firmware version (0.0) predates our first public release. [ 669.098501][ T9444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.116832][ T47] usb 7-1: Please update to version 0.2 or newer [ 669.131880][ T9444] usb 5-1: Product: syz [ 669.136302][ T9444] usb 5-1: Manufacturer: syz [ 669.142067][ T9444] usb 5-1: SerialNumber: syz [ 669.165454][T14327] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 669.173557][T14327] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 669.181355][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 669.182648][ T5868] usb 4-1: USB disconnect, device number 85 [ 669.201765][ T47] usb 7-1: USB disconnect, device number 3 [ 669.389645][T14338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.439067][T14327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.509576][T14327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.622602][T14343] FAULT_INJECTION: forcing a failure. [ 669.622602][T14343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.638497][T14343] CPU: 1 UID: 0 PID: 14343 Comm: syz.5.2087 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.638527][T14343] Tainted: [L]=SOFTLOCKUP [ 669.638533][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 669.638543][T14343] Call Trace: [ 669.638552][T14343] [ 669.638558][T14343] dump_stack_lvl+0x100/0x190 [ 669.638591][T14343] should_fail_ex.cold+0x5/0xa [ 669.638613][T14343] _copy_from_user+0x2e/0xd0 [ 669.638632][T14343] sctp_setsockopt+0x8cc/0xb370 [ 669.638664][T14343] ? __pfx_sctp_setsockopt+0x10/0x10 [ 669.638689][T14343] ? __fget_files+0x215/0x3d0 [ 669.638710][T14343] ? selinux_socket_setsockopt+0x6a/0x80 [ 669.638730][T14343] ? sock_common_setsockopt+0x2e/0xf0 [ 669.638754][T14343] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 669.638781][T14343] do_sock_setsockopt+0xf3/0x1d0 [ 669.638806][T14343] __sys_setsockopt+0x195/0x220 [ 669.638829][T14343] __x64_sys_setsockopt+0xbd/0x160 [ 669.638848][T14343] ? do_syscall_64+0x95/0xf80 [ 669.638870][T14343] ? lockdep_hardirqs_on+0x78/0x100 [ 669.638892][T14343] do_syscall_64+0x106/0xf80 [ 669.638913][T14343] ? clear_bhb_loop+0x40/0x90 [ 669.638935][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.638953][T14343] RIP: 0033:0x7f369259c799 [ 669.638969][T14343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.638986][T14343] RSP: 002b:00007f36933ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 669.639003][T14343] RAX: ffffffffffffffda RBX: 00007f3692815fa0 RCX: 00007f369259c799 [ 669.639015][T14343] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000003 [ 669.639025][T14343] RBP: 00007f36933ab090 R08: 0000000000000008 R09: 0000000000000000 [ 669.639036][T14343] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.639046][T14343] R13: 00007f3692816038 R14: 00007f3692815fa0 R15: 00007ffed17c4bf8 [ 669.639070][T14343] [ 670.320044][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 670.564573][T14342] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.571884][T14342] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.622537][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.642431][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 670.664541][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.696626][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.738660][T14348] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 670.751352][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 670.784188][T14342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.816408][T14342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.840722][ T5915] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 671.000360][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 671.007860][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.020299][T14348] overlayfs: missing 'workdir' [ 671.036646][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.061281][T14342] vlan2: left promiscuous mode [ 671.066253][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 671.077323][T14342] bond0: left promiscuous mode [ 671.083652][T14342] batadv1: left promiscuous mode [ 671.088847][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.102340][T14342] vlan2: left allmulticast mode [ 671.108871][T14342] bond0: left allmulticast mode [ 671.115486][ T5915] usb 7-1: config 0 descriptor?? [ 671.121742][T14342] batadv1: left allmulticast mode [ 671.129483][ T5915] hub 7-1:0.0: USB hub found [ 671.137213][T14342] ip6gre1: left promiscuous mode [ 671.142642][T14342] ip6gre1: left allmulticast mode [ 671.198704][T14202] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.210594][T14202] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 23559 - 0 [ 671.255651][T14202] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.288913][T14202] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 23559 - 0 [ 671.315789][T14202] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.327248][T14202] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 23559 - 0 [ 671.337517][T14202] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.348351][ T5915] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 671.359415][T14202] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 23559 - 0 [ 671.952986][ T5915] usbhid 7-1:0.0: can't add hid device: -71 [ 671.961500][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 672.024346][ T5915] usb 7-1: USB disconnect, device number 4 [ 672.320315][ T9444] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 672.368844][ T9444] usb 5-1: USB disconnect, device number 77 [ 672.535945][T14367] lo: entered allmulticast mode [ 672.560599][T14366] lo: left allmulticast mode [ 672.595497][T14373] FAULT_INJECTION: forcing a failure. [ 672.595497][T14373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.700852][ T9444] usb 3-1: USB disconnect, device number 48 [ 672.727281][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.3.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.727308][T14373] Tainted: [L]=SOFTLOCKUP [ 672.727313][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 672.727321][T14373] Call Trace: [ 672.727327][T14373] [ 672.727333][T14373] dump_stack_lvl+0x100/0x190 [ 672.727362][T14373] should_fail_ex.cold+0x5/0xa [ 672.727382][T14373] _copy_from_user+0x2e/0xd0 [ 672.727398][T14373] kstrtouint_from_user+0xd6/0x1d0 [ 672.727418][T14373] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 672.727436][T14373] ? __lock_acquire+0x4a5/0x2630 [ 672.727453][T14373] ? lock_acquire+0x1cf/0x380 [ 672.727471][T14373] proc_fail_nth_write+0x83/0x220 [ 672.727493][T14373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 672.727519][T14373] vfs_write+0x2aa/0x1070 [ 672.727543][T14373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 672.727565][T14373] ? __pfx_vfs_write+0x10/0x10 [ 672.727587][T14373] ? __fget_files+0x215/0x3d0 [ 672.727607][T14373] ? __fget_files+0x21f/0x3d0 [ 672.727628][T14373] ksys_write+0x12a/0x250 [ 672.727650][T14373] ? __pfx_ksys_write+0x10/0x10 [ 672.727679][T14373] do_syscall_64+0x106/0xf80 [ 672.727698][T14373] ? clear_bhb_loop+0x40/0x90 [ 672.727717][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.727731][T14373] RIP: 0033:0x7f38d3b5cfce [ 672.727745][T14373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 672.727760][T14373] RSP: 002b:00007f38d1dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.727777][T14373] RAX: ffffffffffffffda RBX: 00007f38d1dd56c0 RCX: 00007f38d3b5cfce [ 672.727787][T14373] RDX: 0000000000000001 RSI: 00007f38d1dd50a0 RDI: 0000000000000004 [ 672.727795][T14373] RBP: 00007f38d1dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 672.727804][T14373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.727812][T14373] R13: 00007f38d3e16128 R14: 00007f38d3e16090 R15: 00007ffef80db9d8 [ 672.727832][T14373] [ 673.032053][T14377] infiniband syz0: set down [ 673.036651][T14377] infiniband syz0: added bond0 [ 673.399553][T14377] RDS/IB: syz0: added [ 673.424391][T14377] smc: adding ib device syz0 with port count 1 [ 673.442290][T14377] smc: ib device syz0 port 1 has no pnetid [ 673.577218][T14387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2098'. [ 673.877123][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 673.973014][T14392] 8021q: adding VLAN 0 to HW filter on device team1 [ 675.759961][ T5925] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 675.930146][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 675.945824][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.973465][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.038056][ T5925] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 676.057751][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.085284][ T5925] usb 6-1: config 0 descriptor?? [ 676.105257][ T5925] hub 6-1:0.0: USB hub found [ 676.306606][ T5925] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 677.059952][ T5915] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 677.211329][ T5915] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 677.239947][ T5915] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 677.255105][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 677.280546][ T5925] usbhid 6-1:0.0: can't add hid device: -71 [ 677.296740][ T5925] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 677.304881][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.340975][ T5925] usb 6-1: USB disconnect, device number 7 [ 677.394608][T14422] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 677.416360][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 677.615216][T14421] overlayfs: missing 'workdir' [ 678.810329][ T9444] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 679.019371][ T9444] usb 6-1: Using ep0 maxpacket: 32 [ 679.034041][ T9444] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 679.067786][ T9444] usb 6-1: config 0 has no interface number 0 [ 679.104093][ T9444] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 679.153630][ T9444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.187688][ T9444] usb 6-1: Product: syz [ 679.230456][ T9444] usb 6-1: Manufacturer: syz [ 679.235088][ T9444] usb 6-1: SerialNumber: syz [ 679.297286][ T9455] usb 4-1: USB disconnect, device number 86 [ 679.336274][ T9444] usb 6-1: config 0 descriptor?? [ 679.666549][ T29] audit: type=1400 audit(1773862744.084:1284): avc: denied { bind } for pid=14448 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 679.978664][ T9444] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 680.020019][ T9444] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 680.040869][ T29] audit: type=1400 audit(1773862744.174:1285): avc: denied { getopt } for pid=14448 comm="syz.3.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 680.440056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.449064][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.611493][ T1209] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 681.871382][ T1209] usb 4-1: config 120 has an invalid interface number: 125 but max is 0 [ 681.895922][ T1209] usb 4-1: config 120 has no interface number 0 [ 682.183362][ T1209] usb 4-1: config 120 interface 125 altsetting 8 endpoint 0x3 has invalid maxpacket 33206, setting to 64 [ 682.276598][ T1209] usb 4-1: config 120 interface 125 has no altsetting 0 [ 682.383353][ T1209] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 682.425013][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.491938][ T1209] usb 4-1: Product: syz [ 682.496126][ T1209] usb 4-1: Manufacturer: syz [ 682.520982][ T9444] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 682.915127][ T1209] usb 4-1: SerialNumber: syz [ 682.927173][ T9444] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 682.933134][T14472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 682.980437][ T9444] usb 6-1: USB disconnect, device number 8 [ 683.175691][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.207491][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.332014][ T1209] ums-usbat 4-1:120.125: USB Mass Storage device detected [ 683.738577][ T1209] usb 4-1: USB disconnect, device number 87 [ 685.477207][T14519] FAULT_INJECTION: forcing a failure. [ 685.477207][T14519] name failslab, interval 1, probability 0, space 0, times 0 [ 685.536324][T14519] CPU: 1 UID: 0 PID: 14519 Comm: syz.4.2132 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.536344][T14519] Tainted: [L]=SOFTLOCKUP [ 685.536348][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.536355][T14519] Call Trace: [ 685.536359][T14519] [ 685.536364][T14519] dump_stack_lvl+0x100/0x190 [ 685.536387][T14519] should_fail_ex.cold+0x5/0xa [ 685.536401][T14519] should_failslab+0xc2/0x120 [ 685.536413][T14519] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 685.536431][T14519] ? security_inode_alloc+0x3b/0x2c0 [ 685.536453][T14519] ? lockdep_init_map_type+0x5c/0x250 [ 685.536474][T14519] security_inode_alloc+0x3b/0x2c0 [ 685.536496][T14519] inode_init_always_gfp+0xced/0x1040 [ 685.536511][T14519] alloc_inode+0x8e/0x250 [ 685.536528][T14519] sock_alloc+0x44/0x280 [ 685.536545][T14519] do_accept+0xf9/0x530 [ 685.536557][T14519] ? do_raw_spin_lock+0x128/0x260 [ 685.536570][T14519] ? __pfx_do_accept+0x10/0x10 [ 685.536590][T14519] __sys_accept4+0x108/0x200 [ 685.536602][T14519] ? __pfx___sys_accept4+0x10/0x10 [ 685.536613][T14519] ? ksys_write+0x1ac/0x250 [ 685.536630][T14519] ? __pfx_ksys_write+0x10/0x10 [ 685.536649][T14519] __x64_sys_accept+0x74/0xb0 [ 685.536660][T14519] ? lockdep_hardirqs_on+0x78/0x100 [ 685.536676][T14519] do_syscall_64+0x106/0xf80 [ 685.536689][T14519] ? clear_bhb_loop+0x40/0x90 [ 685.536703][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.536717][T14519] RIP: 0033:0x7fcea439c799 [ 685.536727][T14519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.536738][T14519] RSP: 002b:00007fcea519d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 685.536749][T14519] RAX: ffffffffffffffda RBX: 00007fcea4616090 RCX: 00007fcea439c799 [ 685.536756][T14519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 685.536763][T14519] RBP: 00007fcea519d090 R08: 0000000000000000 R09: 0000000000000000 [ 685.536769][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.536775][T14519] R13: 00007fcea4616128 R14: 00007fcea4616090 R15: 00007fff21bf41b8 [ 685.536790][T14519] [ 686.240936][T14528] FAULT_INJECTION: forcing a failure. [ 686.240936][T14528] name failslab, interval 1, probability 0, space 0, times 0 [ 686.275129][ T29] audit: type=1400 audit(1773862750.694:1286): avc: denied { setopt } for pid=14525 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 686.348544][T14528] CPU: 0 UID: 0 PID: 14528 Comm: syz.6.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.348564][T14528] Tainted: [L]=SOFTLOCKUP [ 686.348568][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.348575][T14528] Call Trace: [ 686.348579][T14528] [ 686.348583][T14528] dump_stack_lvl+0x100/0x190 [ 686.348606][T14528] should_fail_ex.cold+0x5/0xa [ 686.348621][T14528] ? tomoyo_encode2+0xfb/0x3c0 [ 686.348637][T14528] should_failslab+0xc2/0x120 [ 686.348648][T14528] __kmalloc_noprof+0xe0/0x850 [ 686.348667][T14528] tomoyo_encode2+0xfb/0x3c0 [ 686.348685][T14528] tomoyo_encode+0x29/0x50 [ 686.348701][T14528] tomoyo_realpath_from_path+0x18c/0x690 [ 686.348727][T14528] tomoyo_path_number_perm+0x23c/0x580 [ 686.348747][T14528] ? tomoyo_path_number_perm+0x22e/0x580 [ 686.348769][T14528] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 686.348812][T14528] ? find_held_lock+0x2b/0x80 [ 686.348833][T14528] ? __fget_files+0x215/0x3d0 [ 686.348850][T14528] ? hook_file_ioctl_common+0x146/0x410 [ 686.348881][T14528] ? __fget_files+0x21f/0x3d0 [ 686.348904][T14528] security_file_ioctl+0xd3/0x230 [ 686.348928][T14528] __x64_sys_ioctl+0xb7/0x210 [ 686.348956][T14528] do_syscall_64+0x106/0xf80 [ 686.348978][T14528] ? clear_bhb_loop+0x40/0x90 [ 686.348999][T14528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.349016][T14528] RIP: 0033:0x7fee4879c799 [ 686.349031][T14528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.349048][T14528] RSP: 002b:00007fee496c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.349065][T14528] RAX: ffffffffffffffda RBX: 00007fee48a15fa0 RCX: 00007fee4879c799 [ 686.349076][T14528] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 000000000000000b [ 686.349086][T14528] RBP: 00007fee496c6090 R08: 0000000000000000 R09: 0000000000000000 [ 686.349097][T14528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.349107][T14528] R13: 00007fee48a16038 R14: 00007fee48a15fa0 R15: 00007ffd7b42f1d8 [ 686.349138][T14528] [ 686.591451][T14528] ERROR: Out of memory at tomoyo_realpath_from_path. [ 686.733231][ T29] audit: type=1400 audit(1773862751.134:1287): avc: denied { setopt } for pid=14540 comm="syz.4.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 687.738799][T14556] FAULT_INJECTION: forcing a failure. [ 687.738799][T14556] name failslab, interval 1, probability 0, space 0, times 0 [ 687.764168][T14556] CPU: 1 UID: 0 PID: 14556 Comm: syz.4.2142 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.764198][T14556] Tainted: [L]=SOFTLOCKUP [ 687.764204][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.764214][T14556] Call Trace: [ 687.764221][T14556] [ 687.764228][T14556] dump_stack_lvl+0x100/0x190 [ 687.764263][T14556] should_fail_ex.cold+0x5/0xa [ 687.764286][T14556] ? tomoyo_encode2+0xfb/0x3c0 [ 687.764311][T14556] should_failslab+0xc2/0x120 [ 687.764334][T14556] __kmalloc_noprof+0xe0/0x850 [ 687.764365][T14556] tomoyo_encode2+0xfb/0x3c0 [ 687.764394][T14556] tomoyo_encode+0x29/0x50 [ 687.764418][T14556] tomoyo_realpath_from_path+0x18c/0x690 [ 687.764449][T14556] tomoyo_path_number_perm+0x23c/0x580 [ 687.764470][T14556] ? tomoyo_path_number_perm+0x22e/0x580 [ 687.764492][T14556] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 687.764539][T14556] ? find_held_lock+0x2b/0x80 [ 687.764561][T14556] ? __fget_files+0x215/0x3d0 [ 687.764579][T14556] ? hook_file_ioctl_common+0x146/0x410 [ 687.764612][T14556] ? __fget_files+0x21f/0x3d0 [ 687.764635][T14556] security_file_ioctl+0xd3/0x230 [ 687.764660][T14556] __x64_sys_ioctl+0xb7/0x210 [ 687.764687][T14556] do_syscall_64+0x106/0xf80 [ 687.764710][T14556] ? clear_bhb_loop+0x40/0x90 [ 687.764733][T14556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.764752][T14556] RIP: 0033:0x7fcea439c799 [ 687.764767][T14556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.764784][T14556] RSP: 002b:00007fcea51bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.764803][T14556] RAX: ffffffffffffffda RBX: 00007fcea4615fa0 RCX: 00007fcea439c799 [ 687.764815][T14556] RDX: 0000200000000200 RSI: 000000004018aee1 RDI: 0000000000000005 [ 687.764826][T14556] RBP: 00007fcea51bf090 R08: 0000000000000000 R09: 0000000000000000 [ 687.764837][T14556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.764847][T14556] R13: 00007fcea4616038 R14: 00007fcea4615fa0 R15: 00007fff21bf41b8 [ 687.764872][T14556] [ 687.765025][T14556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 687.878516][T14561] netlink: 'syz.2.2143': attribute type 4 has an invalid length. [ 687.988710][T14561] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2143'. [ 687.998228][T14562] FAULT_INJECTION: forcing a failure. [ 687.998228][T14562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.012717][T14562] CPU: 0 UID: 0 PID: 14562 Comm: syz.3.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.012737][T14562] Tainted: [L]=SOFTLOCKUP [ 688.012741][T14562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.012748][T14562] Call Trace: [ 688.012753][T14562] [ 688.012757][T14562] dump_stack_lvl+0x100/0x190 [ 688.012780][T14562] should_fail_ex.cold+0x5/0xa [ 688.012795][T14562] _copy_from_user+0x2e/0xd0 [ 688.012806][T14562] snd_pcm_oss_write2+0x1c2/0x400 [ 688.012819][T14562] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 688.012829][T14562] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 688.012855][T14562] snd_pcm_oss_write+0x729/0xa30 [ 688.012868][T14562] ? security_file_permission+0x76/0x210 [ 688.012888][T14562] vfs_write+0x2aa/0x1070 [ 688.012906][T14562] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 688.012918][T14562] ? __pfx_vfs_write+0x10/0x10 [ 688.012934][T14562] ? find_held_lock+0x2b/0x80 [ 688.012949][T14562] ? __fget_files+0x215/0x3d0 [ 688.012960][T14562] ? __fget_files+0x215/0x3d0 [ 688.012974][T14562] ? __fget_files+0x21f/0x3d0 [ 688.012989][T14562] ksys_write+0x12a/0x250 [ 688.013006][T14562] ? __pfx_ksys_write+0x10/0x10 [ 688.013027][T14562] do_syscall_64+0x106/0xf80 [ 688.013041][T14562] ? clear_bhb_loop+0x40/0x90 [ 688.013055][T14562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.013067][T14562] RIP: 0033:0x7f38d3b9c799 [ 688.013077][T14562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.013088][T14562] RSP: 002b:00007f38d1dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.013099][T14562] RAX: ffffffffffffffda RBX: 00007f38d3e16090 RCX: 00007f38d3b9c799 [ 688.013107][T14562] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 688.013113][T14562] RBP: 00007f38d1dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 688.013120][T14562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.013126][T14562] R13: 00007f38d3e16128 R14: 00007f38d3e16090 R15: 00007ffef80db9d8 [ 688.013140][T14562] [ 688.017501][T14561] .`: renamed from bond0 (while UP) [ 688.590045][ T9455] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 688.760203][ T9455] usb 3-1: Using ep0 maxpacket: 32 [ 688.776428][ T9455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 688.851728][ T9455] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 688.868522][ T9455] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 688.879392][ T9455] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 688.888155][ T9455] usb 3-1: Product: syz [ 688.917380][ T9455] usb 3-1: Manufacturer: syz [ 688.953333][ T9455] usb 3-1: SerialNumber: syz [ 689.218022][ T9455] usb 3-1: config 0 descriptor?? [ 689.835941][T14584] loop2: detected capacity change from 0 to 7 [ 689.848846][ T1209] usb 3-1: USB disconnect, device number 49 [ 689.874374][ T5965] Dev loop2: unable to read RDB block 7 [ 689.891350][ T5965] loop2: unable to read partition table [ 689.908214][ T5965] loop2: partition table beyond EOD, truncated [ 689.928193][T14584] Dev loop2: unable to read RDB block 7 [ 689.943080][T14584] loop2: unable to read partition table [ 689.958373][T14584] loop2: partition table beyond EOD, truncated [ 689.964784][T14584] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 690.342223][T14591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=14591 comm=syz.5.2151 [ 690.424364][T14597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=14597 comm=syz.5.2151 [ 692.550901][ T5925] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 692.741972][ T5925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.766542][ T5925] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 692.809040][ T5925] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 692.863416][ T5925] usb 7-1: Product: syz [ 692.889100][ T5925] usb 7-1: Manufacturer: syz [ 692.894215][ T5925] usb 7-1: SerialNumber: syz [ 692.916778][ T5925] usb 7-1: config 0 descriptor?? [ 692.963136][ T5925] comedi comedi5: Wrong number of endpoints [ 692.970121][ T5925] ni6501 7-1:0.0: driver 'ni6501' failed to auto-configure device. [ 693.169251][ T9444] usb 7-1: USB disconnect, device number 5 [ 693.306568][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 693.318211][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 693.327653][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 693.781680][T14635] infiniband syz2: set active [ 693.786470][T14635] infiniband syz2: added vxcan1 [ 693.792918][ T5925] vxcan1 speed is unknown, defaulting to 1000 [ 693.800457][T14635] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 693.801971][T14635] infiniband syz2: Couldn't open port 1 [ 693.831895][T14635] RDS/IB: syz2: added [ 693.835960][T14635] smc: adding ib device syz2 with port count 1 [ 693.842284][T14635] smc: ib device syz2 port 1 has no pnetid [ 693.849237][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 693.959221][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 694.046739][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 694.131635][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 694.206724][ T5925] vxcan1 speed is unknown, defaulting to 1000 [ 694.291067][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 694.401889][T14635] vxcan1 speed is unknown, defaulting to 1000 [ 694.530071][ T2692] block nbd0: Possible stuck request ffff888027908000: control (read@0,1024B). Runtime 120 seconds [ 694.540847][ T2692] block nbd0: Possible stuck request ffff888027908200: control (read@1024,1024B). Runtime 120 seconds [ 694.551811][ T2692] block nbd0: Possible stuck request ffff888027908400: control (read@2048,1024B). Runtime 120 seconds [ 694.562742][ T2692] block nbd0: Possible stuck request ffff888027908600: control (read@3072,1024B). Runtime 120 seconds [ 694.635416][T14641] netlink: 'syz.6.2164': attribute type 4 has an invalid length. [ 694.646967][T14641] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2164'. [ 694.827951][T14641] .`: renamed from bond0 (while UP) [ 694.998098][T14648] FAULT_INJECTION: forcing a failure. [ 694.998098][T14648] name failslab, interval 1, probability 0, space 0, times 0 [ 695.019173][ T29] audit: type=1400 audit(1773862759.434:1288): avc: denied { getopt } for pid=14645 comm="syz.3.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 695.060151][T14648] CPU: 1 UID: 0 PID: 14648 Comm: syz.5.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.060182][T14648] Tainted: [L]=SOFTLOCKUP [ 695.060188][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.060198][T14648] Call Trace: [ 695.060204][T14648] [ 695.060210][T14648] dump_stack_lvl+0x100/0x190 [ 695.060240][T14648] should_fail_ex.cold+0x5/0xa [ 695.060254][T14648] ? tomoyo_encode2+0xfb/0x3c0 [ 695.060270][T14648] should_failslab+0xc2/0x120 [ 695.060282][T14648] __kmalloc_noprof+0xe0/0x850 [ 695.060298][T14648] ? d_absolute_path+0x136/0x1b0 [ 695.060317][T14648] tomoyo_encode2+0xfb/0x3c0 [ 695.060335][T14648] tomoyo_encode+0x29/0x50 [ 695.060350][T14648] tomoyo_realpath_from_path+0x18c/0x690 [ 695.060369][T14648] tomoyo_path_number_perm+0x23c/0x580 [ 695.060383][T14648] ? tomoyo_path_number_perm+0x22e/0x580 [ 695.060397][T14648] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 695.060426][T14648] ? find_held_lock+0x2b/0x80 [ 695.060440][T14648] ? __fget_files+0x215/0x3d0 [ 695.060451][T14648] ? hook_file_ioctl_common+0x146/0x410 [ 695.060472][T14648] ? __fget_files+0x21f/0x3d0 [ 695.060485][T14648] security_file_ioctl+0xd3/0x230 [ 695.060501][T14648] __x64_sys_ioctl+0xb7/0x210 [ 695.060519][T14648] do_syscall_64+0x106/0xf80 [ 695.060534][T14648] ? clear_bhb_loop+0x40/0x90 [ 695.060548][T14648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.060560][T14648] RIP: 0033:0x7f369259c799 [ 695.060570][T14648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.060580][T14648] RSP: 002b:00007f36933ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.060592][T14648] RAX: ffffffffffffffda RBX: 00007f3692815fa0 RCX: 00007f369259c799 [ 695.060599][T14648] RDX: 00002000000002c0 RSI: 000000008008563f RDI: 0000000000000003 [ 695.060606][T14648] RBP: 00007f36933ab090 R08: 0000000000000000 R09: 0000000000000000 [ 695.060612][T14648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.060618][T14648] R13: 00007f3692816038 R14: 00007f3692815fa0 R15: 00007ffed17c4bf8 [ 695.060633][T14648] [ 695.060666][T14648] ERROR: Out of memory at tomoyo_realpath_from_path. [ 695.065518][T14649] FAULT_INJECTION: forcing a failure. [ 695.065518][T14649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.209964][ T9444] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 695.226415][T14649] CPU: 0 UID: 0 PID: 14649 Comm: syz.3.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.226441][T14649] Tainted: [L]=SOFTLOCKUP [ 695.226447][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.226457][T14649] Call Trace: [ 695.226462][T14649] [ 695.226468][T14649] dump_stack_lvl+0x100/0x190 [ 695.226499][T14649] should_fail_ex.cold+0x5/0xa [ 695.226519][T14649] strncpy_from_user+0x3b/0x2d0 [ 695.226546][T14649] do_getname+0x78/0x390 [ 695.226570][T14649] do_sys_openat2+0xc5/0x1e0 [ 695.226589][T14649] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.226607][T14649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.226632][T14649] ? __fget_files+0x21f/0x3d0 [ 695.226653][T14649] __x64_sys_openat+0x12d/0x210 [ 695.226672][T14649] ? __pfx___x64_sys_openat+0x10/0x10 [ 695.226691][T14649] ? ksys_write+0x1ac/0x250 [ 695.226720][T14649] do_syscall_64+0x106/0xf80 [ 695.226739][T14649] ? clear_bhb_loop+0x40/0x90 [ 695.226758][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.226783][T14649] RIP: 0033:0x7f38d3b5cfce [ 695.226798][T14649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 695.226813][T14649] RSP: 002b:00007f38d1dd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.226829][T14649] RAX: ffffffffffffffda RBX: 00007f38d1dd56c0 RCX: 00007f38d3b5cfce [ 695.226839][T14649] RDX: 0000000000000000 RSI: 00007f38d1dd4c00 RDI: ffffffffffffff9c [ 695.226849][T14649] RBP: 00007f38d1dd4c00 R08: 0000000000000000 R09: 0000000000000000 [ 695.226858][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 695.226867][T14649] R13: 00007f38d3e16128 R14: 00007f38d3e16090 R15: 00007ffef80db9d8 [ 695.226888][T14649] [ 695.825830][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2169'. [ 695.837592][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2169'. [ 695.867184][ T29] audit: type=1326 audit(1773862760.284:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 695.904740][ T29] audit: type=1326 audit(1773862760.284:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 695.953767][ T29] audit: type=1326 audit(1773862760.284:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcea435cfce code=0x7ffc0000 [ 696.033013][ T9444] usb 7-1: Using ep0 maxpacket: 32 [ 696.061840][ T9444] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 696.098915][ T29] audit: type=1326 audit(1773862760.284:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 696.149948][ T9444] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 696.187634][ T9444] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 696.619261][T14667] vxcan1 speed is unknown, defaulting to 1000 [ 696.729058][ T29] audit: type=1326 audit(1773862760.284:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 696.760031][ T9444] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 696.789940][ T9444] usb 7-1: Product: syz [ 696.796656][ T9444] usb 7-1: Manufacturer: syz [ 696.801426][ T9444] usb 7-1: SerialNumber: syz [ 696.808899][ T29] audit: type=1326 audit(1773862760.284:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 696.834138][ T9444] usb 7-1: config 0 descriptor?? [ 696.867692][ T29] audit: type=1326 audit(1773862760.284:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 696.891392][ T29] audit: type=1326 audit(1773862760.284:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 696.917577][ T29] audit: type=1326 audit(1773862760.284:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.4.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcea439c799 code=0x7ffc0000 [ 697.201693][ T5925] usb 7-1: USB disconnect, device number 6 [ 697.620469][ T5855] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 698.136911][ T5855] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 698.153620][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.165848][ T5855] usb 3-1: Product: syz [ 698.171445][ T5855] usb 3-1: Manufacturer: syz [ 698.176199][ T5855] usb 3-1: SerialNumber: syz [ 698.272097][ T47] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 698.340022][ T9444] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 698.664539][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.684666][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.712889][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.736970][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.754291][ T47] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 698.763562][ T9444] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 698.778118][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.792002][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.806009][ T9444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.817792][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.838792][ T47] usb 6-1: Product: syz [ 698.843368][ T9444] usb 4-1: Product: syz [ 698.856878][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.866668][ T9444] usb 4-1: Manufacturer: syz [ 698.871738][ T47] usb 6-1: Manufacturer: syz [ 698.878064][ T9444] usb 4-1: SerialNumber: syz [ 698.893641][ T47] usb 6-1: SerialNumber: syz [ 698.906918][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.915105][ T9444] usb 4-1: config 0 descriptor?? [ 698.949991][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 698.982856][ T9455] hid-generic 000A:0004:0009.0037: unknown main item tag 0x0 [ 699.039164][ T9455] hid-generic 000A:0004:0009.0037: hidraw0: HID v0.04 Device [syz1] on syz0 [ 699.194081][T14705] fido_id[14705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 699.418100][T14714] FAULT_INJECTION: forcing a failure. [ 699.418100][T14714] name failslab, interval 1, probability 0, space 0, times 0 [ 699.431013][T14714] CPU: 0 UID: 0 PID: 14714 Comm: syz.6.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.431044][T14714] Tainted: [L]=SOFTLOCKUP [ 699.431050][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.431060][T14714] Call Trace: [ 699.431069][T14714] [ 699.431081][T14714] dump_stack_lvl+0x100/0x190 [ 699.431106][T14714] should_fail_ex.cold+0x5/0xa [ 699.431122][T14714] ? tomoyo_encode2+0xfb/0x3c0 [ 699.431140][T14714] should_failslab+0xc2/0x120 [ 699.431159][T14714] __kmalloc_noprof+0xe0/0x850 [ 699.431181][T14714] ? tomoyo_encode2+0x8e/0x3c0 [ 699.431207][T14714] tomoyo_encode2+0xfb/0x3c0 [ 699.431229][T14714] tomoyo_encode+0x29/0x50 [ 699.431245][T14714] tomoyo_realpath_from_path+0x18c/0x690 [ 699.431265][T14714] tomoyo_path_number_perm+0x23c/0x580 [ 699.431279][T14714] ? tomoyo_path_number_perm+0x22e/0x580 [ 699.431301][T14714] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 699.431322][T14714] ? __cgroup_account_cputime+0xd5/0x130 [ 699.431366][T14714] ? find_held_lock+0x2b/0x80 [ 699.431381][T14714] ? __fget_files+0x215/0x3d0 [ 699.431393][T14714] ? hook_file_ioctl_common+0x146/0x410 [ 699.431413][T14714] ? __fget_files+0x21f/0x3d0 [ 699.431431][T14714] security_file_ioctl+0xd3/0x230 [ 699.431456][T14714] __x64_sys_ioctl+0xb7/0x210 [ 699.431481][T14714] do_syscall_64+0x106/0xf80 [ 699.431501][T14714] ? clear_bhb_loop+0x40/0x90 [ 699.431517][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.431530][T14714] RIP: 0033:0x7fee4879c799 [ 699.431541][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.431552][T14714] RSP: 002b:00007fee49684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.431564][T14714] RAX: ffffffffffffffda RBX: 00007fee48a16180 RCX: 00007fee4879c799 [ 699.431574][T14714] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 699.431585][T14714] RBP: 00007fee49684090 R08: 0000000000000000 R09: 0000000000000000 [ 699.431595][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.431604][T14714] R13: 00007fee48a16218 R14: 00007fee48a16180 R15: 00007ffd7b42f1d8 [ 699.431627][T14714] [ 699.431733][T14714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 699.661788][T14714] binder: 14711:14714 ioctl c0306201 0 returned -14 [ 699.912808][T14716] FAULT_INJECTION: forcing a failure. [ 699.912808][T14716] name failslab, interval 1, probability 0, space 0, times 0 [ 699.925680][T14716] CPU: 1 UID: 0 PID: 14716 Comm: syz.6.2186 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.925709][T14716] Tainted: [L]=SOFTLOCKUP [ 699.925719][T14716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.925728][T14716] Call Trace: [ 699.925734][T14716] [ 699.925741][T14716] dump_stack_lvl+0x100/0x190 [ 699.925765][T14716] should_fail_ex.cold+0x5/0xa [ 699.925784][T14716] should_failslab+0xc2/0x120 [ 699.925796][T14716] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 699.925815][T14716] ? __alloc_skb+0x140/0x710 [ 699.925839][T14716] __alloc_skb+0x140/0x710 [ 699.925856][T14716] ? __alloc_skb+0x5b7/0x710 [ 699.925874][T14716] ? __pfx___alloc_skb+0x10/0x10 [ 699.925895][T14716] netlink_alloc_large_skb+0x69/0x150 [ 699.925914][T14716] netlink_sendmsg+0x680/0xda0 [ 699.925932][T14716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.925947][T14716] ? PageHuge+0x170/0x180 [ 699.925974][T14716] ____sys_sendmsg+0x9e1/0xb70 [ 699.925998][T14716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.926021][T14716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.926049][T14716] ? __pfx__kstrtoull+0x10/0x10 [ 699.926077][T14716] ___sys_sendmsg+0x190/0x1e0 [ 699.926105][T14716] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.926143][T14716] ? find_held_lock+0x2b/0x80 [ 699.926182][T14716] __sys_sendmmsg+0x205/0x430 [ 699.926206][T14716] ? __pfx___sys_sendmmsg+0x10/0x10 [ 699.926237][T14716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 699.926272][T14716] ? fput+0x79/0x100 [ 699.926291][T14716] ? ksys_write+0x1ac/0x250 [ 699.926318][T14716] ? __pfx_ksys_write+0x10/0x10 [ 699.926349][T14716] __x64_sys_sendmmsg+0x9c/0x100 [ 699.926371][T14716] ? lockdep_hardirqs_on+0x78/0x100 [ 699.926394][T14716] do_syscall_64+0x106/0xf80 [ 699.926415][T14716] ? clear_bhb_loop+0x40/0x90 [ 699.926437][T14716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.926456][T14716] RIP: 0033:0x7fee4879c799 [ 699.926472][T14716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.926489][T14716] RSP: 002b:00007fee496c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 699.926506][T14716] RAX: ffffffffffffffda RBX: 00007fee48a15fa0 RCX: 00007fee4879c799 [ 699.926517][T14716] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 699.926527][T14716] RBP: 00007fee496c6090 R08: 0000000000000000 R09: 0000000000000000 [ 699.926536][T14716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.926546][T14716] R13: 00007fee48a16038 R14: 00007fee48a15fa0 R15: 00007ffd7b42f1d8 [ 699.926568][T14716] [ 700.238581][ T47] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 700.248245][ T47] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 700.259724][ T47] usb 6-1: found format II with max.bitrate = 0, frame size=9 [ 700.267631][ T47] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 700.280504][ T47] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 700.289350][ T47] usb 6-1: found format II with max.bitrate = 0, frame size=9 [ 700.297763][ T47] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 700.322648][ T47] usb 6-1: unit 5 not found! [ 700.327492][ T47] usb 6-1: unit 2 not found! [ 701.094880][ T5855] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 701.104855][ T47] usb 6-1: USB disconnect, device number 9 [ 701.127812][ T5855] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 701.137887][ T5855] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 701.159373][ T5855] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 701.178718][ T5855] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 701.196982][T14722] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2187'. [ 701.251294][ T9444] usb 4-1: Firmware version (0.0) predates our first public release. [ 701.259681][ T9444] usb 4-1: Please update to version 0.2 or newer [ 701.289978][ T5855] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 701.330365][ T5855] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 701.445606][T14733] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2190'. [ 701.498748][ T5855] usb 3-1: unit 5 not found! [ 701.569206][ T5855] usb 3-1: unit 2 not found! [ 701.852208][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 701.852221][ T29] audit: type=1400 audit(1773862766.234:1309): avc: denied { getopt } for pid=14731 comm="syz.2.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 701.922972][ T5855] usb 3-1: USB disconnect, device number 50 [ 702.622170][T14742] can0: slcan on ttyS3. [ 702.630964][ T9444] usb 4-1: USB disconnect, device number 88 [ 702.691027][T14743] can0 (unregistered): slcan off ttyS3. [ 702.707083][T14744] can0: slcan on ttyS3. [ 703.084122][T14746] udevd[14746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 703.222383][T14739] can0 (unregistered): slcan off ttyS3. [ 703.293353][T14718] vxcan1 speed is unknown, defaulting to 1000 [ 703.398025][T14752] netlink: 'syz.3.2192': attribute type 4 has an invalid length. [ 703.408698][T14752] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2192'. [ 703.853088][ T6369] udevd[6369]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.971488][T14760] can0: slcan on ttyS3. [ 704.260225][ T47] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 704.351175][T14760] can0 (unregistered): slcan off ttyS3. [ 704.363018][T14761] can0: slcan on ttyS3. [ 704.491717][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.503691][ T47] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.547987][ T47] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 704.571946][T14753] can0 (unregistered): slcan off ttyS3. [ 704.578153][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.632575][ T9444] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 704.650240][ T47] usb 6-1: Product: syz [ 704.654431][ T47] usb 6-1: Manufacturer: syz [ 704.659013][ T47] usb 6-1: SerialNumber: syz [ 704.668489][T14724] vxcan1 speed is unknown, defaulting to 1000 [ 704.804080][ T47] usb 6-1: config 0 descriptor?? [ 704.850622][ T9444] usb 4-1: Using ep0 maxpacket: 32 [ 704.866670][ T9444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 705.042188][ T9444] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 705.122058][ T9444] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 705.194466][ T9444] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 705.237723][ T9444] usb 4-1: Product: syz [ 705.246163][ T9444] usb 4-1: Manufacturer: syz [ 705.259912][ T9444] usb 4-1: SerialNumber: syz [ 705.275234][ T9444] usb 4-1: config 0 descriptor?? [ 705.459977][ T47] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 705.527625][ T5915] usb 4-1: USB disconnect, device number 89 [ 705.602983][ T47] usb 3-1: device descriptor read/64, error -71 [ 705.840240][ T47] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 705.906569][ T9444] IPVS: starting estimator thread 0... [ 706.079961][ T47] usb 3-1: device descriptor read/64, error -71 [ 706.100075][T14803] IPVS: using max 76 ests per chain, 182400 per kthread [ 706.190282][ T47] usb usb3-port1: attempt power cycle [ 706.570149][ T47] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 706.600844][ T47] usb 3-1: device descriptor read/8, error -71 [ 706.880016][ T47] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 707.000429][ T47] usb 3-1: device descriptor read/8, error -71 [ 707.050612][ T5868] usb 6-1: USB disconnect, device number 10 [ 707.150263][ T47] usb usb3-port1: unable to enumerate USB device [ 707.489982][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 707.650538][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 707.676655][ T5868] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 707.686950][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.728472][ T5868] pvrusb2: Hardware description: Terratec Grabster AV400 [ 707.752180][ T5868] pvrusb2: ********** [ 707.774971][ T5868] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 707.791422][ T5868] pvrusb2: Important functionality might not be entirely working. [ 707.806199][ T5868] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 707.819681][ T5868] pvrusb2: ********** [ 707.935007][ T2339] pvrusb2: Invalid write control endpoint [ 708.130457][T14820] FAULT_INJECTION: forcing a failure. [ 708.130457][T14820] name failslab, interval 1, probability 0, space 0, times 0 [ 708.141401][ T2339] pvrusb2: Invalid write control endpoint [ 708.156032][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 708.170603][T14820] CPU: 0 UID: 0 PID: 14820 Comm: syz.5.2203 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.170631][T14820] Tainted: [L]=SOFTLOCKUP [ 708.170637][T14820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.170646][T14820] Call Trace: [ 708.170652][T14820] [ 708.170659][T14820] dump_stack_lvl+0x100/0x190 [ 708.170689][T14820] should_fail_ex.cold+0x5/0xa [ 708.170712][T14820] ? tomoyo_encode2+0xfb/0x3c0 [ 708.170736][T14820] should_failslab+0xc2/0x120 [ 708.170755][T14820] __kmalloc_noprof+0xe0/0x850 [ 708.170778][T14820] ? d_absolute_path+0x136/0x1b0 [ 708.170809][T14820] tomoyo_encode2+0xfb/0x3c0 [ 708.170838][T14820] tomoyo_encode+0x29/0x50 [ 708.170862][T14820] tomoyo_realpath_from_path+0x18c/0x690 [ 708.170899][T14820] tomoyo_path_number_perm+0x23c/0x580 [ 708.170920][T14820] ? tomoyo_path_number_perm+0x22e/0x580 [ 708.170943][T14820] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 708.170989][T14820] ? find_held_lock+0x2b/0x80 [ 708.171012][T14820] ? __fget_files+0x215/0x3d0 [ 708.171029][T14820] ? hook_file_ioctl_common+0x146/0x410 [ 708.171062][T14820] ? __fget_files+0x21f/0x3d0 [ 708.171082][T14820] security_file_ioctl+0xd3/0x230 [ 708.171106][T14820] __x64_sys_ioctl+0xb7/0x210 [ 708.171132][T14820] do_syscall_64+0x106/0xf80 [ 708.171154][T14820] ? clear_bhb_loop+0x40/0x90 [ 708.171176][T14820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.171195][T14820] RIP: 0033:0x7f369259c799 [ 708.171211][T14820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.171227][T14820] RSP: 002b:00007f36933ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.171249][T14820] RAX: ffffffffffffffda RBX: 00007f3692815fa0 RCX: 00007f369259c799 [ 708.171261][T14820] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 708.171273][T14820] RBP: 00007f36933ab090 R08: 0000000000000000 R09: 0000000000000000 [ 708.171283][T14820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.171293][T14820] R13: 00007f3692816038 R14: 00007f3692815fa0 R15: 00007ffed17c4bf8 [ 708.171318][T14820] [ 708.172402][T14820] ERROR: Out of memory at tomoyo_realpath_from_path. [ 708.176308][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 708.421184][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 708.421428][ T5855] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 708.431615][ T2339] pvrusb2: Device being rendered inoperable [ 708.660777][T14832] FAULT_INJECTION: forcing a failure. [ 708.660777][T14832] name failslab, interval 1, probability 0, space 0, times 0 [ 708.673657][T14832] CPU: 0 UID: 0 PID: 14832 Comm: syz.2.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.673688][T14832] Tainted: [L]=SOFTLOCKUP [ 708.673695][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.673705][T14832] Call Trace: [ 708.673712][T14832] [ 708.673719][T14832] dump_stack_lvl+0x100/0x190 [ 708.673754][T14832] should_fail_ex.cold+0x5/0xa [ 708.673778][T14832] ? tomoyo_encode2+0xfb/0x3c0 [ 708.673802][T14832] should_failslab+0xc2/0x120 [ 708.673821][T14832] __kmalloc_noprof+0xe0/0x850 [ 708.673847][T14832] ? d_absolute_path+0x136/0x1b0 [ 708.673877][T14832] tomoyo_encode2+0xfb/0x3c0 [ 708.673906][T14832] tomoyo_encode+0x29/0x50 [ 708.673930][T14832] tomoyo_realpath_from_path+0x18c/0x690 [ 708.673961][T14832] tomoyo_path_number_perm+0x23c/0x580 [ 708.673984][T14832] ? tomoyo_path_number_perm+0x22e/0x580 [ 708.674007][T14832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 708.674053][T14832] ? irqentry_exit+0x180/0x670 [ 708.674079][T14832] ? hook_file_ioctl_common+0x146/0x410 [ 708.674114][T14832] ? __x64_sys_ioctl+0x94/0x210 [ 708.674144][T14832] security_file_ioctl+0xd3/0x230 [ 708.674169][T14832] __x64_sys_ioctl+0xb7/0x210 [ 708.674198][T14832] do_syscall_64+0x106/0xf80 [ 708.674220][T14832] ? clear_bhb_loop+0x40/0x90 [ 708.674243][T14832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.674262][T14832] RIP: 0033:0x7f9977f9c799 [ 708.674278][T14832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.674294][T14832] RSP: 002b:00007f9978d6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.674312][T14832] RAX: ffffffffffffffda RBX: 00007f9978216090 RCX: 00007f9977f9c799 [ 708.674323][T14832] RDX: 00002000000083c0 RSI: 0000000040345410 RDI: 0000000000000008 [ 708.674335][T14832] RBP: 00007f9978d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 708.674345][T14832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.674356][T14832] R13: 00007f9978216128 R14: 00007f9978216090 R15: 00007ffc34972b18 [ 708.674380][T14832] [ 708.674591][T14832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 708.920064][T14832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2207'. [ 709.537612][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2208'. [ 709.547003][T14820] pvrusb2: Attempted to execute control transfer when device not ok [ 709.580228][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 709.591415][ T5868] usb 6-1: USB disconnect, device number 11 [ 709.607995][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 709.632376][ T5915] IPVS: starting estimator thread 0... [ 709.648436][ T5855] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 709.649249][ T2339] pvrusb2: Attached sub-driver cx25840 [ 709.670103][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 709.680367][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 709.699935][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 709.709933][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 709.726523][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 709.736679][T14838] IPVS: using max 52 ests per chain, 124800 per kthread [ 709.754868][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 709.790111][ T5855] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 709.805490][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.838798][ T5855] usb 5-1: config 0 descriptor?? [ 710.150560][ T5915] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 710.320970][T14848] FAULT_INJECTION: forcing a failure. [ 710.320970][T14848] name failslab, interval 1, probability 0, space 0, times 0 [ 710.333902][ T5915] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 710.352791][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 710.828806][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 710.830208][ T29] audit: type=1400 audit(1773862775.094:1310): avc: denied { ioctl } for pid=14828 comm="syz.4.2206" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 710.864717][T14848] CPU: 0 UID: 0 PID: 14848 Comm: syz.5.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.864748][T14848] Tainted: [L]=SOFTLOCKUP [ 710.864754][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.864764][T14848] Call Trace: [ 710.864771][T14848] [ 710.864778][T14848] dump_stack_lvl+0x100/0x190 [ 710.864812][T14848] should_fail_ex.cold+0x5/0xa [ 710.864835][T14848] ? tomoyo_realpath_from_path+0xb6/0x690 [ 710.864860][T14848] should_failslab+0xc2/0x120 [ 710.864879][T14848] __kmalloc_noprof+0xe0/0x850 [ 710.864915][T14848] tomoyo_realpath_from_path+0xb6/0x690 [ 710.864945][T14848] tomoyo_path_number_perm+0x23c/0x580 [ 710.864966][T14848] ? tomoyo_path_number_perm+0x22e/0x580 [ 710.864989][T14848] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 710.865035][T14848] ? find_held_lock+0x2b/0x80 [ 710.865058][T14848] ? __fget_files+0x215/0x3d0 [ 710.865075][T14848] ? hook_file_ioctl_common+0x146/0x410 [ 710.865108][T14848] ? __fget_files+0x21f/0x3d0 [ 710.865130][T14848] security_file_ioctl+0xd3/0x230 [ 710.865152][T14848] __x64_sys_ioctl+0xb7/0x210 [ 710.865177][T14848] do_syscall_64+0x106/0xf80 [ 710.865198][T14848] ? clear_bhb_loop+0x40/0x90 [ 710.865217][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.865234][T14848] RIP: 0033:0x7f369259c799 [ 710.865248][T14848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.865263][T14848] RSP: 002b:00007f36933ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.865279][T14848] RAX: ffffffffffffffda RBX: 00007f3692815fa0 RCX: 00007f369259c799 [ 710.865290][T14848] RDX: 0000200000000040 RSI: 00000000000007ab RDI: 0000000000000003 [ 710.865299][T14848] RBP: 00007f36933ab090 R08: 0000000000000000 R09: 0000000000000000 [ 710.865308][T14848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.865316][T14848] R13: 00007f3692816038 R14: 00007f3692815fa0 R15: 00007ffed17c4bf8 [ 710.865338][T14848] [ 710.865345][T14848] ERROR: Out of memory at tomoyo_realpath_from_path. [ 711.132025][ T5855] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xd [ 711.143550][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.348172][ T5855] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 711.382058][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 711.404862][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 711.497634][T14842] vxcan1 speed is unknown, defaulting to 1000 [ 711.612208][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.651023][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 711.666751][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 711.695196][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.829784][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 711.841689][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 711.854099][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.861899][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 711.870997][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 711.882116][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.900658][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 711.913776][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 711.928564][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.936671][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 711.957296][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 711.986191][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 712.009326][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 712.036218][ T5915] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 712.090230][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 712.117529][ T5915] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 712.150588][ T5915] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 712.227767][ T5855] usb 5-1: USB disconnect, device number 78 [ 712.266357][ T5915] usb 7-1: Product: syz [ 712.292888][ T5915] usb 7-1: Manufacturer: syz [ 712.320868][ T5915] usb 7-1: SerialNumber: syz [ 712.371324][ T5915] usb 7-1: config 0 descriptor?? [ 712.559999][ T5868] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 712.676253][ T5915] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 712.843022][ T5868] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 713.033999][ T5915] usb 7-1: USB disconnect, device number 7 [ 713.041509][ T5915] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 713.097559][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.112664][ T5868] usb 6-1: Product: syz [ 713.142708][ T5868] usb 6-1: Manufacturer: syz [ 713.192968][ T5868] usb 6-1: SerialNumber: syz [ 714.173587][T14875] vxcan1 speed is unknown, defaulting to 1000 [ 714.742912][T14896] can0: slcan on ttyS3. [ 715.055740][T14896] can0 (unregistered): slcan off ttyS3. [ 715.073398][T14897] can0: slcan on ttyS3. [ 715.181247][T14901] Invalid source name [ 715.209256][T14884] can0 (unregistered): slcan off ttyS3. [ 716.389818][T14921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 716.420703][ T5868] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 716.436282][T14921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 716.452962][ T5868] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 716.486351][ T5868] usb 6-1: found format II with max.bitrate = 0, frame size=9 [ 716.508751][ T5868] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 716.561975][ T5868] usb 6-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 716.619935][ T5868] usb 6-1: found format II with max.bitrate = 0, frame size=9 [ 716.831822][ T5868] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 716.949312][T14918] vxcan1 speed is unknown, defaulting to 1000 [ 716.976791][ T5868] usb 6-1: unit 5 not found! [ 716.986045][ T5868] usb 6-1: unit 2 not found! [ 716.992541][T14926] FAULT_INJECTION: forcing a failure. [ 716.992541][T14926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.006313][T14926] CPU: 1 UID: 0 PID: 14926 Comm: syz.5.2231 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.006341][T14926] Tainted: [L]=SOFTLOCKUP [ 717.006347][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.006357][T14926] Call Trace: [ 717.006362][T14926] [ 717.006367][T14926] dump_stack_lvl+0x100/0x190 [ 717.006390][T14926] should_fail_ex.cold+0x5/0xa [ 717.006409][T14926] _copy_from_iter+0x1f4/0x1690 [ 717.006424][T14926] ? __pfx__copy_from_iter+0x10/0x10 [ 717.006435][T14926] ? rcu_is_watching+0x12/0xc0 [ 717.006449][T14926] ? trace_kmalloc+0x101/0x130 [ 717.006459][T14926] ? __kasan_kmalloc+0xaa/0xb0 [ 717.006476][T14926] ? __kmalloc_noprof+0x320/0x850 [ 717.006495][T14926] kernfs_fop_write_iter+0x186/0x5f0 [ 717.006512][T14926] vfs_write+0x6ac/0x1070 [ 717.006530][T14926] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 717.006545][T14926] ? __pfx_vfs_write+0x10/0x10 [ 717.006572][T14926] ksys_write+0x12a/0x250 [ 717.006594][T14926] ? __pfx_ksys_write+0x10/0x10 [ 717.006615][T14926] do_syscall_64+0x106/0xf80 [ 717.006636][T14926] ? clear_bhb_loop+0x40/0x90 [ 717.006658][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.006676][T14926] RIP: 0033:0x7f369259c799 [ 717.006687][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.006698][T14926] RSP: 002b:00007f36933ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.006709][T14926] RAX: ffffffffffffffda RBX: 00007f3692815fa0 RCX: 00007f369259c799 [ 717.006716][T14926] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 717.006723][T14926] RBP: 00007f36933ab090 R08: 0000000000000000 R09: 0000000000000000 [ 717.006729][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.006736][T14926] R13: 00007f3692816038 R14: 00007f3692815fa0 R15: 00007ffed17c4bf8 [ 717.006751][T14926] [ 717.450204][ T5855] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 717.523803][ T5868] usb 6-1: USB disconnect, device number 12 [ 717.601861][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.612971][ T5855] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 717.633309][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.652119][ T5855] usb 3-1: config 0 descriptor?? [ 717.718719][ T5855] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 717.848351][T14935] FAULT_INJECTION: forcing a failure. [ 717.848351][T14935] name failslab, interval 1, probability 0, space 0, times 0 [ 717.884251][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.5.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.884282][T14935] Tainted: [L]=SOFTLOCKUP [ 717.884289][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.884299][T14935] Call Trace: [ 717.884306][T14935] [ 717.884313][T14935] dump_stack_lvl+0x100/0x190 [ 717.884346][T14935] should_fail_ex.cold+0x5/0xa [ 717.884371][T14935] should_failslab+0xc2/0x120 [ 717.884390][T14935] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 717.884415][T14935] ? prepare_creds+0x2c/0x950 [ 717.884438][T14935] prepare_creds+0x2c/0x950 [ 717.884460][T14935] __do_sys_landlock_restrict_self+0x143/0x9e0 [ 717.884488][T14935] do_syscall_64+0x106/0xf80 [ 717.884509][T14935] ? clear_bhb_loop+0x40/0x90 [ 717.884525][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.884537][T14935] RIP: 0033:0x7f369259c799 [ 717.884548][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.884561][T14935] RSP: 002b:00007f369338a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 717.884573][T14935] RAX: ffffffffffffffda RBX: 00007f3692816090 RCX: 00007f369259c799 [ 717.884580][T14935] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000004 [ 717.884586][T14935] RBP: 00007f369338a090 R08: 0000000000000000 R09: 0000000000000000 [ 717.884593][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.884599][T14935] R13: 00007f3692816128 R14: 00007f3692816090 R15: 00007ffed17c4bf8 [ 717.884614][T14935] [ 717.951442][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 718.077224][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.092624][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.210515][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.247367][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.370123][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 718.376191][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 718.679638][T14948] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 718.707712][ T9055] Bluetooth: hci6: Frame reassembly failed (-84) [ 718.714678][ T29] audit: type=1326 audit(1773862783.044:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d3b9c799 code=0x7ffc0000 [ 718.760870][ T29] audit: type=1326 audit(1773862783.044:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d3b9c799 code=0x7ffc0000 [ 718.785624][ T29] audit: type=1326 audit(1773862783.044:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f38d3b9c799 code=0x7ffc0000 [ 718.835641][ T29] audit: type=1326 audit(1773862783.174:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d3b9c799 code=0x7ffc0000 [ 718.900691][ T29] audit: type=1326 audit(1773862783.174:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.3.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38d3b9c799 code=0x7ffc0000 [ 719.223072][ T5855] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 719.341247][ T1209] usb 3-1: USB disconnect, device number 55 [ 719.395755][ T5855] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.405599][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.433025][ T5855] usb 7-1: config 0 descriptor?? [ 719.441057][ T5855] cp210x 7-1:0.0: cp210x converter detected [ 719.645191][T14949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.659542][T14949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.951919][ T29] audit: type=1400 audit(1773862784.374:1316): avc: denied { sys_module } for pid=14959 comm="syz.2.2241" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 719.977420][ T5855] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 719.998538][ T5855] usb 7-1: cp210x converter now attached to ttyUSB0 [ 720.051023][T14960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.592258][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 721.024237][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 721.525640][ T9444] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 721.605464][T14978] FAULT_INJECTION: forcing a failure. [ 721.605464][T14978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.619693][T14978] CPU: 0 UID: 0 PID: 14978 Comm: syz.4.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.619723][T14978] Tainted: [L]=SOFTLOCKUP [ 721.619729][T14978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.619739][T14978] Call Trace: [ 721.619746][T14978] [ 721.619753][T14978] dump_stack_lvl+0x100/0x190 [ 721.619785][T14978] should_fail_ex.cold+0x5/0xa [ 721.619809][T14978] _copy_to_user+0x32/0xd0 [ 721.619828][T14978] sctp_getsockopt+0x3893/0x7100 [ 721.619861][T14978] ? find_held_lock+0x2b/0x80 [ 721.619883][T14978] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 721.619900][T14978] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 721.619918][T14978] ? __pfx_sctp_getsockopt+0x10/0x10 [ 721.619944][T14978] ? avc_has_perm_noaudit+0x145/0x3b0 [ 721.619964][T14978] ? avc_has_perm+0x135/0x1e0 [ 721.619980][T14978] ? __pfx_avc_has_perm+0x10/0x10 [ 721.619998][T14978] ? __lock_acquire+0x4a5/0x2630 [ 721.620016][T14978] ? sock_has_perm+0x258/0x2f0 [ 721.620042][T14978] ? find_held_lock+0x2b/0x80 [ 721.620062][T14978] ? __might_fault+0xc5/0x140 [ 721.620083][T14978] ? __might_fault+0xc5/0x140 [ 721.620114][T14978] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 721.620139][T14978] do_sock_getsockopt+0x259/0x3d0 [ 721.620165][T14978] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 721.620201][T14978] __sys_getsockopt+0x148/0x260 [ 721.620228][T14978] ? __x64_sys_getsockopt+0xbd/0x160 [ 721.620247][T14978] __x64_sys_getsockopt+0xbd/0x160 [ 721.620268][T14978] ? do_syscall_64+0x95/0xf80 [ 721.620290][T14978] ? lockdep_hardirqs_on+0x78/0x100 [ 721.620313][T14978] do_syscall_64+0x106/0xf80 [ 721.620334][T14978] ? clear_bhb_loop+0x40/0x90 [ 721.620357][T14978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.620375][T14978] RIP: 0033:0x7fcea439c799 [ 721.620390][T14978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.620406][T14978] RSP: 002b:00007fcea519e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 721.620423][T14978] RAX: ffffffffffffffda RBX: 00007fcea4616090 RCX: 00007fcea439c799 [ 721.620432][T14978] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000004 [ 721.620440][T14978] RBP: 00007fcea519e090 R08: 0000200000000300 R09: 0000000000000000 [ 721.620446][T14978] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 721.620453][T14978] R13: 00007fcea4616128 R14: 00007fcea4616090 R15: 00007fff21bf41b8 [ 721.620467][T14978] [ 722.113545][ T9444] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 722.124403][ T9444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.185895][ T9444] usb 4-1: Product: syz [ 722.197906][ T9444] usb 4-1: Manufacturer: syz [ 722.217919][ T9444] usb 4-1: SerialNumber: syz [ 722.234593][ T9444] usb 4-1: config 0 descriptor?? [ 722.267395][ T9444] usb 4-1: selecting invalid altsetting 3 [ 722.275729][ T9444] comedi comedi5: could not set alternate setting 3 in high speed [ 722.286651][ T9444] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 722.440209][ T47] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 722.604217][ T9444] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 722.721867][ T5855] usb 4-1: USB disconnect, device number 90 [ 722.789915][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 722.800729][ T47] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 722.809682][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.820581][ T47] usb 3-1: config 0 has no interface number 0 [ 722.826921][ T47] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 722.853841][ T47] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 722.871308][ T47] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 722.881913][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.007297][ T47] usb 3-1: config 0 descriptor?? [ 723.048388][ T47] ldusb 3-1:0.55: Interrupt in endpoint not found [ 724.157918][ T1209] usb 3-1: USB disconnect, device number 56 [ 724.490171][ T1209] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 724.672211][ T1209] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 724.684876][ T1209] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 724.697669][ T1209] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 724.709500][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.722323][T15003] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 724.885420][ T29] audit: type=1326 audit(1773862789.304:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 724.926935][ T29] audit: type=1326 audit(1773862789.304:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 724.952521][ T29] audit: type=1326 audit(1773862789.304:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 724.980083][T15013] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 724.994018][ T1209] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 725.005054][ T29] audit: type=1326 audit(1773862789.344:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.008962][ T1209] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input35 [ 725.038075][ T29] audit: type=1326 audit(1773862789.344:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.062649][ T29] audit: type=1326 audit(1773862789.374:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.086462][ T29] audit: type=1326 audit(1773862789.374:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.113663][ T29] audit: type=1326 audit(1773862789.374:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.138250][ T29] audit: type=1326 audit(1773862789.374:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.164500][ T29] audit: type=1326 audit(1773862789.374:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.2.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9977f9c799 code=0x7ffc0000 [ 725.194568][ T2692] block nbd0: Possible stuck request ffff888027908000: control (read@0,1024B). Runtime 150 seconds [ 725.206062][ T2692] block nbd0: Possible stuck request ffff888027908200: control (read@1024,1024B). Runtime 150 seconds [ 725.220195][ T2692] block nbd0: Possible stuck request ffff888027908400: control (read@2048,1024B). Runtime 150 seconds [ 725.231722][ T2692] block nbd0: Possible stuck request ffff888027908600: control (read@3072,1024B). Runtime 150 seconds [ 725.233355][ T1209] usb 6-1: USB disconnect, device number 13 [ 725.242914][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 725.451285][T15017] IPv6: addrconf: prefix option has invalid lifetime [ 726.249989][ T9444] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 726.371272][T15031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2260'. [ 726.380520][ T5915] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 726.403330][ T9444] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 726.413792][ T9444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.422128][ T9444] usb 5-1: Product: syz [ 726.426464][ T9444] usb 5-1: Manufacturer: syz [ 726.432192][ T9444] usb 5-1: SerialNumber: syz [ 726.565058][ T5915] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 726.579125][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.589755][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.610509][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.620049][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.629824][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.656264][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.665622][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.674667][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.685907][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.693639][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.702678][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.714430][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.722709][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.731665][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.745457][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.753104][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.762156][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.773459][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.781308][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.790406][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.801394][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.810931][ T5915] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 726.820197][ T5915] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 726.831223][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 726.844338][ T5915] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 726.858113][ T5915] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 726.870022][ T5915] usb 6-1: Product: syz [ 726.875147][ T5915] usb 6-1: Manufacturer: syz [ 726.882469][ T5915] usb 6-1: SerialNumber: syz [ 726.891814][ T5915] usb 6-1: config 0 descriptor?? [ 726.905688][ T5915] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 726.912090][T15036] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 726.939471][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'. [ 727.010002][ T5812] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 727.380917][ T1209] usb 6-1: USB disconnect, device number 14 [ 727.388565][ T1209] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 727.679922][ T47] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 728.882043][ T9444] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 728.900945][ T47] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 728.909012][ T9444] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 728.928334][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 728.949970][ T9444] usb 5-1: found format II with max.bitrate = 0, frame size=9 [ 728.968421][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 728.989909][ T9444] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 729.020102][ T9444] usb 5-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 729.028603][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 729.060048][ T9444] usb 5-1: found format II with max.bitrate = 0, frame size=9 [ 729.337423][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 729.623516][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.635783][ T9444] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 729.645533][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 729.657915][ T30] INFO: task syz.1.1787:12801 blocked for more than 143 seconds. [ 729.679430][ T30] Tainted: G L syzkaller #0 [ 729.695519][ T9444] usb 5-1: unit 5 not found! [ 729.704450][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 729.743931][ T9444] usb 5-1: unit 2 not found! [ 729.770253][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.787533][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 729.804976][ T30] task:syz.1.1787 state:D stack:28424 pid:12801 tgid:12799 ppid:5808 task_flags:0x400640 flags:0x00080002 [ 730.049923][ T30] Call Trace: [ 730.053499][ T30] [ 730.085503][ T30] __schedule+0xfee/0x6120 [ 730.097720][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 730.109611][ T30] ? __lock_acquire+0x4a5/0x2630 [ 730.126089][ T30] ? __pfx___schedule+0x10/0x10 [ 730.151601][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 730.163770][ T30] ? find_held_lock+0x2b/0x80 [ 730.175202][ T9444] usb 5-1: USB disconnect, device number 79 [ 730.198723][ T30] ? schedule+0x2bf/0x390 [ 730.210330][ T47] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 730.220033][ T47] usb 3-1: can't read configurations, error -71 [ 730.230126][ T30] schedule+0xdd/0x390 [ 730.246777][ T30] schedule_timeout+0x1b2/0x280 [ 730.269909][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 730.286540][ T30] ? __wait_for_common+0x2da/0x4c0 [ 730.297648][ T30] ? rcu_is_watching+0x12/0xc0 [ 730.311565][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.331264][ T30] __wait_for_common+0x2e7/0x4c0 [ 730.338296][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 730.345992][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 730.355946][ T30] ? vfs_coredump+0x7e0/0x5570 [ 730.376327][ T30] ? rcu_is_watching+0x12/0xc0 [ 730.384021][ T30] wait_for_completion_state+0x1c/0x40 [ 730.392847][ T30] vfs_coredump+0x80d/0x5570 [ 730.398783][ T30] ? find_held_lock+0x2b/0x80 [ 730.405916][ T30] ? __page_table_check_zero+0x333/0x410 [ 730.413521][ T30] ? __page_table_check_zero+0x333/0x410 [ 730.424379][ T30] ? __page_table_check_zero+0x338/0x410 [ 730.431994][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 730.441786][ T30] ? __lock_acquire+0x4a5/0x2630 [ 730.450145][ T30] ? lock_acquire+0x1cf/0x380 [ 730.464661][ T30] ? lock_acquire+0x1cf/0x380 [ 730.473345][ T30] ? find_held_lock+0x2b/0x80 [ 730.480992][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 730.489688][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 730.498395][ T30] ? bpf_ksym_find+0x128/0x1c0 [ 730.514842][ T30] ? __kernel_text_address+0xd/0x30 [ 730.528964][ T30] ? unwind_get_return_address+0x59/0xa0 [ 730.542422][ T30] ? arch_stack_walk+0xa6/0xf0 [ 730.554307][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 730.565730][ T30] ? stack_trace_save+0x8e/0xc0 [ 730.580981][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 730.592104][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 730.599698][ T30] ? __lock_acquire+0x4a5/0x2630 [ 730.609519][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.622778][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 730.632370][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 730.642231][ T30] ? rcu_is_watching+0x12/0xc0 [ 730.652253][ T30] get_signal+0x1f2a/0x21e0 [ 730.666548][ T30] ? __pfx_get_signal+0x10/0x10 [ 730.668548][T15046] vxcan1 speed is unknown, defaulting to 1000 [ 730.691066][ T30] arch_do_signal_or_restart+0x91/0x7a0 [ 730.700169][ T30] ? force_sig_info_to_task+0x4d2/0x660 [ 730.710641][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 730.719326][ T30] ? rcu_is_watching+0x12/0xc0 [ 730.725984][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 730.734077][ T30] do_syscall_64+0x67c/0xf80 [ 730.741866][ T30] ? clear_bhb_loop+0x40/0x90 [ 730.751121][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.760990][ T30] RIP: 0033:0x7f2ee7d9c799 [ 730.766433][ T30] RSP: 002b:00007f2ee8cf30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 730.778627][ T30] RAX: 00000000000000ca RBX: 00007f2ee8016098 RCX: 00007f2ee7d9c799 [ 730.789521][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2ee801609c [ 730.803667][ T30] RBP: 00007f2ee8016090 R08: 0000000000000000 R09: 0000000000000000 [ 730.814530][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.824976][ T30] R13: 00007f2ee8016128 R14: 00007ffe5a4fdb80 R15: 00007ffe5a4fdc68 [ 730.837429][ T30] [ 730.841808][ T30] INFO: task syz.1.1787:12802 blocked for more than 144 seconds. [ 730.854877][ T30] Tainted: G L syzkaller #0 [ 730.863889][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 730.875583][ T30] task:syz.1.1787 state:D stack:28136 pid:12802 tgid:12799 ppid:5808 task_flags:0x400040 flags:0x00080002 [ 730.891920][ T30] Call Trace: [ 730.897367][ T30] [ 730.902849][ T30] __schedule+0xfee/0x6120 [ 730.911702][ T30] ? __lock_acquire+0x4a5/0x2630 [ 730.918131][ T30] ? __pfx___schedule+0x10/0x10 [ 730.924679][ T30] ? find_held_lock+0x2b/0x80 [ 730.931971][ T30] ? schedule+0x2bf/0x390 [ 730.939503][ T30] schedule+0xdd/0x390 [ 730.945558][ T30] schedule_preempt_disabled+0x13/0x30 [ 730.953348][ T30] __mutex_lock+0xc9a/0x1b90 [ 730.960049][ T30] ? sync_bdevs+0x153/0x480 [ 730.965407][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 730.973034][ T30] ? __mutex_unlock_slowpath+0x15c/0x790 [ 730.981741][ T30] ? iput.part.0+0x1a0/0xf50 [ 730.988276][ T30] ? sync_bdevs+0x153/0x480 [ 730.995918][ T30] sync_bdevs+0x153/0x480 [ 731.001359][ T30] ksys_sync+0xb0/0xf0 [ 731.006764][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 731.015597][ T30] ? do_syscall_64+0x95/0xf80 [ 731.023273][ T30] __do_sys_sync+0xe/0x20 [ 731.029813][ T30] do_syscall_64+0x106/0xf80 [ 731.036352][ T30] ? clear_bhb_loop+0x40/0x90 [ 731.045190][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.052693][ T30] RIP: 0033:0x7f2ee7d9c799 [ 731.058246][ T30] RSP: 002b:00007f2ee8cd2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 731.069871][ T30] RAX: ffffffffffffffda RBX: 00007f2ee8016180 RCX: 00007f2ee7d9c799 [ 731.081108][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 731.097631][ T30] RBP: 00007f2ee8016180 R08: 0000000000000000 R09: 0000000000000000 [ 731.112575][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.129457][ T30] R13: 00007f2ee8016218 R14: 00007f2ee8016180 R15: 00007ffe5a4fdc68 [ 731.140247][ T30] [ 731.148722][ T30] [ 731.148722][ T30] Showing all locks held in the system: [ 731.158228][ T30] 1 lock held by khungtaskd/30: [ 731.166916][ T30] #0: ffffffff8e7e76a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 731.179168][ T30] 3 locks held by kworker/1:1/47: [ 731.186313][ T30] #0: ffff8880232d6148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 731.199642][ T30] #1: ffffc90000b77d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 731.214848][ T30] #2: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: finish_task_switch.isra.0+0x14a/0xb80 [ 731.276266][ T30] 2 locks held by getty/5567: [ 731.309250][ T30] #0: ffff888038c8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 731.620484][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 731.642056][ T30] 1 lock held by udevd/5966: [ 731.650933][ T30] #0: ffff88802783e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 731.692682][ T30] 1 lock held by syz.1.1787/12802: [ 731.697835][ T30] #0: ffff88802783e358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 731.735754][ T30] 1 lock held by syz.6.2236/14949: [ 731.742450][ T30] #0: ffff88802783e358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 731.754213][ T30] 1 lock held by syz.6.2236/14962: [ 731.759330][ T30] #0: ffff88802783e358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 731.774720][ T30] 2 locks held by syz.5.2265/15046: [ 731.780043][ T30] #0: ffffffff905f8ed0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 731.789448][ T30] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 731.809938][ T30] 1 lock held by syz.4.2267/15058: [ 731.815153][ T30] [ 731.817489][ T30] ============================================= [ 731.817489][ T30] [ 731.828624][ T30] NMI backtrace for cpu 1 [ 731.828645][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 731.828669][ T30] Tainted: [L]=SOFTLOCKUP [ 731.828676][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.828687][ T30] Call Trace: [ 731.828693][ T30] [ 731.828701][ T30] dump_stack_lvl+0x100/0x190 [ 731.828735][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 731.828755][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 731.828783][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 731.828814][ T30] sys_info+0x141/0x190 [ 731.828838][ T30] watchdog+0xd25/0x1050 [ 731.828869][ T30] ? __pfx_watchdog+0x10/0x10 [ 731.828893][ T30] ? __kthread_parkme+0x18c/0x230 [ 731.828920][ T30] ? kthread+0x13a/0x450 [ 731.828935][ T30] ? __pfx_watchdog+0x10/0x10 [ 731.828956][ T30] kthread+0x370/0x450 [ 731.828971][ T30] ? __pfx_kthread+0x10/0x10 [ 731.828989][ T30] ret_from_fork+0x754/0xd80 [ 731.829007][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 731.829027][ T30] ? __switch_to+0x7b4/0x1120 [ 731.829048][ T30] ? __pfx_kthread+0x10/0x10 [ 731.829066][ T30] ret_from_fork_asm+0x1a/0x30 [ 731.829098][ T30] [ 731.829104][ T30] Sending NMI from CPU 1 to CPUs 0: [ 731.955077][ C0] NMI backtrace for cpu 0 [ 731.955093][ C0] CPU: 0 UID: 0 PID: 5790 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 731.955113][ C0] Tainted: [L]=SOFTLOCKUP [ 731.955119][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.955127][ C0] RIP: 0033:0x7f0b511c9a07 [ 731.955141][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 08 48 89 fa 48 89 f1 31 ff 31 f6 e8 7d 04 02 00 85 c0 75 09 <48> 83 c4 08 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff 64 89 02 b8 ff ff [ 731.955154][ C0] RSP: 002b:00007ffebf9175e0 EFLAGS: 00000246 [ 731.955166][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0b51157917 [ 731.955175][ C0] RDX: 00007ffebf9175f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 731.955183][ C0] RBP: 00007ffebf917ad0 R08: 0000000000000000 R09: 0000000000000000 [ 731.955191][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 731.955199][ C0] R13: 00007ffebf91762c R14: 00007ffebf9176c0 R15: 0000000000000000 [ 731.955208][ C0] FS: 000055557c5d7540 GS: 0000000000000000 [ 732.068524][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 732.075403][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 732.086076][ T30] Tainted: [L]=SOFTLOCKUP [ 732.090381][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.100416][ T30] Call Trace: [ 732.103682][ T30] [ 732.106684][ T30] dump_stack_lvl+0x100/0x190 [ 732.111359][ T30] vpanic+0x552/0x970 [ 732.115321][ T30] ? __pfx_vpanic+0x10/0x10 [ 732.119810][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 732.125957][ T30] panic+0xd1/0xe0 [ 732.129658][ T30] ? __pfx_panic+0x10/0x10 [ 732.134057][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 732.140201][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 732.146342][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 732.152488][ T30] ? watchdog.cold+0x198/0x1ca [ 732.157234][ T30] ? watchdog+0xd35/0x1050 [ 732.161638][ T30] watchdog.cold+0x1a9/0x1ca [ 732.166216][ T30] ? __pfx_watchdog+0x10/0x10 [ 732.170883][ T30] ? __kthread_parkme+0x18c/0x230 [ 732.175898][ T30] ? kthread+0x13a/0x450 [ 732.180119][ T30] ? __pfx_watchdog+0x10/0x10 [ 732.184807][ T30] kthread+0x370/0x450 [ 732.188856][ T30] ? __pfx_kthread+0x10/0x10 [ 732.193426][ T30] ret_from_fork+0x754/0xd80 [ 732.198014][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 732.203107][ T30] ? __switch_to+0x7b4/0x1120 [ 732.207767][ T30] ? __pfx_kthread+0x10/0x10 [ 732.212343][ T30] ret_from_fork_asm+0x1a/0x30 [ 732.217118][ T30] [ 732.220414][ T30] Kernel Offset: disabled [ 732.224723][ T30] Rebooting in 86400 seconds..