last executing test programs: 10m59.452144669s ago: executing program 1 (id=327): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x1e000}) pipe(&(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) clock_adjtime(0x17, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103}) 10m59.197752345s ago: executing program 1 (id=328): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c0099004100000060000000080026009a030000080027"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m59.109069733s ago: executing program 1 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c0099004100000060000000080026009a030000080027"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 1) 10m58.668511545s ago: executing program 1 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000200)) 10m58.49857203s ago: executing program 1 (id=331): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/ipc\x00') ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 10m58.276885399s ago: executing program 1 (id=333): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES8=r0, @ANYBLOB="0d460b1ca6430ff2bb1e1dae", @ANYRES32=r0], 0x28}}, 0x802) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa9b, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000100)={0x5, 0xb51, 0x8001, 0x1, 0x6, 0x6, 0xb2, 0x5, 0x7, 0xf7, 0xff, "fdf730af7b02daf82772c21c3efc2338779bba478e5b2efb26d807127364be99"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m43.150517031s ago: executing program 32 (id=333): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES8=r0, @ANYBLOB="0d460b1ca6430ff2bb1e1dae", @ANYRES32=r0], 0x28}}, 0x802) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa9b, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000100)={0x5, 0xb51, 0x8001, 0x1, 0x6, 0x6, 0xb2, 0x5, 0x7, 0xf7, 0xff, "fdf730af7b02daf82772c21c3efc2338779bba478e5b2efb26d807127364be99"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) syz_clone(0x24100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m58.8404828s ago: executing program 3 (id=2606): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x80}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xc323, &(0x7f0000000640)={0x0, 0x398f, 0x1, 0x2, 0x21}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0xaa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = dup3(r3, r4, 0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000240)="67a00e50567c97b1c7d73fd271097870226ed990b1030a5ab4cac7e58083ad82e23a104fe17b81094a0adc50ad52971588b9e9dd57394268a2160bd0dd763c93dd3180dc5b923d8bc626792961971886cfcfff475af48c3f739ae3f3c7287fcb7f1ddd1dbf394967d4415bafcd690065890ce23e552330051eda420e9a0b50af5cde6324d74cc4ff190bf732d9b7e1c3896960e70d26b6db0e5e0560d03407b29e8707ca501c63cc39de9a18164cc7cfbeff0afd4db7ae72b0ea9b21bd91174481846715cda0dac02d966a83bb817d890869afd560b4999d", 0xd8}], 0x1, 0x8, 0x734) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r8 = io_uring_setup(0x1192, &(0x7f0000000040)={0x0, 0x2150, 0xbfff, 0x0, 0xbe, 0x0, r6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/108, 0x6c}], 0x1, &(0x7f0000000400)=""/224, 0xe0}, 0x3}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/255, 0xff}], 0x1, &(0x7f0000000640)=""/200, 0xc8}, 0x3}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x1, 0x3, 0x6, 0x8, 0x36e}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e000000ff7f0000010000000100008040a00000", @ANYRES32=r5, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000040000000000010000000f0000000000000012150bf26dfc59916e43a63ba62e5c5f678c71bdec4bd8d44f5102130cc61f1545ee4e7570cbf635366c6ccd497a7e7b9fa30a1fdd34027ddecd5aa1c4316db78c363bb25f53097c5ef4f067e3e94ccf4dbd2077969f697b362473680b6a0cd05d75d6c393e79242d7a9fb5e592b24ba7094052b866436e9be048f6e830e2e93162dd210c2a599a7795ded90832a15fa72d689d8a00c207f9fa1c3ea400b6ed0a3a800dc4d84aac5b509c39dc4d452c9788ce375d746d391089087f694908bb12edf60280b72395907a4449d", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) io_uring_enter(r8, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 2m55.240227017s ago: executing program 3 (id=2616): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) r2 = fsopen(&(0x7f0000000100)='bdev\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8080, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setitimer(0x0, &(0x7f0000000080)={{0x7, 0x1}, {0x0, 0xb3}}, 0x0) r5 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff}}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000080)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000600)={'wg1\x00'}) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e584f636ec5993a0a0f3d7413956efb8df834310ad31e450914bbecb76968b02cfb35f3966e518fdcc642d61d81df722e6c98c2befffe7b2778ef1ede9433e1bea9a0f6df54c910a41ab2088fc1e8ba75714bad4c2ce288ef2dd26c88ad831cd6b844653738f042b17c4290c1f"], 0x0) 2m54.12857459s ago: executing program 3 (id=2625): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)={'#.${*-^.\''}, 0xa, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a501, 0x442}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xfffffffffffffd4b}}}, @IFLA_OPERSTATE={0x0, 0x10, 0x4b}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_BROADCAST]}, 0x50}}, 0x0) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x300) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 2m53.976298663s ago: executing program 3 (id=2626): r0 = eventfd2(0xff, 0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$afs(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x44000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r5 = epoll_create1(0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000180)={0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000100)={0x1}) 2m52.713280575s ago: executing program 3 (id=2629): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000c89000/0x4000)=nil, 0x4000}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000003c80)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000c80)="90a25cb70b780aa8", 0x8}, {0x0}], 0x2}}], 0x2, 0x8014) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e81c737ee447f0000006b000000000200028006000100000000000c00020000000000000000001000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010003704000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c00028008000300ffffffff080002007f0000010600080003000000"], 0x48}}, 0x0) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000c89000/0x4000)=nil, 0x4000}) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000003c80)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000c80)="90a25cb70b780aa8", 0x8}, {0x0}], 0x2}}], 0x2, 0x8014) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e81c737ee447f0000006b000000000200028006000100000000000c00020000000000000000001000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010003704000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c00028008000300ffffffff080002007f0000010600080003000000"], 0x48}}, 0x0) (async) 2m50.280160654s ago: executing program 3 (id=2639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2m49.947424646s ago: executing program 33 (id=2639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 11.272071059s ago: executing program 0 (id=3172): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x2000001, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16]) write(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe07, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x1000, 0x401, 0x8001}, 0x40000, 0x4000005, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) 10.180569908s ago: executing program 0 (id=3174): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @empty, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x8, 0x40, 0x8, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xc, [0x1, 0x6]}, @ssrr={0x89, 0x7, 0xd7, [@private=0xa010100]}, @generic={0x83, 0x2}]}}, {{0x4e27, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000008411000007000000ac1414aa00000000300000000000000084000000010000000100050001000000050000000900000001000080050000007b000000", @ANYRES32, @ANYBLOB="20000000000000008400000008000000000000000000ff"], 0x68, 0x4000094}, 0x24000052) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x2, 0x6, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = getpid() syz_usb_connect$cdc_ncm(0x0, 0x134, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff74, 0x2, 0x1, 0x1, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d274"}, {0x3, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xff, 0xeb21, 0x9, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x28}, [@mdlm_detail={0x56, 0x24, 0x13, 0x3, "7f9bcf57ea21a6edf3e76e2145fcbaf479d08254ced9ccc7fa9c29ca4862dae59e46bd73869ec6301f5200d711f244772608f9d18f08c79ab3e034b928e20ec8e798890d548b72496c3f7dba5ec1702b315e"}, @mdlm={0x15, 0x24, 0x12, 0x401}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x40, 0xf8, 0x100, 0x3}, @mdlm_detail={0x4d, 0x24, 0x13, 0x6, "6dcbce71df1f9f2e144da156a00c2cc7b790253607d915a0cb06cae6fbfef55d385d03d0e8306eed9406f3e652969a98166de7700b116fd6a8cbc528757368b2cf6526ba0b40ac9a29"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4e, 0xac, 0x80}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x0, 0xb, 0x1, 0x40, 0x4}, 0xb, &(0x7f0000000200)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0xdc, &(0x7f0000000240)=@string={0xdc, 0x3, "5889d990c12dfa16d2bf61f77eddeaad9ce76ace1661c3269b84abe57d5639160b7f2aec58897fd4a088e98c4e824306658557d553ae40739384a962e08c155b985b39c594af672523ff8a0a9e09630af3c43a4fa3e94bf1ffa3f1e54ccc57a3ec894ee4cfa9f7de08682f8e1a0991f5737b9116754f1829f6027f8e7130504024d9b08fc2c14cf22154be0543712583074da2dc12ef8b5118803e2b26266b390c44c924f818af82bafb15224ee82d60f7ec2b6ddfc8f4a72f07f3ea450fa2a5e62345fc69f67dc06e316e577316669e23b92d3d7113e9ea52f1"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x111a80, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) prlimit64(r2, 0xf, 0x0, &(0x7f0000000000)) unshare(0x10000000) 8.756104627s ago: executing program 4 (id=3178): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48}) 8.70414657s ago: executing program 4 (id=3180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = dup2(r0, r1) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000000)) syz_usb_connect$midi(0x0, 0xd9, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x1, 0x1, 0x81, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x6, [@midi_out_jack={0x19, 0x24, 0x3, 0x3, 0x0, 0x9, [{0x1, 0x3}, {0x9, 0x2}, {0x0, 0xfc}, {0x87, 0x95}, {0x81, 0xfc}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0xff}, {0xf, 0x40}], 0x8}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0xf, 0x5, [{0x4, 0x9}, {0x5, 0xb}, {0xf3, 0x2f}, {0x5, 0xfa}, {0x1, 0x9}], 0xd}, @ms_header={0x7, 0x24, 0x1, 0xe, 0x7}], [{{0x9, 0x5, 0x5, 0x3, 0x400, 0x3, 0x2b, 0x9, {0xa, 0x25, 0x1, 0x6, "38909319b83a"}}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x40, 0x1, 0x3, {0xf, 0x25, 0x1, 0xb, "af582becca25112e385348"}}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x30, 0xce, 0x0, {0x11, 0x25, 0x1, 0xd, "7eb1608e0a998d6fca6238f8d0"}}}, {{0x9, 0x5, 0x4, 0x2, 0x18, 0xb, 0x8, 0x9, {0xc, 0x25, 0x1, 0x8, "5df247a7e626f636"}}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x4, 0x7, 0x4, {0x13, 0x25, 0x1, 0xf, "5961dae151cd3ed07174f197f148d8"}}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x9, 0xf7, 0x9, {0x5, 0x25, 0x1, 0x1, "8d"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x7, 0x1, 0x7f, 0xff, 0x4}, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="050f5600050b100104400002001000030c100a02000200000f0070700b7fc51001088200050880000424100aff060000000f0f2487e0d2846fc000000030000000af3fff00303fff00303f00000b104b05ff000500000000b124aca2555a66fdbea75255f3bc40174ea113ef5f87e650c8a4a8928919ce605eac67a35cfd08629bf622136fb61de82cca57703a0dd592959b3918ad4daec825fb283ddf795c8944e20b85e0b5392f91a7413fb13e3f8eebea10f736c2ff92a019ae7ae000e809679b91e9c05684d5e5"], 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x415}}]}) 8.595742995s ago: executing program 0 (id=3183): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r4 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) r5 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) (async) socketpair(0x10, 0x800, 0x7, &(0x7f0000000500)) (async) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)="2650048b555401b31fb3a6765e4980e7160311c9f0faf2bf5b", 0x19}, {&(0x7f0000000180)="2eaca1124d49624632a06604", 0xc}, {&(0x7f0000000200)="6a4ed8d32f13afaa4958b120e754bcf950c092cbc0ceb167b08e5bcaebd69ca668a6813e568063abde21860a8765e10edb17dd4a37ec6fdd97b5991e5213009b196074487530d963ff0fd563da214032cb148402703bb2a8edd3663bf67f475950189b35ea2bea5821df11718453586d20ae8358f046c1321c37db9cd8165a4897", 0x81}, {&(0x7f00000002c0)="d0ba2f2f124626e5dbb86971dfaa0c7ba7bb89e13ec196318be52af6448095dba43b65e97adf9fbbabeecd02fd70e22fa2b19138293e45c50d6dbd780645887f7db89c81e52a89ad742ca063aed6b0985de9c66c84e6b91886119e992e9fee506ef6632e6ef01b902c18dc81896b85", 0x6f}, {&(0x7f0000000340)="5ad666e0b27df88116335e6273f6bd5e21fcc1741c4cc84d8e1d320fd8c54c1a6b786a7af9bbd07cf3264b9e06314c8d6d15bb98a13cfc4c8dfc11198d62d41bb369fb3f4fc023a639ff2aa7cd7f6deb04b356ebe27848d6a28bbf5e2486c45ceec85d715eaf6d", 0x67}, {&(0x7f00000003c0)="50b6a91b4143b8ebb6eea9b5a4a676174f6974d35c8ce9cb00b76939c54a079eec73611b045a55b948ec65fb48e67d689fa8a6a95a5b29653e155e83809f3457b6f389e3bc47aa", 0x47}], 0x6, &(0x7f0000000500)}}], 0x1, 0x80) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 8.426948496s ago: executing program 6 (id=3185): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c20b5040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x3c, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aa33"], 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x541b, &(0x7f0000000100)) syz_usb_connect$uac1(0x4, 0xe3, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x4, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x35}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x7f, "a7"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x1, 0x6, [0x3, 0x7, 0x0, 0x3, 0x2, 0x8], 0x1e}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x9, 0x97, "e54d"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x402, 0x6, 0x4, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x7, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xc0, 0xa, 0x0, 0xf6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0x41, "17f7", "99a8"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x7, 0xcc, {0x7, 0x25, 0x1, 0x0, 0x44, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x80, 0xfe, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7, 0xfa, "ac556d70"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0xfff, 0xff, "0a1f6b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x7e, 0x5, {0x7, 0x25, 0x1, 0xc, 0x1, 0x2fab}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x7, 0x1, 0x10, 0x52}, 0x0, 0x0, 0x9, [{0x79, &(0x7f0000000140)=@string={0x79, 0x3, "76ed468a752edfdcaa360a0964c577b3586a2fbf96d1ed38643cd400de713188a8a159951ead62a8d2538bad5188f954f01ba10a96a5b9222d5a7038953232fc0a612efa20ddef184fce3f9023a368439e4845679382e8191539b083ca2dd86364a9ff965fcf5cb28c2855e133054366947a5998805f18"}}, {0xdb, &(0x7f0000000340)=@string={0xdb, 0x3, "c436f10a307eb0692fe7574cf65376b5b3f858079c4e44349e5101c2368cc3d0676a32b9ff59ca6c1a73c8cdb9d9851cae48acba7f238b15f837e103d27a9d17c28da211c07a905efd8fe53930631a84666b1db6f1ec83a1a99847d0de78e2f49aead319126d346fecf3d9d4d7bec085fd628ab7827d883d013edfba6a86012a7ef18bbcf112ee53e68b624d577475a92f3934c01f9da118d5efbb8de4bf24df5d0b9c10d964ade22b2fba5b6e2e47c1813461a972ff9942580614a75028fc0295d288a3e210566f88231c6c7099888730ba8ebd95b2976ef3"}}, {0xfe, &(0x7f0000000440)=@string={0xfe, 0x3, "43ffef169e33d0787f067e31d25aeede9bee29ad9b80486fd8035ccbd21ae94fa39049bbd9c4fd363e098f8c250635b18682e3001a31540d7562907d7585e4496e0161decc19bfef7f4e0b4b3d5ba3133cdb6fc64ab23dec36640532a0f9c2312fbe561742590fec944a53e07be953cb76a50d4d0d4c2de495c4c90f75ef589c2e81227f608b3dd444fe0149f020e72c42aa18706149efc469539cad5e1638ac1972712ec5b1edd71e99f97fccfc977cdf3017fc4f2a11b1538bb11a90ec2433ab7d73aa86095e746129a6ea0d2663d98a823e9ba1998b0abad161a79c10969e6c4a33544e5f2105e28d792f9c1667ab4a716d84f21d914cb1868ec0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x18, &(0x7f0000000640)=@string={0x18, 0x3, "15d86c693796c2de79605a364422a105f7b1be73a56e"}}, {0x92, &(0x7f0000000680)=@string={0x92, 0x3, "0fcae09f40d4ae48ae5260a5ea1bb416fc24928308953f7f95c45323da92a5ca226a61045612d0f4655394549606084829af5b3d83963362e52c22181263c39a7ed7d3698515aa6c1a97cdad053adbff573ecade4ec4ab215b6b42ce52e17a7a87fcd98208e24f030b26adabfdaa154a2a61a2ba3183c6647b17f0bdc9c7ba1ee844d579ec17d0da839f773493a1bdb9"}}]}) 7.152553769s ago: executing program 4 (id=3187): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = io_uring_setup(0x25f5, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xdffffffb, 0x257}) sync() io_uring_enter(r1, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x2}, 0x8000000, 0x0, 0x2, 0x0, 0x5, 0x8002}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab004500012800000000000190"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) socket(0x1d, 0x80000, 0x6d1) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020601010000000000030000050000000900020073797a30000000000500010007000000050005000a00000014000780050015008b00000008000b4000000000050004000300000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6.91070663s ago: executing program 2 (id=3188): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16]) write(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe07, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x1000, 0x401, 0x8001}, 0x40000, 0x4000005, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) 6.818172409s ago: executing program 6 (id=3189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) (fail_nth: 1) 5.554562683s ago: executing program 6 (id=3190): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="addd9ba02a11f8dc84a948c09634ba22c1c85ec21811bb0a3a866ce172a4e44b81aa911f52af72c0815a89a28c11500b8ac173c9bb818a47c92b37dd6de1c824d892a36e44b41f2ff87374216dfa070f49abc42c2a03c24ccc28e68ce629005889c4fde140e30c509f23baaf406025880f2d1f2464437b73794280c69eb29669e542f7799219ac53a7938392c584b5596fe4f47e45b072a515a2865f816af7724a520f89a8128d9677db19e09d88"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b1b, 0x0) 5.554269978s ago: executing program 0 (id=3191): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="1d70b5b8d04b", 0x6}], 0x1) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="0302308c130f75196e69"], 0xa, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10010, r0, 0xc8cd000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003bc0)={0x24, 0x0, 0x3, 0x401, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x9}, [@nested={0x4, 0x7c}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5.551742804s ago: executing program 2 (id=3192): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16]) write(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {0x0, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe07, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x1000, 0x401, 0x8001}, 0x40000, 0x4000005, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) 4.401976721s ago: executing program 0 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000680)=0x3, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) r2 = gettid() (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000Euser_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) (async) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x160, 0x0, 0x4, [{{0x2, 0x0, 0x80000000, 0x0, 0x3, 0x7, {0x4, 0x3ff, 0x3, 0xfff, 0x100, 0xc, 0x1, 0x5, 0xfffffff8, 0x1000, 0x0, r6, r7, 0xdd4, 0xfffffffb}}, {0x3, 0x6, 0x1, 0x7, '^'}}, {{0x0, 0x0, 0x91, 0xfffffffd, 0x100, 0x3, {0x0, 0xffffffff7fffffff, 0xad4, 0xf, 0x8000, 0x9e2, 0x6bff, 0x5, 0x100001, 0x1000, 0x2, r6, r7, 0x7, 0x7}}, {0x4, 0x1ff, 0x14, 0x1310, 'security.capability\x00'}}]}, 0x0, 0x0, 0x0}) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000700), 0x20082, 0x0) r9 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000740)={0x2, 0x0, {0xffffffffffffffff}, {0xee00}, 0x5, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) (async) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) (async) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r13, 0x0, 0x0) (async) fstat(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x7) (async) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000300)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="78d6172711a4ea620b8e382baa2e1d7a516a495688ce", 0x16}, {&(0x7f0000000380)="a6ee2504a19a626fdc2ddb57e34767db7aa0064b10ca2d57183978c1a1f35fc811d146e4ce48ab33ef9b52501caaa4bc24b24341334ae3e95bf90670106d2a86aa619b17c6a49110012f2e29599c12ea", 0x50}, {&(0x7f0000000500)="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", 0xfd}, {&(0x7f0000000400)="6d5136e4f2f2e08794402bd472e1a54824a6c011ff1bb1f4a3d73ce65b3c7a971684fa818efd46dc4138d765fd56907df47da3e5e42eaedb3664333e2c3351c537a2ea8f0432cea11dcc3543fcf4bf7368663177f92bc99708fa624a30cb5cfcf5e56bd3eb9f7ca119e607e56614cb5b45a8817a487daf1693452d696c79b6ed84f9704e2a2109fd1eac405d160d3ada419d470f35569e29a0e9c786effeec621dd2ba371ef0c4d5016d55561ce3bb9a395f", 0xb2}], 0x4, &(0x7f0000002900)=[@rights={{0x20, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r7}}}, @rights={{0x28, 0x1, 0x1, [r8, r1, r1, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x108, 0x88}, 0x40000c4) (async) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r19, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r18], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 4.246923116s ago: executing program 2 (id=3194): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) dup(r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 4.13237861s ago: executing program 0 (id=3195): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000002c0)={0x990000, 0x10001, 0x8, 0xffffffffffffffff, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b3090400b20102020194052406000005240002000d240f0110000000d500ff000306241a0300d509050a"], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) futex(&(0x7f0000000000), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x2}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x8400000) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000)=0x3, 0x4ffffff) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001ec0), 0x608202, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x12, {{0x29, 0x0, 0x4, @remote, 0x5}}}, 0x88) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001f00), 0x2400, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001e40)={{r9, &(0x7f0000000340)='/dev/net/tun\x00', 0x480800, &(0x7f0000000380)={@_ha_fsid={[0x1000, 0x1]}, {0x0, 0x5, 0x4, 0x3}}, 0x8, &(0x7f0000000440), &(0x7f0000000480)=0x4}, 0xa, &(0x7f0000001d00)=[{0x3, 0x1, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="0112619961d6fc46012c1ab17335c3f65bf5d846af3be7778572a3183a997149c4cdda727487ddaad76183997e243f2b2cf11b3ee884fa9dfb58ed74093305a419d791b7b47e0c", 0x47, 0x2}, {0x3, 0xffffffff, &(0x7f0000000640)='-(:%\'*/&\x00', &(0x7f0000000680)="ce95d3947f09fbb827eed34a74008903a7c106a628addaa92fbc7c52f0517c41de947ea5d5c7cca9bf0942c076a71c3f58be5e651081b7d282b4e39258df205bea012398c3bab210381059ae1c8344f3334ebe87ab60d06ac9fe131c9b8433324a5dcb8cfb3cedb1f18231d9d6163a0b488bd1ffa38fc28b1f7270b455715e81cfab5351922fdb3157f96c3baf4f5524a3097e28e6f38f98a4fb488041be1515fb76df939f0e7522d3a0a5c4cd689c8d5e56cb140b28e2802d0b8f590f3c3950b929b06f6aa0", 0xc6, 0x20}, {0x0, 0x4, &(0x7f0000000780)='/dev/net/tun\x00', &(0x7f00000007c0)="c1bde8f1bb849caa0017efada6a76e8acc8b4ae902d732", 0x17, 0x28}, {0x2, 0x8, &(0x7f0000000800)='$\'[.-\x00', &(0x7f0000000840)="024a40ef565254154502ee0ad03f8a59a879c43fba297b803259764d57e02e190ba3d8bab91930d69a276da96a3590049f318fc5e14ca8ab5d7a5e9bd65ea9309566681f15f6901a2041b119ca3d1e1b5abe10a570e80cbb4e2e28815bc661c5edcf1fee83f42e65f14a62a19f1b70caed315972ff06c4ece17ac612c395ae341f1d57189be540d67d781fe09a4513f0f9f5018e8c9842229731cf77bf93902198f51e23ec58102b832c1c8d3bb304b70f0f11c74b66507a84a3f23ed8bcae23cebb502e99c0bf3c37", 0xc9, 0x20}, {0x2, 0x10, &(0x7f0000000940)='syzkaller0\x00', &(0x7f0000000980)="f8b0785a8194da6274b92f82719c2d8348921e84f07cbbff1bd98604ee72b04147f08e93bab44d332e0aa4d811cfa76418810d06d222aad4e58e37ccab5305e59d6707f6c9", 0x45, 0x18}, {0x1, 0xf, &(0x7f0000000a00)='syzkaller0\x00', &(0x7f0000000a40)="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", 0x1000, 0x10}, {0x3, 0x81, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="24453975dd1f3a024969594d3c561b0ca42a90309e4df8680d0d9385f505a79c0f9c65f428b500d35efcca4cefddbd204e276394ff6f0016f3ad9caed63df3ababe8d7745e2a", 0x46, 0x8}, {0x3, 0x100, &(0x7f0000001b00)='/..+^-)!&+\x00', &(0x7f0000001b40)="bb3e2b87cde76dea115e9df922405c85e087728a13170cfeea7a70ad2edf2fca6740bc4b09c1088ffb8e021fc8a081e855d9a4704e877af32430f3e400db01b4af6974ab1a4030a8ad09ad79a8f03021be85", 0x52}, {0x1, 0x971a, &(0x7f0000001bc0)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001c00)="049439edca10", 0x6}, {0x3, 0xffff, &(0x7f0000001c40)='/dev/net/tun\x00', &(0x7f0000001c80)="ec9a3619580e5b1c2e9ec2cb4626c0727f12f45f6940ea1b98360cbebaf199d2885d4718e366fca248ab1ed8f9c69ccd06ce0590354b4f3ee120211fdccbd74132f2df7e36c03498213d798c3874dad3", 0x50}]}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.009620611s ago: executing program 2 (id=3196): r0 = socket(0x1e, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) dup(r3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x121800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0xe0000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x212, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x2000003, 0x53, 0x202, 0x2, 0xc}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x2, 0xd59f80, 0x3, 0x3d, 0x19ef, 0x3, 0x100007, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x11, {0x8, 0xffffffff}, 0xcd, 0x9}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020}, 0x2032) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00032dbd7000fbdbdf251b0000000400cc00080001007c00000008009a000200"], 0x100}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) pipe2(&(0x7f0000000040), 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 3.923126828s ago: executing program 4 (id=3197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) (fail_nth: 1) 3.584522122s ago: executing program 4 (id=3199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c20b5040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x3c, r2, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x3c}}, 0x40000) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aa33"], 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x541b, &(0x7f0000000100)) syz_usb_connect$uac1(0x4, 0xe3, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x4, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x35}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x7f, "a7"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x1, 0x6, [0x3, 0x7, 0x0, 0x3, 0x2, 0x8], 0x1e}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x9, 0x97, "e54d"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x402, 0x6, 0x4, 0xa}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x7, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xc0, 0xa, 0x0, 0xf6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0x41, "17f7", "99a8"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x3, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x7, 0xcc, {0x7, 0x25, 0x1, 0x0, 0x44, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x80, 0xfe, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7, 0xfa, "ac556d70"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x4, 0xfff, 0xff, "0a1f6b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0x7e, 0x5, {0x7, 0x25, 0x1, 0xc, 0x1, 0x2fab}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x7, 0x1, 0x10, 0x52}, 0x0, 0x0, 0x9, [{0x79, &(0x7f0000000140)=@string={0x79, 0x3, "76ed468a752edfdcaa360a0964c577b3586a2fbf96d1ed38643cd400de713188a8a159951ead62a8d2538bad5188f954f01ba10a96a5b9222d5a7038953232fc0a612efa20ddef184fce3f9023a368439e4845679382e8191539b083ca2dd86364a9ff965fcf5cb28c2855e133054366947a5998805f18"}}, {0xdb, &(0x7f0000000340)=@string={0xdb, 0x3, "c436f10a307eb0692fe7574cf65376b5b3f858079c4e44349e5101c2368cc3d0676a32b9ff59ca6c1a73c8cdb9d9851cae48acba7f238b15f837e103d27a9d17c28da211c07a905efd8fe53930631a84666b1db6f1ec83a1a99847d0de78e2f49aead319126d346fecf3d9d4d7bec085fd628ab7827d883d013edfba6a86012a7ef18bbcf112ee53e68b624d577475a92f3934c01f9da118d5efbb8de4bf24df5d0b9c10d964ade22b2fba5b6e2e47c1813461a972ff9942580614a75028fc0295d288a3e210566f88231c6c7099888730ba8ebd95b2976ef3"}}, {0xfe, &(0x7f0000000440)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x18, &(0x7f0000000640)=@string={0x18, 0x3, "15d86c693796c2de79605a364422a105f7b1be73a56e"}}, {0x93, &(0x7f0000000680)=@string={0x93, 0x3, "0fcae09f40d4ae48ae5260a5ea1bb416fc24928308953f7f95c45323da92a5ca226a61045612d0f4655394549606084829af5b3d83963362e52c22181263c39a7ed7d3698515aa6c1a97cdad053adbff573ecade4ec4ab215b6b42ce52e17a7a87fcd98208e24f030b26adabfdaa154a2a61a2ba3183c6647b17f0bdc9c7ba1ee844d579ec17d0da839f773493a1bdb90d"}}]}) 3.427275317s ago: executing program 5 (id=3200): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x1ff, 0x2, 0x4205, 0x8, 0xffff, 0x3, 0x8, 0x1, r8}, &(0x7f0000000080)=0x20) r9 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r9, 0x1e67e000) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffff8) 3.150372803s ago: executing program 6 (id=3201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_EMATCHES={0x8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) 1.555975152s ago: executing program 5 (id=3202): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000001c00048018000180080001006c6f67000c000280080006400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x70}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="8f70120b0a000200aa"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r8, 0x89e0, &(0x7f00000001c0)={'tunl0\x00', 0x4, 0x5}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = eventfd2(0x8, 0x0) read(r9, &(0x7f0000000480)=""/82, 0x52) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="71100800000000009d"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) 1.374806987s ago: executing program 5 (id=3203): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000000380)=""/198, 0xc6}], 0x2) 1.270119895s ago: executing program 5 (id=3204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket(0x10, 0xa, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100037040400"/20, @ANYRES32=r1, @ANYBLOB="830405000000020027670000000000007665746800000000180002801400010000000000", @ANYRES32=r1, @ANYBLOB="0054000002800000"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 1.195990911s ago: executing program 2 (id=3205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)=""/88, &(0x7f00000002c0)=0x58) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="04000ae7518bdc00e2b438115c1fe8cd1dbd54538e1da1bfa2ca0b259ab8bbafe4e2bd73172b09762bc61a8edd4baa32114684c929e6323db9dd2c2c18fb11487b2e819acc6584ec8b48c44fbcad6700"/95, @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.003620136s ago: executing program 6 (id=3208): r0 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000001080), &(0x7f0000000600)) 247.591945ms ago: executing program 4 (id=3209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) open(&(0x7f0000000340)='./file0\x00', 0x180501, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) unshare(0x28000600) r2 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) 129.695307ms ago: executing program 5 (id=3210): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 0s ago: executing program 2 (id=3211): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x57, 0x1, {0x5, @meta={0x50353543, 0x36a50a78, 0x7df1, 0xc20, 0x3a2c683a}}, 0x1}) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x8}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000000008018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000005008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0x24}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r7}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000001a00)=""/4103, 0x1007}], 0x2}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xffc1) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000040)={0x18, 0x1, 0x1, 0x0, r7, 0x80}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r11, 0x0, 0x0, 0x1}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r12}) kernel console output (not intermixed with test programs): dv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.076578][T14090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.139068][T14090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.139085][T14090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.139113][T14090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.358376][T14180] lo speed is unknown, defaulting to 1000 [ 684.741981][T14090] hsr_slave_0: entered promiscuous mode [ 685.280806][T14090] hsr_slave_1: entered promiscuous mode [ 685.282257][T14090] debugfs: 'hsr0' already exists in 'hsr' [ 685.282282][T14090] Cannot create hsr debugfs directory [ 685.881760][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.248820][T14191] FAULT_INJECTION: forcing a failure. [ 686.248820][T14191] name failslab, interval 1, probability 0, space 0, times 0 [ 686.248843][T14191] CPU: 1 UID: 0 PID: 14191 Comm: syz.2.2820 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 686.248858][T14191] Tainted: [L]=SOFTLOCKUP [ 686.248862][T14191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.248869][T14191] Call Trace: [ 686.248874][T14191] [ 686.248880][T14191] dump_stack_lvl+0xe8/0x150 [ 686.248902][T14191] should_fail_ex+0x46b/0x600 [ 686.248922][T14191] should_failslab+0xa8/0x100 [ 686.248934][T14191] __kmalloc_noprof+0xdf/0x7b0 [ 686.248949][T14191] ? kfree+0x4d/0x6c0 [ 686.248963][T14191] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 686.248987][T14191] tomoyo_realpath_from_path+0xe3/0x5d0 [ 686.249004][T14191] ? tomoyo_path_number_perm+0x219/0x630 [ 686.249020][T14191] tomoyo_path_number_perm+0x246/0x630 [ 686.249037][T14191] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 686.249055][T14191] ? __lock_acquire+0x6b5/0x2cf0 [ 686.249083][T14191] ? __fget_files+0x2a/0x420 [ 686.249098][T14191] ? __fget_files+0x2a/0x420 [ 686.249110][T14191] ? __fget_files+0x3a6/0x420 [ 686.249122][T14191] ? __fget_files+0x2a/0x420 [ 686.249137][T14191] security_file_ioctl+0xc3/0x2a0 [ 686.249157][T14191] __se_sys_ioctl+0x47/0x170 [ 686.249175][T14191] do_syscall_64+0x14d/0xf80 [ 686.249194][T14191] ? trace_irq_disable+0x3b/0x150 [ 686.249206][T14191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.249217][T14191] ? clear_bhb_loop+0x40/0x90 [ 686.249230][T14191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.249240][T14191] RIP: 0033:0x7f77f04cc799 [ 686.249252][T14191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.249261][T14191] RSP: 002b:00007f77ee726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.249273][T14191] RAX: ffffffffffffffda RBX: 00007f77f0745fa0 RCX: 00007f77f04cc799 [ 686.249281][T14191] RDX: 0000200000000180 RSI: 00000000000007b2 RDI: 0000000000000006 [ 686.249288][T14191] RBP: 00007f77ee726090 R08: 0000000000000000 R09: 0000000000000000 [ 686.249294][T14191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.249301][T14191] R13: 00007f77f0746038 R14: 00007f77f0745fa0 R15: 00007ffe48b15d38 [ 686.249317][T14191] [ 686.249334][T14191] ERROR: Out of memory at tomoyo_realpath_from_path. [ 687.185802][ T9] usbhid 6-1:0.0: can't add hid device: -32 [ 687.185872][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 688.303936][T14213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.498039][ T5982] bridge_slave_1: left allmulticast mode [ 688.498066][ T5982] bridge_slave_1: left promiscuous mode [ 688.498359][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.564464][ T6012] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 688.566456][ T5982] bridge_slave_0: left allmulticast mode [ 688.566473][ T5982] bridge_slave_0: left promiscuous mode [ 688.566626][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.718057][ T6012] usb 3-1: unable to get BOS descriptor or descriptor too short [ 688.719152][ T6012] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 688.719176][ T6012] usb 3-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 688.719197][ T6012] usb 3-1: config 63 has no interface number 0 [ 688.719227][ T6012] usb 3-1: config 63 interface 66 has no altsetting 0 [ 688.721433][ T6012] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 688.721459][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.721478][ T6012] usb 3-1: Product: syz [ 688.721493][ T6012] usb 3-1: Manufacturer: syz [ 688.721507][ T6012] usb 3-1: SerialNumber: syz [ 688.984123][ T6012] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 688.984208][ T6012] uvcvideo 3-1:63.66: No valid video chain found. [ 688.993837][ T6012] usb 3-1: USB disconnect, device number 88 [ 689.555467][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.615507][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.647819][ T5982] bond0 (unregistering): Released all slaves [ 689.661011][ T5982] bond1 (unregistering): Released all slaves [ 689.682079][ T5982] bond2 (unregistering): Released all slaves [ 689.748823][ T6012] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 689.896395][ T6012] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 689.896424][ T6012] usb 3-1: config 0 has no interface number 0 [ 689.896468][ T6012] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 689.898903][ T6012] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 689.898932][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.898952][ T6012] usb 3-1: Product: syz [ 689.898967][ T6012] usb 3-1: Manufacturer: syz [ 689.898982][ T6012] usb 3-1: SerialNumber: syz [ 689.904227][ T6012] usb 3-1: config 0 descriptor?? [ 690.066556][ T6012] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 690.215201][ T5985] usb 6-1: USB disconnect, device number 65 [ 690.253793][ T5899] usb 3-1: USB disconnect, device number 89 [ 690.319612][ T5899] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 690.439059][ T5982] tipc: Left network mode [ 691.624450][ T5985] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 692.099476][ T5985] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 692.099505][ T5985] usb 7-1: config 0 has no interface number 0 [ 692.099547][ T5985] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.099573][ T5985] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.099610][ T5985] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 692.099634][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.112927][ T5985] usb 7-1: config 0 descriptor?? [ 692.914479][ T5986] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 693.024643][ T10] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 693.186619][ T5985] usbhid 7-1:0.1: can't add hid device: -71 [ 693.186732][ T5985] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 693.216381][ T5986] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 693.216438][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.218474][ T5986] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 693.218501][ T5986] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 693.218521][ T5986] usb 1-1: Manufacturer: syz [ 693.222892][ T5986] usb 1-1: config 0 descriptor?? [ 693.223376][ T5985] usb 7-1: USB disconnect, device number 10 [ 693.294281][T14252] FAULT_INJECTION: forcing a failure. [ 693.294281][T14252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.294380][T14252] CPU: 1 UID: 0 PID: 14252 Comm: syz.2.2834 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 693.294408][T14252] Tainted: [L]=SOFTLOCKUP [ 693.294415][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 693.294426][T14252] Call Trace: [ 693.294434][T14252] [ 693.294443][T14252] dump_stack_lvl+0xe8/0x150 [ 693.294476][T14252] should_fail_ex+0x46b/0x600 [ 693.294505][T14252] _copy_from_user+0x2d/0xb0 [ 693.294532][T14252] ___sys_sendmsg+0x1c6/0x360 [ 693.294559][T14252] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.294584][T14252] ? finish_task_switch+0x240/0x920 [ 693.294605][T14252] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.294643][T14252] ? lockdep_hardirqs_on+0x7a/0x110 [ 693.294685][T14252] ? __x64_sys_sendmsg+0x1a8/0x2a0 [ 693.294710][T14252] __x64_sys_sendmsg+0x1c3/0x2a0 [ 693.294733][T14252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.294761][T14252] ? rcu_is_watching+0x15/0xb0 [ 693.294794][T14252] do_syscall_64+0x14d/0xf80 [ 693.294818][T14252] ? trace_irq_disable+0x3b/0x150 [ 693.294840][T14252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.294859][T14252] ? clear_bhb_loop+0x40/0x90 [ 693.294883][T14252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.294901][T14252] RIP: 0033:0x7f77f04cc799 [ 693.294920][T14252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.294937][T14252] RSP: 002b:00007f77ee6cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.294958][T14252] RAX: ffffffffffffffda RBX: 00007f77f0746180 RCX: 00007f77f04cc799 [ 693.294972][T14252] RDX: 0000000000000844 RSI: 0000200000009b40 RDI: 0000000000000009 [ 693.294985][T14252] RBP: 00007f77ee6cb090 R08: 0000000000000000 R09: 0000000000000000 [ 693.294997][T14252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.295010][T14252] R13: 00007f77f0746218 R14: 00007f77f0746180 R15: 00007ffe48b15d38 [ 693.295040][T14252] [ 694.266237][ T10] usb 6-1: device descriptor read/all, error -71 [ 694.574462][ T5986] rc_core: IR keymap rc-hauppauge not found [ 694.574482][ T5986] Registered IR keymap rc-empty [ 694.582199][ T5986] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 694.611307][ T5986] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input72 [ 694.880577][ C0] igorplugusb 1-1:0.0: receive overflow, at least 11 lost [ 695.035689][ T1245] usb 1-1: USB disconnect, device number 73 [ 695.704498][ T6012] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 695.830153][T14287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2842'. [ 695.864677][ T6012] usb 7-1: unable to get BOS descriptor or descriptor too short [ 695.867139][ T6012] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 695.867164][ T6012] usb 7-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 695.867184][ T6012] usb 7-1: config 63 has no interface number 0 [ 695.867215][ T6012] usb 7-1: config 63 interface 66 has no altsetting 0 [ 695.869402][ T6012] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 695.869428][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.869441][ T6012] usb 7-1: Product: syz [ 695.869449][ T6012] usb 7-1: Manufacturer: syz [ 695.869457][ T6012] usb 7-1: SerialNumber: syz [ 696.181005][ T6012] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 696.181093][ T6012] uvcvideo 7-1:63.66: No valid video chain found. [ 696.193021][ T6012] usb 7-1: USB disconnect, device number 11 [ 697.747091][T14313] tmpfs: Unknown parameter '' [ 697.801037][T14313] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 698.539974][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 699.294151][T14322] FAULT_INJECTION: forcing a failure. [ 699.294151][T14322] name failslab, interval 1, probability 0, space 0, times 0 [ 699.294174][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.5.2854 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 699.294189][T14322] Tainted: [L]=SOFTLOCKUP [ 699.294193][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.294200][T14322] Call Trace: [ 699.294204][T14322] [ 699.294210][T14322] dump_stack_lvl+0xe8/0x150 [ 699.294231][T14322] should_fail_ex+0x46b/0x600 [ 699.294247][T14322] should_failslab+0xa8/0x100 [ 699.294261][T14322] __kmalloc_noprof+0xdf/0x7b0 [ 699.294278][T14322] ? kfree+0x4d/0x6c0 [ 699.294292][T14322] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.294308][T14322] tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.294334][T14322] ? tomoyo_path_number_perm+0x219/0x630 [ 699.294359][T14322] tomoyo_path_number_perm+0x246/0x630 [ 699.294387][T14322] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 699.294416][T14322] ? __lock_acquire+0x6b5/0x2cf0 [ 699.294467][T14322] ? __fget_files+0x2a/0x420 [ 699.294491][T14322] ? __fget_files+0x2a/0x420 [ 699.294512][T14322] ? __fget_files+0x3a6/0x420 [ 699.294533][T14322] ? __fget_files+0x2a/0x420 [ 699.294553][T14322] security_file_ioctl+0xc3/0x2a0 [ 699.294572][T14322] __se_sys_ioctl+0x47/0x170 [ 699.294591][T14322] do_syscall_64+0x14d/0xf80 [ 699.294607][T14322] ? trace_irq_disable+0x3b/0x150 [ 699.294619][T14322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.294630][T14322] ? clear_bhb_loop+0x40/0x90 [ 699.294643][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.294653][T14322] RIP: 0033:0x7f331a1bc799 [ 699.294665][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.294674][T14322] RSP: 002b:00007f331840e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.294686][T14322] RAX: ffffffffffffffda RBX: 00007f331a435fa0 RCX: 00007f331a1bc799 [ 699.294694][T14322] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 699.294701][T14322] RBP: 00007f331840e090 R08: 0000000000000000 R09: 0000000000000000 [ 699.294707][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.294714][T14322] R13: 00007f331a436038 R14: 00007f331a435fa0 R15: 00007ffe20c13528 [ 699.294730][T14322] [ 699.314481][T14322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 700.857235][ T1245] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 700.874574][ T5982] hsr_slave_0: left promiscuous mode [ 701.020137][ T1245] usb 7-1: unable to get BOS descriptor or descriptor too short [ 701.021756][ T1245] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 701.021782][ T1245] usb 7-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 701.021803][ T1245] usb 7-1: config 63 has no interface number 0 [ 701.021836][ T1245] usb 7-1: config 63 interface 66 has no altsetting 0 [ 701.028383][ T1245] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 701.028412][ T1245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.028433][ T1245] usb 7-1: Product: syz [ 701.028448][ T1245] usb 7-1: Manufacturer: syz [ 701.028463][ T1245] usb 7-1: SerialNumber: syz [ 701.224803][ T5982] hsr_slave_1: left promiscuous mode [ 701.225868][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.225892][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.377877][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.377912][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.475822][ T1245] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 701.475916][ T1245] uvcvideo 7-1:63.66: No valid video chain found. [ 701.485271][ T1245] usb 7-1: USB disconnect, device number 12 [ 701.487799][ T5982] veth1_macvtap: left promiscuous mode [ 701.487896][ T5982] veth0_macvtap: left promiscuous mode [ 701.488153][ T5982] veth1_vlan: left promiscuous mode [ 701.488313][ T5982] veth0_vlan: left promiscuous mode [ 702.284469][ T5986] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 702.444689][ T5986] usb 7-1: Using ep0 maxpacket: 16 [ 702.448205][ T5986] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 702.448236][ T5986] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 702.451104][ T5986] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 702.451132][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.451153][ T5986] usb 7-1: Product: syz [ 702.451167][ T5986] usb 7-1: Manufacturer: syz [ 702.451182][ T5986] usb 7-1: SerialNumber: syz [ 702.605924][ T5986] usb 7-1: config 0 descriptor?? [ 702.630478][ T5986] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 702.630513][ T5986] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 702.853943][T14358] tmpfs: Unknown parameter '' [ 703.465083][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 703.572879][T14360] tmpfs: Unknown parameter '' [ 703.618660][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 703.932269][ T5986] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 703.932930][ T5986] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 704.035407][T14356] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 704.182405][T14361] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 704.284619][T14090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 704.639985][T14090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 704.642515][T14367] FAULT_INJECTION: forcing a failure. [ 704.642515][T14367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.642545][T14367] CPU: 1 UID: 0 PID: 14367 Comm: syz.2.2865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 704.642570][T14367] Tainted: [L]=SOFTLOCKUP [ 704.642577][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.642589][T14367] Call Trace: [ 704.642596][T14367] [ 704.642604][T14367] dump_stack_lvl+0xe8/0x150 [ 704.642637][T14367] should_fail_ex+0x46b/0x600 [ 704.642664][T14367] _copy_from_user+0x2d/0xb0 [ 704.642689][T14367] ___sys_sendmsg+0x1c6/0x360 [ 704.642714][T14367] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.642738][T14367] ? kstrtouint+0x6e/0xe0 [ 704.642784][T14367] ? __fget_files+0x2a/0x420 [ 704.642807][T14367] ? __fget_files+0x3a6/0x420 [ 704.642838][T14367] __sys_sendmmsg+0x282/0x4e0 [ 704.642856][T14367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 704.642871][T14367] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 704.642893][T14367] ? ksys_write+0x248/0x270 [ 704.642920][T14367] ? __pfx_ksys_write+0x10/0x10 [ 704.642952][T14367] __x64_sys_sendmmsg+0xa0/0xc0 [ 704.642974][T14367] do_syscall_64+0x14d/0xf80 [ 704.642999][T14367] ? trace_irq_disable+0x3b/0x150 [ 704.643018][T14367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.643029][T14367] ? clear_bhb_loop+0x40/0x90 [ 704.643042][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.643052][T14367] RIP: 0033:0x7f77f04cc799 [ 704.643064][T14367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.643080][T14367] RSP: 002b:00007f77ee705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 704.643101][T14367] RAX: ffffffffffffffda RBX: 00007f77f0746090 RCX: 00007f77f04cc799 [ 704.643115][T14367] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000004 [ 704.643128][T14367] RBP: 00007f77ee705090 R08: 0000000000000000 R09: 0000000000000000 [ 704.643140][T14367] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000001 [ 704.643152][T14367] R13: 00007f77f0746128 R14: 00007f77f0746090 R15: 00007ffe48b15d38 [ 704.643181][T14367] [ 705.044571][T14090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 705.098478][T14090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 705.215067][T14353] Set syz0 is full, maxelem 0 reached [ 705.324551][ T5986] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 705.324974][ T5986] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 705.325373][ T5986] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 705.325775][ T5986] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 705.326166][ T5986] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 705.326571][ T5986] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 705.339669][ T5986] usb 7-1: USB disconnect, device number 13 [ 705.398332][T12713] udevd[12713]: setting owner of /dev/bus/usb/007/013 to uid=0, gid=0 failed: No such file or directory [ 705.540586][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2869'. [ 705.540607][T14384] openvswitch: netlink: Flow actions attr not present in new flow. [ 705.862893][T14090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.885932][T14090] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.942441][T14090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 705.942466][T14090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 706.078695][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.080670][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.102139][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.102254][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.826881][ T5982] IPVS: stop unused estimator thread 0... [ 706.880152][T14090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.895593][ T1245] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 707.226539][ T1245] usb 7-1: unable to get BOS descriptor or descriptor too short [ 707.379563][ T1245] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 707.379589][ T1245] usb 7-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 707.379608][ T1245] usb 7-1: config 63 has no interface number 0 [ 707.379639][ T1245] usb 7-1: config 63 interface 66 has no altsetting 0 [ 707.402709][ T1245] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 707.402738][ T1245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.402758][ T1245] usb 7-1: Product: syz [ 707.402772][ T1245] usb 7-1: Manufacturer: syz [ 707.402788][ T1245] usb 7-1: SerialNumber: syz [ 707.674469][ T1245] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 707.674559][ T1245] uvcvideo 7-1:63.66: No valid video chain found. [ 707.686374][ T1245] usb 7-1: USB disconnect, device number 14 [ 709.312189][T14090] veth0_vlan: entered promiscuous mode [ 709.364432][ T1245] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 709.407250][T14090] veth1_vlan: entered promiscuous mode [ 709.609652][T14090] veth0_macvtap: entered promiscuous mode [ 709.627430][T14090] veth1_macvtap: entered promiscuous mode [ 709.657014][T14090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.707519][ T1245] usb 7-1: Using ep0 maxpacket: 8 [ 709.803254][ T31] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 710.521603][ T1245] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 710.539740][ T1245] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 710.539772][ T1245] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 710.539793][ T1245] usb 7-1: Product: syz [ 710.539808][ T1245] usb 7-1: Manufacturer: syz [ 710.539823][ T1245] usb 7-1: SerialNumber: syz [ 710.561459][ T1245] hub 7-1:1.0: bad descriptor, ignoring hub [ 710.561494][ T1245] hub 7-1:1.0: probe with driver hub failed with error -5 [ 710.590162][T14090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.614592][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 710.618598][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 710.618636][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 710.627214][ T5946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.651122][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 710.651198][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.651219][ T31] usb 6-1: Product: syz [ 710.651233][ T31] usb 6-1: Manufacturer: syz [ 710.651247][ T31] usb 6-1: SerialNumber: syz [ 710.659461][ T74] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.670841][ T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.673824][ T74] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.694102][ T31] usb 6-1: config 0 descriptor?? [ 710.778932][ T31] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 710.778968][ T31] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 710.780946][ T1245] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 710.781017][ T1245] usb 7-1: Handspring Visor / Palm OS: port 191, is for unknown use [ 710.781037][ T1245] usb 7-1: Handspring Visor / Palm OS: port 206, is for unknown use [ 710.781056][ T1245] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 711.025165][ T1245] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 711.025630][ T1245] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 711.073516][ T1245] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 711.156093][ T1245] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 711.238672][ T9563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.238691][ T9563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.289066][ T1245] usb 7-1: USB disconnect, device number 15 [ 711.302584][ T1245] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 711.373655][ T1245] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 711.380288][ T1245] visor 7-1:1.0: device disconnected [ 711.391954][ T31] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 711.392809][ T31] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 711.629182][ T9563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.629203][ T9563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.982452][T14458] tipc: Started in network mode [ 711.982485][T14458] tipc: Node identity ac14140f, cluster identity 4711 [ 711.985920][T14458] tipc: New replicast peer: 255.255.255.255 [ 711.986832][T14458] tipc: Enabled bearer , priority 10 [ 711.987729][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 712.080113][T14459] FAULT_INJECTION: forcing a failure. [ 712.080113][T14459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.080146][T14459] CPU: 0 UID: 0 PID: 14459 Comm: syz.6.2889 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 712.080172][T14459] Tainted: [L]=SOFTLOCKUP [ 712.080179][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.080191][T14459] Call Trace: [ 712.080198][T14459] [ 712.080207][T14459] dump_stack_lvl+0xe8/0x150 [ 712.080243][T14459] should_fail_ex+0x46b/0x600 [ 712.080272][T14459] _copy_to_user+0x31/0xb0 [ 712.080300][T14459] simple_read_from_buffer+0xe1/0x170 [ 712.080328][T14459] proc_fail_nth_read+0x1be/0x230 [ 712.080355][T14459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.080381][T14459] ? rw_verify_area+0x2ac/0x4e0 [ 712.080406][T14459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 712.080430][T14459] vfs_read+0x212/0xa80 [ 712.080463][T14459] ? __pfx_vfs_read+0x10/0x10 [ 712.080490][T14459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 712.080518][T14459] ? lockdep_hardirqs_on+0x7a/0x110 [ 712.080544][T14459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 712.080569][T14459] ? mutex_lock_nested+0x152/0x1d0 [ 712.080590][T14459] ? fdget_pos+0x252/0x320 [ 712.080622][T14459] ksys_read+0x156/0x270 [ 712.080649][T14459] ? __pfx_ksys_read+0x10/0x10 [ 712.080684][T14459] do_syscall_64+0x14d/0xf80 [ 712.080711][T14459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.080731][T14459] ? clear_bhb_loop+0x40/0x90 [ 712.080754][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.080773][T14459] RIP: 0033:0x7f50d77fcfce [ 712.080792][T14459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.080808][T14459] RSP: 002b:00007f50d5a6cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.080828][T14459] RAX: ffffffffffffffda RBX: 00007f50d5a6d6c0 RCX: 00007f50d77fcfce [ 712.080842][T14459] RDX: 000000000000000f RSI: 00007f50d5a6d0a0 RDI: 0000000000000007 [ 712.080855][T14459] RBP: 00007f50d5a6d090 R08: 0000000000000000 R09: 0000000000000000 [ 712.080867][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.080879][T14459] R13: 00007f50d7ab6128 R14: 00007f50d7ab6090 R15: 00007fff4f158548 [ 712.080911][T14459] [ 712.611240][T14467] tmpfs: Unknown parameter '' [ 712.652116][T14467] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 712.670285][T14433] Set syz0 is full, maxelem 0 reached [ 712.977349][ T31] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 713.725515][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 713.772096][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 713.788765][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 713.837925][ T6012] tipc: Node number set to 2886997007 [ 713.838296][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 713.838703][ T31] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 713.908408][ T31] usb 6-1: USB disconnect, device number 68 [ 714.624243][T14484] FAULT_INJECTION: forcing a failure. [ 714.624243][T14484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.624277][T14484] CPU: 1 UID: 0 PID: 14484 Comm: syz.4.2896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.624305][T14484] Tainted: [L]=SOFTLOCKUP [ 714.624315][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.624326][T14484] Call Trace: [ 714.624334][T14484] [ 714.624342][T14484] dump_stack_lvl+0xe8/0x150 [ 714.624374][T14484] should_fail_ex+0x46b/0x600 [ 714.624402][T14484] _copy_from_user+0x2d/0xb0 [ 714.624427][T14484] ___sys_sendmsg+0x1c6/0x360 [ 714.624453][T14484] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.624505][T14484] ? __fget_files+0x2a/0x420 [ 714.624527][T14484] ? __fget_files+0x3a6/0x420 [ 714.624558][T14484] __x64_sys_sendmsg+0x1c3/0x2a0 [ 714.624580][T14484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 714.624608][T14484] ? __pfx_ksys_write+0x10/0x10 [ 714.624645][T14484] do_syscall_64+0x14d/0xf80 [ 714.624671][T14484] ? trace_irq_disable+0x3b/0x150 [ 714.624692][T14484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.624712][T14484] ? clear_bhb_loop+0x40/0x90 [ 714.624735][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.624754][T14484] RIP: 0033:0x7fc1b918c799 [ 714.624773][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.624790][T14484] RSP: 002b:00007fc1b73de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.624810][T14484] RAX: ffffffffffffffda RBX: 00007fc1b9405fa0 RCX: 00007fc1b918c799 [ 714.624824][T14484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 714.624836][T14484] RBP: 00007fc1b73de090 R08: 0000000000000000 R09: 0000000000000000 [ 714.624848][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.624859][T14484] R13: 00007fc1b9406038 R14: 00007fc1b9405fa0 R15: 00007ffe431bab28 [ 714.624890][T14484] [ 714.868749][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2898'. [ 714.885562][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2898'. [ 715.273134][T14495] FAULT_INJECTION: forcing a failure. [ 715.273134][T14495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.273169][T14495] CPU: 1 UID: 0 PID: 14495 Comm: syz.4.2900 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 715.273197][T14495] Tainted: [L]=SOFTLOCKUP [ 715.273204][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.273216][T14495] Call Trace: [ 715.273224][T14495] [ 715.273233][T14495] dump_stack_lvl+0xe8/0x150 [ 715.273265][T14495] should_fail_ex+0x46b/0x600 [ 715.273294][T14495] _copy_from_user+0x2d/0xb0 [ 715.273321][T14495] ___sys_sendmsg+0x1c6/0x360 [ 715.273347][T14495] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.273399][T14495] ? __fget_files+0x2a/0x420 [ 715.273422][T14495] ? __fget_files+0x3a6/0x420 [ 715.273454][T14495] __x64_sys_sendmsg+0x1c3/0x2a0 [ 715.273476][T14495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.273505][T14495] ? __pfx_ksys_write+0x10/0x10 [ 715.273542][T14495] do_syscall_64+0x14d/0xf80 [ 715.273567][T14495] ? trace_irq_disable+0x3b/0x150 [ 715.273589][T14495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.273608][T14495] ? clear_bhb_loop+0x40/0x90 [ 715.273631][T14495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.273650][T14495] RIP: 0033:0x7fc1b918c799 [ 715.273668][T14495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.273685][T14495] RSP: 002b:00007fc1b73de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.273706][T14495] RAX: ffffffffffffffda RBX: 00007fc1b9405fa0 RCX: 00007fc1b918c799 [ 715.273720][T14495] RDX: 00000000000480c5 RSI: 0000200000000200 RDI: 000000000000000c [ 715.273733][T14495] RBP: 00007fc1b73de090 R08: 0000000000000000 R09: 0000000000000000 [ 715.273746][T14495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.273757][T14495] R13: 00007fc1b9406038 R14: 00007fc1b9405fa0 R15: 00007ffe431bab28 [ 715.273788][T14495] [ 717.474488][ T6012] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 718.106228][ T37] audit: type=1326 audit(1773827563.409:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14515 comm="syz.6.2908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50d783c799 code=0x0 [ 718.153626][ T6012] usb 6-1: unable to get BOS descriptor or descriptor too short [ 718.315456][ T6012] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 718.315474][ T6012] usb 6-1: config 63 has an invalid descriptor of length 64, skipping remainder of the config [ 718.315485][ T6012] usb 6-1: config 63 has no interface number 0 [ 718.315503][ T6012] usb 6-1: config 63 interface 66 has no altsetting 0 [ 718.318591][ T6012] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 718.318618][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.318639][ T6012] usb 6-1: Product: syz [ 718.318653][ T6012] usb 6-1: Manufacturer: syz [ 718.318668][ T6012] usb 6-1: SerialNumber: syz [ 719.040858][ T6012] uvcvideo 6-1:63.66: probe with driver uvcvideo failed with error -22 [ 719.064751][ T6012] usb 6-1: USB disconnect, device number 69 [ 719.134626][T14532] FAULT_INJECTION: forcing a failure. [ 719.134626][T14532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.134816][T14532] CPU: 0 UID: 0 PID: 14532 Comm: syz.0.2911 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 719.134844][T14532] Tainted: [L]=SOFTLOCKUP [ 719.134851][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.134859][T14532] Call Trace: [ 719.134864][T14532] [ 719.134870][T14532] dump_stack_lvl+0xe8/0x150 [ 719.134891][T14532] should_fail_ex+0x46b/0x600 [ 719.134907][T14532] _copy_from_user+0x2d/0xb0 [ 719.134923][T14532] do_seccomp+0x1aa/0xd30 [ 719.134939][T14532] ? irqentry_exit+0x59e/0x620 [ 719.134958][T14532] ? __pfx_do_seccomp+0x10/0x10 [ 719.134982][T14532] do_syscall_64+0x14d/0xf80 [ 719.134998][T14532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.135008][T14532] ? clear_bhb_loop+0x40/0x90 [ 719.135021][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.135031][T14532] RIP: 0033:0x7f2d9887c799 [ 719.135043][T14532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.135052][T14532] RSP: 002b:00007f2d96aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 719.135064][T14532] RAX: ffffffffffffffda RBX: 00007f2d98af6090 RCX: 00007f2d9887c799 [ 719.135071][T14532] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 719.135078][T14532] RBP: 00007f2d96aad090 R08: 0000000000000000 R09: 0000000000000000 [ 719.135084][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.135091][T14532] R13: 00007f2d98af6128 R14: 00007f2d98af6090 R15: 00007ffe03dcb3c8 [ 719.135107][T14532] [ 720.271525][ T5986] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 720.656358][ T37] audit: type=1326 audit(1773827565.949:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14528 comm="syz.2.2910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77f04cc799 code=0x0 [ 721.119343][T14544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.334060][T14578] tmpfs: Unknown parameter '' [ 723.337704][T14578] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 723.546024][ T5985] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 723.694623][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 723.710806][ T5985] usb 6-1: no configurations [ 723.710825][ T5985] usb 6-1: can't read configurations, error -22 [ 723.835141][ T5985] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 723.872946][T14589] FAULT_INJECTION: forcing a failure. [ 723.872946][T14589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.872968][T14589] CPU: 0 UID: 0 PID: 14589 Comm: syz.0.2925 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 723.872983][T14589] Tainted: [L]=SOFTLOCKUP [ 723.872987][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.872994][T14589] Call Trace: [ 723.872998][T14589] [ 723.873003][T14589] dump_stack_lvl+0xe8/0x150 [ 723.873025][T14589] should_fail_ex+0x46b/0x600 [ 723.873041][T14589] _copy_from_user+0x2d/0xb0 [ 723.873057][T14589] ___sys_recvmsg+0x175/0x590 [ 723.873072][T14589] ? __pfx____sys_recvmsg+0x10/0x10 [ 723.873094][T14589] ? __fget_files+0x3a6/0x420 [ 723.873113][T14589] __x64_sys_recvmsg+0x1c0/0x2a0 [ 723.873125][T14589] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 723.873140][T14589] ? __pfx_ksys_write+0x10/0x10 [ 723.873161][T14589] do_syscall_64+0x14d/0xf80 [ 723.873176][T14589] ? trace_irq_disable+0x3b/0x150 [ 723.873189][T14589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.873199][T14589] ? clear_bhb_loop+0x40/0x90 [ 723.873212][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.873222][T14589] RIP: 0033:0x7f2d9887c799 [ 723.873233][T14589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.873257][T14589] RSP: 002b:00007f2d96ace028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 723.873269][T14589] RAX: ffffffffffffffda RBX: 00007f2d98af5fa0 RCX: 00007f2d9887c799 [ 723.873277][T14589] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 723.873284][T14589] RBP: 00007f2d96ace090 R08: 0000000000000000 R09: 0000000000000000 [ 723.873290][T14589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.873296][T14589] R13: 00007f2d98af6038 R14: 00007f2d98af5fa0 R15: 00007ffe03dcb3c8 [ 723.873318][T14589] [ 723.989145][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 724.004567][ T5985] usb 6-1: no configurations [ 724.004585][ T5985] usb 6-1: can't read configurations, error -22 [ 724.005827][ T5985] usb usb6-port1: attempt power cycle [ 724.357049][ T5985] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 724.378600][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 724.380326][ T5985] usb 6-1: no configurations [ 724.380342][ T5985] usb 6-1: can't read configurations, error -22 [ 724.504489][ T5985] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 724.655417][ T5985] usb 6-1: Using ep0 maxpacket: 32 [ 724.656328][ T5985] usb 6-1: no configurations [ 724.656344][ T5985] usb 6-1: can't read configurations, error -22 [ 724.662555][ T5985] usb usb6-port1: unable to enumerate USB device [ 724.926973][T14610] tmpfs: Unknown parameter '' [ 724.929860][T14610] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 725.082687][T14614] lo speed is unknown, defaulting to 1000 [ 726.474641][ T5985] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 726.626224][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 726.646454][ T5985] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 726.646482][ T5985] usb 3-1: config 0 has no interface number 0 [ 726.646525][ T5985] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.646549][ T5985] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 726.646574][ T5985] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 726.646609][ T5985] usb 3-1: config 0 interface 196 has no altsetting 0 [ 726.653866][ T5985] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 726.653895][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.653917][ T5985] usb 3-1: Product: syz [ 726.653931][ T5985] usb 3-1: Manufacturer: syz [ 726.653945][ T5985] usb 3-1: SerialNumber: syz [ 726.673099][ T5985] usb 3-1: config 0 descriptor?? [ 726.894458][T11612] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 726.902140][ T5985] ipheth 3-1:0.196: Unable to find endpoints [ 726.921961][ T5985] usb 3-1: USB disconnect, device number 90 [ 727.046590][T11612] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 727.046619][T11612] usb 5-1: config 0 has no interface number 0 [ 727.046662][T11612] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 727.049385][T11612] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 727.049413][T11612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.049432][T11612] usb 5-1: Product: syz [ 727.049447][T11612] usb 5-1: Manufacturer: syz [ 727.049461][T11612] usb 5-1: SerialNumber: syz [ 727.113582][T11612] usb 5-1: config 0 descriptor?? [ 727.176542][T11612] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 727.235600][T14633] binder: BINDER_SET_CONTEXT_MGR already set [ 727.235614][T14633] binder: 14632:14633 ioctl 4018620d 200000000040 returned -16 [ 727.242205][T14633] FAULT_INJECTION: forcing a failure. [ 727.242205][T14633] name failslab, interval 1, probability 0, space 0, times 0 [ 727.242232][T14633] CPU: 0 UID: 0 PID: 14633 Comm: syz.5.2939 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 727.242256][T14633] Tainted: [L]=SOFTLOCKUP [ 727.242263][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.242275][T14633] Call Trace: [ 727.242282][T14633] [ 727.242291][T14633] dump_stack_lvl+0xe8/0x150 [ 727.242325][T14633] should_fail_ex+0x46b/0x600 [ 727.242353][T14633] should_failslab+0xa8/0x100 [ 727.242368][T14633] __kmalloc_noprof+0xdf/0x7b0 [ 727.242383][T14633] ? kfree+0x4d/0x6c0 [ 727.242397][T14633] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 727.242428][T14633] tomoyo_realpath_from_path+0xe3/0x5d0 [ 727.242460][T14633] ? tomoyo_path_number_perm+0x219/0x630 [ 727.242489][T14633] tomoyo_path_number_perm+0x246/0x630 [ 727.242518][T14633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 727.242539][T14633] ? __lock_acquire+0x6b5/0x2cf0 [ 727.242566][T14633] ? __fget_files+0x2a/0x420 [ 727.242586][T14633] ? __fget_files+0x2a/0x420 [ 727.242607][T14633] ? __fget_files+0x3a6/0x420 [ 727.242628][T14633] ? __fget_files+0x2a/0x420 [ 727.242655][T14633] security_file_ioctl+0xc3/0x2a0 [ 727.242686][T14633] __se_sys_ioctl+0x47/0x170 [ 727.242707][T14633] do_syscall_64+0x14d/0xf80 [ 727.242722][T14633] ? trace_irq_disable+0x3b/0x150 [ 727.242735][T14633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.242751][T14633] ? clear_bhb_loop+0x40/0x90 [ 727.242774][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.242793][T14633] RIP: 0033:0x7f331a1bc799 [ 727.242812][T14633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.242828][T14633] RSP: 002b:00007f331840e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.242848][T14633] RAX: ffffffffffffffda RBX: 00007f331a435fa0 RCX: 00007f331a1bc799 [ 727.242860][T14633] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 727.242866][T14633] RBP: 00007f331840e090 R08: 0000000000000000 R09: 0000000000000000 [ 727.242873][T14633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.242879][T14633] R13: 00007f331a436038 R14: 00007f331a435fa0 R15: 00007ffe20c13528 [ 727.242895][T14633] [ 727.242900][T14633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.433958][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.434696][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.521843][ T5985] usb 5-1: USB disconnect, device number 89 [ 727.529219][ T5985] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 727.744877][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 728.041140][ T5985] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 728.556411][ T5985] usb 1-1: Using ep0 maxpacket: 32 [ 728.626604][ T5985] usb 1-1: no configurations [ 728.626618][ T5985] usb 1-1: can't read configurations, error -22 [ 728.628260][ T10] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 728.628285][ T10] usb 7-1: config 0 has no interface number 0 [ 728.628329][ T10] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 728.675249][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 728.675274][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.675285][ T10] usb 7-1: Product: syz [ 728.675293][ T10] usb 7-1: Manufacturer: syz [ 728.675300][ T10] usb 7-1: SerialNumber: syz [ 728.716018][ T10] usb 7-1: config 0 descriptor?? [ 728.745433][ T10] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 728.804522][ T5985] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 728.930979][T14649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.969922][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.972624][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.024684][ T5985] usb 1-1: Using ep0 maxpacket: 32 [ 729.206277][ T5985] usb 1-1: no configurations [ 729.206296][ T5985] usb 1-1: can't read configurations, error -22 [ 729.207317][ T5985] usb usb1-port1: attempt power cycle [ 729.241421][T11612] usb 7-1: USB disconnect, device number 16 [ 729.452888][T14657] tmpfs: Unknown parameter '' [ 729.475540][T14657] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 729.595178][T14658] 9p: Bad value for 'wfdno' [ 730.149816][T11612] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 730.394875][ T5985] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 730.528156][ T5985] usb 1-1: Using ep0 maxpacket: 32 [ 730.618673][ T5985] usb 1-1: no configurations [ 730.618737][ T5985] usb 1-1: can't read configurations, error -22 [ 730.788839][ T5985] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 730.822935][T12091] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 730.822990][T12091] CPU: 0 UID: 0 PID: 12091 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 730.823022][T12091] Tainted: [L]=SOFTLOCKUP [ 730.823031][T12091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.823046][T12091] Workqueue: hci5 hci_rx_work [ 730.823205][T12091] Call Trace: [ 730.823215][T12091] [ 730.823226][T12091] dump_stack_lvl+0xe8/0x150 [ 730.823262][T12091] sysfs_create_dir_ns+0x271/0x2a0 [ 730.823329][T12091] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 730.823358][T12091] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 730.823387][T12091] ? rt_spin_unlock+0x160/0x200 [ 730.823415][T12091] kobject_add_internal+0x631/0xd10 [ 730.823448][T12091] kobject_add+0x163/0x240 [ 730.823476][T12091] ? __pfx_kobject_add+0x10/0x10 [ 730.823506][T12091] ? get_device_parent+0x370/0x3a0 [ 730.823579][T12091] device_add+0x408/0xb80 [ 730.823607][T12091] hci_conn_add_sysfs+0xd5/0x210 [ 730.823671][T12091] le_conn_complete_evt+0xf1d/0x1430 [ 730.823729][T12091] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 730.823751][T12091] ? lockdep_hardirqs_on+0x7a/0x110 [ 730.823782][T12091] ? irqentry_exit+0x59e/0x620 [ 730.823810][T12091] ? rcu_is_watching+0x15/0xb0 [ 730.823838][T12091] ? skb_pull_data+0xfb/0x200 [ 730.823900][T12091] hci_le_enh_conn_complete_evt+0x189/0x490 [ 730.823925][T12091] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 730.823954][T12091] hci_event_packet+0x7af/0x12c0 [ 730.824013][T12091] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 730.824048][T12091] ? __pfx_hci_event_packet+0x10/0x10 [ 730.824089][T12091] ? preempt_schedule_common+0x82/0xd0 [ 730.824120][T12091] ? preempt_schedule_thunk+0x16/0x30 [ 730.824152][T12091] ? hci_send_to_monitor+0xe2/0x590 [ 730.824180][T12091] hci_rx_work+0x3ee/0x1030 [ 730.824211][T12091] ? preempt_schedule_thunk+0x16/0x30 [ 730.824239][T12091] ? process_scheduled_works+0xa8d/0x18c0 [ 730.824271][T12091] process_scheduled_works+0xb6e/0x18c0 [ 730.824329][T12091] ? __pfx_process_scheduled_works+0x10/0x10 [ 730.824365][T12091] ? assign_work+0x3d5/0x5e0 [ 730.824399][T12091] worker_thread+0xa53/0xfc0 [ 730.824456][T12091] kthread+0x388/0x470 [ 730.824479][T12091] ? __pfx_worker_thread+0x10/0x10 [ 730.824506][T12091] ? __pfx_kthread+0x10/0x10 [ 730.824530][T12091] ret_from_fork+0x51e/0xb90 [ 730.824563][T12091] ? __pfx_ret_from_fork+0x10/0x10 [ 730.824590][T12091] ? __switch_to+0xc7d/0x1450 [ 730.824621][T12091] ? __pfx_kthread+0x10/0x10 [ 730.824644][T12091] ret_from_fork_asm+0x1a/0x30 [ 730.824682][T12091] [ 730.825473][T12091] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 730.825605][T12091] Bluetooth: hci5: failed to register connection device [ 731.231269][ T5985] usb 1-1: device descriptor read/8, error -71 [ 731.336216][ T5985] usb usb1-port1: unable to enumerate USB device [ 731.468539][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.559713][T14681] program syz.4.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.624478][ T5985] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 731.725821][T11612] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 731.898180][T11612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 731.899723][T11612] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 731.899749][T11612] usb 7-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 731.899770][T11612] usb 7-1: config 63 has no interface number 0 [ 731.899801][T11612] usb 7-1: config 63 interface 66 has no altsetting 0 [ 731.903006][T11612] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 731.903033][T11612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.903054][T11612] usb 7-1: Product: syz [ 731.903069][T11612] usb 7-1: Manufacturer: syz [ 731.903084][T11612] usb 7-1: SerialNumber: syz [ 732.845566][ T5985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.845620][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 732.845648][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.845671][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 732.845712][ T5985] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 732.845737][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.985644][ T5985] usb 1-1: config 0 descriptor?? [ 733.164424][ T6025] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 733.184819][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 733.203533][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 733.316552][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 733.316582][ T6025] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 733.316607][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 733.316630][ T6025] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 733.316716][ T6025] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 733.316740][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.395786][ T6025] usb 3-1: config 0 descriptor?? [ 733.518338][ T5985] usbhid 1-1:0.0: can't add hid device: -71 [ 733.518572][ T5985] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 733.523720][ T5985] usb 1-1: USB disconnect, device number 78 [ 733.788798][T11612] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 733.791885][T11612] uvcvideo 7-1:63.66: No valid video chain found. [ 733.980980][T14699] tmpfs: Unknown parameter '' [ 733.997696][T14699] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 734.584766][T11612] usb 7-1: USB disconnect, device number 17 [ 734.798829][ T6025] hdpvr 3-1:0.0: unexpected answer of status request, len -71 [ 734.798851][ T6025] hdpvr 3-1:0.0: device init failed [ 734.798939][ T6025] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 734.851308][ T6025] usb 3-1: USB disconnect, device number 91 [ 734.866746][ T5985] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 735.012266][T14706] FAULT_INJECTION: forcing a failure. [ 735.012266][T14706] name failslab, interval 1, probability 0, space 0, times 0 [ 735.012301][T14706] CPU: 1 UID: 0 PID: 14706 Comm: syz.0.2962 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 735.012327][T14706] Tainted: [L]=SOFTLOCKUP [ 735.012334][T14706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.012346][T14706] Call Trace: [ 735.012354][T14706] [ 735.012363][T14706] dump_stack_lvl+0xe8/0x150 [ 735.012396][T14706] should_fail_ex+0x46b/0x600 [ 735.012425][T14706] should_failslab+0xa8/0x100 [ 735.012447][T14706] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 735.012473][T14706] ? __alloc_skb+0x1d0/0x7d0 [ 735.012497][T14706] ? lockdep_hardirqs_on+0x7a/0x110 [ 735.012528][T14706] __alloc_skb+0x1d0/0x7d0 [ 735.012557][T14706] alloc_skb_with_frags+0xca/0x890 [ 735.012598][T14706] sock_alloc_send_pskb+0x884/0x9a0 [ 735.012617][T14706] ? __lock_acquire+0x6b5/0x2cf0 [ 735.012653][T14706] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 735.012673][T14706] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 735.012781][T14706] ? __lock_acquire+0x6b5/0x2cf0 [ 735.012812][T14706] hci_sock_sendmsg+0x208/0xf40 [ 735.012841][T14706] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 735.012867][T14706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.012895][T14706] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 735.012915][T14706] sock_write_iter+0x4a1/0x4f0 [ 735.012939][T14706] ? __pfx_sock_write_iter+0x10/0x10 [ 735.012981][T14706] vfs_write+0x629/0xba0 [ 735.013015][T14706] ? __pfx_vfs_write+0x10/0x10 [ 735.013050][T14706] ? __fget_files+0x2a/0x420 [ 735.013082][T14706] ksys_write+0x156/0x270 [ 735.013110][T14706] ? __pfx_ksys_write+0x10/0x10 [ 735.013146][T14706] do_syscall_64+0x14d/0xf80 [ 735.013172][T14706] ? trace_irq_disable+0x3b/0x150 [ 735.013192][T14706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.013216][T14706] ? clear_bhb_loop+0x40/0x90 [ 735.013240][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.013259][T14706] RIP: 0033:0x7f2d9887c799 [ 735.013279][T14706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.013295][T14706] RSP: 002b:00007f2d96ace028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 735.013316][T14706] RAX: ffffffffffffffda RBX: 00007f2d98af5fa0 RCX: 00007f2d9887c799 [ 735.013330][T14706] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000006 [ 735.013343][T14706] RBP: 00007f2d96ace090 R08: 0000000000000000 R09: 0000000000000000 [ 735.013356][T14706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.013368][T14706] R13: 00007f2d98af6038 R14: 00007f2d98af5fa0 R15: 00007ffe03dcb3c8 [ 735.013398][T14706] [ 735.265043][ T5801] Bluetooth: hci5: command 0x0406 tx timeout [ 735.314420][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 735.477121][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 735.560309][ T10] usb 7-1: no configurations [ 735.560328][ T10] usb 7-1: can't read configurations, error -22 [ 737.120265][T14727] lo speed is unknown, defaulting to 1000 [ 737.900349][T14732] tmpfs: Unknown parameter '' [ 737.919239][T14732] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 738.953262][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 741.674824][ T1245] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 741.975866][ T1245] usb 6-1: Using ep0 maxpacket: 32 [ 741.980240][ T1245] usb 6-1: config 6 has an invalid interface number: 82 but max is 0 [ 741.980266][ T1245] usb 6-1: config 6 has no interface number 0 [ 741.980297][ T1245] usb 6-1: config 6 interface 82 has no altsetting 0 [ 741.982882][ T1245] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01a2, bcdDevice=97.34 [ 741.982908][ T1245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.982928][ T1245] usb 6-1: Product: syz [ 741.982943][ T1245] usb 6-1: Manufacturer: syz [ 741.982958][ T1245] usb 6-1: SerialNumber: syz [ 742.024437][ T6025] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 742.250138][ T6025] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 742.250219][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.250240][ T6025] usb 3-1: Product: syz [ 742.250254][ T6025] usb 3-1: Manufacturer: syz [ 742.250269][ T6025] usb 3-1: SerialNumber: syz [ 742.365084][T14761] FAULT_INJECTION: forcing a failure. [ 742.365084][T14761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.365148][T14761] CPU: 1 UID: 0 PID: 14761 Comm: syz.0.2980 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 742.365176][T14761] Tainted: [L]=SOFTLOCKUP [ 742.365183][T14761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.365194][T14761] Call Trace: [ 742.365203][T14761] [ 742.365211][T14761] dump_stack_lvl+0xe8/0x150 [ 742.365244][T14761] should_fail_ex+0x46b/0x600 [ 742.365273][T14761] _copy_to_user+0x31/0xb0 [ 742.365302][T14761] simple_read_from_buffer+0xe1/0x170 [ 742.365331][T14761] proc_fail_nth_read+0x1be/0x230 [ 742.365357][T14761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.365383][T14761] ? rw_verify_area+0x2ac/0x4e0 [ 742.365409][T14761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.365433][T14761] vfs_read+0x212/0xa80 [ 742.365461][T14761] ? preempt_schedule_thunk+0x16/0x30 [ 742.365486][T14761] ? __pfx_vfs_read+0x10/0x10 [ 742.365510][T14761] ? preempt_schedule_thunk+0x16/0x30 [ 742.365537][T14761] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 742.365566][T14761] ? mutex_lock_nested+0x152/0x1d0 [ 742.365587][T14761] ? fdget_pos+0x252/0x320 [ 742.365618][T14761] ksys_read+0x156/0x270 [ 742.365647][T14761] ? __pfx_ksys_read+0x10/0x10 [ 742.365684][T14761] do_syscall_64+0x14d/0xf80 [ 742.365711][T14761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.365731][T14761] ? clear_bhb_loop+0x40/0x90 [ 742.365755][T14761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.365774][T14761] RIP: 0033:0x7f2d9883cfce [ 742.365793][T14761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 742.365809][T14761] RSP: 002b:00007f2d96a8bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 742.365831][T14761] RAX: ffffffffffffffda RBX: 00007f2d96a8c6c0 RCX: 00007f2d9883cfce [ 742.365845][T14761] RDX: 000000000000000f RSI: 00007f2d96a8c0a0 RDI: 0000000000000006 [ 742.365858][T14761] RBP: 00007f2d96a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 742.365870][T14761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.365883][T14761] R13: 00007f2d98af6218 R14: 00007f2d98af6180 R15: 00007ffe03dcb3c8 [ 742.365914][T14761] [ 742.842942][ T6025] usb 3-1: config 0 descriptor?? [ 742.851505][ T1245] ftdi_sio 6-1:6.82: FTDI USB Serial Device converter detected [ 742.853291][ T1245] ftdi_sio ttyUSB0: unknown device type: 0x9734 [ 742.868873][ T6025] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 742.879432][ T1245] usb 6-1: USB disconnect, device number 74 [ 742.933668][ T1245] ftdi_sio 6-1:6.82: device disconnected [ 743.530800][T14738] lo speed is unknown, defaulting to 1000 [ 744.285685][T14782] netlink: zone id is out of range [ 744.285701][T14782] netlink: zone id is out of range [ 744.285709][T14782] netlink: zone id is out of range [ 744.285737][T14782] netlink: zone id is out of range [ 744.285745][T14782] netlink: zone id is out of range [ 744.364429][ T1245] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 744.381055][T14782] netlink: set zone limit has 4 unknown bytes [ 744.516074][T14784] tmpfs: Unknown parameter '' [ 744.517961][T14784] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 744.541042][ T1245] usb 7-1: Using ep0 maxpacket: 32 [ 744.543414][ T1245] usb 7-1: no configurations [ 744.543431][ T1245] usb 7-1: can't read configurations, error -22 [ 744.754446][ T1245] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 744.907095][ T1245] usb 7-1: Using ep0 maxpacket: 32 [ 744.907926][ T1245] usb 7-1: no configurations [ 744.907942][ T1245] usb 7-1: can't read configurations, error -22 [ 744.908362][ T1245] usb usb7-port1: attempt power cycle [ 745.022489][T11612] usb 3-1: USB disconnect, device number 92 [ 745.264596][ T1245] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 745.616423][ T1245] usb 7-1: Using ep0 maxpacket: 32 [ 746.028251][ T1245] usb 7-1: no configurations [ 746.028270][ T1245] usb 7-1: can't read configurations, error -22 [ 746.154440][ T1245] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 746.175457][ T1245] usb 7-1: Using ep0 maxpacket: 32 [ 746.176322][ T1245] usb 7-1: no configurations [ 746.176339][ T1245] usb 7-1: can't read configurations, error -22 [ 746.177080][ T1245] usb usb7-port1: unable to enumerate USB device [ 746.552013][T14810] lo speed is unknown, defaulting to 1000 [ 746.744426][ T810] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 746.908323][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 746.911431][ T810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 746.913987][ T810] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 746.921904][ T810] usb 1-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice= 0.40 [ 746.921931][ T810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.921952][ T810] usb 1-1: Product: 숕쀤폒앆노ȧ [ 746.921967][ T810] usb 1-1: Manufacturer: 쫷㕇À붟撡夁啶ᴧ秎꺀决鋉㯪ゲ孏㞘ⅾ聠诼톟ٽ䖃䤕혱Ⱖ䮍栌爻ᕀඐ㉼ḯ타땖簇֙䑅ત秵鶧灗䣌쏔溒Ⲣꑏᔓ遹䤱♌8灢鯶뜨䏈䘇훻쌰瓫ꚰ䱿뺗ﭯ䵝啀냞㍐穳锹蟤믾䘤됖靀풼ᨐ䅭⣞殧ワ觡믲锸 [ 746.921997][ T810] usb 1-1: SerialNumber: 《 [ 747.069635][T14808] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 747.112845][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.286973][ T810] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 750.532163][ T810] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 750.548075][ T810] usb 1-1: USB disconnect, device number 80 [ 750.621274][T14834] tmpfs: Unknown parameter '' [ 750.632603][T14834] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 750.727293][T14697] udevd[14697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.258871][T14865] FAULT_INJECTION: forcing a failure. [ 751.258871][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 751.258906][T14865] CPU: 0 UID: 0 PID: 14865 Comm: syz.5.3009 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 751.258933][T14865] Tainted: [L]=SOFTLOCKUP [ 751.258940][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 751.258952][T14865] Call Trace: [ 751.258961][T14865] [ 751.258969][T14865] dump_stack_lvl+0xe8/0x150 [ 751.259003][T14865] should_fail_ex+0x46b/0x600 [ 751.259034][T14865] should_failslab+0xa8/0x100 [ 751.259056][T14865] __kmalloc_noprof+0xdf/0x7b0 [ 751.259082][T14865] ? kfree+0x4d/0x6c0 [ 751.259105][T14865] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 751.259133][T14865] tomoyo_realpath_from_path+0xe3/0x5d0 [ 751.259165][T14865] ? tomoyo_path_number_perm+0x219/0x630 [ 751.259193][T14865] tomoyo_path_number_perm+0x246/0x630 [ 751.259223][T14865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 751.259253][T14865] ? __lock_acquire+0x6b5/0x2cf0 [ 751.259307][T14865] ? __fget_files+0x2a/0x420 [ 751.259333][T14865] ? __fget_files+0x2a/0x420 [ 751.259354][T14865] ? __fget_files+0x3a6/0x420 [ 751.259376][T14865] ? __fget_files+0x2a/0x420 [ 751.259402][T14865] security_file_ioctl+0xc3/0x2a0 [ 751.259434][T14865] __se_sys_ioctl+0x47/0x170 [ 751.259464][T14865] do_syscall_64+0x14d/0xf80 [ 751.259491][T14865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.259511][T14865] ? clear_bhb_loop+0x40/0x90 [ 751.259535][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.259554][T14865] RIP: 0033:0x7f331a1bc799 [ 751.259574][T14865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.259590][T14865] RSP: 002b:00007f33183cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.259611][T14865] RAX: ffffffffffffffda RBX: 00007f331a436180 RCX: 00007f331a1bc799 [ 751.259626][T14865] RDX: 0000200000000300 RSI: 000000000000890c RDI: 000000000000000a [ 751.259639][T14865] RBP: 00007f33183cc090 R08: 0000000000000000 R09: 0000000000000000 [ 751.259651][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.259663][T14865] R13: 00007f331a436218 R14: 00007f331a436180 R15: 00007ffe20c13528 [ 751.259710][T14865] [ 751.259719][T14865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 751.477926][ T1245] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 751.984437][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 751.991350][ T1245] usb 5-1: no configurations [ 751.991368][ T1245] usb 5-1: can't read configurations, error -22 [ 752.125372][ T1245] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 752.284419][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 752.291181][ T1245] usb 5-1: no configurations [ 752.291199][ T1245] usb 5-1: can't read configurations, error -22 [ 752.291530][ T1245] usb usb5-port1: attempt power cycle [ 752.624421][ T1245] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 752.645139][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 752.645934][ T1245] usb 5-1: no configurations [ 752.645952][ T1245] usb 5-1: can't read configurations, error -22 [ 753.618507][ T1245] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 753.635390][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 753.639624][ T1245] usb 5-1: no configurations [ 753.639641][ T1245] usb 5-1: can't read configurations, error -22 [ 753.639950][ T1245] usb usb5-port1: unable to enumerate USB device [ 753.876256][T14919] netlink: 'syz.0.3022': attribute type 1 has an invalid length. [ 753.876272][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 756.344218][T14959] tmpfs: Unknown parameter '' [ 756.346359][T14959] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 756.896058][T14968] netlink: 'syz.6.3036': attribute type 4 has an invalid length. [ 757.096770][T14973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.104494][ T810] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 757.255422][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 757.258373][ T810] usb 1-1: no configurations [ 757.258389][ T810] usb 1-1: can't read configurations, error -22 [ 757.384508][ T810] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 757.534579][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 757.535461][ T810] usb 1-1: no configurations [ 757.535479][ T810] usb 1-1: can't read configurations, error -22 [ 757.535986][ T810] usb usb1-port1: attempt power cycle [ 757.874704][ T810] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 757.913871][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 757.921554][ T810] usb 1-1: no configurations [ 757.921572][ T810] usb 1-1: can't read configurations, error -22 [ 758.044516][ T810] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 758.065309][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 758.066119][ T810] usb 1-1: no configurations [ 758.066135][ T810] usb 1-1: can't read configurations, error -22 [ 758.066796][ T810] usb usb1-port1: unable to enumerate USB device [ 760.946845][T15003] CIFS: iocharset name too long [ 761.681720][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.006114][T15021] tmpfs: Unknown parameter '' [ 762.007965][T15021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 762.215633][ T1245] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 762.554387][ T1245] usb 5-1: Using ep0 maxpacket: 32 [ 762.557602][ T1245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 762.563691][ T1245] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 762.563719][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.563740][ T1245] usb 5-1: Product: syz [ 762.563755][ T1245] usb 5-1: Manufacturer: syz [ 762.563770][ T1245] usb 5-1: SerialNumber: syz [ 762.859287][ T1245] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 762.864176][ T1245] usb 5-1: unit 37 not found! [ 762.864197][ T1245] usb 5-1: unit 0 not found! [ 763.834403][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 763.984442][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 764.135210][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 764.136739][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 764.137876][ T1245] usb 5-1: USB disconnect, device number 94 [ 764.139043][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice= 0.40 [ 764.139068][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.139087][ T10] usb 1-1: Product: 숕쀤폒앆노ȧ [ 764.139102][ T10] usb 1-1: Manufacturer: 쫷㕇À붟撡夁啶ᴧ秎꺀决鋉㯪ゲ孏㞘ⅾ聠诼톟ٽ䖃䤕혱Ⱖ䮍栌爻ᕀඐ㉼ḯ타땖簇֙䑅ત秵鶧灗䣌쏔溒Ⲣꑏᔓ遹䤱♌8灢鯶뜨䏈䘇훻쌰瓫ꚰ䱿뺗ﭯ䵝啀냞㍐穳锹蟤믾䘤됖靀풼ᨐ䅭⣞殧ワ觡믲锸 [ 764.139131][ T10] usb 1-1: SerialNumber: 《 [ 764.722771][T15048] trusted_key: encrypted_key: insufficient parameters specified [ 765.311682][T12091] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 765.311753][T12091] Bluetooth: hci0: command 0x0406 tx timeout [ 765.596384][T15028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.279225][ T5985] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 766.774626][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 766.855168][ T5985] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 766.855187][ T5985] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 766.855198][ T5985] usb 7-1: Product: syz [ 766.855206][ T5985] usb 7-1: SerialNumber: syz [ 766.978012][ T5985] usb 7-1: config 0 descriptor?? [ 767.014165][ T5985] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 767.037277][ T5985] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 767.038404][ T5985] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 767.038575][ T5985] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 767.206771][ T31] usb 7-1: USB disconnect, device number 24 [ 767.394490][ T1245] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 767.544460][ T1245] usb 5-1: Using ep0 maxpacket: 16 [ 767.552902][ T1245] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 767.552933][ T1245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 767.570639][ T1245] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 767.570666][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.570686][ T1245] usb 5-1: Product: syz [ 767.570700][ T1245] usb 5-1: Manufacturer: syz [ 767.570714][ T1245] usb 5-1: SerialNumber: syz [ 767.603902][ T1245] usb 5-1: config 0 descriptor?? [ 767.609436][ T1245] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 767.609467][ T1245] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 768.090788][T15071] tmpfs: Unknown parameter '' [ 768.104437][T15071] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 768.696954][ T1245] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 768.803393][ T1245] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 768.804495][ T1245] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 768.804515][ T1245] em28xx 5-1:0.0: No AC97 audio processor [ 769.047799][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 769.150715][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 769.165091][ T10] usb 1-1: USB disconnect, device number 85 [ 769.246446][T15007] udevd[15007]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 772.037075][ T6025] usb 5-1: USB disconnect, device number 95 [ 772.039342][ T6025] em28xx 5-1:0.0: Disconnecting em28xx [ 772.071358][ T6025] em28xx 5-1:0.0: Freeing device [ 772.154777][T15117] tmpfs: Unknown parameter '' [ 772.170075][T15117] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 772.945093][T15136] FAULT_INJECTION: forcing a failure. [ 772.945093][T15136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 772.945129][T15136] CPU: 0 UID: 0 PID: 15136 Comm: syz.6.3083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 772.945156][T15136] Tainted: [L]=SOFTLOCKUP [ 772.945162][T15136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.945174][T15136] Call Trace: [ 772.945181][T15136] [ 772.945189][T15136] dump_stack_lvl+0xe8/0x150 [ 772.945222][T15136] should_fail_ex+0x46b/0x600 [ 772.945252][T15136] prepare_alloc_pages+0x22a/0x6b0 [ 772.945281][T15136] __alloc_frozen_pages_noprof+0x12f/0x380 [ 772.945305][T15136] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.945329][T15136] ? __pfx_policy_nodemask+0x10/0x10 [ 772.945430][T15136] ? __lock_acquire+0x6b5/0x2cf0 [ 772.945452][T15136] ? __lock_acquire+0x6b5/0x2cf0 [ 772.945472][T15136] alloc_pages_mpol+0xd1/0x380 [ 772.945495][T15136] vma_alloc_folio_noprof+0xea/0x290 [ 772.945517][T15136] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 772.945549][T15136] do_pte_missing+0x7f9/0x29e0 [ 772.945586][T15136] handle_mm_fault+0xd0a/0x13c0 [ 772.945617][T15136] ? handle_mm_fault+0xe7/0x13c0 [ 772.945643][T15136] ? __pfx_handle_mm_fault+0x10/0x10 [ 772.945666][T15136] ? lock_vma_under_rcu+0x45a/0x500 [ 772.945710][T15136] do_user_addr_fault+0xa73/0x1340 [ 772.945745][T15136] ? rcu_is_watching+0x15/0xb0 [ 772.945767][T15136] ? trace_page_fault_user+0x84/0x210 [ 772.945795][T15136] exc_page_fault+0x6a/0xc0 [ 772.945822][T15136] asm_exc_page_fault+0x26/0x30 [ 772.945840][T15136] RIP: 0033:0x7f50d77041c6 [ 772.945858][T15136] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d a6 f5 1c 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 fc cf fe ff 4d 85 ed 0f 84 2b 0a 00 [ 772.945873][T15136] RSP: 002b:00007f50d5a8bf60 EFLAGS: 00010206 [ 772.945890][T15136] RAX: 0000000000000000 RBX: 00007f50d7ab5fa0 RCX: 0000000000000000 [ 772.945903][T15136] RDX: 0000200000000500 RSI: 0000200000000500 RDI: 00007f50d78d3756 [ 772.945916][T15136] RBP: 00007f50d5a8e090 R08: 00007f50d76f1560 R09: 0000000000000000 [ 772.945928][T15136] R10: 0000000000000000 R11: 0000200000000500 R12: 0000000000000024 [ 772.945940][T15136] R13: 0000200000000500 R14: 0000000000000000 R15: 00007fff4f158548 [ 772.945992][T15136] [ 772.950339][T15136] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 773.214404][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 773.368618][ T10] usb 7-1: config 9 has an invalid interface number: 182 but max is 0 [ 773.368698][ T10] usb 7-1: config 9 has no interface number 0 [ 773.373218][ T10] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 773.373234][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.373245][ T10] usb 7-1: Product: syz [ 773.373252][ T10] usb 7-1: Manufacturer: syz [ 773.373260][ T10] usb 7-1: SerialNumber: syz [ 773.454484][ T5985] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 773.584851][ T5985] usb 3-1: device descriptor read/64, error -71 [ 773.985087][ T5985] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 774.134624][ T5985] usb 3-1: device descriptor read/64, error -71 [ 774.245035][ T5985] usb usb3-port1: attempt power cycle [ 774.296514][ T10] go7007 7-1:9.182: probe with driver go7007 failed with error -12 [ 774.302917][ T10] usb 7-1: USB disconnect, device number 25 [ 774.664429][ T5985] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 774.815716][ T5985] usb 3-1: device descriptor read/8, error -71 [ 775.250011][ T5985] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 775.289667][ T5985] usb 3-1: device descriptor read/8, error -71 [ 775.399177][ T5985] usb usb3-port1: unable to enumerate USB device [ 775.796891][T15169] tmpfs: Unknown parameter '' [ 775.801201][T15169] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 776.202206][T15173] bridge0: entered promiscuous mode [ 776.323820][T15176] sctp: [Deprecated]: syz.6.3093 (pid 15176) Use of int in max_burst socket option deprecated. [ 776.323820][T15176] Use struct sctp_assoc_value instead [ 776.342249][T15176] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3093'. [ 776.576185][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 776.724317][T15181] FAULT_INJECTION: forcing a failure. [ 776.724317][T15181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.724375][T15181] CPU: 1 UID: 0 PID: 15181 Comm: syz.2.3092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 776.724402][T15181] Tainted: [L]=SOFTLOCKUP [ 776.724409][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 776.724421][T15181] Call Trace: [ 776.724429][T15181] [ 776.724438][T15181] dump_stack_lvl+0xe8/0x150 [ 776.724471][T15181] should_fail_ex+0x46b/0x600 [ 776.724501][T15181] _copy_from_user+0x2d/0xb0 [ 776.724528][T15181] ___sys_sendmsg+0x1c6/0x360 [ 776.724554][T15181] ? __pfx____sys_sendmsg+0x10/0x10 [ 776.724578][T15181] ? __schedule+0x1569/0x5240 [ 776.724631][T15181] ? __fget_files+0x2a/0x420 [ 776.724654][T15181] ? __fget_files+0x3a6/0x420 [ 776.724686][T15181] __x64_sys_sendmsg+0x1c3/0x2a0 [ 776.724704][T15181] ? irqentry_exit+0x59e/0x620 [ 776.724733][T15181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 776.724750][T15181] ? rcu_is_watching+0x15/0xb0 [ 776.724794][T15181] do_syscall_64+0x14d/0xf80 [ 776.724819][T15181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.724838][T15181] ? clear_bhb_loop+0x40/0x90 [ 776.724862][T15181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.724880][T15181] RIP: 0033:0x7f77f04cc799 [ 776.724899][T15181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.724915][T15181] RSP: 002b:00007f77ee6e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 776.724936][T15181] RAX: ffffffffffffffda RBX: 00007f77f0746180 RCX: 00007f77f04cc799 [ 776.724951][T15181] RDX: 0000000008040091 RSI: 00002000000000c0 RDI: 0000000000000008 [ 776.724964][T15181] RBP: 00007f77ee6e4090 R08: 0000000000000000 R09: 0000000000000000 [ 776.724976][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.724988][T15181] R13: 00007f77f0746218 R14: 00007f77f0746180 R15: 00007ffe48b15d38 [ 776.725019][T15181] [ 777.254444][ T9] usb 7-1: device descriptor read/64, error -71 [ 777.498385][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 777.624530][ T9] usb 7-1: device descriptor read/64, error -71 [ 779.484465][ T9] usb usb7-port1: attempt power cycle [ 779.523067][T15193] tmpfs: Unknown parameter '' [ 779.531056][T15193] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 779.834440][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 779.855247][ T9] usb 7-1: device descriptor read/8, error -71 [ 780.204515][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 780.225336][ T9] usb 7-1: device descriptor read/8, error -71 [ 780.334925][ T9] usb usb7-port1: unable to enumerate USB device [ 780.564437][ T6025] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 780.654550][ T1245] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 780.674548][ T31] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 780.714657][ T6025] usb 6-1: Using ep0 maxpacket: 32 [ 780.716750][ T6025] usb 6-1: config 164 has an invalid descriptor of length 189, skipping remainder of the config [ 780.716776][ T6025] usb 6-1: config 164 has 0 interfaces, different from the descriptor's value: 1 [ 780.719049][ T6025] usb 6-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=98.d1 [ 780.719075][ T6025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.719095][ T6025] usb 6-1: Product: syz [ 780.719103][ T6025] usb 6-1: Manufacturer: syz [ 780.719111][ T6025] usb 6-1: SerialNumber: syz [ 780.731915][T15224] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3106'. [ 780.744835][ T6025] r8152-cfgselector 6-1: Unknown version 0x0000 [ 780.804464][ T1245] usb 1-1: Using ep0 maxpacket: 8 [ 780.820109][ T1245] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 780.820171][ T1245] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.820245][ T1245] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.820270][ T1245] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.820295][ T1245] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.820338][ T1245] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.820407][ T1245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.834485][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 780.841980][ T31] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 780.849874][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.850415][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.850442][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.850466][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.850510][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.851374][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.884516][T11612] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 780.995226][ T6025] r8152-cfgselector 6-1: USB disconnect, device number 75 [ 781.044421][T11612] usb 7-1: Using ep0 maxpacket: 32 [ 781.048374][T11612] usb 7-1: config 0 has an invalid interface number: 32 but max is 2 [ 781.048399][T11612] usb 7-1: config 0 has an invalid interface number: 200 but max is 2 [ 781.048416][T11612] usb 7-1: config 0 has an invalid interface number: 191 but max is 2 [ 781.048434][T11612] usb 7-1: config 0 has no interface number 0 [ 781.048507][T11612] usb 7-1: config 0 has no interface number 1 [ 781.048523][T11612] usb 7-1: config 0 has no interface number 2 [ 781.048573][T11612] usb 7-1: config 0 interface 32 has no altsetting 0 [ 781.048590][T11612] usb 7-1: config 0 interface 200 has no altsetting 0 [ 781.048658][T11612] usb 7-1: config 0 interface 191 has no altsetting 0 [ 781.053178][ T1245] usb 1-1: usb_control_msg returned -32 [ 781.053221][ T1245] usbtmc 1-1:16.0: can't read capabilities [ 781.060916][T11612] usb 7-1: New USB device found, idVendor=05c6, idProduct=9221, bcdDevice=c2.43 [ 781.060943][T11612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.060963][T11612] usb 7-1: Product: syz [ 781.060977][T11612] usb 7-1: Manufacturer: syz [ 781.060992][T11612] usb 7-1: SerialNumber: syz [ 781.105457][T11612] usb 7-1: config 0 descriptor?? [ 781.180322][T15220] netlink: 'syz.2.3104': attribute type 3 has an invalid length. [ 781.181412][ T31] usb 3-1: usb_control_msg returned -32 [ 781.181438][ T31] usbtmc 3-1:16.0: can't read capabilities [ 781.329705][T11612] usb 7-1: bad CDC descriptors [ 781.342675][T11612] usb 7-1: USB disconnect, device number 30 [ 781.849444][T15238] tmpfs: Unknown parameter '' [ 781.876218][T15238] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 782.659018][T15239] NILFS (nbd4): device size too small [ 782.705635][T15236] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 782.706353][T15239] syz_tun: entered allmulticast mode [ 782.751139][ T5801] Bluetooth: hci5: unexpected event for opcode 0x0c7d [ 782.842209][ T6025] usb 1-1: USB disconnect, device number 86 [ 783.174437][ T5985] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 783.180034][T15253] tmpfs: Unknown parameter '' [ 783.186380][T11612] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 783.216929][T15253] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 783.334401][T11612] usb 6-1: device descriptor read/64, error -71 [ 783.350868][ T5985] usb 5-1: Using ep0 maxpacket: 16 [ 783.360395][ T5985] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 783.360423][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 783.360443][ T5985] usb 5-1: Product: syz [ 783.360457][ T5985] usb 5-1: SerialNumber: syz [ 783.382095][ T5985] usb 5-1: config 0 descriptor?? [ 783.408306][ T5985] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 783.409358][ T5985] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 783.409819][ T5985] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 783.409905][ T5985] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 783.594982][T11612] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 783.622201][ T6025] usb 5-1: USB disconnect, device number 96 [ 783.797900][T11612] usb 6-1: device descriptor read/64, error -71 [ 783.993039][T15259] batman_adv: batadv0: Adding interface: dummy0 [ 783.993059][T15259] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.993099][T15259] batman_adv: batadv0: Interface activated: dummy0 [ 784.009373][T11612] usb usb6-port1: attempt power cycle [ 784.477106][ T6025] usb 3-1: USB disconnect, device number 97 [ 784.504465][T11612] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 784.525180][T11612] usb 6-1: device descriptor read/8, error -71 [ 784.814447][T11612] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 784.835698][T11612] usb 6-1: device descriptor read/8, error -71 [ 784.944874][T11612] usb usb6-port1: unable to enumerate USB device [ 785.593749][T15274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3118'. [ 785.593778][T15274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3118'. [ 785.854458][ T5985] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 786.041341][T15288] tmpfs: Unknown parameter '' [ 786.070076][T15288] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 786.814371][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 786.837057][ T5985] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 786.837086][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.842068][ T5985] usb 3-1: config 0 descriptor?? [ 786.858765][ T5985] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 787.156430][ T5801] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 788.036615][T15297] FAULT_INJECTION: forcing a failure. [ 788.036615][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 788.036651][T15297] CPU: 1 UID: 0 PID: 15297 Comm: syz.4.3126 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 788.036677][T15297] Tainted: [L]=SOFTLOCKUP [ 788.036684][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.036695][T15297] Call Trace: [ 788.036704][T15297] [ 788.036712][T15297] dump_stack_lvl+0xe8/0x150 [ 788.036744][T15297] should_fail_ex+0x46b/0x600 [ 788.036772][T15297] _copy_to_user+0x31/0xb0 [ 788.036800][T15297] simple_read_from_buffer+0xe1/0x170 [ 788.036827][T15297] proc_fail_nth_read+0x1be/0x230 [ 788.036854][T15297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.036880][T15297] ? rw_verify_area+0x2ac/0x4e0 [ 788.036905][T15297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.036928][T15297] vfs_read+0x212/0xa80 [ 788.036961][T15297] ? __pfx_vfs_read+0x10/0x10 [ 788.036984][T15297] ? do_fcntl+0xe64/0x19e0 [ 788.037013][T15297] ? smack_file_fcntl+0x150/0x320 [ 788.037120][T15297] ? __pfx_do_fcntl+0x10/0x10 [ 788.037145][T15297] ? __pfx_smack_file_fcntl+0x10/0x10 [ 788.037178][T15297] ksys_read+0x156/0x270 [ 788.037206][T15297] ? __pfx_ksys_read+0x10/0x10 [ 788.037241][T15297] do_syscall_64+0x14d/0xf80 [ 788.037268][T15297] ? trace_irq_disable+0x3b/0x150 [ 788.037289][T15297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.037308][T15297] ? clear_bhb_loop+0x40/0x90 [ 788.037330][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.037348][T15297] RIP: 0033:0x7fc1b914cfce [ 788.037366][T15297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.037383][T15297] RSP: 002b:00007fc1b73ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.037403][T15297] RAX: ffffffffffffffda RBX: 00007fc1b73de6c0 RCX: 00007fc1b914cfce [ 788.037417][T15297] RDX: 000000000000000f RSI: 00007fc1b73de0a0 RDI: 0000000000000004 [ 788.037429][T15297] RBP: 00007fc1b73de090 R08: 0000000000000000 R09: 0000000000000000 [ 788.037441][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.037453][T15297] R13: 00007fc1b9406038 R14: 00007fc1b9405fa0 R15: 00007ffe431bab28 [ 788.037482][T15297] [ 788.187269][ T5985] gspca_vc032x: reg_w err -71 [ 788.187284][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187295][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187304][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187311][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187320][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187328][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187337][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187345][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187355][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187364][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187373][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187382][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187391][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187400][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187408][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187416][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187424][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187432][ T5985] gspca_vc032x: I2c Bus Busy Wait 00 [ 788.187441][ T5985] gspca_vc032x: Unknown sensor... [ 788.187527][ T5985] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 788.415179][ T5985] usb 3-1: USB disconnect, device number 98 [ 788.680168][T15305] tmpfs: Unknown parameter '' [ 788.696011][T15305] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 788.784774][ T5985] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 788.956567][ T5985] usb 5-1: Using ep0 maxpacket: 8 [ 788.963516][ T5985] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 788.963543][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.963562][ T5985] usb 5-1: Product: syz [ 788.963577][ T5985] usb 5-1: Manufacturer: syz [ 788.963591][ T5985] usb 5-1: SerialNumber: syz [ 789.005340][ T5985] usb 5-1: config 0 descriptor?? [ 789.222016][ T5985] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 789.227594][T15317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3135'. [ 789.303432][T15315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3134'. [ 789.694587][T15323] tmpfs: Unknown parameter '' [ 789.723503][T15323] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 790.615080][T15303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.615601][T15303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.617114][ T5985] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 790.678543][ T5985] usb 5-1: USB disconnect, device number 97 [ 790.748182][T15332] ip6tnl2: entered allmulticast mode [ 790.763135][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.763511][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 790.774562][T11612] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.056854][T15338] lo speed is unknown, defaulting to 1000 [ 791.665425][ T6025] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 791.744648][ T6025] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 792.511103][T15364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.769446][ T5985] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 792.854856][T15369] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 794.734426][ T5985] usb 1-1: device descriptor read/64, error -71 [ 794.744943][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 794.870007][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 794.897615][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 794.899076][ T10] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 794.899099][ T10] usb 3-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 794.899119][ T10] usb 3-1: config 63 has no interface number 0 [ 794.899151][ T10] usb 3-1: config 63 interface 66 has no altsetting 0 [ 794.902614][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 794.902640][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.902660][ T10] usb 3-1: Product: syz [ 794.902674][ T10] usb 3-1: Manufacturer: syz [ 794.902689][ T10] usb 3-1: SerialNumber: syz [ 795.034457][ T5985] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 795.151960][ T10] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 795.152046][ T10] uvcvideo 3-1:63.66: No valid video chain found. [ 795.168845][ T10] usb 3-1: USB disconnect, device number 99 [ 795.715161][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 796.000693][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 796.664106][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 796.668484][ T10] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 796.668536][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.668617][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 796.668644][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 796.668667][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 796.672622][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 796.672648][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 796.672715][ T10] usb 6-1: Manufacturer: syz [ 796.685932][ T9] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 796.685956][ T9] usb 7-1: config 0 has no interface number 0 [ 796.685997][ T9] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.689951][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 796.689978][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.689997][ T9] usb 7-1: Product: syz [ 796.690011][ T9] usb 7-1: Manufacturer: syz [ 796.690026][ T9] usb 7-1: SerialNumber: syz [ 796.707959][ T10] usb 6-1: config 0 descriptor?? [ 796.731146][ T9] usb 7-1: config 0 descriptor?? [ 796.823059][ T9] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 797.227595][T15387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.228131][T15387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.329036][ T6025] usb 7-1: USB disconnect, device number 31 [ 797.333984][ T6025] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 797.424534][ T10] rc_core: IR keymap rc-hauppauge not found [ 797.424554][ T10] Registered IR keymap rc-empty [ 797.427407][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 797.452563][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 797.465569][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 797.468944][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input74 [ 797.637123][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 797.654692][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 797.855229][T15414] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 798.404070][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.428844][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.690127][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.704911][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.724656][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.744973][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.764801][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.784854][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 798.841943][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 798.841969][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 798.952366][ T6025] usb 6-1: USB disconnect, device number 80 [ 799.002097][T15424] FAULT_INJECTION: forcing a failure. [ 799.002097][T15424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.002133][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.5.3166 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 799.002191][T15424] Tainted: [L]=SOFTLOCKUP [ 799.002208][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.002234][T15424] Call Trace: [ 799.002242][T15424] [ 799.002250][T15424] dump_stack_lvl+0xe8/0x150 [ 799.002283][T15424] should_fail_ex+0x46b/0x600 [ 799.002312][T15424] _copy_from_user+0x2d/0xb0 [ 799.002340][T15424] do_sock_getsockopt+0x165/0x3f0 [ 799.002371][T15424] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 799.002400][T15424] ? __fget_files+0x3a6/0x420 [ 799.002430][T15424] ? __fget_files+0x2a/0x420 [ 799.002457][T15424] __x64_sys_getsockopt+0x1aa/0x250 [ 799.002491][T15424] do_syscall_64+0x14d/0xf80 [ 799.002515][T15424] ? trace_irq_disable+0x3b/0x150 [ 799.002536][T15424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.002554][T15424] ? clear_bhb_loop+0x40/0x90 [ 799.002576][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.002595][T15424] RIP: 0033:0x7f331a1bc799 [ 799.002613][T15424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.002630][T15424] RSP: 002b:00007f331840e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 799.002651][T15424] RAX: ffffffffffffffda RBX: 00007f331a435fa0 RCX: 00007f331a1bc799 [ 799.002665][T15424] RDX: 0000000000000008 RSI: 0000000000000008 RDI: 0000000000000003 [ 799.002677][T15424] RBP: 00007f331840e090 R08: 0000000000000000 R09: 0000000000000000 [ 799.002689][T15424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.002702][T15424] R13: 00007f331a436038 R14: 00007f331a435fa0 R15: 00007ffe20c13528 [ 799.002732][T15424] [ 799.380156][T15432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.452201][T15437] cgroup: Unknown subsys name 'cpuset' [ 799.453748][T15437] netlink: 'syz.4.3171': attribute type 4 has an invalid length. [ 799.610267][T15441] netlink: 'syz.4.3171': attribute type 4 has an invalid length. [ 799.644504][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 799.756805][T15442] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 799.844964][ T31] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 800.494549][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 800.496672][ T10] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 800.496697][ T10] usb 3-1: config 0 has no interface number 0 [ 800.496742][ T10] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 800.496776][ T10] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 800.499414][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 800.499441][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.499461][ T10] usb 3-1: Product: syz [ 800.499476][ T10] usb 3-1: Manufacturer: syz [ 800.499491][ T10] usb 3-1: SerialNumber: syz [ 800.516582][ T6025] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 800.524384][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 800.525516][ T31] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 800.525541][ T31] usb 7-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 800.525560][ T31] usb 7-1: config 63 has no interface number 0 [ 800.525590][ T31] usb 7-1: config 63 interface 66 has no altsetting 0 [ 800.534423][ T31] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 800.534449][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.534469][ T31] usb 7-1: Product: syz [ 800.534483][ T31] usb 7-1: Manufacturer: syz [ 800.534497][ T31] usb 7-1: SerialNumber: syz [ 800.669235][ T10] usb 3-1: config 0 descriptor?? [ 800.679676][ T6025] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.679728][ T6025] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 800.679764][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.710633][ T6025] usb 6-1: config 0 descriptor?? [ 800.743645][ T6025] pwc: Askey VC010 type 2 USB webcam detected. [ 800.884463][ T1245] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 800.921364][ T31] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 800.921627][ T31] uvcvideo 7-1:63.66: No valid video chain found. [ 800.940005][T15436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.942039][T15436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.950944][ T31] usb 7-1: USB disconnect, device number 32 [ 800.989360][T15434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.001209][T15434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.047455][ T1245] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 801.047480][ T1245] usb 1-1: config 0 has no interface number 0 [ 801.048241][ T1245] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.082379][ T1245] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 801.082407][ T1245] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.082480][ T1245] usb 1-1: Product: syz [ 801.082495][ T1245] usb 1-1: Manufacturer: syz [ 801.082509][ T1245] usb 1-1: SerialNumber: syz [ 801.124369][ T1245] usb 1-1: config 0 descriptor?? [ 801.184705][ T10] radio-si470x 3-1:0.35: this is not a si470x device. [ 801.201036][ T1245] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 801.215131][ T10] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 801.223448][ T6025] pwc: recv_control_msg error -32 req 02 val 2b00 [ 801.227412][ T6025] pwc: recv_control_msg error -32 req 02 val 2700 [ 801.235811][ T6025] pwc: recv_control_msg error -32 req 02 val 2c00 [ 801.238800][ T6025] pwc: recv_control_msg error -32 req 04 val 1000 [ 801.249192][ T6025] pwc: recv_control_msg error -32 req 04 val 1300 [ 801.251980][ T6025] pwc: recv_control_msg error -32 req 04 val 1400 [ 801.254215][ T6025] pwc: recv_control_msg error -32 req 02 val 2000 [ 801.343138][ T10] usb 3-1: USB disconnect, device number 100 [ 801.399863][T15447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.401326][T15447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.471541][ T6025] pwc: recv_control_msg error -71 req 04 val 1500 [ 801.475434][ T6025] pwc: recv_control_msg error -71 req 02 val 2500 [ 801.477173][ T6025] pwc: recv_control_msg error -71 req 02 val 2400 [ 801.478417][ T6025] pwc: recv_control_msg error -71 req 02 val 2600 [ 801.479682][ T6025] pwc: recv_control_msg error -71 req 02 val 2900 [ 801.480613][ T6025] pwc: recv_control_msg error -71 req 02 val 2800 [ 801.483793][ T6025] pwc: recv_control_msg error -71 req 04 val 1100 [ 801.485114][ T6025] pwc: recv_control_msg error -71 req 04 val 1200 [ 801.573175][ T1245] usb 1-1: USB disconnect, device number 89 [ 801.576982][ T6025] pwc: Registered as video103. [ 801.585065][ T6025] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input75 [ 801.586138][ T1245] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 801.601387][ T6025] usb 6-1: USB disconnect, device number 81 [ 801.620653][T15453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 802.105645][T15467] input: syz0 as /devices/virtual/input/input76 [ 802.293646][T15481] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 802.360195][T15479] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 802.360226][T15479] overlayfs: failed to set xattr on upper [ 802.360241][T15479] overlayfs: ...falling back to redirect_dir=nofollow. [ 802.360246][T15479] overlayfs: ...falling back to index=off. [ 802.360251][T15479] overlayfs: ...falling back to uuid=null. [ 802.360257][T15479] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 802.404417][ T6025] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 802.569232][T15484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.588849][ T6025] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 24 [ 802.588868][ T6025] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 802.588881][ T6025] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 802.592058][ T6025] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 802.592083][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.592094][ T6025] usb 5-1: Product: syz [ 802.592102][ T6025] usb 5-1: Manufacturer: syz [ 802.592110][ T6025] usb 5-1: SerialNumber: syz [ 802.644616][ T1245] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 802.656330][T15470] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.804543][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 802.809451][ T1245] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 802.812362][ T1245] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 802.812379][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.812389][ T1245] usb 3-1: Product: syz [ 802.812397][ T1245] usb 3-1: Manufacturer: syz [ 802.812405][ T1245] usb 3-1: SerialNumber: syz [ 802.822592][ T1245] usb 3-1: config 0 descriptor?? [ 802.824511][ T31] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 802.912682][ T6025] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 802.912764][ T6025] usb 5-1: MIDIStreaming interface descriptor not found [ 802.921489][ T1245] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 803.042983][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 803.058794][ T31] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 803.058814][ T31] usb 7-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 803.058824][ T31] usb 7-1: config 63 has no interface number 0 [ 803.058844][ T31] usb 7-1: config 63 interface 66 has no altsetting 0 [ 803.062145][ T31] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 803.062160][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.062171][ T31] usb 7-1: Product: syz [ 803.062213][ T31] usb 7-1: Manufacturer: syz [ 803.062222][ T31] usb 7-1: SerialNumber: syz [ 803.151206][ T9563] usb 3-1: Failed to submit usb control message: -71 [ 803.151241][ T9563] usb 3-1: unable to send the bmi data to the device: -71 [ 803.151258][ T9563] usb 3-1: unable to get target info from device [ 803.151286][ T9563] usb 3-1: could not get target info (-71) [ 803.151375][ T9563] usb 3-1: could not probe fw (-71) [ 803.152078][ T1245] usb 3-1: USB disconnect, device number 101 [ 803.187617][ T6025] usb 5-1: USB disconnect, device number 98 [ 803.383229][ T31] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 803.383316][ T31] uvcvideo 7-1:63.66: No valid video chain found. [ 803.393948][ T31] usb 7-1: USB disconnect, device number 33 [ 803.410800][T15488] udevd[15488]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.431857][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 803.981845][T15502] FAULT_INJECTION: forcing a failure. [ 803.981845][T15502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.981882][T15502] CPU: 0 UID: 0 PID: 15502 Comm: syz.6.3189 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 803.981916][T15502] Tainted: [L]=SOFTLOCKUP [ 803.981924][T15502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.981935][T15502] Call Trace: [ 803.981944][T15502] [ 803.981953][T15502] dump_stack_lvl+0xe8/0x150 [ 803.981986][T15502] should_fail_ex+0x46b/0x600 [ 803.982017][T15502] _copy_from_user+0x2d/0xb0 [ 803.982043][T15502] ___sys_sendmsg+0x1c6/0x360 [ 803.982070][T15502] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.982095][T15502] ? kstrtouint+0x6e/0xe0 [ 803.982141][T15502] ? __fget_files+0x2a/0x420 [ 803.982165][T15502] ? __fget_files+0x3a6/0x420 [ 803.982196][T15502] __sys_sendmmsg+0x282/0x4e0 [ 803.982221][T15502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 803.982249][T15502] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 803.982287][T15502] ? ksys_write+0x248/0x270 [ 803.982316][T15502] ? __pfx_ksys_write+0x10/0x10 [ 803.982348][T15502] __x64_sys_sendmmsg+0xa0/0xc0 [ 803.982369][T15502] do_syscall_64+0x14d/0xf80 [ 803.982396][T15502] ? trace_irq_disable+0x3b/0x150 [ 803.982418][T15502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.982437][T15502] ? clear_bhb_loop+0x40/0x90 [ 803.982460][T15502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.982480][T15502] RIP: 0033:0x7f50d783c799 [ 803.982497][T15502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.982516][T15502] RSP: 002b:00007f50d5a8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 803.982537][T15502] RAX: ffffffffffffffda RBX: 00007f50d7ab5fa0 RCX: 00007f50d783c799 [ 803.982552][T15502] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000004 [ 803.982565][T15502] RBP: 00007f50d5a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 803.982578][T15502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.982590][T15502] R13: 00007f50d7ab6038 R14: 00007f50d7ab5fa0 R15: 00007fff4f158548 [ 803.982621][T15502] [ 804.174378][ T1245] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 804.404248][T15505] tmpfs: Unknown parameter '' [ 804.457583][T15505] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 805.550322][ T1245] usb 6-1: Using ep0 maxpacket: 8 [ 805.650169][T15514] tmpfs: Unknown parameter '' [ 805.702771][T15514] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 806.362359][ T10] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 806.496101][ T1245] usb 6-1: config 162 has an invalid interface number: 84 but max is 2 [ 806.496130][ T1245] usb 6-1: config 162 has an invalid descriptor of length 221, skipping remainder of the config [ 806.496150][ T1245] usb 6-1: config 162 has 1 interface, different from the descriptor's value: 3 [ 806.496180][ T1245] usb 6-1: config 162 has no interface number 0 [ 806.496222][ T1245] usb 6-1: config 162 interface 84 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.496250][ T1245] usb 6-1: config 162 interface 84 has no altsetting 0 [ 806.498537][ T1245] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 806.498567][ T1245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.498588][ T1245] usb 6-1: Product: syz [ 806.498602][ T1245] usb 6-1: Manufacturer: syz [ 806.498617][ T1245] usb 6-1: SerialNumber: syz [ 806.516412][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 806.519276][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 806.519326][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 806.519348][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 806.519372][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 806.519396][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.519434][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 806.519456][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.775148][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 806.775197][ T10] usbtmc 7-1:16.0: can't read capabilities [ 806.808006][ T1245] usb 6-1: can't set config #162, error -71 [ 806.892250][ T1245] usb 6-1: USB disconnect, device number 82 [ 806.906884][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3197'. [ 806.908315][T15527] FAULT_INJECTION: forcing a failure. [ 806.908315][T15527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 806.908345][T15527] CPU: 0 UID: 0 PID: 15527 Comm: syz.4.3197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 806.908376][T15527] Tainted: [L]=SOFTLOCKUP [ 806.908383][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 806.908395][T15527] Call Trace: [ 806.908404][T15527] [ 806.908412][T15527] dump_stack_lvl+0xe8/0x150 [ 806.908444][T15527] should_fail_ex+0x46b/0x600 [ 806.908472][T15527] _copy_from_user+0x2d/0xb0 [ 806.908499][T15527] ___sys_sendmsg+0x1c6/0x360 [ 806.908524][T15527] ? __pfx____sys_sendmsg+0x10/0x10 [ 806.908577][T15527] ? __fget_files+0x2a/0x420 [ 806.908599][T15527] ? __fget_files+0x3a6/0x420 [ 806.908637][T15527] __x64_sys_sendmsg+0x1c3/0x2a0 [ 806.908659][T15527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 806.908687][T15527] ? __pfx_ksys_write+0x10/0x10 [ 806.908723][T15527] do_syscall_64+0x14d/0xf80 [ 806.908749][T15527] ? trace_irq_disable+0x3b/0x150 [ 806.908770][T15527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.908790][T15527] ? clear_bhb_loop+0x40/0x90 [ 806.908813][T15527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.908831][T15527] RIP: 0033:0x7fc1b918c799 [ 806.908849][T15527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.908865][T15527] RSP: 002b:00007fc1b73de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.908887][T15527] RAX: ffffffffffffffda RBX: 00007fc1b9405fa0 RCX: 00007fc1b918c799 [ 806.908901][T15527] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 806.908914][T15527] RBP: 00007fc1b73de090 R08: 0000000000000000 R09: 0000000000000000 [ 806.908927][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.908939][T15527] R13: 00007fc1b9406038 R14: 00007fc1b9405fa0 R15: 00007ffe431bab28 [ 806.908969][T15527] [ 806.991026][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.991509][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.998952][ T810] usb 7-1: USB disconnect, device number 34 [ 807.075073][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 807.160761][T15531] netlink: 'syz.5.3198': attribute type 4 has an invalid length. [ 807.187197][T15533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.212262][T15534] netlink: 'syz.5.3198': attribute type 4 has an invalid length. [ 807.229135][ T10] usb 1-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid wMaxPacketSize 0 [ 807.229153][ T10] usb 1-1: config 2 interface 0 has no altsetting 0 [ 807.231006][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 807.231022][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.231033][ T10] usb 1-1: Product: syz [ 807.231040][ T10] usb 1-1: Manufacturer: syz [ 807.231048][ T10] usb 1-1: SerialNumber: syz [ 807.614921][ T1245] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 808.577056][T15537] tipc: Enabled bearer , priority 0 [ 808.963984][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.007609][T15537] tipc: Resetting bearer [ 809.151141][ T1245] usb 5-1: unable to get BOS descriptor or descriptor too short [ 809.152483][ T1245] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 809.152508][ T1245] usb 5-1: config 63 has an invalid descriptor of length 134, skipping remainder of the config [ 809.152528][ T1245] usb 5-1: config 63 has no interface number 0 [ 809.152560][ T1245] usb 5-1: config 63 interface 66 has no altsetting 0 [ 809.200320][ T1245] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 809.200411][ T1245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.200431][ T1245] usb 5-1: Product: syz [ 809.200446][ T1245] usb 5-1: Manufacturer: syz [ 809.200461][ T1245] usb 5-1: SerialNumber: syz [ 809.491087][ T1245] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 809.491173][ T1245] uvcvideo 5-1:63.66: No valid video chain found. [ 809.524468][ T1245] usb 5-1: USB disconnect, device number 99 [ 809.950917][T15566] FAULT_INJECTION: forcing a failure. [ 809.950917][T15566] name failslab, interval 1, probability 0, space 0, times 0 [ 809.950974][T15566] CPU: 1 UID: 0 PID: 15566 Comm: syz.2.3205 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 809.951002][T15566] Tainted: [L]=SOFTLOCKUP [ 809.951010][T15566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 809.951022][T15566] Call Trace: [ 809.951030][T15566] [ 809.951039][T15566] dump_stack_lvl+0xe8/0x150 [ 809.951071][T15566] should_fail_ex+0x46b/0x600 [ 809.951100][T15566] should_failslab+0xa8/0x100 [ 809.951122][T15566] kmem_cache_alloc_noprof+0x87/0x680 [ 809.951150][T15566] ? do_getname+0x2e/0x250 [ 809.951175][T15566] do_getname+0x2e/0x250 [ 809.951194][T15566] ? getname_uflags+0x11/0x30 [ 809.951218][T15566] __x64_sys_execveat+0xad/0xf0 [ 809.951248][T15566] do_syscall_64+0x14d/0xf80 [ 809.951275][T15566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.951295][T15566] ? clear_bhb_loop+0x40/0x90 [ 809.951326][T15566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.951345][T15566] RIP: 0033:0x7f77f04cc799 [ 809.951364][T15566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.951379][T15566] RSP: 002b:00007f77ee6e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 809.951400][T15566] RAX: ffffffffffffffda RBX: 00007f77f0746180 RCX: 00007f77f04cc799 [ 809.951415][T15566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 809.951428][T15566] RBP: 00007f77ee6e4090 R08: 0000000000001000 R09: 0000000000000000 [ 809.951441][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.951453][T15566] R13: 00007f77f0746218 R14: 00007f77f0746180 R15: 00007ffe48b15d38 [ 809.951484][T15566] [ 810.485999][T15560] lo speed is unknown, defaulting to 1000 [ 810.723929][T15570] netlink: 'syz.5.3210': attribute type 4 has an invalid length. [ 810.749448][ T10] ims_pcu 1-1:2.0: Incorrect number of endpoints on data interface (1) [ 810.749484][ T10] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 810.765497][ T10] usb 1-1: USB disconnect, device number 90 [ 811.159783][T15573] netlink: 'syz.5.3210': attribute type 4 has an invalid length. [ 811.245214][T15537] tipc: Disabling bearer [ 811.274036][T15577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.346612][ T10] ================================================================== [ 811.346628][ T10] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 811.346759][ T10] Read of size 8 at addr ffffc90010b19008 by task kworker/0:1/10 [ 811.346774][ T10] [ 811.346818][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 811.346844][ T10] Tainted: [L]=SOFTLOCKUP [ 811.346851][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.346862][ T10] Workqueue: usb_hub_wq hub_event [ 811.346952][ T10] Call Trace: [ 811.346959][ T10] [ 811.346967][ T10] dump_stack_lvl+0xe8/0x150 [ 811.346993][ T10] print_report+0xba/0x230 [ 811.347027][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 811.347047][ T10] kasan_report+0x117/0x150 [ 811.347067][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 811.347089][ T10] __list_add_valid_or_report+0x4e/0x130 [ 811.347111][ T10] kcov_remote_stop+0x457/0x680 [ 811.347135][ T10] hub_event+0x49d8/0x4f60 [ 811.347173][ T10] ? __pfx_hub_event+0x10/0x10 [ 811.347195][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 811.347217][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 811.347239][ T10] process_scheduled_works+0xb6e/0x18c0 [ 811.347275][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 811.347300][ T10] ? assign_work+0x3d5/0x5e0 [ 811.347324][ T10] worker_thread+0xa53/0xfc0 [ 811.347357][ T10] kthread+0x388/0x470 [ 811.347374][ T10] ? __pfx_worker_thread+0x10/0x10 [ 811.347396][ T10] ? __pfx_kthread+0x10/0x10 [ 811.347414][ T10] ret_from_fork+0x51e/0xb90 [ 811.347440][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 811.347462][ T10] ? __switch_to+0xc7d/0x1450 [ 811.347485][ T10] ? __pfx_kthread+0x10/0x10 [ 811.347503][ T10] ret_from_fork_asm+0x1a/0x30 [ 811.347527][ T10] [ 811.347534][ T10] [ 811.347539][ T10] The buggy address belongs to a vmalloc virtual mapping [ 811.347556][ T10] Memory state around the buggy address: [ 811.347566][ T10] ffffc90010b18f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 811.347578][ T10] ffffc90010b18f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 811.347590][ T10] >ffffc90010b19000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 811.347599][ T10] ^ [ 811.347609][ T10] ffffc90010b19080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 811.347621][ T10] ffffc90010b19100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 811.347630][ T10] ================================================================== [ 811.347669][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 811.347684][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 811.347717][ T10] Tainted: [L]=SOFTLOCKUP [ 811.347724][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.347737][ T10] Workqueue: usb_hub_wq hub_event [ 811.347756][ T10] Call Trace: [ 811.347764][ T10] [ 811.347772][ T10] vpanic+0x56c/0xa60 [ 811.347798][ T10] ? __pfx_vpanic+0x10/0x10 [ 811.347820][ T10] ? __pfx___schedule+0x10/0x10 [ 811.347844][ T10] panic+0xc5/0xd0 [ 811.347866][ T10] ? __pfx_panic+0x10/0x10 [ 811.347888][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 811.347912][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 811.347931][ T10] check_panic_on_warn+0x89/0xb0 [ 811.347951][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 811.347970][ T10] end_report+0x73/0x180 [ 811.347987][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 811.348005][ T10] kasan_report+0x128/0x150 [ 811.348023][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 811.348045][ T10] __list_add_valid_or_report+0x4e/0x130 [ 811.348065][ T10] kcov_remote_stop+0x457/0x680 [ 811.348086][ T10] hub_event+0x49d8/0x4f60 [ 811.348120][ T10] ? __pfx_hub_event+0x10/0x10 [ 811.348141][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 811.348163][ T10] ? process_scheduled_works+0xa8d/0x18c0 [ 811.348186][ T10] process_scheduled_works+0xb6e/0x18c0 [ 811.348219][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 811.348246][ T10] ? assign_work+0x3d5/0x5e0 [ 811.348270][ T10] worker_thread+0xa53/0xfc0 [ 811.348304][ T10] kthread+0x388/0x470 [ 811.348321][ T10] ? __pfx_worker_thread+0x10/0x10 [ 811.348344][ T10] ? __pfx_kthread+0x10/0x10 [ 811.348361][ T10] ret_from_fork+0x51e/0xb90 [ 811.348386][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 811.348408][ T10] ? __switch_to+0xc7d/0x1450 [ 811.348430][ T10] ? __pfx_kthread+0x10/0x10 [ 811.348448][ T10] ret_from_fork_asm+0x1a/0x30 [ 811.348472][ T10] [ 811.348740][ T10] Kernel Offset: disabled