last executing test programs: 4m51.303130182s ago: executing program 1 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB='noswap,mpol=prefer']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) clock_gettime(0x0, &(0x7f0000001780)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000340)=@caif=@dgm, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000580)=""/184, 0xb8}], 0x2, &(0x7f0000000640)=""/10, 0xa}, 0x7fffffff}, {{&(0x7f0000000680)=@alg, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000900)=""/156, 0x9c}, {&(0x7f00000009c0)=""/36, 0x24}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000000b40)=""/161, 0xa1}, {&(0x7f0000000c80)=""/67, 0x43}], 0xa, &(0x7f0000002240)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000dc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000e40)=""/241, 0xf1}], 0x1, &(0x7f0000000f40)=""/177, 0xb1}, 0x3}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/98, 0x62}, {&(0x7f0000001180)=""/79, 0x4f}, {&(0x7f0000001200)=""/217, 0xd9}, {&(0x7f0000001300)=""/129, 0x81}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000001000)=""/18, 0x12}, {&(0x7f00000013c0)=""/209, 0xd1}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/237, 0xed}, {&(0x7f0000005240)=""/4096, 0x1000}], 0xa}, 0x7}], 0x4, 0x42, &(0x7f00000017c0)={r2, r3+60000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xe, 0x10200) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e"], 0x110}}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)=ANY=[@ANYBLOB='\b\x00\x00\b\x00\x00\x00\x00']) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@rnullb, r8, &(0x7f0000000180)) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x2fd, 0x0, 0x0, 0x0, 0x0}) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000001800), 0x1003) 4m46.254509844s ago: executing program 1 (id=885): socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000002100)) (async) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000005cc0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="76ef038934783440c44f6779f2cc2a1273289355ca3e0bc51865b1b3063c55b144b113ba10d9c2d6d641b746632aab5b9b39baf95f02011612ace94f15fb3383f3070f4d8c0f9a36c7dcc220a1e9e930b385c335d69386bf6777bb6f4796d0c1bec10a1d8f57a1adc48afa6a8e27262c3e73f18ec1c517ed5038531d353d16001735d44b5940e6da9c1364842374d4e1b03d0d21d1bb2cf2676840d465ca4e37df1c2b1341964e1c0d733ccf2bc6e0b4bac6", 0xb2}], 0x2, &(0x7f0000001580)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r1, 0xffffffffffffffff, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r0, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x40}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001600)="59f360812ef6ac3bcd28d250b8ca6bd03fd0eb6790e47ea5a9f4e0966142ce657bb5ebae49630b148766f1fc8a4c9c86baf6b04c7da54f5519de572ff9a50e6e9bb5e407bb469c206534edf6ba040dbe3e059cb6", 0x54}], 0x1, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r1]}}], 0xd0, 0x80}}, {{&(0x7f0000001dc0)=@file={0x1, './file1/file0\x00'}, 0x6e, &(0x7f0000005400)=[{&(0x7f0000001e40)="70d753205998c18f1f967b9c0fe4c0c637d9b439cc0d1d38e62b660dd0a86e8d99d252fee05d6f98e6ce5f97d378a767fad078778720c24b099baa0020886ec2d2412d7f8e40150ee532de27b8a707f278e753db930b581d9253e3510010f510c9c34a551323903fb4acf970369050ace2d2ccf752ad29337ddb8a886647e345625513c85dc8dc51190d03f8d14b0d9a9b100185767f106d783e5a325680489dccbc6d21f0149db8dd4e2591ff5740415080f87c81586a838216b087c1c4dc67ebf8e5900aa549", 0xc7}, {&(0x7f0000001f40)="b3ebc1f0fad35e777d6d876068eef0e8d98caa46f16726166c3cd57da16489a5151362eca558ab66fbd3416b6aca1bf684413cd8d94f2e2fcc5f3013311ca7e33b12d44354d6fb13866149cd6a7f48edc6b410ff40482223cdffa4104cb5628c4251742fdeae3d8e5900f6c4ff126af5faf8c6c57b5ecc59550740acb8c7e9eb44857d2a92eb31898fda47c8def7301ff9daa5c31824c9d6f7f703368e9fc123dc6327024b4d84d4cbbc6c5a43c6d5690ae9eada995ca7a3ced78882197cb13e2532", 0xc2}, {&(0x7f0000002040)="5e9aa72b146001931219514ce7ffd0ba1715c56fd02d1f32124401ebcb3a024c", 0x20}, {&(0x7f00000051c0)="b6415ea13882342c6c9f73632916dcb3163397852b8a09f2303b0b8a67f3f1c05915ceb9255381c8746e67087d93be0fb77bf5155e4cb979c50bf74d481b49f655cf8279b6ce75c1b70a9775273feea36bb1e4362c5d931153407488e6275bd5e009feead9d7536bd75c9e97f6f22b0f2275375869e7ef3d70abe8a8c3aa2c1717365a444da3ef698baae1ce7f489269cce3f7e67df12da14896b81b5407bde023d3257b2242ef73fb58036bf203c384a9e9730958fd8dabbb09be668a50fe7e0fc3", 0xc2}, {&(0x7f00000052c0)="74cb2830ad0b958fe420d6d3ac19dcf229943401de619241942c1f1b55f84acd22185c3e46baafdbf39fc727b95575107944f878058f07c332fe69a103dc853cc4652853ebdb2f12151d4f17c965eee0ed2f2e9ca32fc3100be9a9aa68e1c1b9a865937b9782efd0c9490588b7dd", 0x6e}, {&(0x7f0000002080)="6085c146b975a219a3bf952efb0682d78b13ac1c8c3feb14d8b61746e42032931c9a52b761d8b777c0e61fec0a4ebaae734398140550f0d21f4066ebae47", 0x3e}, {&(0x7f0000005340)="0656994c996b556aa87ca9d59f4659cfc8c91bf2d90feac09853edb3fba9d749057ced9686262aae8d3c0e4f61b198e7b2e3856f916a82368a4053e65698ca252b86d09b5742ed1649e6f3b7de88a1ea5460cb08ffafad74cb7eb3d450d5d0000e79a5dce943cd737ad7c97118ee5c1f8e2dc7a3dcf00eed82275b02b012b60e5ce1bc714d9b0d7c2fa26e82336c41983ed21ec9a82c8c08f560", 0x9a}], 0x7, &(0x7f0000005480)=[@cred={{0x1c}}], 0x20, 0x40}}, {{&(0x7f00000054c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005740)=[{&(0x7f0000005540)="8b875900ed7dab6d994e97f8a78babbe5ecca41d2ee320b19974d9b691f96b55a8fd529ce8cf3a253c24e3973ac0b855e1429a7c742084621411c4b967fec7013800d3ca2c65d98a4b7febb5f7a75f6aeacdc8d1442946562cf9725be6a3393e57192f88ed807e1997751b3073fb440e7bc5196466aab6fdec2063ee04fe5493ecedc46e2f3258a2aa37eb53d5ecf24621ecce74959d0e4665604b91999b7db927db9edd252f095499eb815f35e0cd1878e8cb2169262829e59ffd564cbf754bec41d4f383e4385547f987f4a69b6685b077a8d0d0302cf1261d539ce6bc2a2472f6465b2bd59e8cc6b2f151c9", 0xed}, {&(0x7f0000005640)}, {&(0x7f0000005680)="018abb6e3c3a33cc3e129b35409ea4a79d8ff40ec59dda13933c6f14de0489fafea0944a82aa4573e042438fbfc8672d3baa0e66642d43937eb69517e13abd37625d5602a560bea1df332ca6a4fe7183e1867f2a2a3eb39b1ccca2ed15d79bb2d0fc732a43f8d859931e9c2c5c9ecf6e2269cc32eac4095e7e07be69ab1592ef14ac282cf833cbe0a3db12242b1640ae62683850202e7c63640889ee5c31971d662f20fe2d2f", 0xa6}], 0x3, 0x0, 0x0, 0x4000}}, {{&(0x7f0000005780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005800)="ca7f3753cffca6bb93c9e96a21b7ad07651836b1f08de33cac", 0x19}], 0x1, 0x0, 0x0, 0x40001}}, {{&(0x7f0000005880)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005900)="c08a1bece2ad5aff704e4062738999017b9207906f1e98e34c22e50de455cfd4927f35b253ec", 0x26}, {&(0x7f000000a1c0)="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", 0x1000}, {&(0x7f0000005940)="c5db5dd003f3fd9467f44ba03474235e48d6390ab05e2adfb199d781567fe5115e17d3f953f32f8f3ca6b3cffab4f48f5e92131352c68c4f1dfdb595c165ed47f9b368f5d45db3889243a71a20e7bbd92210a6db07a331a80a6ed716c9d7a0672b9be4a3", 0x64}, {&(0x7f00000059c0)="437f1d9631aef89d237ce9313976fc83f46cfe7a06705085780143a43e8f1c8d8f08e88a00af35260b06865505bec3e57062e2ac0bb5ae8ad2fff99cb685a60c67e5606a8cce91d018499c2e93134ad3333f89656e98eebae2ab3c2f02f934692ca2acbd0432438115b16aaec13811dec78c5d8affa4e392c6c3284da8f0caf521956fc67e15e0659bf935d07f351ba9500a2f99f27343006b5e4940397da4dba9c9d6683402080ad5758ee3f5683e003a1b03082886c3bc95e16f906d", 0xbd}, {&(0x7f0000005a80)="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", 0xfb}, {&(0x7f0000005b80)="1f7335bd81c8aeb28435bcf95287769e47a71e3d9429c31f5445a0b8380b0f92da6a3e71b8ff104564f4e99f246323ae7ba762168d2fd7a14c08af85d2d3ce4d5704171027391e214d6325ac64e57357613bb780f6ed28bbafe9249fa65344f5977dd4266594a5b7ea85fcd655cbf0812b71a40cdcb4ebcca5feca5d8a8baef86bfe41f0", 0x84}], 0x6, 0x0, 0x0, 0x24000001}}], 0x6, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = semget$private(0x0, 0x2, 0x0) semop(r5, &(0x7f0000001480)=[{0x1, 0x8, 0x1800}], 0x1) semctl$GETPID(r5, 0x1, 0xb, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$loop(0x0, 0x7, 0x142ba3) syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0xfad6, 0x4, 0x80001, 0x3}, &(0x7f0000000040), &(0x7f0000000100)) (async) r8 = syz_io_uring_setup(0x112, &(0x7f0000000340)={0x0, 0xfad6, 0x4, 0x80001, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) io_uring_enter(r8, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, 0x0) (async) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000280)) connect$unix(r0, 0x0, 0x0) (async) connect$unix(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r11, 0x0, 0x10) 4m45.408758701s ago: executing program 1 (id=886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r2 = socket$inet(0x2, 0x800, 0x5ab4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = getpid() ptrace$getsig(0x4202, r3, 0x9, &(0x7f0000000000)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x10, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x2}, 0x0, 0x0, 0xd, 0x8, 0x5d, 0x5, 0x19, 0x1ff}}], 0x58, 0x30004015}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000140)={0x932, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000680)={0x0, 0x1000, "46426f66bca54a2a398a1201cf57e95fb4ddef84aa371b63c745b6da8c088cb2a097c9b207f264e512e41150eb9ee3142a6e924751e7d4ae68dfecbe787e5ec19806e5abd3603f3086893cbefcb24559fa575a87976f1de4ffc0ba43beff86f8b63e384d6e7bc4254e6b899b91a85a314a2c25ae3085f376fbf463928e1b36e83bb5fd42d3e201ba7b099862131ea5c645b16f51b62117db54d39a1c085f80557bc98c4a976e6e30c25357585f964df8cece6a52bc8c361252474c84625aebd3c0a603e1bb83dc9a2d948fafcff7605f3ccc5603d7f27312521b680ac363951e2f08843d30eb0a8821f56d174b8a7e4b1958ac057d18c67be6508c8c66fdd290fa77b60bfd6b9cd82202a5013498e4d06b9a4215c76727f65f043c7b8f0e05b6937e8ee28f60fd43e088ee8f9c4f5a7b8fa8fbfd4f8c64349804268f9bb462a048446f9f7f14a1ecbc583cca26b81773db841d10c9c0a0294fddd181556b16cadb318b947369cfa0b1b91d17560035f85f3a25882f64abd2a10784f7c5f31d5a2d679aaa2acba54abcabdbf4c29086666808cd1aef6c0b578b4cdc4a7a659b7a42be32066fdd432772a8019faa94340c081bb3f56191c26adb3bd5c832114ed4fc7f280a947e1f51a5fd69e80d7fe484f48000c69e93acc769531b02d58fbdee8e61906a862d2022cfb2692efec2fbfc29b67349b0a628cd2082347ef8685e81c38e91f7501a72f8d6fc08b5b7289f1ef09336a3b02096345ca053241b9f17334803a6438a97f85a2b61cb01df1b6c936bc34d507d2e2c725dc1d027d6051eaeb4922e98de7e44fa366f7449ce7dd0e22d6ba39d25ee6fd20477eb9a0a499e5eb54aebd9b514ebd9b461dea1d83ecacba8cab635cb8fcc96e66794aa20e2b2d58f29ec2d7a9449bdb6b2586f95a90848c8c0aeec92ff7a0d2aa869547221511f6d4eb4a07a2e9d92e0c70bd9fcbfbf96d19d46c9768dc243e82debc09e318cea4a4169227026b611d665d766718c439800222e589087f41b46098ff70444681f3af1c3d4a99f4e27d001b52e217b55039ffeb3468c9d0974f66acf718e7e1877c6b5010bb81ed6eb2178da931446612c4f2de14d84862dc54023806b10a2fc5fc4f475f2278dbbc4c9eb50221c7cfe53ff9e067d36fdaa4a75946c8f6575399b9cef017e3c87b64e68cad81cb2545137076097acb0a5fa2a4ac2fcdb46a10ecb5ae376a009c1c691d4a9782033ee1a09f8f85fb341dc0a4adef0dc6eb0def55d4a37ad4596c8d2ac1ed5f631f97b5e427e8a263bb9dfc8e2c2dd41f424f849518c385f2d0034ec37666672900d89942da48a5e7e601a57ec6fb2496044138a9ac75c31ba33452e73fc054541c0d329ec2570c999861bf858195a5c9c5a8ee770ff9bcd582436d2b0c722fd52888baad128070cb241b5f7d974ad4c3093bcf698c1d2052324d0c57b1cf8097906c28b20927aaa639d7b89b227f6400da5631a5eac773876cba4d8d3c2a90b8eeaf527f0e0c5ba1386d3552417e4ee26b2da6b8db58f098caa56207afddec26a52617262520f38b1246454d7d19c48d18511d614c69858e7c6239dd1275378b304e6c0fe5e918726c19ff6223228ce94c04a21620c9e3bea4a393635acaaf2bc891c72602197882a73c23b2f6eeffdcc36182a12d4ac2205bafed9fe5237261072f4db77bc30d6841b6f06f0ae52017cd9abe84a778f6413924bf40b4d4d54229f0fdf33657e92fd49ffdc15da91af662473a9b815119d442dd0d9af0b71caf24662d6b030ae8760589e43fd5930766f73daaa171fdda786e1de47d7a17f8749ef5352c835089b7bb1e613ada908b9a8ab93add561fc9d1a8a538c5f17fe5db19ae9fb1b81dbd0c9fec0c01fdc52a10fd2531461e2a39a64b2d4fb2626cd120fa208dd0a8b69d69629b3ca17e4cc5051e96ad83818541af1d0fb50754fab305d17e73e2542a7e6dc6ef4e8ddf4a7be8856004684f2d384aeb47c63c00e834beb10be9e2001131b71e8f484acca18395831c3b80f4f2315c4b12a11a3fa460cb021884f31736b59d3aab52924c14e126db280bf355b32d0df46e201db9a2773346bf3b5e042d742a6f09c96d2fc2abc0400946d296a12c429c61bacfbead1c2a9e182b627433b4d5624f5b39b8d4c66eeeb90b363e88fdb879444d6aa63cbc083f908074ea27e5b08a139cbb68aeadfcc5c7aed1a2567c2cfc0df5910b2ee497a7cd47fd2452b95243683aca6b9749bb7408159fbb74e34f4ffd0708741d9a4299a7c243d68ee55db19a9ad70d372fda6cc99a19fdc908cfa66ef2fe70fee465713748b6bb3c3b7b86c59ad776b8fb9d6c03245ea9d7a1db18047c7aa86ff35a97d7df1264aade60a8209a17ba4fca9fdc57c4b54b00b9fc6c7086e828b8d838bb9a3250b1e87d43a280501e240421792c1f79d16c9cb5320f6488650783a021653727f1ec7e259927f3d05330369bb337e8c55c27f7ec18ce027d2437cefe7452073f48ec0f23c38ec014b1aebe79ef9c10b958ad465410755fdf405d2b45dd8e3c6076f93bf14f7f79a3584fc6548992ee1527ede0791ee5496451904de0c7fdb3bad5399b8640bce9df434a162556eed258d94e3e370c3f40f33b7178467e11916318aaa3eae8c9343cec9b7b74918034594431b107537ba60814ef05bbbedf91e61d7a7780c3de1799cd9efc896f1eac14aec6750de420bf9b8c475c94053bfbc4dc6c66e441b714066a3fd270f07fc92dfd4c9e51299de7e2fc748b70b4c06a386d7bd86a1c97a9220534edcde6df692dc3e5f3979a535797a508e70a02f79ff1ddfbdb0a7c114df267af736c3591799f772f14b910d0ee2fd13b64e54ccf11dad57d59befa98164d49d5cb6481808d98243b2d6b6ed62fda54561f898bf82113c08f52e39ebbc7e22b653e5211059a3fc62a1649e5bd9f875cfab7099b48de4c2955620ad828aea684143c0e30d13496418655de12b277a98df05640c36f1a34dd0d0313994b9a7aac0047e725271cd7a1a1a85c643d069ed3195773a43210b9437c17618177086170c39d0271867e739863e6a47cd1d3b894fc8394212c569939018fd7414c5b89f7239108180d519b80515fa6243ece2c8a77da251aa8420d047c31fc12b438cee0339455ed8e5a84263684a8007b8aa7a2f419533f2e181fd900117f1e5fee2f0e6e047476061bfeaba5adb612809db8aac7a2de040d608bf4220d8551317b05ea20f604c1a483d725d627561b7b2efe6602adf4101bc2ee4a1cb8610dff264dfe588798a59b71f2706d4494e303443ce9af055fc7582d8c1c344faf61d99de2c783867a31840e3a6411317ad8da95d2ee5312a06048007d7250aa195cd2d729584c7a45dce41872e223611388f92adad7d7461575618793c0ed92f7dbedd05eeea96de116925748a723e53646caeb59f1ceb454f0354153bd23ea376166a116f2bb11da8303853fe777388c06923f86fb7f6a0f29a9706a36243c486f686baac7f5ec7ba55ef1964eb5739567c8cc5dbde5ef53358f6477feadc7488628155836af8d7861eb32c6e64e0df59fddfb7a765b0209b061caf85b0299ef7d3696f7f87d48935dcd3b6dd8927327234914677a7591bad53bdcf1430e3033fdc4ad242353c094d3793996d43db442c45586db56d5628a80458d4ffe5b67c0b620f5abdc6d1b3ae130f7a4bb20fd608050096f2e3c78d339535ee3a7cdd03c12ef27efa8a9b79430fdd034b8afcc18ff8cad2b7f67c5f63dfdf7e8f24506ffdf50db46400639671b0f915dbde72788a57b752d59a5a30929f4de809e092ecd5ef5716f7e3ddce52624cb92da03020cf9d9103f1758fbe539ad48623cfa8ad1d7a11ceb8733569f263681221bee80a07566074ec41f7990bdc60835026626f51c702a4d114ae850d9b402fcebe552441a59d0aa44ca43aea4c8847bc866255f41eb57e29e07631a17020d5b49baa8be2e4b63117fd292634bafda4fda0a8e85eb5c1804ab0edb8f392fbff337d7a640bf886c50283ca70fb2eb991296f5acc2a2a28495395b59d880ac3428f5ac118a4143e990737f3b1f4851ccfbc6b8b65e91fb65f39014313a77bd2a84c9cf23ebb731ed8de256add7b003ec2a416100ca1815daab73f6f07b81bff0785636d9f9f3138db4e55565f0bf489bad920d869962336e3cb0d01fe48d382f42a1df840797f4d85fc290de4d2d36924de3842c5edfc0f2687b819ec8c952102a859e0e13caf27be4c2dd58dc00bdda420fbed65c8e45c4e5e831f09033050ebf68f7ac7dcff7da1c1bc5afd8961b07b020d62cb3aacb70c3556694d6b229f86bf2f0f23be17162536208168cc3977c437f85f3082689f62b175c4e47b24d3618f55d9ff64ea7a9c5ea8a52010ead97aea0ff102c68c4d0a2ffa5b518faf5b27f50a4eb3ca09e2cfae03b650a4a5ba48f2b8f9b8ec0e84be21dbc1288dc83bf958e39dfd997b662d06931df067644ae7d830a0311a0545600e1b2eb7140f99ab067f5b3d52faef12170e68180b10f0ffec3ce07902af8cf6a1200805721a6ed56de8f6e16f97ba28c7929a35937ec1bc700721b96e6bfd471097a351f3b0d6b5aedbfad1beb8cec71d04177dcc6b14b127f9c9ded749648cbeafc3473eb921b882937378bd803731e9b8b3b1a851195acb897b50b6331674849e8bac60d51ade1b322d3168ccafa882c414bde73fa8c35567dc2d9dd0e6cf996c8a74cc344b98821f036687e2dd8ba4a80fcfc0dba82388f2c52ac6668f4bb10d2eb3bb501aa7383f3333a86497f256d434459d17f617ae585f42d280880cb0253558c0c47a6ee39d44db9da2409bbb4a01f5e38b6c399a01ccfbb25bfbb0def34b118362647d645295ab29a1ca47e4d88b29e6cda0c21a614c85687b4342a7ccabf022ce537f59ad55848d4048932d95d1fd8a8fea2b40f84ee00125f6f32a0ba641b066260d596246dc2c8d44db6c7a751e5132727bcbbfe79b521c6286078d0bcf99cc739a14949869100f25b3e1150fcf3cc773fbd85bfd0a9cf363023feab6fb842a454377c3c9f4cf03b9129e92825e7fcaf9f9175df81a2d78f237609cb1a1530842511d364919ddc58e32fc6ef94a80a9d86c947085cc4be3313b0fc3b2120011c79eb202b9a129430850080b0bb7146ccb1cb59a0a6edf6071cc49c021a0683d9db547bd7c1e5ae8a6be2c328d01913888b16743cdc7443c05f111802f7d19b6edfc8f730131e62df85a5983135bfb5ddc4e8d55555b3777abfa4240291ad841f596cd6915178f4a4bf1465e1d4f96dc1746385366419311ff696fefbe5fc6c688420fdef5e75b6752fc8748fc0ea6fb4dfe3ef99460e272ed53f69a318a2eeade78fa26fc3a96412e79946fa516e089cb60d7f40d9a189c06c7d3ea1a81eaaa9ce1e3cf3d6ca1561c2b95d91f4a7a46e7b64a997d3860cd4bc9aa41e3760e567fa7d4112eb7d2fc3f103b781a7d0c68b9694ae615206341514de2c0b63703a1615bff08e8424c82151af4c3755a63196b92272e5270d540b88dee94b86b8d2f4be64ee2cc733a8f08f3915d7e08df1000f31d24eb19ee41b83f2ab6a65a35ddd10ad16aaa55a921c8a99a2050ef59c1da75ee549ec8987578a9678837cfab1505158ec189fdc0ce6a02ce7686c732cf58a3ee2cace7981856fc167cb6de13104bfbe37d2e03e4d3acbbb470e5a1ea32002344dbd9a843571831efd2597f700a79b251d3a4be02acbad22c82c41758ceadf8d947ac64b5d984d6464060c8e53309250e2c"}, &(0x7f0000000100)=0x1008) flock(0xffffffffffffffff, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x1, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 4m44.420829582s ago: executing program 1 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2805004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m43.421226739s ago: executing program 1 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = getpid() (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x79) (async) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000001e40)=0x5) (async) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="6d657d0000000000000200"], 0xc) (async) write$vga_arbiter(r8, &(0x7f0000000200)=@unlock_all, 0xb) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r9 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r9, 0x0, 0x0) 4m42.767826918s ago: executing program 1 (id=895): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x1000) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000040)=0xfffffe96) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0xc, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) 4m42.498011646s ago: executing program 32 (id=895): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r8, 0x1000) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000040)=0xfffffe96) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0xc, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) 9.219660821s ago: executing program 5 (id=1659): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48045}, 0xc0) 9.144977537s ago: executing program 2 (id=1661): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.121235216s ago: executing program 5 (id=1662): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x33, &(0x7f0000000340)=ANY=[@ANYRES8], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x1a8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) write$6lowpan_enable(r2, &(0x7f0000000300)='0', 0x1) read$FUSE(r2, &(0x7f00000027c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000040000028008000b00b528a214ac5bef15a7178e0593e9310f8e030652de57e7", @ANYRES32=0x0, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0)) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x8, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) gettid() 7.969695046s ago: executing program 2 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x25, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x2a) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 7.792608493s ago: executing program 5 (id=1664): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010f69486ee43de2fc8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050023080000240012800b000100697036677265000014000280060002000a000000060003000b000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000090a010400000000001400000a0000040900020073797a310000000008000a40fffefffc0900010073797a3100000000080005400000000b0400128008000340000001309614000000140a2003000000000000000002000009140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mq_open(0x0, 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x51, &(0x7f0000000180)={[{@nofavordynmods}, {}], [{@context={'context', 0x3d, 'staff_u'}}]}) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000003c0)=""/3, 0x3}], 0x2, &(0x7f0000000540)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x0) capset(0x0, &(0x7f0000000040)) fallocate(r7, 0x1, 0xa, 0x20000) 7.168584876s ago: executing program 4 (id=1667): getpid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.013396874s ago: executing program 2 (id=1668): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) fadvise64(r0, 0x76903830, 0x1000, 0x1) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000240)=0x3, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}, 0x1, 0x0, 0x0, 0x8018}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="25982f4d39ce0a3e6146cb03a584117e824ea07b98e20c6781d76bb767bfcaf5f595db981addebba0969f92507fe99cb9273f7a3863d8e66b714af5566c60d405e04581c0ec23b793efea2780392e8cf856eaabade67f1d0be91d403ab6df577911640ca8f2ec60a17512a5f9f60ea7c20f92e00d6529d0147901cf928cd61105a5f2123454a1c7a3841f3e100da5bd23c221f4f2b273efc887abee68e11a0836e6fc99dca189ff6433fe4f14911547b2ccf32120f9392bf84480398e6c7f5d2ff568a6f502636a12621d49475bf3f4b394364e4ad444ac989a9e3da0cd7abb9a524a864ff791b0726ad96b6228db61a0ee0f999c722d4f414de62348774c31016227b673644b51acf92261eb2f46d56d4190c8cb03112729e1ab47d4af0b1c5390a0508d96d7c7d417cc3e9aba990d2725ecd034a4badf81046e2c9fbd143cf343fb6584575b920d4cebe9903f20f55524f87d1ab6553bb5834e65ef8acfe9202561f7e4f79554bc490d66e6ef1bd732f0d1579402cac6f4ef0a63ddd26600393e20099b6764bb6bffea3e96ded764b35adf2b06e50cab948b0cc9a8d0d7b41a0d090cb"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x34, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 6.325490493s ago: executing program 3 (id=1670): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000300)=0x42fc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f000042c000/0x1000)=nil, 0x1000, 0x4, 0x80010, r1, 0x72540000) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.28110038s ago: executing program 4 (id=1671): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x4, &(0x7f0000001b80)=ANY=[@ANYBLOB="18010000000000000008000000000000850000006d00000095845dabac7e68bb63e82d31c8376929373c7b362c91c17e2ec1b627897b20d867ee3addd2110fb147ef1f5ac9cccc4fe17a99ffabe61fec39b4c94d1d4cfa7a", @ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000006480)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000300)="d67a7be22ced32798dda9560c09d21bc45ff88064243242bb95235a1515051143007c30770afa4fe80c9fcd7a879dcd7bf7c587df9d4c836f3754edc2f4c2f300b6fd5efa0c716a5ff855bd080b9e208749c656f", 0x54}, {&(0x7f0000001600)="b99adc1f39d521a6dcc42b69d0b0878cc99bbf0ecbead998c8290d57d666a872eecaa4680c5d2dfc59d6d19e197e5cd0e33c1888377ded0ba47e0f", 0x3b}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="3924e0cce2f48ffefd4598c921", 0xd}, {&(0x7f0000000540)="3924ef37d5094793922328da38cc64cb8316e0c1081b5d0c5dc830f3d27dd0ef79eec7f77717ffa104dc34189396774bc5310d10ddc8f762131c62141695becfcf9d6db3c47b3cb29e066fabda15987d1f90282bbfba73", 0x57}, {&(0x7f0000001640)}, {&(0x7f0000001940)="f8c2d8347c5f9709e3bb56cc0c2666d9859ad4e424e87d47768b2c4537839ca03fe27bfe456fb513fa4a7e27f3313fb992191812b472c08c3534e5fade7973563c2b3ab88e9c312ad8e9ca2319d3efbbba286d9a981862df5da4264c47598e00", 0x60}, {&(0x7f00000019c0)="1fbc77719b4ce7e51026999d4cc538ea46181b0402aa4633168e97ffc1c99fa8aa40ffffcf410fa632de08a623c76de333298247d5b2336c6f0923413430c8476650691f9f2cf7643e1c6906ea0e2c64f4cdee6c061efa374ae92e5196d2bbce96892daecd2eada9f018334e45d3727b86846fd84e96ad42a266cc37d2a8e6a4a2209cbc2e249e4bb3707aa4f11fe2b20e5060567d91bb0f492019cc06d9afccf49f2badf0c0a3d1b61ca8fa1475f1e4fe23633fb217227e88a94238bf96e6f77b608b0a2ca9ad7ee2f8a3117600e5fb25c6", 0xd2}, {&(0x7f0000001640)="b1a002047ee63b726b10adcb476da7cdd1fde0e7cb2a0e1b78d69aff61868ee3da4d4faa3488f69d38179ef5e3d2cbed199516b8561536b2a0bdfabf", 0x3c}], 0x9, 0x0, 0x0, 0x4c050}}, {{&(0x7f0000001700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)="50cd45feca6de17f79e13c45a37cf0444580c0444ed217e33736e2942ed2a9120e9447a9175a8787358cfb3f41a9c65f2b0caa5a80036e88b0120051eff84b68d6100b275136e1dd49854ab0695646add72217cfa2a3372ce695381786c7ceccea63272c652717ddce258e23253a5976209b862ea2e797ae31a8a33622262cbd17f99826b8b0250556753e3c", 0x8c}, {&(0x7f0000001840)="999fb3ee4bba0a079e9a1b16f8ebb4c3e2bc9fe3626b9f24ecda3f4fa4427977006bcdc75cfbd5cf51fc4692896068b1cc3c2e116ac0d3f28765a78d901626818fa98c9917ab2884b0af038db42dd9db57c482802cfae6b1a88af318896d172242c01458003c2838a17b73f71d2767d6ea1777ebe64c8da8e335838421fa73c55e82b0d8f521e111bcaa5422c2f23b7e47d4", 0x92}], 0x2, &(0x7f0000001c00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, r1, r1, r3, r3, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r4, 0xffffffffffffffff, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r4, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8, 0x5}}, {{&(0x7f0000002580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002600)="cbd1b63e3a679eef7fd8656520e328cc43b0304c8ab35dd890efc616cde96a9177e7de8071083c7b444ca5bbe617d3c4ecd1fc6ac1fb9d42422dc1b2293508fd5a996b8527998fab1d2956e279e854fe7cbad65952795b8de04847cab96e2e34a14b158dd81abab6a58279a885638cf8326cc9629a", 0x75}, {&(0x7f0000002680)="df439b219e28812b438a95e838be5dc59de432504aeae187d2f7d8a478a0ef7d53fc1f00885007082281677ec9d9210534445a5cb8876ded4617fe5ae1e5e6a12da508f1ca63a07a4ab65ca1434697c11654f78b6f8c02ec752b227e1061ea3fe803e379ec5ad645f4f8de0ac08baa325f3ffc4ddf1e753cdc6da2b0d202fc7c7e6ed27551e86598cf7a373d62ae797cdaecd254d1372178e59068c81edd0256298081440392b6ff333330e7c666dae99cff9628db6698a18b7e29903cb40e25b99e774a9517cd1b237c85cb0cf2365031e4bc520bf4c127", 0xd8}], 0x2, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x80, 0x91}}, {{&(0x7f0000006180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000006200)="84fe077a3cb77e8d17b5fe3bb9d7fb4978b29a3e2fa4790131ae60768f337d4f43f7cc86551496983c4a531322813a0192bb953888567a2b34a4462976ae54b00d1ea4664c5fa12a0b89dd47ea7ae0db", 0x50}, {&(0x7f0000006280)="7522cc40cf19a20e0b8965a65454cd8af0d8402cfcd17a4997f84e0668819817209dd8c18a9df8953c81260346a566dab556f1165b56979520d4353214f82226eee6e01b0d3ec231dc351258bc615ca67b6722ae6136f2b6b26c", 0x5a}, {&(0x7f0000006300)="a518aac77597869da5b78557f30932b17d93b234b9340c45c8ac01d04b95a7229a6ec5a9f8f2b1b07465df116e22ae7d5d7588493ab38a3a3772910acddc249f35c4eda2d6c71a619c1b8bbd06ee3bdebf25c166654cb7613de6feb2a8d22975", 0x60}, {&(0x7f0000006380)="8150c27f5e80a681579d17324426ccf99fe78c69713debed59c3a80eac4ad0b84496b6cd9987d1e9df2f9174b98bfa192c2ddb6a201ef9312e4a781aa9a3c6c24750b3f7f134a24fce287ef43098eb53a35cb001be0e92940db7e0854f9ac9130a0893bb19eb094684af0c9aa95e9565168bf2c69303c0b7a34222adb0f122e14e2b03a21f13d048d364f733772c", 0x8e}], 0x4}}], 0x4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = getpid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "f9808039360bcc2b16d413871108db2bf1b8e11467"}, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r8, r7, 0x0) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) accept$alg(r9, 0x0, 0x0) syz_pidfd_open(r5, 0x0) 6.188093447s ago: executing program 5 (id=1672): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x608081, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000040)) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@bcast, @rose, @rose, @rose, @bcast, @default, @bcast, @default]}, &(0x7f0000000100)=0x48) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x1, 'dvmrp1\x00', {}, 0x6}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x0, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@esp={{0x30}, {[0x4d2, 0x4d6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x2, 0x0, 0x0, 0x1, 0x2], 0x2, 0x4}, {0x1, [0x0, 0x4, 0x4, 0x1, 0x6], 0x2, 0x1}}}}, {{@ip={@loopback, @rand_addr=0x64010100, 0x0, 0xff000000, 'xfrm0\x00', 'vxcan1\x00', {}, {0xff}, 0x21, 0x4, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000540), &(0x7f0000000580)=0x14) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={0xffffffffffffffff, r2}, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getgroups(0x2, &(0x7f0000000700)=[0xee00, 0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r6 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000008c0)={{0x0, r3, r4, r5, 0x0, 0x12, 0x5}, 0x0, 0x0, 0x9c2, 0x2, 0x3, 0x10001, 0xffffffff, 0x7, 0x9, 0x7, 0xffffffffffffffff, r6}) syz_open_procfs$pagemap(r6, &(0x7f0000000940)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000a00)={0x9, &(0x7f0000000980)=[{0x7, 0x4, 0x5, 0xf3f5}, {0x7, 0x2, 0x43, 0x2e2}, {0x9, 0x30, 0x7, 0x8}, {0xfffc, 0x7, 0xf5, 0x7}, {0x7fff, 0x1, 0x5, 0x1}, {0x9e, 0x5, 0x9, 0x7}, {0x9, 0x81, 0x7, 0x2}, {0xd6, 0x7, 0x1, 0x2}, {0x0, 0x40, 0x3, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000a40)) syz_usb_connect(0x2, 0x359, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x9a, 0xaf, 0xbb, 0x20, 0x681, 0x10, 0x9628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x347, 0x1, 0x9, 0x0, 0x10, 0xc, [{{0x9, 0x4, 0x5e, 0x4, 0xc, 0xd2, 0xb1, 0x93, 0x6, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "50b1d3d1b788"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x106, 0x4, 0x64}, [@acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x2d18}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x20}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x44, 0x5, 0xfb}]}], [{{0x9, 0x5, 0xd, 0x1, 0x200, 0x4, 0xfb, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x10}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x5, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x1, 0x5, 0xe}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x4, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x10, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xb, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x0, 0x6, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x0, 0xae, 0x6, [@generic={0x1f, 0x21, "69678d14b9c08b2a1e4951b1e236c5572d1a98139b7a0e85e5e9742461"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x5, 0x48, 0x3, [@generic={0xb1, 0x22, "a3ba4dcb16cc959dae7ca1289026704ee454d117c42bd78d2b412322b59b18b5a26e1ad3bf516168dfc4d10e1abd09c89b0c7e80ea38d4045788631434428df40ecde55ef11f60f61cbcdb2c1f544744becf642e6e8605ec107350867e878fa774d4a7691f4d0edd7dab69d5348da94748877e40b9b70e13d58c983e91187b8b6d54980c6995ebb4dbbdc9e52684c915073fd75976ce99018954e95e9d1529f6f9454f8630324c3c51914a79846fd3"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x85, 0x0, 0x200, 0xa, 0xd7, 0x5, [@generic={0xcd, 0x3a, "912a718528cd9968dd55cbc623b79579599304d7fc8f4c7edbb6168fd5c867e30f965833cfda23662c348082f655fbc588601b5f1db790114b592872ab2830beb714c58418bdce85d923cb427f1f7e00180cb24d6ffde76a3c4ce5808101e36ffc5bb8f92ea528566f480e8018d384a0ac9537476f65bda7dead45463d7949f790b9ca12ab6253fd47525b965303db211972e7b5d63819074499dd9236690d2804edc18ce3bc3ca558351847a626da14699245504bba3b8d8cd5e2058cc36ff5524873079ec1a98911311b"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x1, 0xb5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xdb, 0x81}, @generic={0x97, 0x21, "56a01971344a5540cdb7c3feb459b01eb0df06218032308b44a9331a1f2ff545e1fe61117b6ebdf0617b7f8aa5de18b84f47c7424d165c4e9a899841622175affa044d58c86bb8d42417097ac9723fcd13a9c41ecfec54bfc2384de4227fe20cab630b64dd0cf0cfe63741131fe3d1bcd16a7a92fda998cd76f3bb7f5489a9d8448279ecc8024f0514557511a302e6b0b9db615b86"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x7, 0x4, 0x97}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x310, 0x1, 0x1, 0x0, 0x40, 0xcb}, 0x4b, &(0x7f0000000e80)={0x5, 0xf, 0x4b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "73dc7f42eadc51eb6aa91812bc089c27"}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x10, 0x0, 0xe98, [0xff0000, 0xffff3f, 0x0, 0xc0, 0x30, 0x3fcf]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x8, 0xbb, 0xc, 0x7}]}, 0x3, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x401}}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001000)={r1}, 0xc) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000010c0)={0x79, 0x0, 0x3ab}) recvfrom(0xffffffffffffffff, &(0x7f0000001140)=""/206, 0xce, 0x60, &(0x7f0000001240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) write$sysctl(0xffffffffffffffff, &(0x7f00000012c0)='0\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f0000001340)={0x80}) ioctl$MON_IOCX_GET(r8, 0x40189206, &(0x7f0000001480)={&(0x7f0000001400), &(0x7f0000001440)=""/53, 0x35}) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0), 0x8000, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x64}}, 0x0) 5.314324681s ago: executing program 0 (id=1674): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48045}, 0xc0) 5.192722417s ago: executing program 4 (id=1675): socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) 5.169616279s ago: executing program 0 (id=1676): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="61050672020302040404c53851b87bd89dcc29944aea18c91f3851bda0f1a5371f772e8f14088301423e0cecdf3f7cf1fb5b56c9e6458c1ec753e9a57bfefc79da13495bec5073ac8d4e4b320405183d0beadc907beef83bbcd8d283b93773d722"], 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) 5.141271086s ago: executing program 2 (id=1677): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_io_uring_setup(0x333, &(0x7f0000000000)={0x0, 0x7421, 0x8, 0xfffffffd, 0x16b}, &(0x7f00000006c0)=0x0, &(0x7f00000007c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54ec52da", @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25460000000e0001006e657464657673696d000000300002006e657464657673696d30000008008e00010000000c008f0002000000000000000c0090000000008000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@caif=@dgm={0x25, 0x8, 0xd}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x67e9, 0xe, 0x0, 0x0) 4.571629578s ago: executing program 0 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10000000000) 4.570275827s ago: executing program 2 (id=1679): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880), 0x10) shutdown(r4, 0x200000000000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x4000000) r6 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000140)={0x30000001}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$netlink(0x10, 0x3, 0x0) 4.376477445s ago: executing program 3 (id=1680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket(0x2b, 0x80801, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x7c3ac1, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x658d, 0x2, 0x1}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x2) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 3.881540397s ago: executing program 4 (id=1681): getpid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.646760622s ago: executing program 0 (id=1682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000000c0), &(0x7f00000002c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r5, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0x400488c) 3.019692374s ago: executing program 5 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000002c0)=0xfffffffffffff8dd) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) read$msr(r6, &(0x7f0000000180)=""/61, 0x3d) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1, @in6=@remote, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffff2, 0x0, 0x2, 0xfffffffffffffffe}, {0x200000000000, 0x0, 0x0, 0xc}, 0x0, 0x10001, 0x1, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x1, 0x0, 0x0, 0x8, 0x3}}, 0xe8) 2.331492183s ago: executing program 3 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002100)={'syzkaller1\x00', 0x2}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x10000000000) 2.312238246s ago: executing program 4 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffc0900010073797a30000000000900030073797a300000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b0001006e756d67656e00001c00028008000340000000000800"], 0xcc}}, 0x0) 1.938463446s ago: executing program 5 (id=1686): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) r2 = syz_open_procfs(r0, &(0x7f0000000100)='clear_refs\x00') syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585"], 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 1.052276574s ago: executing program 3 (id=1687): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000280)="c4051fc219aad58236a513957d0ab105dbec5a6d4b060f5917160481ddb7510387bd60291eabbff12d35ea98fc967822f31e439a76291fe18f945c94a9597a14359300e19f29e61ba58f9bf0d7528040d5c98ed9c5dc3dab0d9db8abdc40f0b2c0c9c538e4492e9ec2a931b7f753cd3e626525615f5a6f62d8", 0x79, 0xfffffffffffffffe) keyctl$instantiate(0xc, r6, &(0x7f00000000c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0xfffffffffffffffb) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c00000800018009000000140003"], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000056f60090878897126d2022215230b1e31e6150f1730300000000000000ab05e3ba224552f639e8122008de03a04b3a6b96ce870cb82b37b591dcbd7075525b7ae4ed0434c0115b381bff4608b1abd14e5a0f856781868efdb215ca18da504b9c558d0dc3a1a3b422de7cd2ea57e04dc40123a1aa2af198db4fc0fc9c14266d81e250b2639ceac3c41d9e74fefb6b994937f5ca4b3a165de2c2e23f8cf493a0df0a1c8642edec4365c1bc0a5300b25af307012c195934d84c7298b6235fae1c4987c229f0e2abf0371d947f", @ANYRESDEC=r5, @ANYBLOB="0001ffffffffffff00fc1200c30f08000300", @ANYBLOB="620c58e681911d3daf47e664b53c2780fbabdfc8e882cdd2ca03916de0c3242a514e6eb1907a16b20fb4befe4616b5dd267c66b0000000000000000026dfe1d6bc846c36b69dd8c4ac0dccac8341d522b20e67822f7823e02459bb9ed1fabb3c356e34f41ee8e80a6ade3e0000000086d2b194bc26491f1867e0f756a34f23bcf448", @ANYBLOB="e10013000a000600d1d5a24c3da52ab2e273215cff08021126000108f9e55d96c8d247804fa520e97027b498f787683066dbc3d1858739e43e16844b02000095bf501ddd6206007fbc4d542e6eed772601519be41c8fea933e08055c7b1292b660c0cfeee49a6e20e56af1cfac8eccf593e0d36a002d21d82e94f9135e8a0cb2038ad076320eb0c5219fd839d60926b4ccdd7a740b11d7d041dd9061e8744dfdee825022ea2096b1057aade2e7296be5af2ef84e2748dfaeed67fd44", @ANYRES16=r2, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x40814) 994.729891ms ago: executing program 0 (id=1688): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="61050672020302040404c53851b87bd89dcc29944aea18c91f3851bda0f1a5371f772e8f14088301423e0cecdf3f7cf1fb5b56c9e6458c1ec753e9a57bfefc79da13495bec5073ac8d4e4b320405183d0beadc907beef83bbcd8d283b93773d722"], 0x61) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x5, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0x81, 0x6d, 0x26, 0xfa, 0x7, 0x95, 0xd}}) 960.844918ms ago: executing program 3 (id=1689): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_io_uring_setup(0x333, &(0x7f0000000000)={0x0, 0x7421, 0x8, 0xfffffffd, 0x16b}, &(0x7f00000006c0)=0x0, &(0x7f00000007c0)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101c, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54ec52da", @ANYRES16, @ANYBLOB="010025bd7000ffdbdf25460000000e0001006e657464657673696d000000300002006e657464657673696d30000008008e00010000000c008f0002000000000000000c0090000000008000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@caif=@dgm={0x25, 0x8, 0xd}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x67e9, 0xe, 0x0, 0x0) 954.102019ms ago: executing program 4 (id=1690): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x1) execveat(r1, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 891.856351ms ago: executing program 2 (id=1691): socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) 588.807981ms ago: executing program 0 (id=1692): socket(0x2a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) 0s ago: executing program 3 (id=1693): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000040000000200000000000011040000000000000000000000000000020000000002000000000000060200000002"], 0x0, 0x54}, 0x28) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000340)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 2, setting to 64 [ 516.811478][T10258] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 516.852758][ T5838] usb 1-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 516.958386][ T5838] usb 1-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 517.081255][T10258] usb 4-1: Using ep0 maxpacket: 8 [ 517.086904][ T5838] usb 1-1: config 9 interface 94 has no altsetting 0 [ 517.089383][T10258] usb 4-1: unable to get BOS descriptor or descriptor too short [ 517.107134][T10258] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 517.112081][ T5838] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 517.115473][T10258] usb 4-1: config 4 has an invalid descriptor of length 119, skipping remainder of the config [ 517.130981][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.134835][T10258] usb 4-1: config 4 has no interface number 0 [ 517.162692][ T5838] usb 1-1: Product: Ё [ 517.163798][T10258] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 517.171349][ T5838] usb 1-1: Manufacturer: Р [ 517.187902][T10258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.190108][ T5838] usb 1-1: SerialNumber: syz [ 517.205686][T10258] usb 4-1: Product: syz [ 517.240314][T10258] usb 4-1: Manufacturer: syz [ 517.252810][T10258] usb 4-1: SerialNumber: syz [ 517.988519][ T5838] usb 1-1: USB disconnect, device number 36 [ 517.997160][T10258] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 518.007918][T10258] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 518.019265][T10258] uvcvideo 4-1:4.147: No valid video chain found. [ 518.053263][T10258] usb 4-1: USB disconnect, device number 29 [ 518.241863][ T5988] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 518.541052][ T5988] usb 3-1: Using ep0 maxpacket: 8 [ 518.548371][ T5988] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 518.561213][ T5988] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.874430][ T5988] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 521.186590][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 521.314483][ T5988] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 521.404692][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.607224][ T5988] usb 3-1: config 0 descriptor?? [ 521.736057][ T5988] usb 3-1: can't set config #0, error -71 [ 521.927168][ T5988] usb 3-1: USB disconnect, device number 44 [ 522.594333][T10864] vxcan3: entered promiscuous mode [ 523.309646][T10873] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 523.317605][T10873] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 524.945435][T10903] binder: 10899:10903 ioctl c0306201 200000000180 returned -14 [ 524.951027][ T5929] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 525.009165][T10904] binder_alloc: binder_alloc_mmap_handler: 10900 200000ffc000-200000ffd000 already mapped failed -16 [ 525.232301][ T5929] usb 1-1: config 9 has an invalid interface number: 94 but max is 0 [ 525.241220][ T5929] usb 1-1: config 9 has no interface number 0 [ 525.248740][ T5929] usb 1-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 525.277737][ T5929] usb 1-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 525.302496][ T5929] usb 1-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 525.329415][ T5929] usb 1-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 525.356166][ T5929] usb 1-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 525.383108][ T5929] usb 1-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 525.404897][ T5929] usb 1-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 525.428929][ T5929] usb 1-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 525.453538][ T5929] usb 1-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 525.469107][ T5929] usb 1-1: config 9 interface 94 has no altsetting 0 [ 525.478276][ T5929] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 525.488614][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.496837][ T5929] usb 1-1: Product: Ё [ 525.503546][ T5929] usb 1-1: Manufacturer: Р [ 525.508055][ T5929] usb 1-1: SerialNumber: syz [ 525.511132][T10258] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 525.672808][T10258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.694907][T10258] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 525.743528][T10258] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 525.777333][ T5929] usb 1-1: USB disconnect, device number 37 [ 525.791452][T10258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.837548][T10258] usb 4-1: config 0 descriptor?? [ 526.061007][ T5988] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 526.069604][T10258] ath6kl: Failed to submit usb control message: -71 [ 526.081892][T10258] ath6kl: unable to send the bmi data to the device: -71 [ 526.098183][T10258] ath6kl: Unable to send get target info: -71 [ 526.168949][T10258] ath6kl: Failed to init ath6kl core: -71 [ 526.187138][T10258] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 526.215613][T10258] usb 4-1: USB disconnect, device number 30 [ 526.241164][ T5988] usb 3-1: Using ep0 maxpacket: 8 [ 526.247858][ T5988] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 526.273234][ T5988] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.315361][ T5988] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 526.368943][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 527.109978][ T5988] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 527.167810][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.291224][ T5988] usb 3-1: config 0 descriptor?? [ 527.909978][T10936] FAULT_INJECTION: forcing a failure. [ 527.909978][T10936] name failslab, interval 1, probability 0, space 0, times 0 [ 528.001836][T10936] CPU: 0 UID: 0 PID: 10936 Comm: syz.0.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.001867][T10936] Tainted: [L]=SOFTLOCKUP [ 528.001873][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.001883][T10936] Call Trace: [ 528.001890][T10936] [ 528.001897][T10936] dump_stack_lvl+0x16c/0x1f0 [ 528.001925][T10936] should_fail_ex+0x512/0x640 [ 528.001952][T10936] ? __kvmalloc_node_noprof+0x129/0xa40 [ 528.001977][T10936] should_failslab+0xc2/0x120 [ 528.002002][T10936] __kvmalloc_node_noprof+0x14a/0xa40 [ 528.002023][T10936] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.002047][T10936] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 528.002077][T10936] ? __lock_acquire+0x436/0x2890 [ 528.002103][T10936] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 528.002138][T10936] __kvm_mmu_topup_memory_cache+0x455/0x600 [ 528.002176][T10936] mmu_topup_memory_caches+0x25/0x170 [ 528.002199][T10936] kvm_mmu_load+0xd6/0x2390 [ 528.002219][T10936] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 528.002246][T10936] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 528.002277][T10936] ? __pfx_kvm_mmu_load+0x10/0x10 [ 528.002297][T10936] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 528.002327][T10936] ? kvm_check_and_inject_events+0x63d/0x1050 [ 528.002355][T10936] vcpu_run+0x39d2/0x5a80 [ 528.002390][T10936] ? __pfx_vcpu_run+0x10/0x10 [ 528.002422][T10936] ? rcu_is_watching+0x12/0xc0 [ 528.002444][T10936] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 528.002465][T10936] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 528.002495][T10936] kvm_vcpu_ioctl+0x76d/0x16d0 [ 528.002526][T10936] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 528.002555][T10936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.002579][T10936] ? do_vfs_ioctl+0x128/0x14f0 [ 528.002600][T10936] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 528.002621][T10936] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 528.002656][T10936] ? hook_file_ioctl_common+0x144/0x410 [ 528.002692][T10936] ? selinux_file_ioctl+0x180/0x270 [ 528.002715][T10936] ? selinux_file_ioctl+0xb4/0x270 [ 528.002739][T10936] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 528.002768][T10936] __x64_sys_ioctl+0x18e/0x210 [ 528.002791][T10936] do_syscall_64+0xcd/0xf80 [ 528.002816][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.002838][T10936] RIP: 0033:0x7fd27618f749 [ 528.002854][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.002870][T10936] RSP: 002b:00007fd276f7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.002886][T10936] RAX: ffffffffffffffda RBX: 00007fd2763e6090 RCX: 00007fd27618f749 [ 528.002898][T10936] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 528.002909][T10936] RBP: 00007fd276f7d090 R08: 0000000000000000 R09: 0000000000000000 [ 528.002919][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.002929][T10936] R13: 00007fd2763e6128 R14: 00007fd2763e6090 R15: 00007ffcd6c8dd98 [ 528.002955][T10936] [ 529.947129][ T5988] usbhid 3-1:0.0: can't add hid device: -71 [ 530.604997][ T5988] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 530.719908][ T5988] usb 3-1: USB disconnect, device number 45 [ 530.784178][ T30] audit: type=1400 audit(1767694918.823:1232): avc: denied { read write } for pid=10943 comm="syz.2.1211" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 530.842119][ T30] audit: type=1400 audit(1767694918.823:1233): avc: denied { open } for pid=10943 comm="syz.2.1211" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 531.991248][ T30] audit: type=1400 audit(1767694918.873:1234): avc: denied { ioctl } for pid=10943 comm="syz.2.1211" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x7b0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 532.052264][T10954] capability: warning: `syz.3.1215' uses deprecated v2 capabilities in a way that may be insecure [ 532.151279][ T5988] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 532.200567][T10956] mac80211_hwsim hwsim11 4: renamed from wlan1 [ 532.476408][ T30] audit: type=1400 audit(1767694920.313:1235): avc: denied { write } for pid=10953 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 532.506899][ T5988] usb 6-1: Using ep0 maxpacket: 32 [ 532.655177][ T5988] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 532.663539][ T5988] usb 6-1: config 0 has no interface number 0 [ 532.671321][ T5988] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 532.689893][ T5988] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 532.745286][T10960] netlink: 'syz.0.1216': attribute type 3 has an invalid length. [ 532.753663][T10960] netlink: 'syz.0.1216': attribute type 3 has an invalid length. [ 533.112401][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.120461][ T5988] usb 6-1: Product: syz [ 533.126604][ T5988] usb 6-1: Manufacturer: syz [ 533.131243][ T5988] usb 6-1: SerialNumber: syz [ 533.137898][ T5988] usb 6-1: config 0 descriptor?? [ 533.143713][T10949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 533.357335][T10965] netlink: 'syz.0.1218': attribute type 3 has an invalid length. [ 533.365379][T10965] netlink: 'syz.0.1218': attribute type 3 has an invalid length. [ 533.399308][T10949] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 533.478567][T10970] netlink: 'syz.4.1219': attribute type 10 has an invalid length. [ 533.619871][ T5988] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 533.634123][ T5988] asix 6-1:0.188: probe with driver asix failed with error -61 [ 533.810280][ T5929] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 533.974623][ T5929] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 533.985033][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.996077][ T5929] usb 5-1: Product: syz [ 534.000347][ T5929] usb 5-1: Manufacturer: syz [ 534.012535][ T5929] usb 5-1: SerialNumber: syz [ 534.104316][ T5929] usb 5-1: config 0 descriptor?? [ 534.472289][ T5929] usb-storage 5-1:0.0: USB Mass Storage device detected [ 534.671153][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 534.907477][ T5929] usb 5-1: USB disconnect, device number 36 [ 534.922344][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 534.965847][ T9] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 534.996994][ T9] usb 3-1: config 0 has no interface number 0 [ 535.005350][ T6402] usb 6-1: USB disconnect, device number 11 [ 535.028124][ T9] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 535.344740][ T9] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 535.355128][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.475020][ T9] usb 3-1: Product: syz [ 535.479421][ T9] usb 3-1: Manufacturer: syz [ 535.486486][ T9] usb 3-1: SerialNumber: syz [ 535.501692][ T9] usb 3-1: config 0 descriptor?? [ 535.611275][ T30] audit: type=1400 audit(1767694923.613:1236): avc: denied { map } for pid=10992 comm="syz.3.1226" path="socket:[31959]" dev="sockfs" ino=31959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 535.938295][ T30] audit: type=1400 audit(1767694923.613:1237): avc: denied { read accept } for pid=10992 comm="syz.3.1226" path="socket:[31959]" dev="sockfs" ino=31959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 536.041163][ T6402] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 536.191006][ T6402] usb 6-1: Using ep0 maxpacket: 8 [ 537.181907][ T6402] usb 6-1: unable to get BOS descriptor or descriptor too short [ 537.224956][ T6402] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 537.233222][ T6402] usb 6-1: config 4 has an invalid descriptor of length 119, skipping remainder of the config [ 537.244417][ T6402] usb 6-1: config 4 has no interface number 0 [ 537.429472][ T6402] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 537.441609][ T6402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.449712][ T6402] usb 6-1: Product: syz [ 537.454384][ T6402] usb 6-1: Manufacturer: syz [ 537.459017][ T6402] usb 6-1: SerialNumber: syz [ 537.722161][ T6402] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 537.739784][ T6402] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 537.747807][ T6402] uvcvideo 6-1:4.147: No valid video chain found. [ 537.873250][ T6402] usb 6-1: USB disconnect, device number 12 [ 538.170484][ T30] audit: type=1400 audit(1767694925.863:1238): avc: denied { accept } for pid=11009 comm="syz.0.1230" lport=40780 faddr=::ffff:100.1.1.2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 538.267540][ T30] audit: type=1400 audit(1767694926.303:1239): avc: denied { setopt } for pid=11018 comm="syz.4.1232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.125772][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 539.147458][T11029] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 539.254284][T11033] netlink: 'syz.0.1234': attribute type 3 has an invalid length. [ 539.262272][T11033] netlink: 'syz.0.1234': attribute type 3 has an invalid length. [ 539.357770][ T9] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 539.365645][ T9] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 539.383847][ T9] usb 3-1: USB disconnect, device number 46 [ 541.572376][T11047] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 541.578916][T11047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.586684][T11047] vhci_hcd vhci_hcd.0: Device attached [ 541.701388][T11047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1238'. [ 541.858906][T10258] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 542.062436][ T5988] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 542.125201][T11048] vhci_hcd: connection closed [ 542.142671][ T4018] vhci_hcd vhci_hcd.2: stop threads [ 542.155238][ T4018] vhci_hcd vhci_hcd.2: release socket [ 542.163745][ T4018] vhci_hcd vhci_hcd.2: disconnect device [ 542.502544][T10258] usb 37-1: enqueue for inactive port 0 [ 542.571501][T10258] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 542.651679][ T5988] usb 1-1: Using ep0 maxpacket: 8 [ 542.670121][ T5988] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 542.698915][ T5988] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.728193][ T5988] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 542.747064][ T30] audit: type=1400 audit(1767694930.783:1240): avc: denied { setcurrent } for pid=11063 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 542.766827][ T5988] usb 1-1: config 0 interface 0 has no altsetting 0 [ 542.766868][ T5988] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 542.766890][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.781916][ T5988] usb 1-1: config 0 descriptor?? [ 544.074278][T11083] netlink: 'syz.4.1249': attribute type 3 has an invalid length. [ 544.082365][T11083] netlink: 'syz.4.1249': attribute type 3 has an invalid length. [ 544.532871][ T5929] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 544.921223][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 544.949343][ T5929] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 544.979369][ T5988] usbhid 1-1:0.0: can't add hid device: -71 [ 545.014078][ T5929] usb 3-1: config 0 has no interface number 0 [ 545.069029][ T5929] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 545.194433][ T5929] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 545.685464][ T5988] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 546.303541][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.388027][ T5929] usb 3-1: Product: syz [ 546.434454][ T5929] usb 3-1: Manufacturer: syz [ 546.471367][ T5929] usb 3-1: SerialNumber: syz [ 546.577382][ T5929] usb 3-1: config 0 descriptor?? [ 546.918373][ T5988] usb 1-1: USB disconnect, device number 38 [ 548.034447][ T30] audit: type=1400 audit(1767694936.053:1241): avc: denied { map } for pid=11085 comm="syz.2.1248" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 548.074130][T11086] binder: 11085:11086 ioctl c0306201 0 returned -14 [ 548.121461][ T5929] usbtouchscreen 3-1:0.214: Failed to read FW rev: 0 [ 548.130336][ T5929] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 548.140992][ T30] audit: type=1400 audit(1767694936.053:1242): avc: denied { execute } for pid=11085 comm="syz.2.1248" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 548.315466][T10258] usb 3-1: USB disconnect, device number 47 [ 548.661001][ T5988] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 548.892574][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.909808][ T5988] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 548.927529][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 548.946361][ T5988] usb 1-1: Manufacturer: syz [ 548.957984][ T5988] usb 1-1: config 0 descriptor?? [ 548.975115][ T5988] uvcvideo 1-1:0.0: Found UVC 0.00 device (18ec:3288) [ 548.989998][ T5988] uvcvideo 1-1:0.0: No valid video chain found. [ 549.177750][ T5988] usb 1-1: USB disconnect, device number 39 [ 549.311088][ T5823] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 549.538603][T11138] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1265'. [ 549.576838][ T30] audit: type=1400 audit(1767694937.613:1243): avc: denied { transfer } for pid=11135 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 549.901078][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 549.926283][ T5823] usb 3-1: config 0 interface 0 has no altsetting 0 [ 550.220229][ T5823] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 550.230803][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.325546][ T5823] usb 3-1: Product: syz [ 550.329746][ T5823] usb 3-1: Manufacturer: syz [ 550.334544][ T5823] usb 3-1: SerialNumber: syz [ 550.347729][ T5823] usb 3-1: config 0 descriptor?? [ 550.574818][T11152] netlink: 'syz.0.1269': attribute type 3 has an invalid length. [ 550.583985][T11152] netlink: 'syz.0.1269': attribute type 3 has an invalid length. [ 551.078396][T11157] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 551.098718][T11157] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 551.126681][ T5823] gs_usb 3-1:0.0: Configuring for 3 interfaces [ 551.583557][T11164] FAULT_INJECTION: forcing a failure. [ 551.583557][T11164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.603805][T11164] CPU: 1 UID: 0 PID: 11164 Comm: syz.5.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.603838][T11164] Tainted: [L]=SOFTLOCKUP [ 551.603845][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.603855][T11164] Call Trace: [ 551.603862][T11164] [ 551.603870][T11164] dump_stack_lvl+0x16c/0x1f0 [ 551.603897][T11164] should_fail_ex+0x512/0x640 [ 551.603928][T11164] _copy_from_user+0x2e/0xd0 [ 551.603957][T11164] do_tcp_setsockopt+0x7f6/0x2c10 [ 551.603980][T11164] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 551.603999][T11164] ? proc_fail_nth_write+0x9f/0x220 [ 551.604024][T11164] ? __pfx_sock_has_perm+0x10/0x10 [ 551.604044][T11164] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 551.604070][T11164] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 551.604100][T11164] ? find_held_lock+0x2b/0x80 [ 551.604132][T11164] tcp_setsockopt+0xe2/0x100 [ 551.604150][T11164] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 551.604175][T11164] do_sock_setsockopt+0xf3/0x1d0 [ 551.604199][T11164] __sys_setsockopt+0x1a0/0x230 [ 551.604221][T11164] __x64_sys_setsockopt+0xbd/0x160 [ 551.604237][T11164] ? do_syscall_64+0x91/0xf80 [ 551.604260][T11164] ? lockdep_hardirqs_on+0x7c/0x110 [ 551.604282][T11164] do_syscall_64+0xcd/0xf80 [ 551.604306][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.604324][T11164] RIP: 0033:0x7f0874b8f749 [ 551.604339][T11164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.604357][T11164] RSP: 002b:00007f0875984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 551.604375][T11164] RAX: ffffffffffffffda RBX: 00007f0874de5fa0 RCX: 00007f0874b8f749 [ 551.604387][T11164] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 551.604397][T11164] RBP: 00007f0875984090 R08: 0000000000000004 R09: 0000000000000000 [ 551.604408][T11164] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 551.604419][T11164] R13: 00007f0874de6038 R14: 00007f0874de5fa0 R15: 00007ffd83a051e8 [ 551.604444][T11164] [ 552.553491][ T5823] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 552.694814][ T5823] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 552.989329][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 553.003358][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 553.018335][ T5823] usb 3-1: USB disconnect, device number 48 [ 553.174398][T11194] loop8: detected capacity change from 0 to 7 [ 553.212174][ T5828] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 553.242989][ T5828] loop8: partition table partially beyond EOD, truncated [ 553.491596][ T5828] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 553.540854][ T5828] loop8: p2 start 956478 is beyond EOD, truncated [ 553.797031][T11194] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 553.864950][T11211] netlink: 'syz.4.1286': attribute type 3 has an invalid length. [ 553.874183][T11211] netlink: 'syz.4.1286': attribute type 3 has an invalid length. [ 554.294651][T11194] loop8: partition table partially beyond EOD, truncated [ 554.424820][T11194] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 554.443061][T11194] loop8: p2 start 956478 is beyond EOD, truncated [ 554.512675][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 554.647264][ T5942] udevd[5942]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 555.100978][T11007] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 555.794002][T11007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.239493][T11007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.252456][T11007] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.399956][T11007] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.427513][T11007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.443499][ T30] audit: type=1400 audit(1767694944.483:1244): avc: denied { setopt } for pid=11239 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 556.464183][T11007] usb 3-1: config 0 descriptor?? [ 557.755159][T11256] program syz.5.1299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.023594][T11007] usbhid 3-1:0.0: can't add hid device: -71 [ 558.023732][ T5928] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 558.350711][T11007] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 558.400215][T11007] usb 3-1: USB disconnect, device number 49 [ 558.471069][ T5928] usb 6-1: device descriptor read/64, error -71 [ 558.710695][T11272] netlink: 'syz.2.1301': attribute type 3 has an invalid length. [ 558.719102][T11272] netlink: 'syz.2.1301': attribute type 3 has an invalid length. [ 559.111034][ T5928] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 559.251007][ T5928] usb 6-1: device descriptor read/64, error -71 [ 559.373102][ T5928] usb usb6-port1: attempt power cycle [ 559.913408][ T5928] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 559.983675][ T5928] usb 6-1: device descriptor read/8, error -71 [ 560.241216][ T5928] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 560.271619][ T5928] usb 6-1: device descriptor read/8, error -71 [ 560.386182][ T5928] usb usb6-port1: unable to enumerate USB device [ 560.461004][ T5927] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 560.631499][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 560.706032][ T5927] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 561.048292][ T5927] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.088304][ T5927] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 561.155967][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 561.168042][ T5927] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 561.183597][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.308025][T11321] binder: 11320:11321 ioctl 4008ae8a 200000000400 returned -22 [ 561.317678][ T5927] usb 4-1: config 0 descriptor?? [ 562.442855][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.809451][T11338] lo speed is unknown, defaulting to 1000 [ 562.815807][T11338] lo speed is unknown, defaulting to 1000 [ 562.833229][T11338] lo speed is unknown, defaulting to 1000 [ 562.863641][T11338] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 562.920218][T11338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 563.107515][T11338] lo speed is unknown, defaulting to 1000 [ 563.124046][T11338] lo speed is unknown, defaulting to 1000 [ 563.139460][T11338] lo speed is unknown, defaulting to 1000 [ 563.153920][T11338] lo speed is unknown, defaulting to 1000 [ 563.162979][T11338] lo speed is unknown, defaulting to 1000 [ 563.273168][ T5927] usbhid 4-1:0.0: can't add hid device: -71 [ 563.279164][ T5927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 563.322165][ T5927] usb 4-1: USB disconnect, device number 31 [ 564.294757][T11354] FAULT_INJECTION: forcing a failure. [ 564.294757][T11354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.386130][T11354] CPU: 1 UID: 0 PID: 11354 Comm: syz.0.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.386160][T11354] Tainted: [L]=SOFTLOCKUP [ 564.386167][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.386178][T11354] Call Trace: [ 564.386185][T11354] [ 564.386193][T11354] dump_stack_lvl+0x16c/0x1f0 [ 564.386223][T11354] should_fail_ex+0x512/0x640 [ 564.386255][T11354] _copy_from_user+0x2e/0xd0 [ 564.386284][T11354] do_sock_getsockopt+0x3a1/0x410 [ 564.386310][T11354] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 564.386331][T11354] ? __fget_files+0x204/0x3c0 [ 564.386369][T11354] __sys_getsockopt+0x12f/0x260 [ 564.386393][T11354] __x64_sys_getsockopt+0xbd/0x160 [ 564.386410][T11354] ? do_syscall_64+0x91/0xf80 [ 564.386434][T11354] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.386457][T11354] do_syscall_64+0xcd/0xf80 [ 564.386482][T11354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.386500][T11354] RIP: 0033:0x7fd27618f749 [ 564.386516][T11354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.386533][T11354] RSP: 002b:00007fd276f9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 564.386551][T11354] RAX: ffffffffffffffda RBX: 00007fd2763e5fa0 RCX: 00007fd27618f749 [ 564.386564][T11354] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 564.386575][T11354] RBP: 00007fd276f9e090 R08: 00002000000000c0 R09: 0000000000000000 [ 564.386586][T11354] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 564.386597][T11354] R13: 00007fd2763e6038 R14: 00007fd2763e5fa0 R15: 00007ffcd6c8dd98 [ 564.386628][T11354] [ 564.823550][ T30] audit: type=1326 audit(1767694952.863:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 565.365561][T11364] FAULT_INJECTION: forcing a failure. [ 565.365561][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 565.398184][ T30] audit: type=1326 audit(1767694953.393:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 565.426061][ T30] audit: type=1326 audit(1767694953.393:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 565.432130][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.2.1326 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.432155][T11364] Tainted: [L]=SOFTLOCKUP [ 565.432161][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.432170][T11364] Call Trace: [ 565.432175][T11364] [ 565.432181][T11364] dump_stack_lvl+0x16c/0x1f0 [ 565.432206][T11364] should_fail_ex+0x512/0x640 [ 565.432230][T11364] ? kmem_cache_alloc_noprof+0x62/0x770 [ 565.432249][T11364] should_failslab+0xc2/0x120 [ 565.432270][T11364] kmem_cache_alloc_noprof+0x83/0x770 [ 565.432285][T11364] ? auditd_test_task+0x131/0x2f0 [ 565.432307][T11364] ? audit_log_start+0x29b/0x950 [ 565.432335][T11364] ? audit_log_start+0x29b/0x950 [ 565.432358][T11364] audit_log_start+0x29b/0x950 [ 565.432384][T11364] ? __pfx_audit_log_start+0x10/0x10 [ 565.432413][T11364] ? find_held_lock+0x2b/0x80 [ 565.432441][T11364] audit_seccomp+0x60/0x290 [ 565.432465][T11364] __seccomp_filter+0xa91/0x11f0 [ 565.432491][T11364] ? __pfx___seccomp_filter+0x10/0x10 [ 565.432518][T11364] ? fput+0x70/0xf0 [ 565.432537][T11364] ? ksys_write+0x1ac/0x250 [ 565.432559][T11364] __secure_computing+0x287/0x3b0 [ 565.432583][T11364] syscall_trace_enter+0x89/0x220 [ 565.432607][T11364] do_syscall_64+0x42b/0xf80 [ 565.432629][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.432645][T11364] RIP: 0033:0x7f88f3f8f749 [ 565.432658][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.432673][T11364] RSP: 002b:00007f88f21f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 565.432688][T11364] RAX: ffffffffffffffda RBX: 00007f88f41e6090 RCX: 00007f88f3f8f749 [ 565.432698][T11364] RDX: 0000200000000040 RSI: 0000000000000016 RDI: 0000000000000006 [ 565.432708][T11364] RBP: 00007f88f21f6090 R08: 0000000000000000 R09: 0000000000000000 [ 565.432717][T11364] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 565.432726][T11364] R13: 00007f88f41e6128 R14: 00007f88f41e6090 R15: 00007ffc97c136d8 [ 565.432748][T11364] [ 565.432755][T11364] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 565.449752][ T30] audit: type=1326 audit(1767694953.393:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 565.691611][T11364] audit: out of memory in audit_log_start [ 565.694439][ T30] audit: type=1326 audit(1767694953.393:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 565.726491][ T30] audit: type=1326 audit(1767694953.393:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 565.830635][ T30] audit: type=1326 audit(1767694953.393:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 566.101763][ T30] audit: type=1326 audit(1767694953.393:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88f3f8f783 code=0x7ffc0000 [ 566.761568][ T5823] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 566.862471][ T6402] IPVS: starting estimator thread 0... [ 566.922160][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 566.935868][ T5823] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 566.962420][ T5823] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.973805][ T5823] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 567.273858][T11397] IPVS: using max 43 ests per chain, 103200 per kthread [ 567.327934][ T5823] usb 1-1: config 0 interface 0 has no altsetting 0 [ 567.334775][ T5823] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 567.377658][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.396817][T11402] lo speed is unknown, defaulting to 1000 [ 567.416342][ T5823] usb 1-1: config 0 descriptor?? [ 568.387486][T11411] overlayfs: missing 'lowerdir' [ 571.048676][ T5823] usbhid 1-1:0.0: can't add hid device: -71 [ 571.083263][ T5823] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 571.151108][ T5823] usb 1-1: USB disconnect, device number 40 [ 572.465672][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 572.465687][ T30] audit: type=1400 audit(1767694960.493:1296): avc: denied { map } for pid=11429 comm="syz.5.1342" path="socket:[34127]" dev="sockfs" ino=34127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 572.465720][ T30] audit: type=1400 audit(1767694960.503:1297): avc: denied { accept } for pid=11429 comm="syz.5.1342" path="socket:[34127]" dev="sockfs" ino=34127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 572.845489][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1348'. [ 572.916692][T11461] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 574.921140][ T934] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 574.983692][T11493] FAULT_INJECTION: forcing a failure. [ 574.983692][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.002113][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.3.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.002143][T11493] Tainted: [L]=SOFTLOCKUP [ 575.002149][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.002160][T11493] Call Trace: [ 575.002166][T11493] [ 575.002174][T11493] dump_stack_lvl+0x16c/0x1f0 [ 575.002200][T11493] should_fail_ex+0x512/0x640 [ 575.002231][T11493] _copy_from_user+0x2e/0xd0 [ 575.002257][T11493] copy_msghdr_from_user+0x98/0x160 [ 575.002276][T11493] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 575.002305][T11493] ___sys_sendmsg+0xfe/0x1d0 [ 575.002325][T11493] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.002372][T11493] __sys_sendmsg+0x16d/0x220 [ 575.002390][T11493] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.002424][T11493] do_syscall_64+0xcd/0xf80 [ 575.002459][T11493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.002477][T11493] RIP: 0033:0x7f08f6d8f749 [ 575.002491][T11493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.002508][T11493] RSP: 002b:00007f08f7cd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.002525][T11493] RAX: ffffffffffffffda RBX: 00007f08f6fe5fa0 RCX: 00007f08f6d8f749 [ 575.002537][T11493] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 575.002548][T11493] RBP: 00007f08f7cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.002559][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.002569][T11493] R13: 00007f08f6fe6038 R14: 00007f08f6fe5fa0 R15: 00007ffd3a0e8648 [ 575.002594][T11493] [ 575.187917][T11490] lo speed is unknown, defaulting to 1000 [ 575.241005][ T934] usb 1-1: Using ep0 maxpacket: 8 [ 575.248170][ T934] usb 1-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 575.260036][ T934] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.276519][ T934] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 575.289962][ T934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 575.296706][ T5927] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 575.304872][ T934] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 575.314323][ T934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.355166][ T934] usb 1-1: config 0 descriptor?? [ 575.481109][ T5927] usb 3-1: device descriptor read/64, error -71 [ 575.721292][ T5927] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 575.881125][ T5927] usb 3-1: device descriptor read/64, error -71 [ 575.974046][T11503] netlink: 'syz.4.1362': attribute type 2 has an invalid length. [ 576.011784][ T5927] usb usb3-port1: attempt power cycle [ 576.018762][T11505] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:20002 [ 576.025874][T11505] IPVS: sh: FWM 3 0x00000003 - no destination available [ 576.033745][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 576.119327][T11507] Bluetooth: MGMT ver 1.23 [ 576.133760][T11507] binder: 11506:11507 ioctl 40046411 200000000180 returned -22 [ 577.117969][ T5927] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 577.301042][ T30] audit: type=1400 audit(1767694965.323:1298): avc: denied { getopt } for pid=11516 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 577.324547][ T5927] usb 3-1: device descriptor read/8, error -71 [ 577.573602][ T5927] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 577.611976][ T5927] usb 3-1: device descriptor read/8, error -71 [ 577.759634][ T5927] usb usb3-port1: unable to enumerate USB device [ 577.766747][ T934] usbhid 1-1:0.0: can't add hid device: -71 [ 577.777558][T11520] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 577.786871][T11522] FAULT_INJECTION: forcing a failure. [ 577.786871][T11522] name failslab, interval 1, probability 0, space 0, times 0 [ 577.811143][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.4.1369 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.811173][T11522] Tainted: [L]=SOFTLOCKUP [ 577.811179][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.811190][T11522] Call Trace: [ 577.811196][T11522] [ 577.811203][T11522] dump_stack_lvl+0x16c/0x1f0 [ 577.811229][T11522] should_fail_ex+0x512/0x640 [ 577.811254][T11522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 577.811273][T11522] should_failslab+0xc2/0x120 [ 577.811295][T11522] kmem_cache_alloc_noprof+0x83/0x770 [ 577.811314][T11522] ? skb_clone+0x190/0x3f0 [ 577.811337][T11522] ? skb_clone+0x190/0x3f0 [ 577.811353][T11522] skb_clone+0x190/0x3f0 [ 577.811372][T11522] netlink_deliver_tap+0xabd/0xd30 [ 577.811397][T11522] netlink_unicast+0x71f/0x870 [ 577.811422][T11522] ? __pfx_netlink_unicast+0x10/0x10 [ 577.811445][T11522] ? genl_rcv_msg+0x4bb/0x800 [ 577.811475][T11522] netlink_ack+0x696/0xb80 [ 577.811503][T11522] netlink_rcv_skb+0x332/0x420 [ 577.811523][T11522] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.811550][T11522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.811582][T11522] ? netlink_deliver_tap+0x1ae/0xd30 [ 577.811605][T11522] genl_rcv+0x28/0x40 [ 577.811629][T11522] netlink_unicast+0x5aa/0x870 [ 577.811654][T11522] ? __pfx_netlink_unicast+0x10/0x10 [ 577.811683][T11522] netlink_sendmsg+0x8c8/0xdd0 [ 577.811709][T11522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.811740][T11522] ____sys_sendmsg+0xa5d/0xc30 [ 577.811764][T11522] ? copy_msghdr_from_user+0x10a/0x160 [ 577.811781][T11522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.811816][T11522] ___sys_sendmsg+0x134/0x1d0 [ 577.811834][T11522] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.811880][T11522] __sys_sendmsg+0x16d/0x220 [ 577.811899][T11522] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.811932][T11522] do_syscall_64+0xcd/0xf80 [ 577.811957][T11522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.811974][T11522] RIP: 0033:0x7f1a4258f749 [ 577.811989][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.812005][T11522] RSP: 002b:00007f1a434c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.812022][T11522] RAX: ffffffffffffffda RBX: 00007f1a427e5fa0 RCX: 00007f1a4258f749 [ 577.812033][T11522] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 577.812044][T11522] RBP: 00007f1a434c5090 R08: 0000000000000000 R09: 0000000000000000 [ 577.812054][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.812065][T11522] R13: 00007f1a427e6038 R14: 00007f1a427e5fa0 R15: 00007fff0c22cef8 [ 577.812090][T11522] [ 577.821020][ T934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 578.166310][ T934] usb 1-1: USB disconnect, device number 41 [ 578.207802][T11528] input: syz0 as /devices/virtual/input/input23 [ 578.675930][T11556] netlink: 'syz.3.1377': attribute type 3 has an invalid length. [ 578.683895][T11556] netlink: 'syz.3.1377': attribute type 3 has an invalid length. [ 578.769030][T11558] FAULT_INJECTION: forcing a failure. [ 578.769030][T11558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.782302][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.5.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.782322][T11558] Tainted: [L]=SOFTLOCKUP [ 578.782326][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.782333][T11558] Call Trace: [ 578.782338][T11558] [ 578.782342][T11558] dump_stack_lvl+0x16c/0x1f0 [ 578.782361][T11558] should_fail_ex+0x512/0x640 [ 578.782381][T11558] _copy_to_user+0x32/0xd0 [ 578.782399][T11558] simple_read_from_buffer+0xcb/0x170 [ 578.782416][T11558] proc_fail_nth_read+0x197/0x240 [ 578.782428][T11558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.782441][T11558] ? rw_verify_area+0xcf/0x6c0 [ 578.782453][T11558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 578.782464][T11558] vfs_read+0x1e4/0xcf0 [ 578.782478][T11558] ? __pfx___mutex_lock+0x10/0x10 [ 578.782494][T11558] ? __pfx_vfs_read+0x10/0x10 [ 578.782511][T11558] ? __fget_files+0x20e/0x3c0 [ 578.782531][T11558] ksys_read+0x12a/0x250 [ 578.782544][T11558] ? __pfx_ksys_read+0x10/0x10 [ 578.782561][T11558] do_syscall_64+0xcd/0xf80 [ 578.782577][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.782588][T11558] RIP: 0033:0x7f0874b8e15c [ 578.782597][T11558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 578.782608][T11558] RSP: 002b:00007f0875984030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.782618][T11558] RAX: ffffffffffffffda RBX: 00007f0874de5fa0 RCX: 00007f0874b8e15c [ 578.782625][T11558] RDX: 000000000000000f RSI: 00007f08759840a0 RDI: 0000000000000003 [ 578.782632][T11558] RBP: 00007f0875984090 R08: 0000000000000000 R09: 0000000000000000 [ 578.782638][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.782645][T11558] R13: 00007f0874de6038 R14: 00007f0874de5fa0 R15: 00007ffd83a051e8 [ 578.782659][T11558] [ 579.274942][ T30] audit: type=1400 audit(1767694967.313:1299): avc: denied { ioctl } for pid=11565 comm="syz.2.1383" path="socket:[34467]" dev="sockfs" ino=34467 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 579.281044][ T5927] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 579.331036][ T5945] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 579.470977][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 579.649758][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 579.790956][ T5928] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 579.943313][ T5928] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 579.951841][ T5928] usb 3-1: config 0 has no interface number 0 [ 579.960203][ T5928] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 579.970724][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.979098][ T5928] usb 3-1: Product: syz [ 579.985232][ T5928] usb 3-1: Manufacturer: syz [ 579.997407][ T5928] usb 3-1: SerialNumber: syz [ 580.010523][ T5928] usb 3-1: config 0 descriptor?? [ 580.020940][ T5928] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 580.032036][ T5928] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 581.243812][ T5927] usb 6-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 581.255096][ T5927] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.267575][ T5945] usb 5-1: unable to get BOS descriptor or descriptor too short [ 581.281971][ T5945] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 581.303943][ T5927] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 581.328200][ T5945] usb 5-1: config 4 has an invalid descriptor of length 119, skipping remainder of the config [ 581.363525][ T5945] usb 5-1: config 4 has no interface number 0 [ 581.373033][ T5927] usb 6-1: config 0 interface 0 has no altsetting 0 [ 581.387481][ T5927] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 581.418408][ T5945] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 581.488912][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.508321][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.544001][ T5945] usb 5-1: Product: syz [ 581.564506][ T5927] usb 6-1: config 0 descriptor?? [ 581.584000][ T5945] usb 5-1: Manufacturer: syz [ 581.588665][ T5945] usb 5-1: SerialNumber: syz [ 582.362508][ T5945] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 582.371489][ T5945] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 582.378858][ T5945] uvcvideo 5-1:4.147: No valid video chain found. [ 582.491681][ T5929] usb 3-1: USB disconnect, device number 54 [ 582.513962][ T5945] usb 5-1: USB disconnect, device number 37 [ 582.551908][ T5928] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 582.580641][T11605] hsr0: entered allmulticast mode [ 582.600510][T11605] hsr_slave_0: entered allmulticast mode [ 582.612652][T11605] hsr_slave_1: entered allmulticast mode [ 582.626799][T11605] hsr_slave_0: left promiscuous mode [ 582.639621][T11605] hsr_slave_1: left promiscuous mode [ 582.657531][T11605] hsr0 (unregistering): left allmulticast mode [ 582.700980][ T5928] usb 1-1: device descriptor read/64, error -71 [ 582.929354][ T30] audit: type=1400 audit(1767694970.963:1300): avc: denied { nlmsg_write } for pid=11613 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 582.959733][ T5928] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 582.980813][ T30] audit: type=1400 audit(1767694970.993:1301): avc: denied { getopt } for pid=11613 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 583.199080][ T5928] usb 1-1: device descriptor read/64, error -71 [ 583.624017][ T5928] usb usb1-port1: attempt power cycle [ 583.815197][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 583.821823][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 583.832074][ T5927] usb 6-1: USB disconnect, device number 17 [ 584.111043][ T5928] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 584.195072][ T5928] usb 1-1: device descriptor read/8, error -71 [ 585.600971][ T5928] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 585.709511][ T5928] usb 1-1: device descriptor read/8, error -71 [ 585.878587][ T30] audit: type=1400 audit(1767694973.893:1302): avc: denied { setopt } for pid=11650 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 585.901189][ T5928] usb usb1-port1: unable to enumerate USB device [ 585.920993][ T5823] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 586.122556][ T5823] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 586.284563][T10258] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 586.304975][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 586.411421][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 586.425243][ T5823] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 586.434630][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.460045][ T5823] usb 5-1: config 0 descriptor?? [ 586.492819][T10258] usb 4-1: config 0 has an invalid interface number: 204 but max is 0 [ 586.505687][T11635] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 586.523660][T10258] usb 4-1: config 0 has no interface number 0 [ 586.547087][T10258] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 586.558833][T10258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.567563][T10258] usb 4-1: Product: syz [ 586.572129][T10258] usb 4-1: Manufacturer: syz [ 586.576916][T10258] usb 4-1: SerialNumber: syz [ 586.919462][T10258] usb 4-1: config 0 descriptor?? [ 586.933561][T10258] ems_usb 4-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 586.944468][T10258] ems_usb 4-1:0.204: probe with driver ems_usb failed with error -22 [ 587.370974][ T5929] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 588.008386][ T5927] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 588.030977][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 588.039801][ T5929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 7: 254, using maximum allowed: 30 [ 588.058707][ T5929] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.070485][ T5929] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 588.087605][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 588.095437][ T5929] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 588.104839][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.115018][ T5929] usb 3-1: config 0 descriptor?? [ 588.170983][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 588.178113][ T5927] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 588.187168][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.196219][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.204493][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.213721][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.222673][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.231526][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.238759][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.247638][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.255319][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.376240][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.384084][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.392294][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.400254][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.412301][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.419901][ T5927] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 588.428429][ T5927] usb 6-1: config 0 has no interface number 0 [ 588.433904][T10258] usb 4-1: USB disconnect, device number 32 [ 588.436760][ T5927] usb 6-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.df [ 589.928454][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.941668][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 589.947650][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 589.956173][ T5927] usb 6-1: Product: syz [ 589.960652][ T5927] usb 6-1: Manufacturer: syz [ 589.999242][ T5929] usb 3-1: USB disconnect, device number 55 [ 590.040990][ T5927] usb 6-1: SerialNumber: syz [ 590.050010][ T5823] usbhid 5-1:0.0: can't add hid device: -71 [ 590.083186][ T5927] usb 6-1: config 0 descriptor?? [ 590.121300][ T5823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 590.213807][ T5823] usb 5-1: USB disconnect, device number 38 [ 590.376251][ T5927] usb 6-1: USB disconnect, device number 18 [ 590.388613][T11716] FAULT_INJECTION: forcing a failure. [ 590.388613][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.421752][T11716] CPU: 1 UID: 0 PID: 11716 Comm: syz.2.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 590.421781][T11716] Tainted: [L]=SOFTLOCKUP [ 590.421788][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.421797][T11716] Call Trace: [ 590.421807][T11716] [ 590.421813][T11716] dump_stack_lvl+0x16c/0x1f0 [ 590.421840][T11716] should_fail_ex+0x512/0x640 [ 590.421869][T11716] _copy_from_user+0x2e/0xd0 [ 590.421896][T11716] move_addr_to_kernel+0x65/0x170 [ 590.421921][T11716] __sys_sendto+0x1be/0x520 [ 590.421947][T11716] ? __pfx___sys_sendto+0x10/0x10 [ 590.421993][T11716] ? ksys_write+0x1ac/0x250 [ 590.422015][T11716] ? __pfx_ksys_write+0x10/0x10 [ 590.422039][T11716] __x64_sys_sendto+0xe0/0x1c0 [ 590.422065][T11716] ? do_syscall_64+0x91/0xf80 [ 590.422087][T11716] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.422110][T11716] do_syscall_64+0xcd/0xf80 [ 590.422135][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.422167][T11716] RIP: 0033:0x7f88f3f8f749 [ 590.422182][T11716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.422199][T11716] RSP: 002b:00007f88f4d51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 590.422217][T11716] RAX: ffffffffffffffda RBX: 00007f88f41e5fa0 RCX: 00007f88f3f8f749 [ 590.422229][T11716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 590.422240][T11716] RBP: 00007f88f4d51090 R08: 0000200000e68000 R09: 0000000000000010 [ 590.422251][T11716] R10: 000000002000077d R11: 0000000000000246 R12: 0000000000000001 [ 590.422262][T11716] R13: 00007f88f41e6038 R14: 00007f88f41e5fa0 R15: 00007ffc97c136d8 [ 590.422287][T11716] [ 591.661478][T11728] FAULT_INJECTION: forcing a failure. [ 591.661478][T11728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.674565][T11728] CPU: 1 UID: 0 PID: 11728 Comm: syz.2.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.674594][T11728] Tainted: [L]=SOFTLOCKUP [ 591.674600][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.674611][T11728] Call Trace: [ 591.674617][T11728] [ 591.674624][T11728] dump_stack_lvl+0x16c/0x1f0 [ 591.674651][T11728] should_fail_ex+0x512/0x640 [ 591.674681][T11728] _copy_to_user+0x32/0xd0 [ 591.674709][T11728] simple_read_from_buffer+0xcb/0x170 [ 591.674734][T11728] proc_fail_nth_read+0x197/0x240 [ 591.674754][T11728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.674773][T11728] ? rw_verify_area+0xcf/0x6c0 [ 591.674792][T11728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.674811][T11728] vfs_read+0x1e4/0xcf0 [ 591.674835][T11728] ? __pfx___mutex_lock+0x10/0x10 [ 591.674862][T11728] ? __pfx_vfs_read+0x10/0x10 [ 591.674896][T11728] ? __fget_files+0x20e/0x3c0 [ 591.674930][T11728] ksys_read+0x12a/0x250 [ 591.674952][T11728] ? __pfx_ksys_read+0x10/0x10 [ 591.674975][T11728] ? fput+0x70/0xf0 [ 591.674995][T11728] do_syscall_64+0xcd/0xf80 [ 591.675021][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.675039][T11728] RIP: 0033:0x7f88f3f8e15c [ 591.675054][T11728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.675071][T11728] RSP: 002b:00007f88f21d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.675090][T11728] RAX: ffffffffffffffda RBX: 00007f88f41e6180 RCX: 00007f88f3f8e15c [ 591.675102][T11728] RDX: 000000000000000f RSI: 00007f88f21d50a0 RDI: 0000000000000007 [ 591.675113][T11728] RBP: 00007f88f21d5090 R08: 0000000000000000 R09: 0000000000000000 [ 591.675124][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.675133][T11728] R13: 00007f88f41e6218 R14: 00007f88f41e6180 R15: 00007ffc97c136d8 [ 591.675158][T11728] [ 593.378296][T11735] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 593.386162][T11735] netlink: 'syz.4.1419': attribute type 3 has an invalid length. [ 596.202368][T11756] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 596.210250][T11756] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 597.858185][ T30] audit: type=1400 audit(1767694985.893:1303): avc: denied { write } for pid=11779 comm="syz.2.1422" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 601.127644][ T30] audit: type=1400 audit(1767694989.163:1304): avc: denied { name_bind } for pid=11822 comm="syz.5.1439" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 601.190274][ T30] audit: type=1400 audit(1767694989.223:1305): avc: denied { read write } for pid=9542 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.763000][ T30] audit: type=1400 audit(1767694989.253:1306): avc: denied { open } for pid=9542 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.879567][ T30] audit: type=1400 audit(1767694989.253:1307): avc: denied { ioctl } for pid=9542 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 602.198021][ T30] audit: type=1400 audit(1767694990.233:1308): avc: denied { create } for pid=11837 comm="syz.5.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 605.588403][T11869] sit0: entered promiscuous mode [ 605.613103][T11869] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 605.694701][ T30] audit: type=1400 audit(1767694993.723:1309): avc: denied { create } for pid=11865 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 605.719428][T11869] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1451'. [ 605.889589][ T30] audit: type=1400 audit(1767694993.723:1310): avc: denied { write } for pid=11865 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 607.072341][T11891] netlink: 'syz.3.1452': attribute type 3 has an invalid length. [ 607.080668][T11891] netlink: 'syz.3.1452': attribute type 3 has an invalid length. [ 607.183731][ T30] audit: type=1326 audit(1767694995.223:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.2.1453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88f3f8f749 code=0x0 [ 607.723895][ T5823] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 607.881029][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 607.892273][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 607.905150][ T5823] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 607.914437][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.923316][ T5823] usb 3-1: Product: syz [ 607.927976][ T5823] usb 3-1: Manufacturer: syz [ 607.932870][ T5823] usb 3-1: SerialNumber: syz [ 607.940459][ T5823] usb 3-1: config 0 descriptor?? [ 607.947928][ T5823] hub 3-1:0.0: bad descriptor, ignoring hub [ 607.955432][ T5823] hub 3-1:0.0: probe with driver hub failed with error -5 [ 607.966869][ T5823] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 607.984065][ T5823] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 607.999882][ T5823] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 608.213677][ T30] audit: type=1400 audit(1767694996.253:1312): avc: denied { ioctl } for pid=11909 comm="syz.3.1457" path="socket:[36892]" dev="sockfs" ino=36892 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 609.308558][ T30] audit: type=1400 audit(1767694996.973:1313): avc: denied { connect } for pid=11912 comm="syz.3.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 609.740821][T11925] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1463'. [ 609.841277][ T5927] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 609.929325][T11927] FAULT_INJECTION: forcing a failure. [ 609.929325][T11927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.943086][T11927] CPU: 1 UID: 0 PID: 11927 Comm: syz.3.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.943118][T11927] Tainted: [L]=SOFTLOCKUP [ 609.943125][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.943136][T11927] Call Trace: [ 609.943142][T11927] [ 609.943149][T11927] dump_stack_lvl+0x16c/0x1f0 [ 609.943178][T11927] should_fail_ex+0x512/0x640 [ 609.943210][T11927] _copy_to_user+0x32/0xd0 [ 609.943239][T11927] video_usercopy+0xf43/0x16c0 [ 609.943262][T11927] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 609.943282][T11927] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 609.943309][T11927] ? __pfx_video_usercopy+0x10/0x10 [ 609.943347][T11927] v4l2_ioctl+0x1bd/0x250 [ 609.943367][T11927] ? __pfx_v4l2_ioctl+0x10/0x10 [ 609.943388][T11927] __x64_sys_ioctl+0x18e/0x210 [ 609.943413][T11927] do_syscall_64+0xcd/0xf80 [ 609.943438][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.943457][T11927] RIP: 0033:0x7f08f6d8f749 [ 609.943473][T11927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.943490][T11927] RSP: 002b:00007f08f7cd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.943508][T11927] RAX: ffffffffffffffda RBX: 00007f08f6fe5fa0 RCX: 00007f08f6d8f749 [ 609.943521][T11927] RDX: 0000200000000100 RSI: 00000000c0585604 RDI: 0000000000000003 [ 609.943532][T11927] RBP: 00007f08f7cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.943543][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.943555][T11927] R13: 00007f08f6fe6038 R14: 00007f08f6fe5fa0 R15: 00007ffd3a0e8648 [ 609.943579][T11927] [ 610.132242][ T5927] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 610.140549][ T5927] usb 6-1: config 0 has no interface number 0 [ 610.165682][ T5927] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 610.178792][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.190979][ T5823] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 610.205270][ T5927] usb 6-1: Product: syz [ 610.217028][ T5927] usb 6-1: Manufacturer: syz [ 610.220396][ T30] audit: type=1326 audit(1767694998.253:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11929 comm="syz.2.1465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x0 [ 610.245942][ T5927] usb 6-1: SerialNumber: syz [ 610.261233][ T5929] usb 3-1: USB disconnect, device number 56 [ 610.269628][ T5927] usb 6-1: config 0 descriptor?? [ 610.289650][ T5927] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 610.311368][ T5927] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 610.320961][ T5823] usb 1-1: device descriptor read/64, error -71 [ 611.052234][ T5823] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 611.067386][T11939] netlink: 'syz.2.1467': attribute type 3 has an invalid length. [ 611.075478][T11939] netlink: 'syz.2.1467': attribute type 3 has an invalid length. [ 611.181056][ T5823] usb 1-1: device descriptor read/64, error -71 [ 611.386732][ T5823] usb usb1-port1: attempt power cycle [ 612.971007][ T5823] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 613.023321][ T5886] usb 6-1: USB disconnect, device number 19 [ 613.270144][ T5823] usb 1-1: device not accepting address 48, error -71 [ 613.434284][T11966] lo speed is unknown, defaulting to 1000 [ 613.550970][ T5886] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 613.722207][ T5886] usb 5-1: Invalid ep0 maxpacket: 32 [ 613.913692][ T5886] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 614.091375][ T5886] usb 5-1: Invalid ep0 maxpacket: 32 [ 614.123452][ T5886] usb usb5-port1: attempt power cycle [ 614.304880][ T5893] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 614.498116][ T5886] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 614.521207][ T5893] usb 4-1: Invalid ep0 maxpacket: 32 [ 614.542808][ T5886] usb 5-1: Invalid ep0 maxpacket: 32 [ 614.651065][ T5893] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 614.691085][ T5886] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 614.763072][ T5886] usb 5-1: Invalid ep0 maxpacket: 32 [ 614.779507][ T5886] usb usb5-port1: unable to enumerate USB device [ 614.792401][T11981] netlink: 'syz.0.1478': attribute type 3 has an invalid length. [ 614.800275][T11981] netlink: 'syz.0.1478': attribute type 3 has an invalid length. [ 614.831005][ T5893] usb 4-1: Invalid ep0 maxpacket: 32 [ 614.852747][ T5893] usb usb4-port1: attempt power cycle [ 615.150313][T11989] netlink: 'syz.5.1479': attribute type 3 has an invalid length. [ 615.158724][T11989] netlink: 'syz.5.1479': attribute type 3 has an invalid length. [ 615.201331][ T5893] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 615.222729][ T5893] usb 4-1: Invalid ep0 maxpacket: 32 [ 615.431323][ T5893] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 615.451402][ T5893] usb 4-1: Invalid ep0 maxpacket: 32 [ 615.456932][ T5893] usb usb4-port1: unable to enumerate USB device [ 615.507470][T11993] netlink: 'syz.2.1481': attribute type 3 has an invalid length. [ 615.515540][T11993] netlink: 'syz.2.1481': attribute type 3 has an invalid length. [ 616.293011][T12002] netlink: 'syz.2.1483': attribute type 3 has an invalid length. [ 616.379468][T12006] FAULT_INJECTION: forcing a failure. [ 616.379468][T12006] name failslab, interval 1, probability 0, space 0, times 0 [ 616.394421][T12007] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1485'. [ 616.409725][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.5.1484 Tainted: G L syzkaller #0 PREEMPT(full) [ 616.409758][T12006] Tainted: [L]=SOFTLOCKUP [ 616.409764][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.409776][T12006] Call Trace: [ 616.409783][T12006] [ 616.409791][T12006] dump_stack_lvl+0x16c/0x1f0 [ 616.409821][T12006] should_fail_ex+0x512/0x640 [ 616.409849][T12006] ? fs_reclaim_acquire+0xae/0x150 [ 616.409877][T12006] should_failslab+0xc2/0x120 [ 616.409903][T12006] __kmalloc_noprof+0xeb/0x910 [ 616.409932][T12006] ? tomoyo_encode2+0x100/0x3e0 [ 616.409963][T12006] ? tomoyo_encode2+0x100/0x3e0 [ 616.409986][T12006] tomoyo_encode2+0x100/0x3e0 [ 616.410015][T12006] tomoyo_encode+0x29/0x50 [ 616.410039][T12006] tomoyo_realpath_from_path+0x18f/0x6e0 [ 616.410073][T12006] tomoyo_path_number_perm+0x245/0x580 [ 616.410095][T12006] ? tomoyo_path_number_perm+0x237/0x580 [ 616.410120][T12006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 616.410167][T12006] ? d_alloc_parallel+0xb4e/0x1510 [ 616.410192][T12006] ? current_check_access_path+0x33b/0x460 [ 616.410214][T12006] ? __pfx_current_check_access_path+0x10/0x10 [ 616.410242][T12006] tomoyo_path_mknod+0x10c/0x190 [ 616.410271][T12006] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 616.410302][T12006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 616.410327][T12006] security_path_mknod+0x161/0x310 [ 616.410353][T12006] lookup_open.isra.0+0xc10/0x1780 [ 616.410383][T12006] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 616.410411][T12006] ? find_held_lock+0x2b/0x80 [ 616.410446][T12006] ? __pfx_down_write+0x10/0x10 [ 616.410480][T12006] path_openat+0xa95/0x3140 [ 616.410520][T12006] ? __pfx_path_openat+0x10/0x10 [ 616.410546][T12006] ? do_user_addr_fault+0x829/0x1370 [ 616.410580][T12006] do_filp_open+0x20b/0x470 [ 616.410604][T12006] ? irqentry_exit+0x1dd/0x8c0 [ 616.410628][T12006] ? __pfx_do_filp_open+0x10/0x10 [ 616.410654][T12006] ? irqentry_exit+0x1dd/0x8c0 [ 616.410676][T12006] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 616.410722][T12006] ? alloc_fd+0x471/0x7d0 [ 616.410757][T12006] do_sys_openat2+0x121/0x290 [ 616.410773][T12006] ? __pfx_do_sys_openat2+0x10/0x10 [ 616.410794][T12006] ? __fget_files+0x20e/0x3c0 [ 616.410825][T12006] __x64_sys_openat+0x174/0x210 [ 616.410843][T12006] ? __pfx___x64_sys_openat+0x10/0x10 [ 616.410861][T12006] ? ksys_write+0x1ac/0x250 [ 616.410892][T12006] do_syscall_64+0xcd/0xf80 [ 616.410914][T12006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.410933][T12006] RIP: 0033:0x7f0874b8f749 [ 616.410948][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.410965][T12006] RSP: 002b:00007f0875963038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 616.410984][T12006] RAX: ffffffffffffffda RBX: 00007f0874de6090 RCX: 00007f0874b8f749 [ 616.410997][T12006] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 616.411008][T12006] RBP: 00007f0875963090 R08: 0000000000000000 R09: 0000000000000000 [ 616.411019][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.411030][T12006] R13: 00007f0874de6128 R14: 00007f0874de6090 R15: 00007ffd83a051e8 [ 616.411057][T12006] [ 616.740873][T12006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 617.081944][ T5893] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 617.764045][ T5893] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 617.813116][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.859031][ T30] audit: type=1400 audit(1767695005.893:1315): avc: denied { read write } for pid=12014 comm="syz.5.1487" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 617.925931][ T5893] usb 5-1: Product: syz [ 617.930147][ T5893] usb 5-1: Manufacturer: syz [ 617.935332][ T5893] usb 5-1: SerialNumber: syz [ 617.942423][ T5893] usb 5-1: config 0 descriptor?? [ 618.001224][ T30] audit: type=1400 audit(1767695005.923:1316): avc: denied { open } for pid=12014 comm="syz.5.1487" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 618.031974][ T52] Bluetooth: hci5: urb ffff88804b3d2600 submission failed (2) [ 618.540984][ T5927] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 618.835407][T12030] FAULT_INJECTION: forcing a failure. [ 618.835407][T12030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.849222][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.2.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.849254][T12030] Tainted: [L]=SOFTLOCKUP [ 618.849261][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.849272][T12030] Call Trace: [ 618.849280][T12030] [ 618.849287][T12030] dump_stack_lvl+0x16c/0x1f0 [ 618.849315][T12030] should_fail_ex+0x512/0x640 [ 618.849348][T12030] _copy_from_user+0x2e/0xd0 [ 618.849376][T12030] do_sock_getsockopt+0x3a1/0x410 [ 618.849402][T12030] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 618.849424][T12030] ? __fget_files+0x204/0x3c0 [ 618.849461][T12030] __sys_getsockopt+0x12f/0x260 [ 618.849484][T12030] __x64_sys_getsockopt+0xbd/0x160 [ 618.849502][T12030] ? do_syscall_64+0x91/0xf80 [ 618.849525][T12030] ? lockdep_hardirqs_on+0x7c/0x110 [ 618.849547][T12030] do_syscall_64+0xcd/0xf80 [ 618.849573][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.849591][T12030] RIP: 0033:0x7f88f3f8f749 [ 618.849606][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.849623][T12030] RSP: 002b:00007f88f4d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 618.849642][T12030] RAX: ffffffffffffffda RBX: 00007f88f41e5fa0 RCX: 00007f88f3f8f749 [ 618.849655][T12030] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 618.849666][T12030] RBP: 00007f88f4d51090 R08: 00002000000000c0 R09: 0000000000000000 [ 618.849678][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.849690][T12030] R13: 00007f88f41e6038 R14: 00007f88f41e5fa0 R15: 00007ffc97c136d8 [ 618.849717][T12030] [ 619.134759][ T5927] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 619.145838][ T5927] usb 1-1: config 0 has no interface number 0 [ 619.575603][ T5927] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 619.611973][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.620286][ T5927] usb 1-1: Product: syz [ 619.625187][ T5927] usb 1-1: Manufacturer: syz [ 619.629827][ T5927] usb 1-1: SerialNumber: syz [ 619.637243][ T5893] usb 5-1: USB disconnect, device number 43 [ 619.639053][ T5927] usb 1-1: config 0 descriptor?? [ 619.672446][ T5927] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 619.697531][T12038] netlink: 'syz.2.1493': attribute type 3 has an invalid length. [ 619.705871][T12038] netlink: 'syz.2.1493': attribute type 3 has an invalid length. [ 619.899734][ T5927] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 619.990282][T12046] netlink: 'syz.3.1495': attribute type 3 has an invalid length. [ 619.998719][T12046] netlink: 'syz.3.1495': attribute type 3 has an invalid length. [ 620.546388][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'. [ 620.621219][ T5893] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 620.757541][ T30] audit: type=1400 audit(1767695008.793:1317): avc: denied { getopt } for pid=12047 comm="syz.2.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 620.782017][T12053] netlink: zone id is out of range [ 620.884299][T12049] lo speed is unknown, defaulting to 1000 [ 620.985896][ T5945] usb 1-1: USB disconnect, device number 50 [ 622.281006][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 622.287776][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 622.296353][ T5893] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 622.304615][ T5893] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 622.314830][ T5893] usb 5-1: config 4 has no interface number 0 [ 622.426086][ T5893] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 622.435410][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.446016][ T5893] usb 5-1: Product: syz [ 622.452028][ T5893] usb 5-1: Manufacturer: syz [ 622.456732][ T5893] usb 5-1: SerialNumber: syz [ 622.554499][T12065] netlink: 'syz.3.1500': attribute type 3 has an invalid length. [ 622.562648][T12065] netlink: 'syz.3.1500': attribute type 3 has an invalid length. [ 622.787848][ T5893] uvcvideo 5-1:4.147: Found multiple Units with ID 6 [ 622.798446][ T5893] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 622.809046][ T5893] uvcvideo 5-1:4.147: No streaming interface found for terminal 65535. [ 622.893584][ T5893] usb 5-1: USB disconnect, device number 44 [ 624.302364][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.101364][ T6402] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 625.969875][ T6402] usb 5-1: config 0 has an invalid interface number: 204 but max is 0 [ 626.171971][ T6402] usb 5-1: config 0 has no interface number 0 [ 626.275928][ T6402] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 626.452141][ T6402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.501068][ T6402] usb 5-1: Product: syz [ 626.511016][ T6402] usb 5-1: Manufacturer: syz [ 626.520963][ T6402] usb 5-1: SerialNumber: syz [ 626.564556][ T6402] usb 5-1: config 0 descriptor?? [ 626.586074][ T6402] ems_usb 5-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 626.611187][ T6402] ems_usb 5-1:0.204: probe with driver ems_usb failed with error -22 [ 626.912961][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 627.027172][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'. [ 627.500958][ T6402] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 628.144231][ T5823] usb 5-1: USB disconnect, device number 45 [ 628.390955][ T6402] usb 6-1: Using ep0 maxpacket: 8 [ 628.567720][ T6402] usb 6-1: unable to get BOS descriptor or descriptor too short [ 629.200156][ T6402] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 629.220227][ T6402] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 629.270999][ T6402] usb 6-1: config 4 has no interface number 0 [ 629.292929][ T6402] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 629.339441][ T6402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.459213][ T6402] usb 6-1: Product: syz [ 629.469273][ T6402] usb 6-1: Manufacturer: syz [ 629.989158][ T6402] usb 6-1: SerialNumber: syz [ 630.270367][ T6402] uvcvideo 6-1:4.147: Found multiple Units with ID 6 [ 631.191053][ T6402] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 631.198440][ T6402] uvcvideo 6-1:4.147: No streaming interface found for terminal 65535. [ 631.427415][ T6402] usb 6-1: USB disconnect, device number 20 [ 631.511058][ T5823] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 631.537237][T12141] trusted_key: syz.2.1520 sent an empty control message without MSG_MORE. [ 631.807109][ T5823] usb 4-1: not running at top speed; connect to a high speed hub [ 631.872795][ T5823] usb 4-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 631.940180][ T5823] usb 4-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 631.981994][ T5823] usb 4-1: config 1 interface 0 has no altsetting 0 [ 631.999594][ T5823] usb 4-1: string descriptor 0 read error: -22 [ 632.011223][ T5823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.031586][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.671372][T12139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.686379][T12139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 632.722493][ T5823] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 633.421393][ T5823] usb 4-1: USB disconnect, device number 37 [ 634.471527][ T5823] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 635.428946][ T5823] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 635.437479][ T5823] usb 6-1: config 0 has no interface number 0 [ 635.451697][ T5823] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 635.466095][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.474823][ T5823] usb 6-1: Product: syz [ 635.479219][ T5823] usb 6-1: Manufacturer: syz [ 636.591999][ T5823] usb 6-1: SerialNumber: syz [ 636.607989][ T5823] usb 6-1: config 0 descriptor?? [ 637.249365][ T5823] usb 6-1: can't set config #0, error -71 [ 637.268264][ T5823] usb 6-1: USB disconnect, device number 21 [ 637.987021][T12194] netlink: 'syz.2.1536': attribute type 13 has an invalid length. [ 638.115577][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.122909][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.320951][ T5886] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 638.487019][ T5886] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 638.516614][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.655954][ T5886] usb 1-1: Product: syz [ 638.721397][ T5886] usb 1-1: Manufacturer: syz [ 638.787248][ T5886] usb 1-1: SerialNumber: syz [ 638.922491][ T5886] usb 1-1: config 0 descriptor?? [ 639.015936][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.029979][T12194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.172782][ T5886] usb 1-1: ignoring: probably an ADSL modem [ 639.206060][ T5893] lo speed is unknown, defaulting to 1000 [ 639.213789][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 639.220999][ T5893] syz0: Port: 1 Link DOWN [ 639.221675][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 639.232261][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 639.370953][ T5893] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 639.379514][T12208] infiniband syz2: set active [ 639.384423][T12208] infiniband syz2: added vxcan1 [ 639.393214][T12208] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 639.396271][T12208] infiniband syz2: Couldn't open port 1 [ 639.425626][T12208] RDS/IB: syz2: added [ 639.430069][T12208] smc: adding ib device syz2 with port count 1 [ 639.436447][T12208] smc: ib device syz2 port 1 has no pnetid [ 639.445780][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 639.464962][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 639.488724][ T8753] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.532681][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.546013][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.568606][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 639.585310][ T5893] usb 4-1: New USB device found, idVendor=1477, idProduct=1021, bcdDevice= 0.00 [ 639.600528][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.616398][ T30] audit: type=1400 audit(1767695027.653:1318): avc: denied { map } for pid=12215 comm="syz.4.1541" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 639.617914][ T5893] usb 4-1: config 0 descriptor?? [ 639.645427][ T8753] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.657435][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 639.657498][ T8753] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.702711][ T8753] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.713788][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 639.715734][ T5886] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 639.742204][ T5886] usb 1-1: USB disconnect, device number 51 [ 639.848143][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 639.992458][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 640.094425][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 640.108895][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 640.145297][T12208] vxcan1 speed is unknown, defaulting to 1000 [ 640.264681][ T5893] usb 4-1: USB disconnect, device number 38 [ 641.815450][T12242] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1548'. [ 641.962901][ T934] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 642.523831][ T934] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 642.547072][ T934] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 642.567950][ T934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 642.594641][ T934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 642.605833][ T934] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 642.630616][ T934] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 642.643055][ T934] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 642.660554][ T934] usb 1-1: Product: syz [ 642.667779][ T934] usb 1-1: Manufacturer: syz [ 642.782043][ T934] cdc_wdm 1-1:1.0: skipping garbage [ 642.875722][ T934] cdc_wdm 1-1:1.0: skipping garbage [ 642.955922][ T934] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 642.970153][ T30] audit: type=1400 audit(1767695030.963:1319): avc: denied { accept } for pid=12251 comm="syz.5.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 643.058654][ T934] cdc_wdm 1-1:1.0: Unknown control protocol [ 643.241051][ T5886] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 643.289640][ T5929] usb 1-1: USB disconnect, device number 52 [ 643.432572][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.442930][ T5886] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 643.484808][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 643.505119][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 643.516912][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 643.530791][ T5886] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 643.546833][ T5886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.556592][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 643.566429][ T5886] usb 4-1: SerialNumber: syz [ 643.801194][T12256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 643.808408][T12256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 643.817070][ T5886] rndis_host 4-1:1.0: probe with driver rndis_host failed with error -22 [ 644.091897][T12274] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 644.287302][T12280] hub 8-0:1.0: USB hub found [ 644.294003][T12280] hub 8-0:1.0: 1 port detected [ 644.420829][T12286] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 644.428419][T12286] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 645.075783][ T30] audit: type=1400 audit(1767695033.113:1320): avc: denied { create } for pid=12293 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 645.099359][ T30] audit: type=1400 audit(1767695033.113:1321): avc: denied { write } for pid=12293 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 645.228291][T12298] lo speed is unknown, defaulting to 1000 [ 645.239159][T12298] vxcan1 speed is unknown, defaulting to 1000 [ 645.441059][ T5886] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 645.738695][ T5886] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 645.751412][ T5886] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 645.768800][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 645.786240][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 645.813305][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 645.835252][ T5886] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 645.862249][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 645.887882][ T5886] usb 1-1: Product: syz [ 645.943935][ T9] usb 4-1: USB disconnect, device number 39 [ 645.950174][ T5886] usb 1-1: Manufacturer: syz [ 646.002749][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 646.021424][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 646.106217][ T5886] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 646.194916][ T5886] cdc_wdm 1-1:1.0: Unknown control protocol [ 646.804027][ T30] audit: type=1400 audit(1767695034.843:1322): avc: denied { read write } for pid=12302 comm="syz.0.1566" name="cdc-wdm0" dev="devtmpfs" ino=3374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 646.961927][T12320] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 646.971857][ T30] audit: type=1400 audit(1767695034.843:1323): avc: denied { open } for pid=12302 comm="syz.0.1566" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 647.221639][ T5886] usb 1-1: USB disconnect, device number 53 [ 647.521754][T12328] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 647.529641][T12328] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 647.601002][T12332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 648.424684][ T30] audit: type=1400 audit(1767695036.463:1324): avc: denied { append } for pid=12347 comm="syz.5.1579" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 650.362145][ T5886] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 650.631044][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 650.745509][ T5886] usb 6-1: config 0 has no interfaces? [ 650.838456][ T5886] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 650.848310][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 650.856791][ T5886] usb 6-1: Product: syz [ 650.892100][ T5886] usb 6-1: config 0 descriptor?? [ 651.231160][ T5886] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 651.240631][ T6402] usb 6-1: USB disconnect, device number 22 [ 651.356365][T12384] lo speed is unknown, defaulting to 1000 [ 651.367815][T12384] vxcan1 speed is unknown, defaulting to 1000 [ 651.384224][ T5886] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 651.401066][ T5886] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 651.477677][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 651.490045][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 651.632919][ T5886] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 651.662210][ T5886] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 651.682501][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 651.693166][ T5886] usb 1-1: Product: syz [ 651.778186][ T5886] usb 1-1: Manufacturer: syz [ 651.801489][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 651.806709][ T5886] cdc_wdm 1-1:1.0: skipping garbage [ 651.833284][ T5886] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 651.839195][ T5886] cdc_wdm 1-1:1.0: Unknown control protocol [ 653.167575][ T6402] usb 1-1: USB disconnect, device number 54 [ 653.554515][T12411] mkiss: ax0: crc mode is auto. [ 653.651114][ T48] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 653.780950][ T48] usb 3-1: device descriptor read/64, error -71 [ 653.871668][ T6402] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 654.079522][ T48] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 654.185385][ T6402] usb 4-1: config 9 has an invalid interface number: 94 but max is 0 [ 654.241844][ T6402] usb 4-1: config 9 has no interface number 0 [ 654.247977][ T6402] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 654.289563][ T6402] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 654.303717][ T6402] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 654.315002][ T6402] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 654.326035][ T6402] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 654.339914][ T6402] usb 4-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 654.352731][ T6402] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 654.365747][ T6402] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 654.377026][ T6402] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 654.388227][ T6402] usb 4-1: config 9 interface 94 has no altsetting 0 [ 654.412986][ T48] usb 3-1: device descriptor read/64, error -71 [ 654.640631][T12429] netlink: 'syz.4.1602': attribute type 3 has an invalid length. [ 654.648508][T12429] netlink: 'syz.4.1602': attribute type 3 has an invalid length. [ 655.672434][ T48] usb usb3-port1: attempt power cycle [ 655.733925][ T6402] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 655.774090][ T6402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.791021][ T6402] usb 4-1: Product: Ё [ 655.805385][ T6402] usb 4-1: Manufacturer: Р [ 655.810236][ T6402] usb 4-1: SerialNumber: syz [ 656.060954][ T48] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 656.082273][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 656.151638][ T30] audit: type=1326 audit(1767695044.193:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 656.177712][ T6402] usb 4-1: USB disconnect, device number 40 [ 656.204490][ T30] audit: type=1326 audit(1767695044.193:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 656.260958][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 656.271516][ T30] audit: type=1326 audit(1767695044.193:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 656.306413][ T9] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 656.330951][ T9] usb 5-1: config 0 has no interface number 0 [ 656.330948][ T48] usb 3-1: device not accepting address 59, error -71 [ 656.356472][ T30] audit: type=1326 audit(1767695044.193:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 656.385489][ T9] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 656.411272][ T9] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 656.431031][ T9] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 656.446474][ T30] audit: type=1326 audit(1767695044.193:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 656.484995][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 656.494568][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.503437][ T9] usb 5-1: Product: syz [ 656.520369][T12443] 9p: Bad value for 'rfdno' [ 656.636854][ T30] audit: type=1326 audit(1767695044.193:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 657.320208][ T9] usb 5-1: Manufacturer: syz [ 657.333449][ T9] usb 5-1: SerialNumber: syz [ 657.339748][ T9] usb 5-1: config 0 descriptor?? [ 657.349260][ T30] audit: type=1326 audit(1767695044.193:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 657.373354][T12437] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 657.381524][ T30] audit: type=1326 audit(1767695044.193:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 657.407095][ T9] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 657.458633][ T30] audit: type=1326 audit(1767695044.193:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12440 comm="syz.2.1607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 657.859395][ T9] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 657.944734][ T9] usb 5-1: USB disconnect, device number 46 [ 658.871048][ T48] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 659.030932][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 659.041872][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 659.057982][ T48] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 659.074289][ T48] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 659.092801][ T48] usb 4-1: config 4 has no interface number 0 [ 659.114837][ T48] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 659.124349][ T5823] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 659.156122][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.228777][ T48] usb 4-1: Product: syz [ 659.238653][ T48] usb 4-1: Manufacturer: syz [ 659.254272][ T48] usb 4-1: SerialNumber: syz [ 659.429673][ T5823] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 659.454813][ T5823] usb 6-1: config 0 has no interface number 0 [ 659.471829][ T5823] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 659.542443][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.643238][ T5823] usb 6-1: Product: syz [ 659.643861][T12483] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 659.723451][ T48] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 659.731523][ T48] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 659.744981][T12486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1616'. [ 659.755702][ T5823] usb 6-1: Manufacturer: syz [ 659.760279][ T5823] usb 6-1: SerialNumber: syz [ 659.774878][ T48] uvcvideo 4-1:4.147: No streaming interface found for terminal 65535. [ 659.792122][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 659.802420][ T5823] usb 6-1: config 0 descriptor?? [ 659.827901][ T48] usb 4-1: USB disconnect, device number 41 [ 659.835482][ T5823] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 659.854675][ T5823] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -22 [ 660.020718][T12490] FAULT_INJECTION: forcing a failure. [ 660.020718][T12490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.034068][T12490] CPU: 0 UID: 0 PID: 12490 Comm: syz.4.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.034087][T12490] Tainted: [L]=SOFTLOCKUP [ 660.034091][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.034098][T12490] Call Trace: [ 660.034102][T12490] [ 660.034113][T12490] dump_stack_lvl+0x16c/0x1f0 [ 660.034131][T12490] should_fail_ex+0x512/0x640 [ 660.034151][T12490] _copy_to_iter+0x29f/0x1710 [ 660.034172][T12490] ? __pfx__copy_to_iter+0x10/0x10 [ 660.034189][T12490] ? const_folio_flags+0x5b/0x100 [ 660.034200][T12490] ? folio_mark_accessed+0xc1/0xbf0 [ 660.034213][T12490] ? __pfx_folio_mark_accessed+0x10/0x10 [ 660.034228][T12490] copy_page_to_iter+0x12a/0x1e0 [ 660.034246][T12490] filemap_read+0x6b1/0xe40 [ 660.034264][T12490] ? __pfx_filemap_read+0x10/0x10 [ 660.034285][T12490] ? __pfx_down_read+0x10/0x10 [ 660.034302][T12490] ? avc_policy_seqno+0x9/0x20 [ 660.034313][T12490] ? selinux_file_permission+0x126/0x660 [ 660.034331][T12490] blkdev_read_iter+0x1ac/0x500 [ 660.034345][T12490] vfs_read+0x8bf/0xcf0 [ 660.034363][T12490] ? __pfx_vfs_read+0x10/0x10 [ 660.034375][T12490] ? find_held_lock+0x2b/0x80 [ 660.034403][T12490] ksys_read+0x12a/0x250 [ 660.034416][T12490] ? __pfx_ksys_read+0x10/0x10 [ 660.034434][T12490] do_syscall_64+0xcd/0xf80 [ 660.034450][T12490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.034462][T12490] RIP: 0033:0x7f1a4258f749 [ 660.034471][T12490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.034482][T12490] RSP: 002b:00007f1a434c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 660.034493][T12490] RAX: ffffffffffffffda RBX: 00007f1a427e5fa0 RCX: 00007f1a4258f749 [ 660.034500][T12490] RDX: 0000000000002020 RSI: 0000200000000640 RDI: 0000000000000005 [ 660.034507][T12490] RBP: 00007f1a434c5090 R08: 0000000000000000 R09: 0000000000000000 [ 660.034514][T12490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.034520][T12490] R13: 00007f1a427e6038 R14: 00007f1a427e5fa0 R15: 00007fff0c22cef8 [ 660.034535][T12490] [ 662.706659][ T5823] usb 6-1: USB disconnect, device number 23 [ 663.452039][T12518] netlink: 'syz.5.1625': attribute type 1 has an invalid length. [ 663.459833][T12518] netlink: 251 bytes leftover after parsing attributes in process `syz.5.1625'. [ 663.924695][T12525] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 664.370347][T12535] netlink: 'syz.3.1630': attribute type 3 has an invalid length. [ 664.378748][T12535] netlink: 'syz.3.1630': attribute type 3 has an invalid length. [ 665.548725][T12564] FAULT_INJECTION: forcing a failure. [ 665.548725][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 665.572034][T12564] CPU: 1 UID: 0 PID: 12564 Comm: syz.0.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.572065][T12564] Tainted: [L]=SOFTLOCKUP [ 665.572073][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.572083][T12564] Call Trace: [ 665.572090][T12564] [ 665.572098][T12564] dump_stack_lvl+0x16c/0x1f0 [ 665.572125][T12564] should_fail_ex+0x512/0x640 [ 665.572152][T12564] ? fs_reclaim_acquire+0xae/0x150 [ 665.572179][T12564] should_failslab+0xc2/0x120 [ 665.572205][T12564] __kmalloc_noprof+0xeb/0x910 [ 665.572233][T12564] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 665.572264][T12564] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 665.572288][T12564] tomoyo_realpath_from_path+0xc2/0x6e0 [ 665.572316][T12564] ? tomoyo_profile+0x47/0x60 [ 665.572347][T12564] tomoyo_path_number_perm+0x245/0x580 [ 665.572368][T12564] ? tomoyo_path_number_perm+0x237/0x580 [ 665.572392][T12564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 665.572416][T12564] ? find_held_lock+0x2b/0x80 [ 665.572467][T12564] ? find_held_lock+0x2b/0x80 [ 665.572494][T12564] ? hook_file_ioctl_common+0x144/0x410 [ 665.572528][T12564] ? __fget_files+0x20e/0x3c0 [ 665.572558][T12564] security_file_ioctl+0x9b/0x240 [ 665.572584][T12564] __x64_sys_ioctl+0xb7/0x210 [ 665.572608][T12564] do_syscall_64+0xcd/0xf80 [ 665.572633][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.572651][T12564] RIP: 0033:0x7fd27618f749 [ 665.572667][T12564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.572684][T12564] RSP: 002b:00007fd276f9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.572702][T12564] RAX: ffffffffffffffda RBX: 00007fd2763e5fa0 RCX: 00007fd27618f749 [ 665.572714][T12564] RDX: 0000200000000380 RSI: 000000004068aea3 RDI: 0000000000000004 [ 665.572725][T12564] RBP: 00007fd276f9e090 R08: 0000000000000000 R09: 0000000000000000 [ 665.572735][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.572746][T12564] R13: 00007fd2763e6038 R14: 00007fd2763e5fa0 R15: 00007ffcd6c8dd98 [ 665.572787][T12564] [ 665.572794][T12564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 666.353665][T12580] FAULT_INJECTION: forcing a failure. [ 666.353665][T12580] name failslab, interval 1, probability 0, space 0, times 0 [ 666.369676][T12580] CPU: 0 UID: 0 PID: 12580 Comm: syz.5.1637 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.369706][T12580] Tainted: [L]=SOFTLOCKUP [ 666.369713][T12580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.369724][T12580] Call Trace: [ 666.369734][T12580] [ 666.369742][T12580] dump_stack_lvl+0x16c/0x1f0 [ 666.369777][T12580] should_fail_ex+0x512/0x640 [ 666.369805][T12580] ? fs_reclaim_acquire+0xae/0x150 [ 666.369834][T12580] should_failslab+0xc2/0x120 [ 666.369860][T12580] __kmalloc_noprof+0xeb/0x910 [ 666.369888][T12580] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.369919][T12580] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.369943][T12580] tomoyo_realpath_from_path+0xc2/0x6e0 [ 666.369969][T12580] ? tomoyo_profile+0x47/0x60 [ 666.370000][T12580] tomoyo_path_number_perm+0x245/0x580 [ 666.370019][T12580] ? tomoyo_path_number_perm+0x237/0x580 [ 666.370043][T12580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 666.370066][T12580] ? find_held_lock+0x2b/0x80 [ 666.370117][T12580] ? find_held_lock+0x2b/0x80 [ 666.370143][T12580] ? hook_file_ioctl_common+0x144/0x410 [ 666.370177][T12580] ? __fget_files+0x20e/0x3c0 [ 666.370208][T12580] security_file_ioctl+0x9b/0x240 [ 666.370235][T12580] __x64_sys_ioctl+0xb7/0x210 [ 666.370259][T12580] do_syscall_64+0xcd/0xf80 [ 666.370285][T12580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.370304][T12580] RIP: 0033:0x7f0874b8f749 [ 666.370319][T12580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.370337][T12580] RSP: 002b:00007f0875984038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.370355][T12580] RAX: ffffffffffffffda RBX: 00007f0874de5fa0 RCX: 00007f0874b8f749 [ 666.370368][T12580] RDX: 00002000000001c0 RSI: 000000004018aebd RDI: 0000000000000004 [ 666.370380][T12580] RBP: 00007f0875984090 R08: 0000000000000000 R09: 0000000000000000 [ 666.370391][T12580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.370402][T12580] R13: 00007f0874de6038 R14: 00007f0874de5fa0 R15: 00007ffd83a051e8 [ 666.370429][T12580] [ 666.626011][T12580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 666.705788][T12584] netlink: 'syz.4.1639': attribute type 3 has an invalid length. [ 666.735863][T12584] netlink: 'syz.4.1639': attribute type 3 has an invalid length. [ 667.530554][T12596] libceph: resolve '. [ 667.530554][T12596] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 667.530554][T12596] ' (ret=-3): failed [ 668.968778][ T30] audit: type=1400 audit(1767695056.963:1334): avc: denied { create } for pid=12612 comm="syz.0.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 669.435856][ T5823] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 669.571038][ T5988] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 669.578934][ T5823] usb 3-1: device descriptor read/64, error -71 [ 669.733087][ T5988] usb 4-1: config 9 has an invalid interface number: 94 but max is 0 [ 669.741673][ T5988] usb 4-1: config 9 has no interface number 0 [ 669.748124][ T5988] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 669.759773][ T5988] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 669.770535][ T5988] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 669.785342][ T5988] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 669.796621][ T5988] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 669.808619][ T5988] usb 4-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 669.830754][ T5823] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 669.844052][ T5988] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 669.856855][ T5988] usb 4-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 670.006951][ T5988] usb 4-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 670.018171][ T5988] usb 4-1: config 9 interface 94 has no altsetting 0 [ 670.085888][ T5823] usb 3-1: device descriptor read/64, error -71 [ 670.094631][ T5988] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 670.103738][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.112549][ T5988] usb 4-1: Product: Ё [ 670.116690][ T5988] usb 4-1: Manufacturer: Р [ 670.121268][ T5988] usb 4-1: SerialNumber: syz [ 670.233385][ T5823] usb usb3-port1: attempt power cycle [ 670.453573][ T5988] usb 4-1: USB disconnect, device number 42 [ 670.536991][T10258] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 670.611190][ T5823] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 670.778146][ T5823] usb 3-1: device descriptor read/8, error -71 [ 671.058742][T10258] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 671.069787][T10258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.089254][T10258] usb 5-1: config 0 descriptor?? [ 671.175884][ T5823] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 671.766172][T12664] batadv_slave_1: entered promiscuous mode [ 671.774204][T12664] batman_adv: batadv0: Adding interface: macvlan2 [ 671.780630][T12664] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.806082][T12664] batman_adv: batadv0: Interface activated: macvlan2 [ 672.154563][ T5823] usb 3-1: device descriptor read/8, error -71 [ 672.518135][T10258] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 672.552677][ T5823] usb usb3-port1: unable to enumerate USB device [ 672.747370][T10258] gp8psk: usb in 128 operation failed. [ 672.757453][T10258] gp8psk: usb in 137 operation failed. [ 672.771487][T12652] loop6: detected capacity change from 0 to 2640 [ 672.778130][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.785954][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 672.841037][T12675] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 672.848932][T12675] netlink: 'syz.3.1660': attribute type 3 has an invalid length. [ 673.186603][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.194524][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.202351][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.210442][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.218281][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.226103][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.233923][T12652] ldm_validate_partition_table(): Disk read failed. [ 673.240513][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.248369][T12652] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.256233][T12652] Dev loop6: unable to read RDB block 0 [ 673.261895][T12652] loop6: unable to read partition table [ 673.267601][T12652] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 673.277020][T10258] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 673.286910][T10258] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 673.298542][T10258] usb 5-1: media controller created [ 673.311909][T10258] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 673.325748][T10258] gp8psk_fe: Frontend attached [ 673.330557][T10258] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 673.338917][T10258] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 673.423514][T10258] gp8psk: usb in 138 operation failed. [ 673.429013][T10258] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 673.445136][T10258] gp8psk: found Genpix USB device pID = 203 (hex) [ 673.453894][T10258] usb 5-1: USB disconnect, device number 47 [ 674.341640][T10258] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 674.580037][T12683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62992 sclass=netlink_route_socket pid=12683 comm=syz.5.1664 [ 674.761429][T12694] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 675.634113][T12710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1671'. [ 675.829356][T12703] binder_alloc: binder_alloc_mmap_handler: 12702 200000ffc000-200000ffd000 already mapped failed -16 [ 675.921004][T10258] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 675.931186][T12714] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 676.122864][T10258] usb 6-1: config 9 has an invalid interface number: 94 but max is 0 [ 676.144544][T10258] usb 6-1: config 9 has no interface number 0 [ 676.159076][T10258] usb 6-1: config 9 interface 94 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 676.184627][T10258] usb 6-1: config 9 interface 94 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 676.208299][T10258] usb 6-1: config 9 interface 94 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 676.235889][T10258] usb 6-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 676.263580][T10258] usb 6-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 676.294226][T10258] usb 6-1: config 9 interface 94 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 676.319606][T10258] usb 6-1: config 9 interface 94 altsetting 4 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 676.343207][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 676.361593][T10258] usb 6-1: config 9 interface 94 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 676.389257][T10258] usb 6-1: config 9 interface 94 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 676.418209][T10258] usb 6-1: config 9 interface 94 has no altsetting 0 [ 676.441494][T10258] usb 6-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=96.28 [ 676.529322][T10258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.551184][T10258] usb 6-1: Product: Ё [ 676.555336][T10258] usb 6-1: Manufacturer: Р [ 676.559956][T10258] usb 6-1: SerialNumber: syz [ 676.994862][T10258] usb 6-1: USB disconnect, device number 24 [ 677.505138][T12739] binder_alloc: binder_alloc_mmap_handler: 12735 200000ffc000-200000ffd000 already mapped failed -16 [ 677.837215][ T30] audit: type=1400 audit(1767695065.873:1335): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 677.875969][ T30] audit: type=1326 audit(1767695065.913:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 678.672571][ T30] audit: type=1326 audit(1767695066.713:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 678.711863][T12740] binder: 12737:12740 ioctl 4018620d 0 returned -22 [ 678.716844][ T30] audit: type=1326 audit(1767695066.743:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 679.823058][ T30] audit: type=1326 audit(1767695066.743:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 679.976778][ T30] audit: type=1326 audit(1767695066.743:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 680.473013][ T30] audit: type=1326 audit(1767695066.753:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 680.501084][ T30] audit: type=1326 audit(1767695066.773:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 680.530816][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'. [ 680.631114][ T30] audit: type=1326 audit(1767695066.773:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 680.661328][ T30] audit: type=1326 audit(1767695066.773:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12737 comm="syz.2.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3f8f749 code=0x7ffc0000 [ 680.689996][ T6402] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 680.710317][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1687'. [ 680.850950][ T6402] usb 6-1: Using ep0 maxpacket: 32 [ 680.858909][ T6402] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 681.099959][ T6402] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 681.720209][ T6402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.729214][ T6402] usb 6-1: Product: syz [ 681.797971][ T6402] usb 6-1: Manufacturer: syz [ 681.815648][ T6402] usb 6-1: SerialNumber: syz [ 681.933651][ T6402] usb 6-1: config 0 descriptor?? [ 681.941064][ T6402] hub 6-1:0.0: bad descriptor, ignoring hub [ 681.946980][ T6402] hub 6-1:0.0: probe with driver hub failed with error -5 [ 787.100841][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 787.107812][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5815/1:b..l [ 787.116185][ C0] rcu: (detected by 0, t=10502 jiffies, g=47625, q=742 ncpus=2) [ 787.123897][ C0] task:syz-executor state:R running task stack:23576 pid:5815 tgid:5815 ppid:5810 task_flags:0x400140 flags:0x00080000 [ 787.138087][ C0] Call Trace: [ 787.141371][ C0] [ 787.144298][ C0] ? __schedule+0x10b9/0x6150 [ 787.148973][ C0] __schedule+0x1139/0x6150 [ 787.153488][ C0] ? __pfx___schedule+0x10/0x10 [ 787.158343][ C0] ? mark_held_locks+0x49/0x80 [ 787.163107][ C0] preempt_schedule_irq+0x51/0x90 [ 787.168128][ C0] irqentry_exit+0x1d8/0x8c0 [ 787.172721][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.178694][ C0] RIP: 0010:lock_acquire+0x7f/0x330 [ 787.183899][ C0] Code: 35 ba ef ee 0e 85 f6 0f 85 8d 00 00 00 48 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 38 5b 5d 41 5c 41 5d <41> 5e 41 5f c3 cc cc cc cc 65 8b 05 45 b4 18 12 83 f8 07 0f 87 81 [ 787.203499][ C0] RSP: 0018:ffffc900045cf590 EFLAGS: 00000292 [ 787.209557][ C0] RAX: 0000000000000000 RBX: ffffea0001315b40 RCX: 000000002d7dfedc [ 787.217517][ C0] RDX: 0000000000000000 RSI: ffffffff8daa845f RDI: ffffffff8bf2b480 [ 787.225478][ C0] RBP: ffffea0001315b40 R08: 000000003a9e7578 R09: 0000000083a9e757 [ 787.233439][ C0] R10: 0000000000000002 R11: ffff88807ab9aff0 R12: ffff888031901a80 [ 787.241400][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 787.249377][ C0] uncharge_folio+0x556/0x970 [ 787.254049][ C0] ? uncharge_folio+0x542/0x970 [ 787.258900][ C0] __mem_cgroup_uncharge_folios+0x11b/0x1e0 [ 787.264795][ C0] ? __pfx___mem_cgroup_uncharge_folios+0x10/0x10 [ 787.271209][ C0] ? lruvec_memcg_debug.part.0+0x97/0x250 [ 787.276927][ C0] ? mark_held_locks+0x49/0x80 [ 787.281684][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 787.287492][ C0] folios_put_refs+0x4b1/0x750 [ 787.292262][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 787.297542][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 787.303890][ C0] shmem_undo_range+0x58f/0x1140 [ 787.308834][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 787.314225][ C0] ? arch_stack_walk+0xa6/0x100 [ 787.319097][ C0] ? kasan_save_stack+0x33/0x60 [ 787.323940][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 787.329309][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 787.335378][ C0] ? dentry_free+0xc2/0x160 [ 787.339880][ C0] ? __dentry_kill+0x498/0x600 [ 787.344636][ C0] ? finish_dput+0x76/0x480 [ 787.349130][ C0] ? dput+0x1f/0x30 [ 787.352937][ C0] shmem_evict_inode+0x39e/0xbe0 [ 787.357870][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 787.363586][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 787.369037][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 787.375107][ C0] ? find_held_lock+0x2b/0x80 [ 787.379786][ C0] ? evict+0x37e/0xad0 [ 787.383854][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 787.389305][ C0] evict+0x3c2/0xad0 [ 787.393197][ C0] ? __pfx_evict+0x10/0x10 [ 787.397610][ C0] ? iput.part.0+0x619/0x1190 [ 787.402284][ C0] iput.part.0+0x621/0x1190 [ 787.406784][ C0] iput+0x35/0x40 [ 787.410410][ C0] do_unlinkat+0x3d2/0x660 [ 787.414826][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 787.419777][ C0] ? getname_flags.part.0+0x1c5/0x550 [ 787.425145][ C0] __x64_sys_unlink+0xc5/0x110 [ 787.429908][ C0] do_syscall_64+0xcd/0xf80 [ 787.434414][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.440298][ C0] RIP: 0033:0x7f08f6d8ecf7 [ 787.444704][ C0] RSP: 002b:00007ffd3a0e78d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 787.453108][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08f6d8ecf7 [ 787.461072][ C0] RDX: 00007ffd3a0e7900 RSI: 00007ffd3a0e7990 RDI: 00007ffd3a0e7990 [ 787.469033][ C0] RBP: 00007ffd3a0e7990 R08: 0000000000000000 R09: 0000000000000000 [ 787.476995][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd3a0e8a20 [ 787.484958][ C0] R13: 00007f08f6e13d7d R14: 00000000000a6470 R15: 00007ffd3a0e8a60 [ 787.492934][ C0] [ 787.495942][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g47625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 787.507123][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 787.517088][ C0] rcu: RCU grace-period kthread stack dump: [ 787.522961][ C0] task:rcu_preempt state:R running task stack:27816 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 787.536450][ C0] Call Trace: [ 787.539719][ C0] [ 787.542641][ C0] ? __schedule+0x10b9/0x6150 [ 787.547316][ C0] __schedule+0x1139/0x6150 [ 787.551816][ C0] ? __lock_acquire+0x436/0x2890 [ 787.556754][ C0] ? __mod_timer+0x8f2/0xd30 [ 787.561352][ C0] ? __pfx___schedule+0x10/0x10 [ 787.566210][ C0] ? find_held_lock+0x2b/0x80 [ 787.570886][ C0] ? schedule+0x2d7/0x3a0 [ 787.575219][ C0] schedule+0xe7/0x3a0 [ 787.579282][ C0] schedule_timeout+0x123/0x290 [ 787.584138][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 787.589527][ C0] ? __pfx_process_timeout+0x10/0x10 [ 787.594826][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 787.600635][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 787.606094][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 787.610858][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 787.616143][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 787.621337][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 787.626269][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 787.631135][ C0] rcu_gp_kthread+0x26d/0x380 [ 787.635826][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 787.641032][ C0] ? rcu_is_watching+0x12/0xc0 [ 787.645800][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 787.651002][ C0] ? __kthread_parkme+0x19e/0x250 [ 787.656023][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 787.661216][ C0] kthread+0x3c5/0x780 [ 787.665282][ C0] ? __pfx_kthread+0x10/0x10 [ 787.669870][ C0] ? rcu_is_watching+0x12/0xc0 [ 787.674623][ C0] ? __pfx_kthread+0x10/0x10 [ 787.679207][ C0] ret_from_fork+0x983/0xb10 [ 787.683792][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 787.688900][ C0] ? __switch_to+0x7af/0x10d0 [ 787.693572][ C0] ? __pfx_kthread+0x10/0x10 [ 787.698159][ C0] ret_from_fork_asm+0x1a/0x30 [ 787.702933][ C0] [ 787.705942][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 787.712261][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.722751][ C0] Tainted: [L]=SOFTLOCKUP [ 787.727063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.737105][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 787.742735][ C0] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 787.762335][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 787.768395][ C0] RAX: 0000000002ff204b RBX: 0000000000000000 RCX: ffffffff8b7826d9 [ 787.776358][ C0] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 787.784317][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 787.792278][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 787.800238][ C0] R13: ffffffff8e097b40 R14: ffffffff9088bad0 R15: 0000000000000000 [ 787.808198][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 787.817123][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.823701][ C0] CR2: 0000001b304f7ff8 CR3: 00000000349d4000 CR4: 00000000003526f0 [ 787.831662][ C0] Call Trace: [ 787.834930][ C0] [ 787.837853][ C0] default_idle+0x13/0x20 [ 787.842197][ C0] default_idle_call+0x6c/0xb0 [ 787.846975][ C0] do_idle+0x38d/0x510 [ 787.851062][ C0] ? __pfx_do_idle+0x10/0x10 [ 787.855675][ C0] cpu_startup_entry+0x4f/0x60 [ 787.860449][ C0] rest_init+0x16b/0x2b0 [ 787.864696][ C0] ? acpi_subsystem_init+0x133/0x180 [ 787.869976][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 787.875519][ C0] start_kernel+0x3ef/0x4d0 [ 787.880031][ C0] x86_64_start_reservations+0x18/0x30 [ 787.885501][ C0] x86_64_start_kernel+0x130/0x190 [ 787.890620][ C0] common_startup_64+0x13e/0x148 [ 787.895568][ C0]